[ 598.828861][T16253] slab_unreclaimable 148272 [ 598.828861][T16253] slab 238632 [ 598.828861][T16253] workingset_refault_anon 0 [ 598.828861][T16253] workingset_refault_file 0 [ 598.828861][T16253] workingset_activate_anon 0 [ 598.849710][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 598.928819][T16253] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16253,uid=0 [ 598.961902][T16253] Memory cgroup out of memory: Killed process 16253 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 599.027866][ T28] oom_reaper: reaped process 16253 (syz-executor.4), now anon-rss:0kB, file-rss:13560kB, shmem-rss:0kB 13:54:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac00001094"], 0x1c}}, 0x0) 13:54:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40286608, &(0x7f0000000000)) 13:54:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:23 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac00001094"], 0x1c}}, 0x0) 13:54:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) [ 599.219249][T16334] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) 13:54:23 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb200018"], &(0x7f00000000c0)=""/188, 0x26, 0xbc, 0x1}, 0x20) 13:54:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) [ 599.308292][T16335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0x2, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) [ 599.410863][T16335] device veth21 entered promiscuous mode 13:54:24 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$bt_rfcomm(r0, &(0x7f0000000080), 0xa) [ 599.486149][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac00001094"], 0x1c}}, 0x0) 13:54:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac00001094"], 0x1c}}, 0x0) 13:54:24 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:24 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 13:54:24 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac00001094"], 0x1c}}, 0x0) 13:54:24 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) [ 599.821092][T16365] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 599.945306][T16365] device veth23 entered promiscuous mode [ 599.984899][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 600.086848][T16369] device bond11 entered promiscuous mode [ 600.115040][T16369] device team0 entered promiscuous mode [ 600.133563][T16369] device team_slave_0 entered promiscuous mode [ 600.146865][T16369] device team_slave_1 entered promiscuous mode [ 600.154033][T16369] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 600.164831][T16369] Cannot create hsr debugfs directory [ 600.549533][ T1022] device hsr_slave_0 left promiscuous mode [ 600.557282][ T1022] device hsr_slave_1 left promiscuous mode [ 600.578292][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.605967][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.626479][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.633978][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.648365][ T1022] device bridge_slave_1 left promiscuous mode [ 600.654639][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.687963][ T1022] device bridge_slave_0 left promiscuous mode [ 600.694213][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.736916][ T1022] device veth1_macvtap left promiscuous mode [ 600.743002][ T1022] device veth0_macvtap left promiscuous mode [ 600.759207][ T1022] device veth1_vlan left promiscuous mode [ 600.765070][ T1022] device veth0_vlan left promiscuous mode [ 600.950566][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 600.965548][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 600.979031][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.993090][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.059946][ T1022] bond0 (unregistering): Released all slaves [ 605.015831][ T3644] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 607.821121][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 607.830659][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 607.838615][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 607.846979][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 607.854941][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 607.862914][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 607.948873][T16379] chnl_net:caif_netlink_parms(): no params data found [ 607.990346][T16379] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.998859][T16379] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.007280][T16379] device bridge_slave_0 entered promiscuous mode [ 608.015264][T16379] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.022768][T16379] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.030767][T16379] device bridge_slave_1 entered promiscuous mode [ 608.053475][T16379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.064546][T16379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.091949][T16379] team0: Port device team_slave_0 added [ 608.101966][T16379] team0: Port device team_slave_1 added [ 608.121072][T16379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.128246][T16379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.155348][T16379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.168733][T16379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.175861][T16379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.202941][T16379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.229603][T16379] device hsr_slave_0 entered promiscuous mode [ 608.236294][T16379] device hsr_slave_1 entered promiscuous mode [ 608.242831][T16379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.250633][T16379] Cannot create hsr debugfs directory [ 608.317710][T16379] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.324800][T16379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.332204][T16379] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.339314][T16379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.387250][T16379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.403544][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 608.414001][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.422486][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.431767][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 608.445458][T16379] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.458518][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 608.467613][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.474710][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.492120][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 608.500650][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.507786][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.531334][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 608.540289][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 608.548962][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 608.557758][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 608.570524][T16379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.583109][T16379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 608.591353][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 608.612343][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.620251][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.633943][T16379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.877552][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 608.892669][T16379] device veth0_vlan entered promiscuous mode [ 608.901309][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 608.910963][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 608.922600][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 608.933841][T16379] device veth1_vlan entered promiscuous mode [ 608.954489][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 608.963442][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 608.971764][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 608.983420][T16379] device veth0_macvtap entered promiscuous mode [ 608.994730][T16379] device veth1_macvtap entered promiscuous mode [ 609.013321][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 609.025157][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.035180][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 609.046354][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.060683][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 609.072856][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.086122][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 609.097573][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.107597][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 609.118544][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.130666][T16379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.140769][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 609.149419][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 609.160944][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 609.171749][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.183554][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 609.194251][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.204403][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 609.215066][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.225137][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 609.237480][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.247644][T16379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 609.258334][T16379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.271446][T16379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.280026][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 609.289452][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 609.362702][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.381196][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.381489][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.392567][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.403299][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 609.417807][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 609.654479][T16398] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 609.673298][T16398] CPU: 0 PID: 16398 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 609.682126][T16398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.692173][T16398] Call Trace: [ 609.695472][T16398] [ 609.698387][T16398] dump_stack_lvl+0x201/0x2d8 [ 609.703102][T16398] ? show_regs_print_info+0x12/0x12 [ 609.708286][T16398] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 609.713991][T16398] ? asan.module_dtor+0x20/0x20 [ 609.718830][T16398] dump_header+0xdb/0x970 [ 609.723146][T16398] oom_kill_process+0xf5/0x4e0 [ 609.727894][T16398] out_of_memory+0x711/0xa70 [ 609.732476][T16398] ? preempt_schedule+0x16b/0x190 [ 609.737491][T16398] ? unregister_oom_notifier+0x20/0x20 [ 609.743037][T16398] ? lockdep_hardirqs_on+0x95/0x140 [ 609.748292][T16398] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 609.753826][T16398] ? preempt_schedule_thunk+0x16/0x18 [ 609.759185][T16398] ? mem_cgroup_oom_trylock+0x220/0x220 [ 609.764722][T16398] ? cgroup_file_notify+0x123/0x190 [ 609.769907][T16398] memory_max_write+0x364/0x4f0 [ 609.774750][T16398] ? memory_max_show+0xa0/0xa0 [ 609.779496][T16398] ? read_lock_is_recursive+0x10/0x10 [ 609.784851][T16398] ? memory_max_show+0xa0/0xa0 [ 609.789598][T16398] cgroup_file_write+0x2a4/0x780 [ 609.794523][T16398] ? cgroup_seqfile_stop+0xd0/0xd0 [ 609.799712][T16398] ? cgroup_seqfile_stop+0xd0/0xd0 [ 609.804811][T16398] kernfs_fop_write_iter+0x3b6/0x510 [ 609.810104][T16398] vfs_write+0xb11/0xe90 [ 609.814424][T16398] ? file_end_write+0x230/0x230 [ 609.819261][T16398] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 609.825405][T16398] ? ksys_write+0xf7/0x2c0 [ 609.829810][T16398] ksys_write+0x18f/0x2c0 [ 609.834137][T16398] ? __ia32_sys_read+0x80/0x80 [ 609.838897][T16398] ? syscall_enter_from_user_mode+0x38/0x1b0 [ 609.845053][T16398] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 609.851039][T16398] do_syscall_64+0x44/0xd0 [ 609.855541][T16398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 609.861427][T16398] RIP: 0033:0x7fdadbe34059 [ 609.865836][T16398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 609.885710][T16398] RSP: 002b:00007fdada7a9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.894124][T16398] RAX: ffffffffffffffda RBX: 00007fdadbf46f60 RCX: 00007fdadbe34059 [ 609.902081][T16398] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000b [ 609.910133][T16398] RBP: 00007fdadbe8e08d R08: 0000000000000000 R09: 0000000000000000 [ 609.918097][T16398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.926060][T16398] R13: 00007ffef5c1cf3f R14: 00007fdada7a9300 R15: 0000000000022000 [ 609.934048][T16398] [ 609.947174][ T3675] Bluetooth: hci3: command 0x0409 tx timeout [ 609.962521][T16398] memory: usage 2756kB, limit 32kB, failcnt 865 [ 609.977904][T16398] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 609.986556][T16398] Memory cgroup stats for /syz4: [ 609.989916][T16398] anon 2207744 [ 609.989916][T16398] file 65536 [ 609.989916][T16398] kernel_stack 65536 [ 609.989916][T16398] pagetables 94208 [ 609.989916][T16398] percpu 0 [ 609.989916][T16398] sock 0 [ 609.989916][T16398] vmalloc 0 [ 609.989916][T16398] shmem 61440 [ 609.989916][T16398] file_mapped 61440 [ 609.989916][T16398] file_dirty 4096 [ 609.989916][T16398] file_writeback 0 [ 609.989916][T16398] swapcached 0 [ 609.989916][T16398] anon_thp 2097152 [ 609.989916][T16398] file_thp 0 [ 609.989916][T16398] shmem_thp 0 [ 609.989916][T16398] inactive_anon 2134016 [ 609.989916][T16398] active_anon 61440 [ 609.989916][T16398] inactive_file 0 [ 609.989916][T16398] active_file 0 [ 609.989916][T16398] unevictable 0 [ 609.989916][T16398] slab_reclaimable 132080 [ 609.989916][T16398] slab_unreclaimable 227232 [ 609.989916][T16398] slab 359312 [ 609.989916][T16398] workingset_refault_anon 0 [ 609.989916][T16398] workingset_refault_file 0 [ 610.106911][T16398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16397,uid=0 [ 610.135496][T16398] Memory cgroup out of memory: Killed process 16397 (syz-executor.4) total-vm:60648kB, anon-rss:2424kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 610.165524][ T28] oom_reaper: reaped process 16397 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:54:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x30}}, 0x0) 13:54:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@getstats={0x1c, 0x77, 0xd}, 0x1c}}, 0x0) 13:54:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:34 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac00001094"], 0x1c}}, 0x0) 13:54:34 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:34 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac00001094"], 0x1c}}, 0x0) 13:54:34 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33fe0}}, 0x0) [ 610.298273][T16405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 610.322016][T16379] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 610.397440][T16379] CPU: 1 PID: 16379 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 610.406250][T16379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.416345][T16379] Call Trace: [ 610.419638][T16379] [ 610.422575][T16379] dump_stack_lvl+0x201/0x2d8 [ 610.427272][T16379] ? show_regs_print_info+0x12/0x12 [ 610.432487][T16379] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 610.438217][T16379] ? do_raw_spin_lock+0x151/0x8e0 [ 610.443245][T16379] ? asan.module_dtor+0x20/0x20 [ 610.448095][T16379] dump_header+0xdb/0x970 [ 610.452425][T16379] oom_kill_process+0xf5/0x4e0 [ 610.457183][T16379] out_of_memory+0x711/0xa70 [ 610.461774][T16379] ? unregister_oom_notifier+0x20/0x20 [ 610.467231][T16379] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 610.472767][T16379] ? __lock_acquire+0x2b00/0x2b00 [ 610.477781][T16379] ? mem_cgroup_oom_trylock+0x220/0x220 [ 610.483407][T16379] ? do_raw_spin_unlock+0x134/0x8a0 [ 610.488602][T16379] ? mem_cgroup_iter+0x3c9/0x530 [ 610.493532][T16379] mem_cgroup_oom+0x4ad/0x620 [ 610.498206][T16379] try_charge_memcg+0xd37/0x1010 [ 610.503134][T16379] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 610.509119][T16379] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 610.514915][T16379] ? rcu_lock_acquire+0x30/0x30 [ 610.519756][T16379] ? __lock_acquire+0x2b00/0x2b00 [ 610.524790][T16379] obj_cgroup_charge+0x1b2/0x420 [ 610.529724][T16379] ? mod_objcg_mlstate+0x330/0x330 [ 610.534837][T16379] kmem_cache_alloc+0xbd/0x310 [ 610.539589][T16379] ? __alloc_file+0x26/0x2f0 [ 610.544172][T16379] __alloc_file+0x26/0x2f0 [ 610.548580][T16379] ? alloc_empty_file+0x49/0x1b0 [ 610.553506][T16379] alloc_empty_file+0xa9/0x1b0 [ 610.558261][T16379] path_openat+0x111/0x36a0 [ 610.562775][T16379] ? arch_stack_walk+0xf8/0x140 [ 610.567721][T16379] ? __lock_acquire+0x1382/0x2b00 [ 610.572737][T16379] ? __lock_acquire+0x1382/0x2b00 [ 610.577760][T16379] ? do_filp_open+0x4f0/0x4f0 [ 610.582442][T16379] ? rcu_read_lock_sched_held+0x89/0x130 [ 610.588064][T16379] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 610.594045][T16379] do_filp_open+0x277/0x4f0 [ 610.598550][T16379] ? vfs_tmpfile+0x230/0x230 [ 610.603125][T16379] ? alloc_fd+0x5e1/0x680 [ 610.607460][T16379] ? _raw_spin_unlock+0x24/0x40 [ 610.612300][T16379] ? alloc_fd+0x5e1/0x680 [ 610.616637][T16379] do_sys_openat2+0x13b/0x500 [ 610.621320][T16379] ? do_sys_open+0x220/0x220 [ 610.625911][T16379] __x64_sys_openat+0x243/0x290 [ 610.630764][T16379] ? __ia32_sys_open+0x270/0x270 [ 610.635706][T16379] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 610.641698][T16379] ? lockdep_hardirqs_on+0x95/0x140 [ 610.647240][T16379] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 610.653218][T16379] do_syscall_64+0x44/0xd0 [ 610.657628][T16379] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 610.663509][T16379] RIP: 0033:0x7fdadbe33b98 [ 610.668185][T16379] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 610.687795][T16379] RSP: 002b:00007ffef5c1c030 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 13:54:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) [ 610.696378][T16379] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdadbe33b98 [ 610.704338][T16379] RDX: 0000000000090800 RSI: 00007ffef5c1d220 RDI: 00000000ffffff9c [ 610.712299][T16379] RBP: 00007ffef5c1d1fc R08: 0000000000090800 R09: 00007ffef5c1d220 [ 610.720262][T16379] R10: 0000000000000000 R11: 0000000000000287 R12: 00007fdadbe8d1ea [ 610.728225][T16379] R13: 00007ffef5c1d220 R14: 000000000000000f R15: 00007ffef5c1d260 [ 610.736198][T16379] 13:54:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x24048a94, &(0x7f00000010c0)=@in={0x2, 0x4e24, @dev}, 0x80) 13:54:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) [ 610.763994][T16405] device veth25 entered promiscuous mode [ 610.801443][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 610.915955][T16379] memory: usage 464kB, limit 32kB, failcnt 885 [ 610.922148][T16379] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 610.953701][T16415] device bond12 entered promiscuous mode [ 610.959669][T16379] Memory cgroup stats for /syz4: [ 610.959859][T16379] anon 36864 [ 610.959859][T16379] file 61440 [ 610.959859][T16379] kernel_stack 0 [ 610.959859][T16379] pagetables 8192 [ 610.959859][T16379] percpu 0 [ 610.959859][T16379] sock 0 [ 610.959859][T16379] vmalloc 0 [ 610.959859][T16379] shmem 61440 [ 610.959859][T16379] file_mapped 61440 [ 610.959859][T16379] file_dirty 0 [ 610.959859][T16379] file_writeback 0 [ 610.959859][T16379] swapcached 0 [ 610.959859][T16379] anon_thp 0 [ 610.959859][T16379] file_thp 0 [ 610.959859][T16379] shmem_thp 0 [ 610.959859][T16379] inactive_anon 36864 [ 610.959859][T16379] active_anon 61440 [ 610.959859][T16379] inactive_file 0 [ 610.959859][T16379] active_file 0 [ 610.959859][T16379] unevictable 0 [ 610.959859][T16379] slab_reclaimable 132080 [ 610.959859][T16379] slab_unreclaimable 222480 [ 610.959859][T16379] slab 354560 [ 610.959859][T16379] workingset_refault_anon 0 [ 610.959859][T16379] workingset_refault_file 0 [ 610.959859][T16379] workingset_activate_anon 0 [ 611.058377][T16379] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16379,uid=0 [ 611.074882][T16415] device bond12 left promiscuous mode [ 611.077201][T16379] Memory cgroup out of memory: Killed process 16379 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 611.100733][ T28] oom_reaper: reaped process 16379 (syz-executor.4), now anon-rss:0kB, file-rss:13620kB, shmem-rss:0kB 13:54:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:35 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x47601, 0x0) 13:54:35 executing program 5: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac00001094"], 0x1c}}, 0x0) 13:54:35 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 13:54:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:35 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 13:54:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PEERS={0x898, 0x8, 0x0, 0x1, [{0x468, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x44c, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_FLAGS={0x8}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x2d4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7183cfb2e4a40c956a5607f99351ad92cf964a55e30cf405a44f561d3ae4740d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}]}, {0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "222f698d7c38e6cc9fc812d27b3a7da94fd94a804146087ae4adeea4b2a0e07a"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1e0f7fce963827552ea4b0083ae1d854447459e1bb7a85c1f99074ac6469c465"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_PEERS={0x17c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bc2f39bebbd56f781c0b745967ce43e9ec92c0357ee5032a26172b667a31f7d6"}, @WGPEER_A_FLAGS={0x8}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a1b081b04dbe05f4a6fb6074b91f3c15b8d071966318be659b5a71d8c2fcd4fd"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}]}]}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0x488, 0x8, 0x0, 0x1, [{0x318, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "071130b436eb61e4fa087975615e96193eb7e6a8817a58a55b0597623fdb26d3"}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}]}]}]}, 0xec8}}, 0x0) 13:54:35 executing program 3: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_logging(r0, 0x0, 0x0) 13:54:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 611.343399][T16434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000150001000000000000000000fe8800000000000000000000000000017f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\b'], 0x50}}, 0x0) 13:54:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:36 executing program 1: ustat(0x6, &(0x7f0000000480)) 13:54:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 611.436952][T16434] device veth27 entered promiscuous mode [ 611.487883][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:36 executing program 1: syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[]) 13:54:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 611.593272][T16434] device bond13 entered promiscuous mode [ 611.665371][T16434] device bond13 left promiscuous mode 13:54:36 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 13:54:36 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000080)) 13:54:36 executing program 3: set_robust_list(&(0x7f0000000340), 0x18) 13:54:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 13:54:36 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) [ 611.849019][T16467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 611.950512][T16467] device veth29 entered promiscuous mode [ 612.026778][T16474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 612.458496][ T10] device hsr_slave_0 left promiscuous mode [ 612.468050][ T10] device hsr_slave_1 left promiscuous mode [ 612.486256][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.493714][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.518173][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.525616][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.558336][ T10] device bridge_slave_1 left promiscuous mode [ 612.564586][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.587116][ T10] device bridge_slave_0 left promiscuous mode [ 612.593360][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.645363][ T10] device veth1_macvtap left promiscuous mode [ 612.663052][ T10] device veth0_macvtap left promiscuous mode [ 612.670760][ T10] device veth1_vlan left promiscuous mode [ 612.680632][ T10] device veth0_vlan left promiscuous mode [ 612.849340][ T10] team0 (unregistering): Port device team_slave_1 removed [ 612.868361][ T10] team0 (unregistering): Port device team_slave_0 removed [ 612.884572][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.901360][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.970111][ T10] bond0 (unregistering): Released all slaves [ 614.954031][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 614.964034][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 614.972035][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 614.980151][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 614.988402][ T3644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 614.995647][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.084871][T16477] chnl_net:caif_netlink_parms(): no params data found [ 615.130261][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.137718][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.145737][T16477] device bridge_slave_0 entered promiscuous mode [ 615.154194][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.162486][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.171631][T16477] device bridge_slave_1 entered promiscuous mode [ 615.193034][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.203876][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.230543][T16477] team0: Port device team_slave_0 added [ 615.238245][T16477] team0: Port device team_slave_1 added [ 615.261242][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.268729][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.295352][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.307509][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.314561][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.341810][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.373875][T16477] device hsr_slave_0 entered promiscuous mode [ 615.381031][T16477] device hsr_slave_1 entered promiscuous mode [ 615.388089][T16477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.396017][T16477] Cannot create hsr debugfs directory [ 615.464277][T16477] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.471398][T16477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.478908][T16477] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.486043][T16477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.534205][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.547124][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 615.555081][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.565604][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.576599][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 615.594505][T16477] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.605989][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 615.614546][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.621691][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.636716][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 615.645051][T14403] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.652203][T14403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.670351][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 615.680145][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 615.693564][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 615.708607][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 615.724942][T16477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.737978][T16477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 615.746071][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 615.764349][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 615.772462][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.783513][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.028610][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.050130][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.066484][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.074248][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.087226][T16477] device veth0_vlan entered promiscuous mode [ 616.099172][T16477] device veth1_vlan entered promiscuous mode [ 616.122048][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 616.134000][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 616.145545][T16477] device veth0_macvtap entered promiscuous mode [ 616.155604][T16477] device veth1_macvtap entered promiscuous mode [ 616.173352][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 616.184478][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.195101][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 616.206358][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.216562][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 616.227458][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.237758][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 616.249205][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.259233][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 616.270556][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.281600][T16477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.290535][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.300546][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 616.309147][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 616.318208][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.330470][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 616.341852][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.352110][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 616.362774][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.372866][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 616.387116][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.398124][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 616.408824][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.418822][T16477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 616.429584][T16477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.440959][T16477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.449558][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 616.458441][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 616.523487][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.532061][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.544878][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 616.562916][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.571577][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.583425][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 616.833217][T16496] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 616.844052][T16496] CPU: 1 PID: 16496 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 616.852819][T16496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.862887][T16496] Call Trace: [ 616.866164][T16496] [ 616.869098][T16496] dump_stack_lvl+0x201/0x2d8 [ 616.873768][T16496] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 616.879930][T16496] ? show_regs_print_info+0x12/0x12 [ 616.885153][T16496] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 616.890997][T16496] dump_header+0xdb/0x970 [ 616.895344][T16496] oom_kill_process+0xf5/0x4e0 [ 616.900113][T16496] out_of_memory+0x711/0xa70 [ 616.904726][T16496] ? preempt_schedule+0x16b/0x190 [ 616.909763][T16496] ? unregister_oom_notifier+0x20/0x20 [ 616.915238][T16496] ? lockdep_hardirqs_on+0x95/0x140 [ 616.920449][T16496] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 616.926008][T16496] ? preempt_schedule_thunk+0x16/0x18 [ 616.931385][T16496] ? mem_cgroup_oom_trylock+0x220/0x220 [ 616.936946][T16496] ? cgroup_file_notify+0x123/0x190 [ 616.942163][T16496] memory_max_write+0x364/0x4f0 [ 616.947005][T16496] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 616.953161][T16496] ? memory_max_show+0xa0/0xa0 [ 616.957919][T16496] ? cgroup_file_write+0x19a/0x780 [ 616.963027][T16496] ? cgroup_file_write+0x290/0x780 [ 616.968131][T16496] ? memory_max_show+0xa0/0xa0 [ 616.972889][T16496] cgroup_file_write+0x2a4/0x780 [ 616.977954][T16496] ? cgroup_seqfile_stop+0xd0/0xd0 [ 616.983078][T16496] ? cgroup_seqfile_stop+0xd0/0xd0 [ 616.988197][T16496] ? cgroup_seqfile_stop+0xd0/0xd0 [ 616.993314][T16496] kernfs_fop_write_iter+0x3b6/0x510 [ 616.998617][T16496] vfs_write+0xb11/0xe90 [ 617.002863][T16496] ? file_end_write+0x230/0x230 [ 617.007732][T16496] ? mutex_lock_nested+0x1a/0x20 [ 617.012679][T16496] ? __fdget_pos+0x24e/0x2f0 [ 617.017267][T16496] ? ksys_write+0x77/0x2c0 [ 617.021705][T16496] ksys_write+0x18f/0x2c0 [ 617.026054][T16496] ? __ia32_sys_read+0x80/0x80 [ 617.030818][T16496] ? syscall_enter_from_user_mode+0x38/0x1b0 [ 617.036800][T16496] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 617.042790][T16496] do_syscall_64+0x44/0xd0 [ 617.047212][T16496] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 617.053108][T16496] RIP: 0033:0x7f904583b059 [ 617.057517][T16496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 617.077115][T16496] RSP: 002b:00007f90441b0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 617.085520][T16496] RAX: ffffffffffffffda RBX: 00007f904594df60 RCX: 00007f904583b059 [ 617.093501][T16496] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000b [ 617.101467][T16496] RBP: 00007f904589508d R08: 0000000000000000 R09: 0000000000000000 [ 617.109427][T16496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.117388][T16496] R13: 00007ffce971607f R14: 00007f90441b0300 R15: 0000000000022000 [ 617.125364][T16496] [ 617.133061][ T3677] Bluetooth: hci3: command 0x0409 tx timeout [ 617.166406][T16496] memory: usage 2640kB, limit 32kB, failcnt 902 [ 617.174107][T16496] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 617.189346][T16496] Memory cgroup stats for /syz4: [ 617.200061][T16496] anon 2207744 [ 617.200061][T16496] file 65536 [ 617.200061][T16496] kernel_stack 65536 [ 617.200061][T16496] pagetables 94208 [ 617.200061][T16496] percpu 0 [ 617.200061][T16496] sock 0 [ 617.200061][T16496] vmalloc 0 [ 617.200061][T16496] shmem 61440 [ 617.200061][T16496] file_mapped 61440 [ 617.200061][T16496] file_dirty 4096 [ 617.200061][T16496] file_writeback 0 [ 617.200061][T16496] swapcached 0 [ 617.200061][T16496] anon_thp 2097152 [ 617.200061][T16496] file_thp 0 [ 617.200061][T16496] shmem_thp 0 [ 617.200061][T16496] inactive_anon 2170880 [ 617.200061][T16496] active_anon 61440 [ 617.200061][T16496] inactive_file 4096 [ 617.200061][T16496] active_file 0 [ 617.200061][T16496] unevictable 0 [ 617.200061][T16496] slab_reclaimable 91760 [ 617.200061][T16496] slab_unreclaimable 153168 [ 617.200061][T16496] slab 244928 [ 617.200061][T16496] workingset_refault_anon 0 [ 617.200061][T16496] workingset_refault_file 0 [ 617.313039][T16496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16495,uid=0 [ 617.350391][T16496] Memory cgroup out of memory: Killed process 16495 (syz-executor.4) total-vm:60648kB, anon-rss:2420kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 617.373527][ T28] oom_reaper: reaped process 16495 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:54:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:42 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 13:54:42 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40305828, 0x0) 13:54:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) 13:54:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:42 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:42 executing program 1: r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) read$smackfs_cipsonum(r0, 0x0, 0x0) 13:54:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) [ 617.531862][T16503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 617.552803][T16477] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=0 13:54:42 executing program 3: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') [ 617.587046][T16477] CPU: 1 PID: 16477 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 617.595852][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.605920][T16477] Call Trace: [ 617.609214][T16477] [ 617.612161][T16477] dump_stack_lvl+0x201/0x2d8 [ 617.616866][T16477] ? show_regs_print_info+0x12/0x12 [ 617.622086][T16477] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 617.627829][T16477] ? do_raw_spin_lock+0x151/0x8e0 [ 617.632971][T16477] ? asan.module_dtor+0x20/0x20 [ 617.637854][T16477] dump_header+0xdb/0x970 [ 617.642221][T16477] oom_kill_process+0xf5/0x4e0 [ 617.647020][T16477] out_of_memory+0x711/0xa70 [ 617.651637][T16477] ? unregister_oom_notifier+0x20/0x20 [ 617.657126][T16477] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 617.662782][T16477] ? __lock_acquire+0x2b00/0x2b00 [ 617.667831][T16477] ? mem_cgroup_oom_trylock+0x220/0x220 [ 617.673412][T16477] ? do_raw_spin_unlock+0x134/0x8a0 [ 617.678616][T16477] ? mem_cgroup_iter+0x3c9/0x530 [ 617.683558][T16477] mem_cgroup_oom+0x4ad/0x620 [ 617.688237][T16477] try_charge_memcg+0xd37/0x1010 [ 617.693166][T16477] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 617.699154][T16477] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 617.704965][T16477] ? rcu_lock_acquire+0x30/0x30 [ 617.709828][T16477] ? __lock_acquire+0x2b00/0x2b00 [ 617.714876][T16477] obj_cgroup_charge+0x1b2/0x420 [ 617.719819][T16477] ? mod_objcg_mlstate+0x330/0x330 [ 617.724956][T16477] kmem_cache_alloc_node+0xc6/0x370 [ 617.730154][T16477] ? dup_task_struct+0x52/0x9a0 [ 617.735083][T16477] dup_task_struct+0x52/0x9a0 [ 617.739768][T16477] ? _raw_spin_unlock_irq+0x1f/0x40 [ 617.744983][T16477] ? lockdep_hardirqs_on+0x95/0x140 [ 617.750183][T16477] copy_process+0x64a/0x5aa0 [ 617.754774][T16477] ? ptep_set_access_flags+0xc4/0x180 [ 617.760159][T16477] ? _raw_spin_unlock+0x24/0x40 [ 617.765005][T16477] ? do_wp_page+0xb78/0x1260 [ 617.769591][T16477] ? __lock_acquire+0x1382/0x2b00 [ 617.774611][T16477] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 617.779738][T16477] kernel_clone+0x22a/0x7e0 [ 617.784236][T16477] ? create_io_thread+0x1d0/0x1d0 [ 617.789259][T16477] ? __context_tracking_exit+0x7a/0xd0 [ 617.794713][T16477] __x64_sys_clone+0x245/0x2b0 [ 617.799470][T16477] ? __do_sys_vfork+0x130/0x130 [ 617.804318][T16477] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 617.810299][T16477] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 617.816270][T16477] ? lockdep_hardirqs_on+0x95/0x140 [ 617.821463][T16477] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 617.827435][T16477] do_syscall_64+0x44/0xd0 [ 617.831845][T16477] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 617.837729][T16477] RIP: 0033:0x7f904583964b [ 617.842135][T16477] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 617.861728][T16477] RSP: 002b:00007ffce97162c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 617.870135][T16477] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f904583964b [ 617.878097][T16477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 617.886061][T16477] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000555556474400 [ 617.894018][T16477] R10: 00005555564746d0 R11: 0000000000000246 R12: 0000000000000001 [ 617.901979][T16477] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffce97163a0 [ 617.909953][T16477] [ 617.920716][T16477] memory: usage 404kB, limit 32kB, failcnt 921 [ 617.927473][T16477] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 617.940241][T16503] device veth31 entered promiscuous mode [ 617.949144][T16477] Memory cgroup stats for /syz4: [ 617.949327][T16477] anon 45056 [ 617.949327][T16477] file 61440 [ 617.949327][T16477] kernel_stack 0 [ 617.949327][T16477] pagetables 8192 [ 617.949327][T16477] percpu 0 [ 617.949327][T16477] sock 0 [ 617.949327][T16477] vmalloc 0 [ 617.949327][T16477] shmem 61440 [ 617.949327][T16477] file_mapped 61440 [ 617.949327][T16477] file_dirty 0 [ 617.949327][T16477] file_writeback 0 [ 617.949327][T16477] swapcached 0 [ 617.949327][T16477] anon_thp 0 [ 617.949327][T16477] file_thp 0 [ 617.949327][T16477] shmem_thp 0 [ 617.949327][T16477] inactive_anon 45056 [ 617.949327][T16477] active_anon 61440 [ 617.949327][T16477] inactive_file 0 [ 617.949327][T16477] active_file 0 [ 617.949327][T16477] unevictable 0 [ 617.949327][T16477] slab_reclaimable 114192 [ 617.949327][T16477] slab_unreclaimable 172856 [ 617.949327][T16477] slab 287048 [ 617.949327][T16477] workingset_refault_anon 0 [ 617.949327][T16477] workingset_refault_file 0 13:54:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:42 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0), 0x4) 13:54:42 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) [ 617.949327][T16477] workingset_activate_anon 0 [ 618.056885][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 618.101573][T16477] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16477,uid=0 [ 618.138296][T16477] Memory cgroup out of memory: Killed process 16477 (syz-executor.4) total-vm:56676kB, anon-rss:364kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 618.174363][ T28] oom_reaper: reaped process 16477 (syz-executor.4), now anon-rss:0kB, file-rss:13536kB, shmem-rss:0kB 13:54:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) 13:54:42 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 13:54:42 executing program 3: r0 = getpgid(0x0) ptrace$setopts(0x4206, r0, 0x2, 0x0) 13:54:42 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:42 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:42 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$cgroup_int(r2, 0x0, 0x0) 13:54:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, 0x0, 0xfffffffffffffc20, 0x0) 13:54:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x0) [ 618.393175][T16530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:43 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:43 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$FUSE_DIRENT(r2, 0x0, 0x0) 13:54:43 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$cgroup_freezer_state(r0, 0x0, 0xffffffffffffff4f) 13:54:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x8ae3, 0x12) [ 618.549111][T16530] device veth33 entered promiscuous mode 13:54:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 13:54:43 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = dup2(r0, r1) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 13:54:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x0) [ 618.630737][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:43 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) dup2(r0, r1) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 13:54:43 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x7b) 13:54:43 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x0) 13:54:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 13:54:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) write$FUSE_POLL(r2, 0x0, 0x0) 13:54:43 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) 13:54:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1c}}, 0x0) [ 618.923301][T16566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 619.053548][T16566] device veth35 entered promiscuous mode [ 619.606878][ T54] device hsr_slave_0 left promiscuous mode [ 619.627195][ T54] device hsr_slave_1 left promiscuous mode [ 619.633815][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.656214][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.665634][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.685788][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.708166][ T54] device bridge_slave_1 left promiscuous mode [ 619.714424][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.737671][ T54] device bridge_slave_0 left promiscuous mode [ 619.743919][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.771729][ T54] device veth1_macvtap left promiscuous mode [ 619.785889][ T54] device veth0_macvtap left promiscuous mode [ 619.793372][ T54] device veth1_vlan left promiscuous mode [ 619.806184][ T54] device veth0_vlan left promiscuous mode [ 620.004685][ T54] team0 (unregistering): Port device team_slave_1 removed [ 620.024888][ T54] team0 (unregistering): Port device team_slave_0 removed [ 620.046117][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.062444][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.124280][ T54] bond0 (unregistering): Released all slaves [ 622.065112][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 622.074857][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 622.083112][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 622.091110][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 622.101036][ T3644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 622.108477][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 622.193905][T16576] chnl_net:caif_netlink_parms(): no params data found [ 622.234457][T16576] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.241976][T16576] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.252805][T16576] device bridge_slave_0 entered promiscuous mode [ 622.261809][T16576] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.269040][T16576] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.277483][T16576] device bridge_slave_1 entered promiscuous mode [ 622.299177][T16576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.310120][T16576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.335257][T16576] team0: Port device team_slave_0 added [ 622.342572][T16576] team0: Port device team_slave_1 added [ 622.364440][T16576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.371737][T16576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.408151][T16576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.421237][T16576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.428360][T16576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.455083][T16576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.489262][T16576] device hsr_slave_0 entered promiscuous mode [ 622.496211][T16576] device hsr_slave_1 entered promiscuous mode [ 622.502740][T16576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.514798][T16576] Cannot create hsr debugfs directory [ 622.584806][T16576] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.591926][T16576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.599310][T16576] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.606539][T16576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.654016][T16576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.668925][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.677492][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.685173][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.695252][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 622.709403][T16576] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.720138][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.733420][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.740642][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.756838][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.765848][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.772941][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.799269][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.808419][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.817414][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.830065][T16576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.841542][T16576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.857862][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.866235][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 622.881749][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.889435][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.903107][T16576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.150343][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 623.160094][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 623.168679][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 623.177177][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 623.187721][T16576] device veth0_vlan entered promiscuous mode [ 623.200181][T16576] device veth1_vlan entered promiscuous mode [ 623.223047][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 623.231505][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 623.244727][T16576] device veth0_macvtap entered promiscuous mode [ 623.254498][T16576] device veth1_macvtap entered promiscuous mode [ 623.275147][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 623.286312][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.296187][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 623.306754][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.316759][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 623.327306][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.337412][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 623.347985][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.358336][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 623.369148][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.384441][T16576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.393672][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 623.401878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 623.410012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 623.418879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 623.429199][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 623.441154][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.451421][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 623.462736][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.472850][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 623.483474][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.493633][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 623.506596][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.516853][T16576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 623.527775][T16576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.539038][T16576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.548033][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 623.557349][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 623.630359][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.642908][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.660974][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 623.662284][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.678853][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.692236][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 623.924043][T16595] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 623.934595][T16595] CPU: 1 PID: 16595 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 623.943363][T16595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.953427][T16595] Call Trace: [ 623.956699][T16595] [ 623.959618][T16595] dump_stack_lvl+0x201/0x2d8 [ 623.964296][T16595] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 623.970460][T16595] ? show_regs_print_info+0x12/0x12 [ 623.975672][T16595] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 623.982270][T16595] ? wake_up_klogd+0xb2/0xf0 [ 623.986859][T16595] dump_header+0xdb/0x970 [ 623.991182][T16595] oom_kill_process+0xf5/0x4e0 [ 623.995959][T16595] out_of_memory+0x711/0xa70 [ 624.000571][T16595] ? preempt_schedule+0x16b/0x190 [ 624.005585][T16595] ? unregister_oom_notifier+0x20/0x20 [ 624.011036][T16595] ? lockdep_hardirqs_on+0x95/0x140 [ 624.016259][T16595] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 624.021800][T16595] ? preempt_schedule_thunk+0x16/0x18 [ 624.027182][T16595] ? mem_cgroup_oom_trylock+0x220/0x220 [ 624.032753][T16595] ? cgroup_file_notify+0x123/0x190 [ 624.037953][T16595] memory_max_write+0x364/0x4f0 [ 624.042821][T16595] ? memory_max_show+0xa0/0xa0 [ 624.047582][T16595] ? read_lock_is_recursive+0x10/0x10 [ 624.052941][T16595] ? memory_max_show+0xa0/0xa0 [ 624.057695][T16595] cgroup_file_write+0x2a4/0x780 [ 624.062629][T16595] ? cgroup_seqfile_stop+0xd0/0xd0 [ 624.067742][T16595] ? cgroup_seqfile_stop+0xd0/0xd0 [ 624.072919][T16595] kernfs_fop_write_iter+0x3b6/0x510 [ 624.078215][T16595] vfs_write+0xb11/0xe90 [ 624.082462][T16595] ? file_end_write+0x230/0x230 [ 624.087314][T16595] ? mutex_lock_nested+0x1a/0x20 [ 624.092261][T16595] ? __fdget_pos+0x24e/0x2f0 [ 624.096868][T16595] ? ksys_write+0x77/0x2c0 [ 624.101298][T16595] ksys_write+0x18f/0x2c0 [ 624.105617][T16595] ? print_irqtrace_events+0x220/0x220 [ 624.111065][T16595] ? __ia32_sys_read+0x80/0x80 [ 624.115816][T16595] ? lockdep_hardirqs_on+0x95/0x140 [ 624.121004][T16595] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 624.126977][T16595] do_syscall_64+0x44/0xd0 [ 624.131380][T16595] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 624.137264][T16595] RIP: 0033:0x7f9d3f7e1059 [ 624.141677][T16595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 624.161274][T16595] RSP: 002b:00007f9d3e156168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 624.169682][T16595] RAX: ffffffffffffffda RBX: 00007f9d3f8f3f60 RCX: 00007f9d3f7e1059 [ 624.177713][T16595] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 624.185809][T16595] RBP: 00007f9d3f83b08d R08: 0000000000000000 R09: 0000000000000000 [ 624.193883][T16595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.201846][T16595] R13: 00007ffee6111c3f R14: 00007f9d3e156300 R15: 0000000000022000 [ 624.209824][T16595] [ 624.219442][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.225784][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.239715][ T3677] Bluetooth: hci3: command 0x0409 tx timeout [ 624.354037][T16595] memory: usage 2716kB, limit 32kB, failcnt 938 [ 624.361035][T16595] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 624.368671][T16595] Memory cgroup stats for /syz4: [ 624.372406][T16595] anon 2203648 [ 624.372406][T16595] file 61440 [ 624.372406][T16595] kernel_stack 65536 [ 624.372406][T16595] pagetables 98304 [ 624.372406][T16595] percpu 0 [ 624.372406][T16595] sock 0 [ 624.372406][T16595] vmalloc 0 [ 624.372406][T16595] shmem 61440 [ 624.372406][T16595] file_mapped 61440 [ 624.372406][T16595] file_dirty 0 [ 624.372406][T16595] file_writeback 0 [ 624.372406][T16595] swapcached 0 [ 624.372406][T16595] anon_thp 2097152 [ 624.372406][T16595] file_thp 0 [ 624.372406][T16595] shmem_thp 0 [ 624.372406][T16595] inactive_anon 2203648 [ 624.372406][T16595] active_anon 61440 [ 624.372406][T16595] inactive_file 0 [ 624.372406][T16595] active_file 0 [ 624.372406][T16595] unevictable 0 [ 624.372406][T16595] slab_reclaimable 116504 [ 624.372406][T16595] slab_unreclaimable 209728 [ 624.372406][T16595] slab 326232 [ 624.372406][T16595] workingset_refault_anon 0 [ 624.372406][T16595] workingset_refault_file 0 [ 624.372406][T16595] workingset_activate_anon 0 [ 624.505505][T16595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16594,uid=0 [ 624.547969][T16595] Memory cgroup out of memory: Killed process 16594 (syz-executor.4) total-vm:60648kB, anon-rss:2424kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 624.573285][ T28] oom_reaper: reaped process 16594 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:54:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) dup2(r1, r0) dup2(r1, r2) write$FUSE_LK(r2, 0x0, 0x0) 13:54:50 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') write$FUSE_DIRENT(r0, 0x0, 0x0) 13:54:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 13:54:50 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13:54:50 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 625.620942][T16576] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 625.622035][T16604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 625.643941][T16576] CPU: 0 PID: 16576 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 625.652728][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.662790][T16576] Call Trace: [ 625.666080][T16576] [ 625.669018][T16576] dump_stack_lvl+0x201/0x2d8 [ 625.673710][T16576] ? show_regs_print_info+0x12/0x12 [ 625.678924][T16576] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 625.684653][T16576] ? do_raw_spin_lock+0x151/0x8e0 [ 625.689691][T16576] ? asan.module_dtor+0x20/0x20 [ 625.694557][T16576] dump_header+0xdb/0x970 [ 625.698914][T16576] oom_kill_process+0xf5/0x4e0 [ 625.703696][T16576] out_of_memory+0x711/0xa70 [ 625.708394][T16576] ? unregister_oom_notifier+0x20/0x20 [ 625.713875][T16576] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 625.719428][T16576] ? __lock_acquire+0x2b00/0x2b00 [ 625.724446][T16576] ? mem_cgroup_oom_trylock+0x220/0x220 [ 625.729986][T16576] ? do_raw_spin_unlock+0x134/0x8a0 [ 625.735178][T16576] ? mem_cgroup_iter+0x3c9/0x530 [ 625.740105][T16576] mem_cgroup_oom+0x4ad/0x620 [ 625.744773][T16576] try_charge_memcg+0xd37/0x1010 [ 625.749720][T16576] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 625.755531][T16576] ? rcu_lock_acquire+0x30/0x30 [ 625.760369][T16576] ? __lock_acquire+0x2b00/0x2b00 [ 625.765386][T16576] charge_memcg+0x104/0x4a0 [ 625.769879][T16576] ? __mem_cgroup_charge+0x80/0x80 [ 625.775082][T16576] __mem_cgroup_charge+0x23/0x80 [ 625.780008][T16576] do_anonymous_page+0x3ab/0xe90 [ 625.784947][T16576] ? fault_around_bytes_set+0xb0/0xb0 [ 625.790326][T16576] handle_mm_fault+0x1da3/0x39e0 [ 625.795279][T16576] ? numa_migrate_prep+0x190/0x190 [ 625.800400][T16576] ? vmacache_find+0x228/0x5d0 [ 625.805160][T16576] do_user_addr_fault+0x8c4/0x1060 [ 625.810273][T16576] exc_page_fault+0xa1/0x1e0 [ 625.814860][T16576] ? asm_exc_page_fault+0x8/0x30 [ 625.819814][T16576] asm_exc_page_fault+0x1e/0x30 [ 625.824688][T16576] RIP: 0033:0x7f9d3f7b0025 [ 625.829092][T16576] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 5a dc 09 00 e8 75 c9 ff ff [ 625.848681][T16576] RSP: 002b:00007ffee6110be0 EFLAGS: 00010206 [ 625.854747][T16576] RAX: 00000000000187c1 RBX: 00007f9d3f8c75e0 RCX: 0000555556336840 [ 625.862709][T16576] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 13:54:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 13:54:50 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x26, 0x0, 0x0) 13:54:50 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13:54:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_freezer_state(r0, 0x0, 0x41) [ 625.870666][T16576] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007f9d3f8c7640 [ 625.878710][T16576] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 625.886670][T16576] R13: 0000000000008040 R14: 0000000000000804 R15: 000055555632e800 [ 625.894645][T16576] 13:54:50 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040), 0x4) 13:54:50 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 625.964597][T16604] device veth37 entered promiscuous mode [ 626.015996][T16576] memory: usage 428kB, limit 32kB, failcnt 1029 [ 626.027667][T16576] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 626.047526][T16576] Memory cgroup stats for /syz4: [ 626.047730][T16576] anon 36864 [ 626.047730][T16576] file 61440 [ 626.047730][T16576] kernel_stack 0 [ 626.047730][T16576] pagetables 8192 [ 626.047730][T16576] percpu 0 [ 626.047730][T16576] sock 0 [ 626.047730][T16576] vmalloc 0 [ 626.047730][T16576] shmem 61440 [ 626.047730][T16576] file_mapped 61440 [ 626.047730][T16576] file_dirty 0 [ 626.047730][T16576] file_writeback 0 [ 626.047730][T16576] swapcached 0 [ 626.047730][T16576] anon_thp 0 [ 626.047730][T16576] file_thp 0 [ 626.047730][T16576] shmem_thp 0 [ 626.047730][T16576] inactive_anon 36864 [ 626.047730][T16576] active_anon 61440 [ 626.047730][T16576] inactive_file 0 [ 626.047730][T16576] active_file 0 [ 626.047730][T16576] unevictable 0 [ 626.047730][T16576] slab_reclaimable 116504 [ 626.047730][T16576] slab_unreclaimable 205352 [ 626.047730][T16576] slab 321856 [ 626.047730][T16576] workingset_refault_anon 0 [ 626.047730][T16576] workingset_refault_file 0 [ 626.047730][T16576] workingset_activate_anon 0 [ 626.167712][T16576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16576,uid=0 [ 626.184947][T16576] Memory cgroup out of memory: Killed process 16576 (syz-executor.4) total-vm:56676kB, anon-rss:364kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 626.205437][ T28] oom_reaper: reaped process 16576 (syz-executor.4), now anon-rss:0kB, file-rss:13584kB, shmem-rss:0kB 13:54:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r4 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003c"], 0x1c}}, 0x0) 13:54:50 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:50 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 13:54:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) write$FUSE_DIRENT(r1, 0x0, 0x0) 13:54:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x5452, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_virt_wifi\x00'}) 13:54:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003c"], 0x1c}}, 0x0) 13:54:50 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 13:54:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x5429, 0x0) [ 626.317651][T16625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:50 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x194}, 0x1, 0x0, 0x0, 0xe02a0ae20c25c2c6}, 0x4000801) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x6010000}}], 0x400000000000107, 0xfc00) [ 626.386150][ T3677] Bluetooth: hci1: command 0x0406 tx timeout 13:54:51 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 626.434685][T16625] device veth39 entered promiscuous mode 13:54:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x5412, &(0x7f0000000040)) 13:54:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003c"], 0x1c}}, 0x0) 13:54:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:51 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:51 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) [ 626.618426][T16643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0xc020660b, 0x0) [ 626.807075][T16643] device veth41 entered promiscuous mode [ 626.846015][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49"], 0x1c}}, 0x0) 13:54:51 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x5414, 0x0) 13:54:51 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 627.259535][T16663] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="010001000000000002004e22ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e20ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) 13:54:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49"], 0x1c}}, 0x0) 13:54:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002040)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa15a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1beeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000459ff4b40000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b98008006c4a00000000ff435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0adb02d9ba96e1010000000000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4a00fca0493cf29b33dcc9ffffffffffffffd39fec2271ff0158929646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969ced595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30fa94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7dfa2e5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca378e676c3e08c1ed43ca8d3d10994c0b58645ac518a75fde7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d34b5457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464b635197351a5ef0a0fb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d060000000000000062eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d546ba4958ea8e4aa370ac891e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859325a0845319f18101293373750d1a8fe64680b0a3fc22dd704e4214de5944912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a000000003bc13c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80772fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e89fc745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83186c1526af6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebe660309e1e245b0fdf9743af930cd6db49a47613808bad959719c0000000000378a921c7f7f8433c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205aa00b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569ed7aa287378c697f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622e9f2c66ee7e30393cd7a4d67ff2a49c4f9360984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5002512bcbf9b24accfecb0f477db103463af2847e6ade5b9e065ec0d0ba58fedae5f08818fea475b169469f9efd131925d98c34b3b47e5c46d121ad5087e1cdee39f5cf21d2e80a64ac97e71cafc29bfb78db090dd12225efeda2e93bf7f6ba7865e9c375a780929d210bf5858e2a4ff8e8d1e8c9cceed07c6312b734c72510d335acc94f76e7078ce4066f1e0ac9429f8013683301277a11e25b248b61180cb6207a0e26757f3f1bfc6c27f3720d1fb74afb17f3b5239bc2243853d5234afb05ed6024e94dee34666c5b5522b54cb433efa54b4e9022533e7c89bdee957dfa9ded9f16fdcd1b681e4c72f32fa3334313e334cc140daec7dcb22f463457a1a5ac230bbded86258206046f556589f5627ab2751eb34d940519f009412098398ad822a8509d2d32da656ac5935e4c7f9503ce4daf13300dfd611528049310544d3e8613926fbe2647e258932592c9123f1c74023144442d09ef90c64950176c666da6b658108ac54beb2379aa70501c42bd9c4e4f426ab5ff2a33767b408ed19e399c33b52abc4ac24da0d4cf07d93029583591c33f0f80513c541581977f2e9735e1edb66fdb2722eb4b0b670ba74fdee2f1a3cf85777af5d8267acaa9d83c23a4b40d0f53dce003c03c5959e405fc4f2c05d3394f014a39caabbeff7c7cadbdc57def7f5f758aa46b6e2fddc779770d41335f7e395c4ac2a136a30e7c0a301dffc5565d7244fb29cd302c36e76221a3c4e21559216c078f06b01885a83da16bf8548776a0ae88dfeccc9ad64d2fe3cfdeb9684b7b7e5c00f7323f8214ed0189539e0e3e34c8e542c82ddbd6a75c1adbedef4d5d69b246a5a36ab802b0161908e748ed9891678c228413bf51b18a25bf776b9d1f1fedf97cf5e7de4455ea359e5796bd60cc415066fc271a2bdb7db13e72d1a99b375ff874037faf6a1d1aacf46a57346d000000000000000085c1b64dd5178485ad0f8557ccae7c06a40e8bd2ce76927bb0923dc380fd153cd2ce1242bc0a6e0ffff572ca2a4898426eb6d416ff14aaefebd84bd4000000000000000000dbd064fe868ff4929d489badcf5072c61231bec614423bbf7df2989db587bf49abc6ff4d842309a1fa7f268e2c453cd8b9a746d5c6e820453a377fb09f5799b43c1951f56c211170bc102a3437778676928a1b4bd8ddc8db197d6b63913e6dccc20ccb26bc231f1428502b3279d0aace2caf8c8f5edbfeffe6d5b3b34ad0f1a4cad44c5237a2fff1e8f8e0521313c30a9fb5fc54ae85d19599bb1c2283e3f7bb01a11a1845db6b8eba64b45f1c000000c0c4bef4bf3e1d9b0e1b4e4147d5eb0f9b9bfe80984650dce289524659d70fc7ab8485c054e51ad1bef44c5d6cfaaf7efb61be7c38820a4279d69ff337b0f3f9c2c55de05d1c3682c41f624e735c3ce0a7b0f3d784c96cc57c83e78b336cb4022c19917284534ea9efccef28374885759f39c444d78a3f78ec3bafb4af2e7a64c967c494264c3b36591eb2049ede272a00dc74628a45de9fd219c63f1f0e2e187071f9468f1f4b880ae18459f3790010aff9f89be79e7b81ed89139dd8152e5009fa164f36bce90c661b35022c1cbbdfc9aba07ebed92b94ff9f0e1dbc0a29d5799e3ecc8eb35f791a4fc7db9e97be3f944b2360e3c9a0d2b0ab83db2fc1c3d28efda92828494b88008b9082394c113ec071cdbd8556d7cf7c11236d699da109de535f64e008a175d11e80f96e10d8527d13e0e1f2b85ee7e542da3c7f32b5efd8422a0000000093a10a4df2e127a37da88bd3ec590736e54c10887a65752d314970619d28019035e4f88ec225145a0ed9e47f89543dc866778dddeb57fa009ebbeb6b1ae0f64bc1faa9b8a31adaec672e30b870db5cbb8cd89bce3fb037046041057df120ee3f"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x440408d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) [ 627.373203][T16663] device veth43 entered promiscuous mode [ 627.380422][ T26] audit: type=1804 audit(1643637291.949:38): pid=16668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir764867108/syzkaller.DKus3c/93/bus" dev="sda1" ino=1166 res=1 errno=0 [ 627.425313][T16670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 627.526185][ T26] audit: type=1800 audit(1643637291.969:39): pid=16668 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 627.548743][T16670] bond18 (uninitialized): Released all slaves [ 628.160687][ T1014] device hsr_slave_0 left promiscuous mode [ 628.180385][ T1014] device hsr_slave_1 left promiscuous mode [ 628.214931][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.225190][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.257676][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.294281][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.327196][ T1014] device bridge_slave_1 left promiscuous mode [ 628.333470][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.357695][ T1014] device bridge_slave_0 left promiscuous mode [ 628.374294][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.399260][ T1014] device veth1_macvtap left promiscuous mode [ 628.405471][ T1014] device veth0_macvtap left promiscuous mode [ 628.413099][ T1014] device veth1_vlan left promiscuous mode [ 628.419141][ T1014] device veth0_vlan left promiscuous mode [ 628.592238][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 628.608148][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 628.626685][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.643501][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.715396][ T1014] bond0 (unregistering): Released all slaves [ 630.636068][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 630.645289][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 630.657197][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 630.664753][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 630.672520][ T3644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 630.679832][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 630.764864][T16678] chnl_net:caif_netlink_parms(): no params data found [ 630.812607][T16678] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.820000][T16678] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.828642][T16678] device bridge_slave_0 entered promiscuous mode [ 630.837470][T16678] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.844583][T16678] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.853289][T16678] device bridge_slave_1 entered promiscuous mode [ 630.883217][T16678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.894180][T16678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.920876][T16678] team0: Port device team_slave_0 added [ 630.928926][T16678] team0: Port device team_slave_1 added [ 630.953416][T16678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.960513][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.987062][T16678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.003373][T16678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.010387][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.043419][T16678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.072310][T16678] device hsr_slave_0 entered promiscuous mode [ 631.079224][T16678] device hsr_slave_1 entered promiscuous mode [ 631.088065][T16678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.095658][T16678] Cannot create hsr debugfs directory [ 631.164829][T16678] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.171949][T16678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.179353][T16678] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.186477][T16678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.234189][T16678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.249892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 631.258036][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.265635][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.273897][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 631.289264][T16678] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.300950][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 631.311188][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.318429][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.336749][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 631.346001][ T3675] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.353064][ T3675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.372483][T16678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 631.383222][T16678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.400346][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 631.410106][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 631.418763][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 631.428203][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 631.447761][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 631.455207][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 631.462787][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 631.470856][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 631.480829][T16678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.721044][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 631.734020][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 631.743355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 631.752479][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 631.763577][T16678] device veth0_vlan entered promiscuous mode [ 631.778777][T16678] device veth1_vlan entered promiscuous mode [ 631.801073][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 631.812945][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.828110][T16678] device veth0_macvtap entered promiscuous mode [ 631.837749][T16678] device veth1_macvtap entered promiscuous mode [ 631.851528][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 631.863311][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.873681][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 631.884808][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.895335][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 631.906659][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.916819][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 631.927593][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.937772][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 631.949500][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.961103][T16678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.969452][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 631.978090][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 631.986587][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 631.995077][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.007264][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 632.018163][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.028483][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 632.039024][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.049223][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 632.062156][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.072137][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 632.082722][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.092619][T16678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 632.103151][T16678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.114697][T16678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.125041][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.133996][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.198760][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.218994][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.232613][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 632.241476][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.253441][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.268045][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.487232][T16697] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 632.498980][T16697] CPU: 1 PID: 16697 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 632.507738][T16697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.517813][T16697] Call Trace: [ 632.521188][T16697] [ 632.524114][T16697] dump_stack_lvl+0x201/0x2d8 [ 632.528995][T16697] ? show_regs_print_info+0x12/0x12 [ 632.534217][T16697] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 632.539984][T16697] ? _printk+0x1/0x118 [ 632.544191][T16697] dump_header+0xdb/0x970 [ 632.548527][T16697] oom_kill_process+0xf5/0x4e0 [ 632.553389][T16697] out_of_memory+0x711/0xa70 [ 632.557971][T16697] ? preempt_schedule+0x16b/0x190 [ 632.563014][T16697] ? unregister_oom_notifier+0x20/0x20 [ 632.568470][T16697] ? lockdep_hardirqs_on+0x95/0x140 [ 632.573682][T16697] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 632.579227][T16697] ? preempt_schedule_thunk+0x16/0x18 [ 632.584604][T16697] ? mem_cgroup_oom_trylock+0x220/0x220 [ 632.590154][T16697] ? cgroup_file_notify+0x123/0x190 [ 632.595357][T16697] memory_max_write+0x364/0x4f0 [ 632.600205][T16697] ? memory_max_show+0xa0/0xa0 [ 632.604963][T16697] ? memory_max_show+0xa0/0xa0 [ 632.609720][T16697] cgroup_file_write+0x2a4/0x780 [ 632.614658][T16697] ? cgroup_seqfile_stop+0xd0/0xd0 [ 632.619816][T16697] ? cgroup_seqfile_stop+0xd0/0xd0 [ 632.624919][T16697] kernfs_fop_write_iter+0x3b6/0x510 [ 632.630204][T16697] vfs_write+0xb11/0xe90 [ 632.634443][T16697] ? file_end_write+0x230/0x230 [ 632.639297][T16697] ? mutex_lock_nested+0x1a/0x20 [ 632.644225][T16697] ? __fdget_pos+0x24e/0x2f0 [ 632.648803][T16697] ? ksys_write+0x77/0x2c0 [ 632.653214][T16697] ksys_write+0x18f/0x2c0 [ 632.657533][T16697] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 632.663703][T16697] ? __ia32_sys_read+0x80/0x80 [ 632.668467][T16697] ? __x64_sys_write+0x19/0x80 [ 632.673227][T16697] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 632.678689][T16697] do_syscall_64+0x44/0xd0 [ 632.683117][T16697] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 632.689013][T16697] RIP: 0033:0x7f39f074c059 [ 632.693425][T16697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 632.713020][T16697] RSP: 002b:00007f39ef0c1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.721422][T16697] RAX: ffffffffffffffda RBX: 00007f39f085ef60 RCX: 00007f39f074c059 [ 632.729387][T16697] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 632.737348][T16697] RBP: 00007f39f07a608d R08: 0000000000000000 R09: 0000000000000000 [ 632.745346][T16697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.753306][T16697] R13: 00007ffe5ee90f7f R14: 00007f39ef0c1300 R15: 0000000000022000 [ 632.761286][T16697] [ 632.795970][ T3675] Bluetooth: hci3: command 0x0409 tx timeout [ 632.802054][T16697] memory: usage 2692kB, limit 32kB, failcnt 1046 [ 632.820415][T16697] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 632.828695][T16697] Memory cgroup stats for /syz4: [ 632.830712][T16697] anon 2207744 [ 632.830712][T16697] file 65536 [ 632.830712][T16697] kernel_stack 65536 [ 632.830712][T16697] pagetables 94208 [ 632.830712][T16697] percpu 0 [ 632.830712][T16697] sock 0 [ 632.830712][T16697] vmalloc 0 [ 632.830712][T16697] shmem 61440 [ 632.830712][T16697] file_mapped 61440 [ 632.830712][T16697] file_dirty 4096 [ 632.830712][T16697] file_writeback 0 [ 632.830712][T16697] swapcached 0 [ 632.830712][T16697] anon_thp 2097152 [ 632.830712][T16697] file_thp 0 [ 632.830712][T16697] shmem_thp 0 [ 632.830712][T16697] inactive_anon 2134016 [ 632.830712][T16697] active_anon 61440 [ 632.830712][T16697] inactive_file 0 [ 632.830712][T16697] active_file 0 [ 632.830712][T16697] unevictable 0 [ 632.830712][T16697] slab_reclaimable 97928 [ 632.830712][T16697] slab_unreclaimable 191072 [ 632.830712][T16697] slab 289000 [ 632.830712][T16697] workingset_refault_anon 0 [ 632.830712][T16697] workingset_refault_file 0 [ 632.962129][T16697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16696,uid=0 [ 632.979476][T16697] Memory cgroup out of memory: Killed process 16696 (syz-executor.4) total-vm:60648kB, anon-rss:2460kB, file-rss:15084kB, shmem-rss:80kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 633.013804][ T28] oom_reaper: reaped process 16696 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:54:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:57 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49"], 0x1c}}, 0x0) 13:54:57 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 13:54:57 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x440408d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) [ 633.169246][T16678] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 633.195390][T16678] CPU: 1 PID: 16678 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 633.204196][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.214270][T16678] Call Trace: [ 633.217556][T16678] [ 633.220490][T16678] dump_stack_lvl+0x201/0x2d8 [ 633.225197][T16678] ? show_regs_print_info+0x12/0x12 [ 633.230412][T16678] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 633.236231][T16678] ? do_raw_spin_lock+0x151/0x8e0 [ 633.241269][T16678] ? asan.module_dtor+0x20/0x20 [ 633.246130][T16678] dump_header+0xdb/0x970 [ 633.250472][T16678] oom_kill_process+0xf5/0x4e0 [ 633.255246][T16678] out_of_memory+0x711/0xa70 [ 633.259847][T16678] ? unregister_oom_notifier+0x20/0x20 [ 633.265428][T16678] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 633.270978][T16678] ? __lock_acquire+0x2b00/0x2b00 [ 633.276011][T16678] ? mem_cgroup_oom_trylock+0x220/0x220 [ 633.281572][T16678] ? do_raw_spin_unlock+0x134/0x8a0 [ 633.286805][T16678] ? mem_cgroup_iter+0x3c9/0x530 [ 633.291771][T16678] mem_cgroup_oom+0x4ad/0x620 [ 633.296565][T16678] try_charge_memcg+0xd37/0x1010 [ 633.301547][T16678] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 633.307388][T16678] ? rcu_lock_acquire+0x30/0x30 [ 633.312250][T16678] ? __lock_acquire+0x2b00/0x2b00 [ 633.317286][T16678] charge_memcg+0x104/0x4a0 [ 633.321801][T16678] ? __mem_cgroup_charge+0x80/0x80 [ 633.326926][T16678] __mem_cgroup_charge+0x23/0x80 [ 633.331866][T16678] do_anonymous_page+0x3ab/0xe90 [ 633.336825][T16678] ? fault_around_bytes_set+0xb0/0xb0 [ 633.342217][T16678] handle_mm_fault+0x1da3/0x39e0 [ 633.347196][T16678] ? numa_migrate_prep+0x190/0x190 [ 633.352348][T16678] ? vmacache_find+0x228/0x5d0 [ 633.357126][T16678] do_user_addr_fault+0x8c4/0x1060 [ 633.362263][T16678] exc_page_fault+0xa1/0x1e0 [ 633.366864][T16678] ? asm_exc_page_fault+0x8/0x30 [ 633.371809][T16678] asm_exc_page_fault+0x1e/0x30 [ 633.376671][T16678] RIP: 0033:0x7f39f074a07d [ 633.381094][T16678] Code: 05 48 89 c2 48 3d 00 f0 ff ff 77 cd 48 83 c4 08 5d 41 5c c3 66 0f 1f 84 00 00 00 00 00 41 55 41 89 f5 41 54 49 89 cc 55 89 fd <53> 48 83 ec 08 40 84 f6 0f 84 8d 00 00 00 bf 30 80 00 00 bb 00 80 [ 633.400708][T16678] RSP: 002b:00007ffe5ee90000 EFLAGS: 00010246 [ 633.406792][T16678] RAX: 0000000000004000 RBX: 0000000000000003 RCX: 00007ffe5ee90020 [ 633.414782][T16678] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 633.423032][T16678] RBP: 0000000000000003 R08: 0000000000000001 R09: 00007ffe5ee91260 [ 633.431019][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5ee90020 [ 633.439007][T16678] R13: 0000000000000001 R14: 000000000000000f R15: 00007ffe5ee912a0 [ 633.447024][T16678] [ 633.452102][T16678] memory: usage 388kB, limit 32kB, failcnt 1066 [ 633.453557][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac0000"], 0x1c}}, 0x0) 13:54:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:58 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="feba8d1a378fa089a444e757b0ae311c21a7e5d9904174edf9fd8b2180804ab5a353722de4b3b2f1b758d459ffaf7f258b47f41c4ebd63d194c8b297efa5ea91040f51e62d3b53491bdc637d9564688a334de2e737af8eddfaffffffffffffffedea4057659866dc8f0d"], 0x0) syz_emit_ethernet(0x8f, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr, 0xfffffffc}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x81) syz_emit_ethernet(0xa0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000009800)={0x1, 0x1, [0x7ac, 0x0, 0x922, 0x207]}) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) pipe(0x0) syz_emit_ethernet(0x26, &(0x7f0000009fc0)=ANY=[@ANYRES16], &(0x7f0000009f80)={0x1, 0x4, [0x161, 0xb96, 0x70f, 0x966]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendmmsg(r0, &(0x7f0000009bc0)=[{{&(0x7f0000000240)=@un=@abs={0x0, 0x0, 0x9}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)="656f54e665d9b1626bd9474d5141100af4b41f4d0b5cc6b60af01613a3a032effd7c6bf69fa3d33e7d1a57e3bf6f86818dc02a44e2281d24dc5b1fe70ac3c8a9184aa92692", 0x45}, {&(0x7f0000000080)="3e2e81e13e23e268b335a147", 0xc}, {&(0x7f00000003c0)="6e0bc6000dcc4648d5b30973", 0xc}, {&(0x7f0000000400)="3f08a0fd70ec70f9fdfab7ae3dd7543404845ab653085935dcdd58fe183143bc60b86c63445e25b0c66d932f53bc2d782022ad45acaa6ee404eaf9f997767bbe566ad3ddf444cb3810ad64152d2bfd0be7af01ffb6c8af74a3000536400548c383cb4e0c05ab436305ade7b6597505ab6fb41ee3ae957ddf5a4946719bef56b5a6f0ca3e0bf1c8fdc06d5ab8ffce9e11", 0x90}, {&(0x7f00000004c0)="fa9a30c2b80533195e8fc751cefc2b11b58c08560ae95fbb2fe2e8d9a1092c5824321b96df66277b126318add75304fb36ba2ac99cca4b64", 0x38}, {&(0x7f0000000500)="3de0caa70d15560611f4726911742f598ade3481c9e58e6a67c30c8306b4b7634dc54b99acf9c1e63eaf9773588b6fa1fdd8e36e05f1bd3290", 0x39}, {&(0x7f0000000640)="aa901ab5ca49f31aa9ac5b661d01401bc02ac05e85c6bf9777e254724d11cea4dcee214af2ebf1a460dcfbb90c5273d6b507cb247f680bf624476a7a36f0e5a17619330bd6876bc5cfd608c0b83fa58202af9780f5c6c606e7e01ad6cd901684549ac8711648ac5b0afe1d63efe6676d066a5d4a635ba50b929e61523f46d456292ef1f25394a9d6f50784e7cc28e061ac2c3b9ce3f3f53dc415f891aa18695794de37d2014a8fdcc640d4c9683cc9c5bb", 0xb1}, {0x0}], 0x8, &(0x7f0000007e80)=ANY=[@ANYBLOB="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"], 0x6b0}}, {{&(0x7f0000000e80)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5}, 0x80, &(0x7f0000003200)=[{&(0x7f0000000f00)="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", 0xf00}, {&(0x7f0000001f00)="00f0e2c4596eb2fc03f4922b58091ac1621088d78a7e80e71bec57e98b50f814b597c594a7780b01ca7a3f9104f5c2ddd712d4e9b0361c9961a87fe6ca29d01a378fdea8ba47209e09919a2f827de88db741ca8e336e1d2448", 0x59}, {&(0x7f0000001f80)="ad3e6edb6ca223d7f271ee59edf1cd6c64b141eaf7c0466d7e075e64780406e3d11f1b42a5d1a16332a813324efc1e5e81634473a159e69bd0ad1b27476df03df518d3cbcca0cfc410a09841daae19a693aae3ba999e0dcb", 0x58}, {&(0x7f0000002000)="18aa1ff1a9df969d49ab9f9d57f92100586b912886c74ae39b548b3724bdaf", 0x1f}, {&(0x7f0000002040)="9535357614bb285555747deadfa1f728b1c7372130a208a56294e7c722ff9d3ad71848cc49aa8cf1c38154544c4b8897f2c9a12436cc35cc052376479a13b9e190f94b15f3c1fa4efbf9fd722d9a1392fbff26331295f04028648b28df03ea4a9344c371036b5980e0e140fdef65d25f03e1cb30c1b5d0e994698c6fd59516e74f867d8ade3e3c84eda05dbc0861a8ff", 0x90}, {&(0x7f0000002100)="79d0be510b0a182e470cd4fa14debc2da77504e2af7a0b9bbdc1336ee6031157031b02bb1787cfdeecfe111745e0fc4ecc9d9cc1e3", 0x35}, {&(0x7f0000002140)="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", 0xff8}, {&(0x7f0000003140)="4853fdf715c9b024ff203c6063c4c7bc658cb3b3b36d541fca169f6fa6e55a4f023bce9e673b6e6098fa6d7ef9476042390f0bdab01c394ac5ea61acc3690c26d23fd06436bcecea12aadc9d01b12ce38e33f5bd85a1e8eb60caee523c9c26ed2546c5a456db139e06ef1cc458", 0x6d}, {0x0}], 0x9, &(0x7f0000000980)=ANY=[@ANYBLOB="b800000000000000120100000008000054838b2874c53cc86a5b90f383b24b09e1361153500b27122b1df3f99e045e243f2f059d08801fad681877e030c7a94f8b83330090171a7ab0ca9c5c1d80e0870f87ca66be570b364ac9bf1cc9a418edf9493380bf7e02d87e87c878465c91dd2e731d58d1052727bcf9b05510ccf6cd57b80ba5d17e0a0d8f17f627915aec5958a2f4b80a610bc73c88bc603195df05deba9591163776415daa7782edd07a2e24000000000000000801000000000000120100000400000001031fec09e1012152a2846d2e2fe8f4764bcf8cfc2a1b005e6124ea248bc979d455a17d0c82f374e1e6e8514f06b4cf2fd7eee50e0c3e4c30bf838c148817b1b2c2f0e613fcb6f1dcb8c49b743248bd5d73c282614fd4bcf43cf0c2e79607ff7cacaddb1e8a8449d1253419d746a8578916ef99dce66058d6b5e1c260d2ac0ed408c0f7d5c2787524cc36a59f721dce095998f06dc66e12237fa18c7d7f0f05e5db332ea336e66760d40087af94a7a156c0b307d723938f1a2a7c418114f0d9a52c566e284fdb980b2d26075e76cd18d70d5dfc103b7a5704dd208405b865277adbd4ece8845303244891587235a914a3e3249712b26ed9d162d4bef0e559000000c80000000000000012010000f8ffffff7459fc005552a8084647cec363ca7613ec16ccd01009013d81b5674b2993bb9ca72ab924abc741ba6f05477e3a26c798173b900fdda47c60f3db2e49948815bfaadff32730d3f79ff9f42990b2e6c7e816e97fddd126a6938fde6af07f03653e7ae214ab6ec11ac30f31d816af0cddcca4d287c1792479a10e2a019f0e6fa9ae0f6eac54135b038e07a9616172e833499d4cd7b64a04491e284c127e3e219b3f57f3b9764d9d94545b13785ddd5a676c32bb620000000000"], 0x288}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003440)="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", 0x107}, {&(0x7f00000035c0)="661238f94430df0aa27ca348fc3798ed2b78d6dedfa28977471e11fa19a2206af9d0ebd92ec87000da4b6ef6805d7acc24b80d9a27c914a60e00c075db4089e32d0216127c4ebcfac4d0100fbac3e227caad1a96ed983a0e772a516fa73eff98ad7a5a214b5b71e84729eaaab4c9dcc9ec35d588bed247f835134b981f67f7dc89496e11d589c27925331cfca27986b121465094436c995b88f77c50a5c23ed985fd54ba6151a8334e8b3675e98a99e60b8e33ebb200f626d7ece787b186def8b219761bc6215a88904bd65ff4e45ae418e09680da6d74ffa46960a4f764a302d00f013998ca2faaf052240fb19ec5c1aa6b9d8350bf56b66683a48bd0c71270718b673d5a2ac48ea90f22edca95f39f0815a7e09b9af19312799f36d81762152fac8dc6b784cfe0e5706ded9224d046725747b8f106d6cdfdeb86e84e853a9b51297172c2a2a4e993f7841478ff891b3b9f37bf272032e091d7837fe88c25b7e6ba9374ece420da1d99c56cc798f274f1a97aaf74f464b72f16ec4d752bddc8dfb806e692c00fc9ae9d5f742cdb039e06436d1ad81644317e6cb257226a119decb2552d38c0cd8c37b64110d8bb82e9b87925858e58f0a128771be95cb073b0cf8a6b04125894850441dd668a16c559dbc7c4e4dde1e469ba6862866cd1b1feb7a0a210a5540f8229a5096f13a112b2707c6314949b59365451b396f7e4e8620e8221e8889ade7f027802e2ad6b0669642b01b5daef7e1fa2216d00473202265b6b65900ac81a260c56192c24f8251044bc3783eda27e4d417cabe8e61e299c72d8dafdb50f7cecab1aa92a7b1d6a49847f7fb65b1d1d11d5995ab9331781ef2e74997cf0062bd45c351f80b7817a5130bd987217765b67f82e93df0fe703eb45dd83a978e4f53f039e0d6dabf0f80181ed532eafa6671ec96e123ab5b6be30a11d55ea69941009028f7b6c1a0592db4b074843c673cf45b78926e84fd8533063129b70e0004138ca1322cfb238795fe6a4132ad65950c9984fdafdce81f24fa249d89a6e9f5a099cd76504fff283d3450734e57d3eb0977aa6f5ae32527a98b0c537c5653dcfa8c18ac69c2191cbf3f1426ed3e97ec0b56ceaffb3698b64b983da46c8d634770e6b798161e5a1171a06f2eb40fe7ec7be8f6dfb1191c7faf51f46f6cf4d1c4d6e9f668b5d87abe0d307105b2abd0cc5e27050a579f18e8ddbd4ecbcd9e01facc620f886254f27b78904d5543417e29a3d4efc6cf7981996aafdbd8450f7e75741d7661c2603e02e75438c9675b04fb2f32a89875bf2e68b492bf35f15d0548ffa154e838a3a3fd1f9d0d8dd7d0a9b75a2e0850e64f940bc7896de7b3527e64decde7df6ed81414d45d9dec20f6545b8704fb76097fa90005917ec8ba5ebe523ff67f7c406d8d120f9920f64b1b1b2d1d9764e2e876f119070859a356da64bcbe74ebbb7ce6ab43b3311d54ac51e56def81fdd74234d94419a7e5d46802c7d03c4f749508ac92ee43f8148bf24a9bb9d3277cdffed3396a0cebaa80391950d01f16398dc0eb3a37a6b72835a8b6ba752a2bf52fc83416f0eee5628f8e3c59b8bc85b723252e5f8f7f106d6a197c95e3f4ee88df8ce57524d12f46a655efd3108a693672890efbd2adb67344072f3753499bd834f02442c7ca04d1d8a4b842d3c5e0dd3b403785d2f0fc9aaa9bb33ee6565947008b6a2bb2e006d6955cd843570d2d8ff06c6e67491ec362e5192ac834e461b715c06d4842d92225d883af45a84bb0e5c240b87f39282466a1a3a4c5204ed6d79327abd9602c116e8f9cd46c1bcd368f2bb498d01ecdb77cedefbe07590837174a406a6bee59f45ac462bc65f8fa80b42ac265bc7f3273f92881cda7d479c14d1471e0bbc7d87895ae22dc403c53909dcd2fee0b669e5d6ef8e80d045a57c9759470e612e3b2a31a948c0c83b4f142d86ee1d140c630030c4fce1618550f7b25b259bde4ab27acb4d9e77cb416dabc769efdd6f6e6c5404e0ab63ddc4ef97148e79ba58eab349215d048e8e40e4d3ff49e0d6ae240083b1a84848574910acaeb34da591063903fc868489dbdfb4865d1b9558dd594433d5c19d6cb01e73bfce44f69edf7c1e8eaaba7f497904c425ad379760e603f9701fb9d2388aa74daf4596b817f2133cbe75a67fea8edc4c193cf1046cb98f90d39af3650469bb649c597757b4894a7982baf30405e22d626e0167612548f404be7d08bcab707fcfdf5f6cdaa7b75c200a13ca387302fd7cae94d8d81ff02cb50f97ed0b93e095dd3c883864410f7026ef800c5c35cb9c2df3374e27b2c39c614d007b6f6617a6336ff1a1a93cb256a7e25d7745285e654a474103e5efcac38933c28b7247336873e578c75622730f3d27fc07714171dfb65330f09d2c5ed35625cd7ce87035e1e3a326fbcd2246bd1356aca98c0de3e3126c1ee106339e89f740da9d1d4de81b2e9c1455e9ecaa2a6c389e3a209b9db8c50727f7d5e65c0a5885c3ea2c72bfad9d82a9fc3adc8c62a4478daa045666c6065a83f9993074212306691e62b3d8f441e18944a7a628e88ffe3cefc1e93ada8d3c9c5f3d3d291a37b0b10c85b08831747de05d6d36aa7686271c0542b105f53bde3b8478619a49de67752d0584c506ebea27c65295b6f3edcbf791bb51559c69462f4381f142fc4c9ebd5e073dab5c1f9e67dc55ce70a83ca7f946a735c6a74f3eb19ec70503a57de775e5941fa6a5015f198822f1ac474b128ea5b8374bf8a27dc14bc537d8ddf414178b884186165b4dac78ffff5a9afe87ce163db1ab85f5102a1519e22faabd441ba88bed9334dac4c7447ce47d5003c38d7815e88e55c6f6060332585b177f70184a9efe5f8d50d996a0b12dd10f537ae3c878bbb3a3819ccc89d2e9008de555f0d5f25ca07672b40ed19f2a37ad251f8ceea73d928d7a9efc1e9d85ff6d1b64c0da5b7108ae995b8092fd1dba47a9e16b3155ffb44d5621b578be5439a4e6a6e0ee3ecd5852a48074f49b6a75d708530df5189360122027db2b330c2446c687bf5d95240db939c2bd86f80a3cbc7f0691c164ea6b0dca2006c9019ec27567b9afb6f118b49586aeab8c467f6123b091b1ad59971d22549638f2a7121d6157e2009a3998cd28352ab5268dd5a7ffcc752073c154ddb40a939cd42ac29cbbe7fe033d7c5557dff5e6b1d351cb38d68c1bbb60d1ea53de7c1cc7ad3447a80784c64e00c04851023a3fbd5c25a668993f7b788a8b0fdd16e080ca34cc0f01273521f7cc38ae9c9646a79899ac19a613e491fe7ce3d53fb2e2919514043eb32fedffbda93b9058c02a8ef3e60b47b06ba6ba9ee175f829cdb5c0535579592713cd6ccb98a414ac52cf001df0544bb6deeb7450e444a5935ead277a0d25108b99dd71726fa8f187a2f3aa6c82d15cf4b44502778147d0fe9bf6d522fbc42124736d31131772ed1bdf8bab7e7400ac14499c83bff267f60def74c23323ede1c93f8a25bfb7321e9e080c7b5c8b885e060a2d4f73bbec8e35366e646e3618cfd1f49e8ad328b16cb0fd53716ff2a39b6bd862e144aa7343fca71ea78579d85471b6be01014f807790553e96a4ea9ee08ef319126c07370b41f37ffc8a8394fe835dae560701cc122639648df8c93326a9ffaf0437347de43492a671bcb27bdbc36457ff3a8a6a760a1a76aad612f9828eb7f27b78d291cae51eb73091263e675f2fdcbf043ddfd5857aa74b6004834b697b8db034445357b82dee9c8af0da55d89c33db4a4241e41c0613bbf81a385cbeb1b96a5f1aad3b7e0240f0c90908d1c9101805ddd2f24f7e98f676681f187f69cd55d8626816273a720041233cc83a50fbf07c72febfc049b270e8b6cf8d63b8d193981ad74b9331be30e7a79097ada5cc92edac09e0f9486ef92ceb6641548c51fb2f4b38121c797b1e593b71906610d292119735c328d88356c933cbf83a7821476faf5ae79d9ae4eb76884cfcbb42e6d61aada5a00434761e352217583bfe50d2cecac856aac630cc0062238ccfe190fdb241b48ad5c3297957450d7eb4b2507f13600b74bd5586363e570a59a189137e417c381ae3cd205d748db7cca7019eab55498f4dbceb66fa717f2c1484729e9c847d6df2f0eefed58635360a8169bc2e32572d188197fe98a9d0fd58eb8bacb076139baa05fba99034d6d551b83d6fcab7e652cb1c1d33584acce1794092363a2170067dc3790a721e3278887f183b6f4061b6a3531ff7daebf5dbdf19fd96430508c3c8d33525699c6a79ed8b61eacf096ef3dadf943e441b27af8865c8f9820e47be252efb05269cce3b1da5b0ad565103fe2cd0184c4689ed21acc17903460627e17985a6a65f480210aa03c66f3549d59933d53ba3db8c6b3ae72a2f9cdaa6f77b3406a719a23cf305bff7a74472425cb5f7877ce1d0fed01e62ef6a70528163e0830412931cdb28f6ebe895a226ea48b3445cd74d1de8f721b55004aff4b35615a173f64ff4f33bb252bd8421a2d4b9fa51278394709139b112cde5c1bc68bcc1a4239b0da96ebbc97fe7a37e282848a5669024b3d9225a153cb0e8192ecef4c6275196c47fb84e502de2bc1fe76f65c35e35f167a6fd0f0ccd601b4b17b983a29bbf5a32b2d3052e389ecab600a21fb6fe47d5751532a6734ab69b79f0acdc604358778bb5ac3b402ef1331dd1e5765de560a1fc4649d997766da1a029c850c3bf75838935fc587b8565930d9b61de7274aa44d68e06d999bd4fd0595ce153b6937c4434cfc7f3ad8e747b2bcc26de0a97ae81c673ddad836bcfca3956097820ddd00ad2ab04cac958da10b2e001db4a7e1ee8fe09a52725b12dce6bbcd38fe9b878d3f5823f004f5db3a1d67ebe7bacc068a4c2505616c782344e82d4e48843d01550fcecb59fb765c41e65d41c74307ff9aad24c0179156b08fb21bfa461638833b0812766d927bc3d4e936f785e418213b79136fee563d59f8159a464dc58b44c34c6eedc33198d361d4a7d6ee79c2332bef2db83d05e19c34a7b2d143ec9bbfaf066aaec07f72b87256630d6ffa87d618cd0d5828db581c0286d3f41ecf3205f6a141b78c161168ea911e18a7ff316de6c5d742bd8379482fbd612a425a645aacfad73f97fc6251e3aa063cad52d9627ba8850f7767c12576efe3913e4033893b3a7624219ca291b7c208b5a08a5f0f61c505c9825768bd1dd57b907e254cf25c447460bb5d229789c03b5926cc3bff31caf82ee79e87a8d507b7c753ab0b3688246fe435bd5be2a78c0c4319a80ca4cf721fbbdd301a6cf3570e737fdf834928cc6ad75f764fe01ab210b0858a6c05f81cd6a1e888f78c0ed4346c68e00b57962ac8471b0372059c1232d5d5e2e7f37e1a458278d46e773f7d9b23a308bc0bf406860974c4f46bd4172a476b9a459dfadc988040143a814a15435259c27f913250b8824d2ba973de00fdda4054a2811c611112a848fc232d9c0ca642d1bb370111f307a5910d65f38fc79325a23ee1b1fe5df196cca7cc1982a4c402b19860db370348b37a56e46753fe4af70c963da90f9f13cd98f37cabba6e9db1dc71b747f514db413aadc1edf79b8977a57ff13fc534e1fa57321f9d2f9e50949ff400328eb76769b085cf6b81ca25a80d15f352ef624abc7c6a58964cfca3d517750d51fa226c5872bdcb6811572c2827c161d90966cd49ba991cd6d68f49bf1111f9355030d6a6ee54319976c02c2734e68593bb3029b38336c6fdb9608b6a12f44d033ce59f7def20a05d9cbf627", 0x1000}, {&(0x7f00000045c0)="6a918d69d9adb85841de011705d942d80a61d530612cbe81f7a711cc93671f3ab1a45b0a6d87a75a19968474bafdb9965dd7b5ed454312c5df7c572eb201514d7263eda300d873d420da6610b7fc161ede81cad1e6119852a228c9014ce8a87a13dd89f2c241b86696b4b481d0a39128ceeeab72b39eef1ee0db9c3168cf34a687d2f37c26", 0x85}, {&(0x7f0000004680)="d8f5f11ede3ebf01cec16f4ccee5cb925b9935c4bb36df27fa8c79e2edf2ae60caf5f130865eb86512dd9138", 0x2c}], 0x4, &(0x7f000000b680)=[{0x1068, 0x10f, 0x3, "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"}], 0x1068}}, {{&(0x7f0000005740)=@isdn={0x22, 0x80, 0x2, 0x80, 0x1}, 0x80, &(0x7f0000007d00)=[{&(0x7f00000057c0)="b97d685cbbfacec31bc038222f9160258d372380343c091c0a6cf7aa26bd9a2a577d23bc386ede89dfb620e145e583c94d89550f1a12135bc6b3b79bfb8cdebc85f3c7cc3ed326ab0977d7018fad9f461eec02eb4b31d7715f34a5b3d04f77cdb637be96b3178acc8d113d9fa275a8540aec9b4d937c6204a2fd030982596353ac973cfff0", 0x85}, {&(0x7f0000005880)="f0fef5737c16f9fe49149fb1bbf66abed2d5c19d3db2fe71578ed3d0cd8f534f0cde7e8136441e2f930c424a915fed2807e84c3a6f3f06449b13905790278a4efd0e890d6558877546133874e88bbdf61f12c2d85b8cedbb527e35b46770528c7428433604af205bd046df2d3b707642409527887eff38470edaacc5592092723dac12bbee7551b3a00612ef6ce8e5f4b460d6fac5d832892732d4facad525fdbca9112ef0c8c6d46afacd6e15a975974a7be79893eb698614", 0xb9}, {&(0x7f0000005940)="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", 0x1000}, {&(0x7f0000006940)="568a1ced9fa29a73d01f513770f5697c4e2b53107dc05704af1a0dfb1cdef77375b5a98cae35b20095d76cd6c6123950986cdee1616afbbfcdea0842c1b0335c0fd0a87fc38d4f5cbaac8b13417b23e1493db4c1f44221efcf4a76b3ead732c7eee9c3154b965dce1d67a9db60deb106c5040a64786ddadd7176c1fc31dac2aeb115e4c692310c4b4b0dc723598edfe2ab0e65f18cf90590ca800cdbcdfcd29c49476f7586041ba89adbb20b6af6ebdd45de5b8bfb2cb557a45821e19de75fb0c924a7136317e105a464b84896c8", 0xce}, {&(0x7f0000006a40)="0f980c41d20b38b03fe5c2e18b204e1c39501ffe84a0435ac4ded0b5ad8af4735d10334c4da43ba7fa92d5e6e05f985cfbdeff40eb8fc944f13c607c7782173873a350d4076ed96d4664dd91eb680457f7bd2d43603b02a65963f3283257755b1a3e37cb0a85ff1650a71e3c9aa8441076e0f16aa8e37bf7f69869aae49aa399d1a2624498ff1f3fd2dea6262f4a4f9a4b8c134cca526aadaeeab0e48ea6522208d852fe9b2645afdf02f90f248da2701b6fb5281a3cbd1ee0c3acc7392873b3b9a9ec8df23761a0fffcb83722e4cfc3379ebbf6f1ff0118609f199b5e6cc3b4041744ba4439ef8ee420362c886b53c8659e", 0xf2}, {&(0x7f0000006b40)="d68c969cca92fa425cf6967e982eaa77b9625b484cc078303bddf2ff817666a3c1a59c10800f217b2e0f5d7e7cb26e7d3a8b08195567a159df13c1320576593ce5fb9007d117cc83766e3dcd0b2a9b5ae4fdab8fc53f318c77794d329741e015747a73cead47c89cf6c58f62813dec7d3ef6b6bc585f7c1629770f0505420ff65b74a355de785e4300c0a928ce2a5258", 0x90}, {&(0x7f0000006c00)="aaa0d0a313b3f12eb6bf4105df0bd03e90094f9c90ac997aee5b0ad4a4ce0185bba9078fdc021c07cb948787b19cbc1d1cb5c90b4974250f4ffdd11f23da0aa72723855dfb9638435c396d79dd4ff20d2c123d345a042e0c77f892fd18e0cf4b8e138af1ce265bad781962db1813565737c08114dd8e3058d2c917e35e6d48025799fb6cbdf00e0c7b442a5fb6c30470236ba64e5813e6ec57f10d706b348c25a9eb4d0cf3187856cdf403b68925d566bb25c05e8d3724f11dbd01a20f948a53b2e86ffe2c343f92e5e16e427c5f896264d75b07a9ae6a89e63ed814ec4d25ba59908ed3e8ea12fedf827fc18cc099ba958c", 0xf2}, {&(0x7f0000006d00)="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", 0x1000}], 0x8}}, {{&(0x7f0000007d80)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x80, &(0x7f0000007e40)=[{&(0x7f0000007e00)="077e3be8c9184cda62e9", 0xa}], 0x1, &(0x7f000000a000)=[{0xf8, 0x103, 0x4, "83ddb6170cf15423f99b1cdb87123cfa67422b1c57071e20fe7516b97945665494b68293b505079706ab0ecedc757fe7a5797a58d2d33dc0701b200120803200a0823de435db284e028706a11951ed8224667eead501046764f0745c9e089918fb6a2114dedaa1c66085914c48834697b2b509dee7f3a59a3b89a5e8aea230be91c6aad7e77d8f34639532ad2581363b80334e6e0c66dd751b018a78d96135e0166d646e02c8bf2c717eba1ba36821e96e92d140a874c2ac197cbd15ae3709d7b9ed6a31f75c3c02e0c8b992893188f8eb4c337c464ce070733d905b3dc68ededf89"}, {0xf0, 0x105, 0x6, "ab4a66cd8cbb862ce536b3d615d00fa8b97ec6bfd42861b184abd28306c88c46cda377c84fc1d4a71eff354a6556ae0ee4a05ca9c12387bc65f6949b34671b669805fad3d95539eca7b548e5659ec0ca523502ce41d45d5730124ab59d7a124e0441b91fb6673c049066ed7cc919b0cb2dfcc7dae6d267b309d5b48ccf129c8958d2e5f99112888faf0cfbd280b8a629223434227d2825a2e637b06b2829d22c1e302c1037bb430f346776cd1670c078ad10be6fffae6b9b7f11a26c842662236db661c66702c951993e339be64a8eef95e238c0a45fc865157502"}, {0xe8, 0x105, 0xa3cf, "3235a8d61a5f6f4f2e9b3a5c1a4606461e4123dbae21802debbb98a3d758bcb793d41f2ac754cfaeb62288e6868e05e8fa0c275feae0466a31bf9a86067a24a8dd9e0f670b547468a5f495e9f3eaff4cbb4f68d849a0f707e2495449b080c7cd8b63b7d6a1a82c3bc77461e58217e8bfc34153ede4d9a9936b81dd312b649d9fc48017ef7955eb6762243dfc6c7e48f5e489e618e5f537dd6af62f1d11eebebb27f6b201e6cb15cfbf2779af13a63e95b7a4017e8e87829ea21cd99bf881f87523f82186492bf3ad5130cd92759f78eb5db578551c12"}, {0xb0, 0x109, 0x0, "8378075cf883002c07ce5c318916a82b3a0494217797d773db7aea76ae3eaf59ba103efccf4c66d181663f565def3a286567993d09c784f185691b6daa88536d23935c246627fbe263ccd10608455b8477bf469ee4e3f838cfa0901bb8c6367aaba626a31cff8f7d73087888f1387281e5e07ed8219edea5f09de0e11d6f314b2d2cc3a568a5ddbd95c128ddae8647a940ee7e01317d5377a294011d6c"}, {0xa8, 0x6, 0x0, "28592a560693dde848714787e07cc0238edf2a73ffd1149c472a2fef3dc6f4d9d83a13b852a5ce54b54fc22b1a1d4d641bca9200cfe8004df3dd9c099f3f59dab7a0705eaef94fb10ac0d8959b999730346770e634ce7930dfd8d97f9205e83fd5927579b43d31a31651104719f982dcd31100606fb918c6b5270c844cc7a1ba0ca7fdf7139b5024e70a263968cefc6a97fe"}, {0x110, 0x10c, 0x7f, "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"}, {0x1018, 0x119, 0xfffffffd, "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"}, {0x108, 0x110, 0x5, "c5f88bcec8a3a5c91b4bf6b4c0b1cfd40fbda7f990c94922c89001ddb80ffdea502bf2fc9979d2c87468a5160aa1b1c50253ba1b776f96b4046196a84e0b594c8436c911d5ca43267ccc9bcae2586699b223a1ce28a1928c674ef7ca75b67930dae897f8bff2a265df70126120c0637b196b3bd90c1ca56b72865624d36117fe0cb9da1b37ae7b80c300b745536eae887199753107eaaf414fb7ca934a3e9daf75ea29b6a86a12048a0207df30348b8488f386ce4c281b6ebbfabfe02fb73b8a955e61f71f8927d7b4337aa600febf33fbfbf456f12a792bc808cec7cbd907efd5df5d67ea4fcae148c826acb73439ba68d3"}, {0x10, 0x3a, 0x9}], 0x1668}}, {{&(0x7f0000009540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000009900)=[{&(0x7f00000095c0)="72d35930260648c216d7aeb56b446d28fcd2e3313ad11385c53a0f4fa24fa792d090a6476accfe26949552ee4c4a8142ab72a22da9e83dd1a5968d22f5f8255b2bed4b6caeb989eb31acaa487ae0dace2195d08121fe73a46143090625e7ccd78a2f9be2d8d2489bf6f174e0fa7aa6a43529ff132eaed587d4389368f5135008e251535998d4fd19071489aa12e5631b84af12d4b948c654e0b3", 0x9a}, {&(0x7f0000009680)="9fbfb4949fad5dcb257d4c83cfe826ea303b7c06a9b5404fd0988384761f402e1dc5f8921ff238e24e1bca020b430db91acd586f4897b06159caa860cde44cf9ffa08de21715fc0b8030c2d85eac61fe95", 0x51}, {&(0x7f0000009700)="ce0827afd55cf65be68f9e67cb62cbe71871a379560e5a7cb2af5a7d55c0420170b133a542e8", 0x26}, {&(0x7f00000032c0)="5782caed5d9977c9155c288f5ee20a53845267f436e3365882e002b50600885df8ff010c4b4a5f75ccbf76d3a166f40c91d4bf0326d4e0490d1148e2b9868c7ccfdff4a077b226724e13d52647a0200b3872fe7cd63657026469d7ec77754620789f899ce37b6f9751492ea5825921200b9ea1652bab2ef419b3580fe65baa5cf3b2420ebaab7337bfb8d75d073a71fdacf9e691099fe0e2e31ea62d5d6647d9af46462cf91655d975fb3b4813b7733dca8fa89d6022a8776aa4f9b49d2e1894668d8c1d30c6857fdabe531ae832f6efbea757c8251e8b1543759e94235d85e74091bf9b686470d4a20f314f107d833329a1353e28ca95623af852b5389f450577d77970730b28a180a0a8896c2a828eb992589d72d997ae42c7fcf358c630b27fc15bbf8e1eb123919d2ab0732e10ec773c73da6efc23ca906d4100d0bd1926ff41351e75", 0x145}, {&(0x7f0000009d40)="c73aef12a4c4a929c59fdb296a032b9a980367449f65b50511c58ef0deb71b7f4d273952a95cf2589be5d74a775e018b9a0e30fcddb34dc068d4015ac861aeaa108829d97be254b8ea10486fa46a85d3c0b2ae2ff1c94d067aa1703c897ddb2ef2451c5aaf5ad9fcc6a7947a779d72d8087470c946cc6cc5d3ad0936ac80fb30680a367d9c", 0x85}, {&(0x7f0000009840)="9363fe035c34974708e5122343281ff641568436331037ddb4c485bba4582a2b798740ed967baa4235fcf62c1ea37a2b681d67f21d7afe0778fbfc10aad22c0ec251e93287a4988074a6a08ba14a10f700d721ed5189746acc5d6c3a2ebedd060d3d474525c7d8668d78190020d3da76dc26ead07cfceafd758011c437bbbb0f2b35c98b908fe27f08aea8b0ea", 0x8d}], 0x6, &(0x7f0000009980)=[{0x50, 0x1, 0x3, "430437520690f8ef3558a23ddc4b2b71aff642148684a58e40663923358003560dd954082bebd8097dccf3183885fbbdac1c26cc70d5827ff40cd57a53823fd5"}, {0xe0, 0x104, 0x8, "25b035f08efcdc03c239974c2b079a926afe63a05e15b37b264ebedfb6e0f5fadc0a372ccc4d1dcf1d0038c5410d63597f13df7042bf2600f23fdc4d76aa140bb28358f9afbab786d900005b7880ff71bd923dde4780783b4f2882247c7bc78ce46a947fac237f8b75d517319d06cff6373f293a3f39fe1535754c5bf1d57774a5a5486415ef6e0dae9f90c1be6466f5f52c850a38f259b52891a628f61489b605cbceef595ce71d15dad495976fdc89e21f9590bfc6e757f0f1aa65eb93b8658c1239c34f1d67f3d994"}, {0xd8, 0x117, 0x1, "639c14284c516e023755e8bdbcf96536f1b58ab21c3de02680e57e03942d074b29c066d6e2c5a8993f86ab8fa5d8e29722a48b3e45e0939114bda9f7174dea889aeaef349ea810e2c38a08252d792e607d126373e4fb5019a7178f9f0b653310a7afa2d6b92d48a86aac92361a31c20e610b0d2c7b93b019d7f38643fef79fb3a80994b34d80957ad316f2d8793203072514ed3d0efd32b8d1fc77f8f5eea1111b5a420c1fd9d31b8ed29e17ff1c524c7d6758f5578cf9828e010d5528692b04086e1a"}, {0x38, 0x107, 0x1, "b229db6d851e46f999467013902f00c7df9a2c88f6df66c4061d3c075dfd88bf2132"}], 0x240}}], 0x6, 0x8000) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000009f00)=@get={0x1, &(0x7f0000009e00)=""/216, 0x7}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x1, 0x0, 0x0) shutdown(r0, 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) [ 633.485749][ T26] audit: type=1804 audit(1643637297.979:40): pid=16706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir764867108/syzkaller.DKus3c/94/bus" dev="sda1" ino=1183 res=1 errno=0 13:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac0000"], 0x1c}}, 0x0) [ 633.551613][T16707] bond18 (uninitialized): Released all slaves 13:54:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:58 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 633.622469][ T26] audit: type=1800 audit(1643637297.999:41): pid=16706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 633.724764][T16678] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 633.733069][T16678] Memory cgroup stats for /syz4: [ 633.733258][T16678] anon 32768 [ 633.733258][T16678] file 61440 [ 633.733258][T16678] kernel_stack 0 [ 633.733258][T16678] pagetables 8192 [ 633.733258][T16678] percpu 0 [ 633.733258][T16678] sock 0 [ 633.733258][T16678] vmalloc 0 [ 633.733258][T16678] shmem 61440 [ 633.733258][T16678] file_mapped 61440 [ 633.733258][T16678] file_dirty 0 [ 633.733258][T16678] file_writeback 0 [ 633.733258][T16678] swapcached 0 [ 633.733258][T16678] anon_thp 0 [ 633.733258][T16678] file_thp 0 [ 633.733258][T16678] shmem_thp 0 [ 633.733258][T16678] inactive_anon 32768 [ 633.733258][T16678] active_anon 61440 [ 633.733258][T16678] inactive_file 0 [ 633.733258][T16678] active_file 0 [ 633.733258][T16678] unevictable 0 [ 633.733258][T16678] slab_reclaimable 97928 [ 633.733258][T16678] slab_unreclaimable 186968 [ 633.733258][T16678] slab 284896 [ 633.733258][T16678] workingset_refault_anon 0 [ 633.733258][T16678] workingset_refault_file 0 [ 633.733258][T16678] workingset_activate_anon 0 [ 633.781489][T16726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.831855][T16678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16678,uid=0 [ 633.878333][T16678] Memory cgroup out of memory: Killed process 16678 (syz-executor.4) total-vm:56676kB, anon-rss:364kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 633.902815][ T28] oom_reaper: reaped process 16678 (syz-executor.4), now anon-rss:0kB, file-rss:13544kB, shmem-rss:0kB [ 633.919287][T16726] device veth45 entered promiscuous mode [ 633.935058][T16728] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac0000"], 0x1c}}, 0x0) 13:54:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:58 executing program 1: process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) 13:54:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x440408d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) 13:54:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:54:58 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 634.152024][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 634.188060][ T26] audit: type=1804 audit(1643637298.759:42): pid=16735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir764867108/syzkaller.DKus3c/95/bus" dev="sda1" ino=1153 res=1 errno=0 13:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac000010"], 0x1c}}, 0x0) 13:54:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) [ 634.248037][T16740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0080000640001002dbd", @ANYBLOB="f2fff3ff080005"], 0x8a0}}, 0x0) [ 634.299756][ T26] audit: type=1800 audit(1643637298.779:43): pid=16735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1153 res=0 errno=0 [ 634.442827][T16740] device veth47 entered promiscuous mode 13:54:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac000010"], 0x1c}}, 0x0) 13:54:59 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) [ 634.487673][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 634.612687][T16750] netlink: 2172 bytes leftover after parsing attributes in process `syz-executor.1'. 13:54:59 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x24}}, 0x0) 13:54:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8993, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 13:54:59 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:54:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e000d0000003ccdaa6525ba49ac000010"], 0x1c}}, 0x0) [ 634.801705][T16760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 634.901398][T16760] device veth49 entered promiscuous mode [ 634.940766][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:54:59 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r1, r2, 0x0, 0x10000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x440408d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000180)) [ 635.208890][ T26] audit: type=1804 audit(1643637299.779:44): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir764867108/syzkaller.DKus3c/96/bus" dev="sda1" ino=1162 res=1 errno=0 [ 635.312545][ T26] audit: type=1800 audit(1643637299.779:45): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1162 res=0 errno=0 [ 635.572253][ T1022] device hsr_slave_0 left promiscuous mode [ 635.589416][ T1022] device hsr_slave_1 left promiscuous mode [ 635.616756][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.643274][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.677601][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.701290][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.735367][ T1022] device bridge_slave_1 left promiscuous mode [ 635.763174][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.793863][ T1022] device bridge_slave_0 left promiscuous mode [ 635.817398][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.882109][ T1022] device veth1_macvtap left promiscuous mode [ 635.902626][ T1022] device veth0_macvtap left promiscuous mode [ 635.924454][ T1022] device veth1_vlan left promiscuous mode [ 635.944415][ T1022] device veth0_vlan left promiscuous mode [ 636.321840][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 636.340660][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 636.357856][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.375535][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.442289][ T1022] bond0 (unregistering): Released all slaves [ 638.468414][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 638.478602][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 638.486650][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 638.495295][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 638.503423][ T3644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 638.510800][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 638.600690][T16773] chnl_net:caif_netlink_parms(): no params data found [ 638.646180][T16773] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.653378][T16773] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.662068][T16773] device bridge_slave_0 entered promiscuous mode [ 638.671060][T16773] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.678754][T16773] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.687237][T16773] device bridge_slave_1 entered promiscuous mode [ 638.707786][T16773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.720046][T16773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.744584][T16773] team0: Port device team_slave_0 added [ 638.752420][T16773] team0: Port device team_slave_1 added [ 638.773201][T16773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.780433][T16773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.806959][T16773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.828445][T16773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.835384][T16773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.862534][T16773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.892693][T16773] device hsr_slave_0 entered promiscuous mode [ 638.899430][T16773] device hsr_slave_1 entered promiscuous mode [ 638.906085][T16773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.914594][T16773] Cannot create hsr debugfs directory [ 638.981660][T16773] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.988775][T16773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.996273][T16773] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.003369][T16773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.052973][T16773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.067532][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.076728][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.084579][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.093472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 639.107439][T16773] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.119394][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.129023][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.136184][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.148473][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.158114][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.165240][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.188207][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.196733][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.210415][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.218285][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.233762][T16773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.245086][T16773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 639.260625][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.283432][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 639.290969][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 639.301332][T16773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.546270][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.564854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.574939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.583346][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.592824][T16773] device veth0_vlan entered promiscuous mode [ 639.609091][T16773] device veth1_vlan entered promiscuous mode [ 639.628945][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 639.637753][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.649016][T16773] device veth0_macvtap entered promiscuous mode [ 639.660717][T16773] device veth1_macvtap entered promiscuous mode [ 639.680992][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 639.695940][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.706137][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 639.717054][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.727143][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 639.737930][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.748567][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 639.759253][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.769412][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 639.785828][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.797182][T16773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.806765][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 639.814778][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 639.822930][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 639.831529][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.844534][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 639.855189][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.865610][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 639.876372][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.892124][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 639.903665][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.914824][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 639.925464][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.935515][T16773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 639.946989][T16773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.959037][T16773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.969613][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 639.979218][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.041913][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.069644][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.072236][ T7796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.086520][ T7796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.100136][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 640.110224][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 640.375581][T16792] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 640.387835][T16792] CPU: 1 PID: 16792 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 640.396630][T16792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.406692][T16792] Call Trace: [ 640.409960][T16792] [ 640.412883][T16792] dump_stack_lvl+0x201/0x2d8 [ 640.417562][T16792] ? show_regs_print_info+0x12/0x12 [ 640.422753][T16792] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 640.428474][T16792] ? lockdep_hardirqs_on+0x95/0x140 [ 640.433683][T16792] ? asan.module_dtor+0x20/0x20 [ 640.438534][T16792] dump_header+0xdb/0x970 [ 640.442874][T16792] oom_kill_process+0xf5/0x4e0 [ 640.447630][T16792] out_of_memory+0x711/0xa70 [ 640.452205][T16792] ? preempt_schedule+0x16b/0x190 [ 640.457213][T16792] ? unregister_oom_notifier+0x20/0x20 [ 640.462698][T16792] ? lockdep_hardirqs_on+0x95/0x140 [ 640.467914][T16792] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 640.473445][T16792] ? preempt_schedule_thunk+0x16/0x18 [ 640.478803][T16792] ? mem_cgroup_oom_trylock+0x220/0x220 [ 640.484343][T16792] ? cgroup_file_notify+0x123/0x190 [ 640.489529][T16792] memory_max_write+0x364/0x4f0 [ 640.494372][T16792] ? memory_max_show+0xa0/0xa0 [ 640.499120][T16792] ? read_lock_is_recursive+0x10/0x10 [ 640.504475][T16792] ? memory_max_show+0xa0/0xa0 [ 640.509222][T16792] cgroup_file_write+0x2a4/0x780 [ 640.514262][T16792] ? cgroup_seqfile_stop+0xd0/0xd0 [ 640.519486][T16792] ? cgroup_seqfile_stop+0xd0/0xd0 [ 640.524583][T16792] kernfs_fop_write_iter+0x3b6/0x510 [ 640.529861][T16792] vfs_write+0xb11/0xe90 [ 640.534099][T16792] ? file_end_write+0x230/0x230 [ 640.538958][T16792] ? mutex_lock_nested+0x1a/0x20 [ 640.543900][T16792] ? __fdget_pos+0x24e/0x2f0 [ 640.548471][T16792] ? ksys_write+0x77/0x2c0 [ 640.552879][T16792] ksys_write+0x18f/0x2c0 [ 640.557196][T16792] ? print_irqtrace_events+0x220/0x220 [ 640.562662][T16792] ? __ia32_sys_read+0x80/0x80 [ 640.567420][T16792] ? lockdep_hardirqs_on+0x95/0x140 [ 640.572603][T16792] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 640.578664][T16792] do_syscall_64+0x44/0xd0 [ 640.583067][T16792] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 640.588945][T16792] RIP: 0033:0x7f326cdba059 [ 640.593344][T16792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 640.613022][T16792] RSP: 002b:00007f326b72f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.621423][T16792] RAX: ffffffffffffffda RBX: 00007f326ceccf60 RCX: 00007f326cdba059 [ 640.629382][T16792] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 640.637342][T16792] RBP: 00007f326ce1408d R08: 0000000000000000 R09: 0000000000000000 [ 640.645364][T16792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.653340][T16792] R13: 00007fff38268e7f R14: 00007f326b72f300 R15: 0000000000022000 [ 640.661317][T16792] [ 640.693817][T14286] Bluetooth: hci3: command 0x0409 tx timeout [ 640.695968][T16792] memory: usage 2696kB, limit 32kB, failcnt 1083 [ 640.717603][T16792] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 640.724923][T16792] Memory cgroup stats for /syz4: [ 640.727305][T16792] anon 2207744 [ 640.727305][T16792] file 61440 [ 640.727305][T16792] kernel_stack 65536 [ 640.727305][T16792] pagetables 94208 [ 640.727305][T16792] percpu 0 [ 640.727305][T16792] sock 0 [ 640.727305][T16792] vmalloc 0 [ 640.727305][T16792] shmem 61440 [ 640.727305][T16792] file_mapped 61440 [ 640.727305][T16792] file_dirty 0 [ 640.727305][T16792] file_writeback 0 [ 640.727305][T16792] swapcached 0 [ 640.727305][T16792] anon_thp 2097152 [ 640.727305][T16792] file_thp 0 [ 640.727305][T16792] shmem_thp 0 [ 640.727305][T16792] inactive_anon 2207744 [ 640.727305][T16792] active_anon 61440 [ 640.727305][T16792] inactive_file 0 [ 640.727305][T16792] active_file 0 [ 640.727305][T16792] unevictable 0 [ 640.727305][T16792] slab_reclaimable 97928 [ 640.727305][T16792] slab_unreclaimable 201616 [ 640.727305][T16792] slab 299544 [ 640.727305][T16792] workingset_refault_anon 0 [ 640.727305][T16792] workingset_refault_file 0 [ 640.727305][T16792] workingset_activate_anon 0 [ 640.846895][T16792] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16791,uid=0 [ 640.874613][T16792] Memory cgroup out of memory: Killed process 16791 (syz-executor.4) total-vm:60648kB, anon-rss:2428kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 640.897985][ T28] oom_reaper: reaped process 16791 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:55:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0080000640001002dbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="f2fff3ff08000500e0ff0800060005007f7b00000b000100666c6f7765720000100002000a000500000000ff00ff00000600050000ad000008000b"], 0x8a0}}, 0x0) 13:55:05 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='mounts\x00') 13:55:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 13:55:05 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8911, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 13:55:05 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') write$uinput_user_dev(r0, 0x0, 0x0) [ 641.025498][T16773] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 641.040375][T16799] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:05 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 641.103117][T16773] CPU: 1 PID: 16773 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 641.111926][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.121997][T16773] Call Trace: [ 641.125292][T16773] [ 641.128233][T16773] dump_stack_lvl+0x201/0x2d8 [ 641.132931][T16773] ? show_regs_print_info+0x12/0x12 [ 641.138138][T16773] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 641.143858][T16773] ? do_raw_spin_lock+0x151/0x8e0 [ 641.148881][T16773] ? asan.module_dtor+0x20/0x20 [ 641.153727][T16773] dump_header+0xdb/0x970 [ 641.158053][T16773] oom_kill_process+0xf5/0x4e0 [ 641.162808][T16773] out_of_memory+0x711/0xa70 [ 641.167394][T16773] ? unregister_oom_notifier+0x20/0x20 [ 641.172853][T16773] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 641.178390][T16773] ? __lock_acquire+0x2b00/0x2b00 [ 641.183409][T16773] ? mem_cgroup_oom_trylock+0x220/0x220 [ 641.188950][T16773] ? do_raw_spin_unlock+0x134/0x8a0 [ 641.194141][T16773] ? mem_cgroup_iter+0x3c9/0x530 [ 641.199070][T16773] mem_cgroup_oom+0x4ad/0x620 [ 641.203783][T16773] try_charge_memcg+0xd37/0x1010 [ 641.208713][T16773] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 641.214705][T16773] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 641.220508][T16773] ? rcu_lock_acquire+0x30/0x30 [ 641.225349][T16773] ? __lock_acquire+0x2b00/0x2b00 [ 641.230472][T16773] obj_cgroup_charge+0x1b2/0x420 [ 641.235401][T16773] ? mod_objcg_mlstate+0x330/0x330 [ 641.240516][T16773] kmem_cache_alloc+0xbd/0x310 [ 641.245271][T16773] ? ext4_alloc_inode+0x1d/0x570 [ 641.250193][T16773] ? do_raw_spin_unlock+0x134/0x8a0 [ 641.255388][T16773] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 641.261356][T16773] ext4_alloc_inode+0x1d/0x570 [ 641.266105][T16773] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 641.272075][T16773] iget_locked+0x195/0x810 [ 641.276485][T16773] __ext4_iget+0x262/0x4e30 [ 641.281005][T16773] ? ext4_get_projid+0x140/0x140 [ 641.285954][T16773] ? rcu_read_lock_sched_held+0x89/0x130 [ 641.291609][T16773] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 641.297618][T16773] ? ext4_lookup+0x484/0xb90 [ 641.302214][T16773] ? trace_kfree+0x2e/0xd0 [ 641.306627][T16773] ? kfree+0x2f/0x2e0 [ 641.310602][T16773] ? ext4_lookup+0x38f/0xb90 [ 641.315323][T16773] ext4_lookup+0x732/0xb90 [ 641.319771][T16773] ? ext4_add_entry+0x4210/0x4210 [ 641.324800][T16773] ? d_alloc_parallel+0x1478/0x15c0 [ 641.330003][T16773] ? lockdep_init_map_type+0x9f/0x9b0 [ 641.335389][T16773] ? __init_waitqueue_head+0x68/0xd0 [ 641.340670][T16773] __lookup_slow+0x27f/0x3d0 [ 641.345261][T16773] ? lookup_one_len+0x2c0/0x2c0 [ 641.350116][T16773] ? up_read_non_owner+0x1c0/0x1c0 [ 641.355212][T16773] ? bpf_lsm_inode_permission+0x5/0x10 [ 641.360757][T16773] walk_component+0x516/0x790 [ 641.365441][T16773] ? try_to_unlazy+0xce0/0xce0 [ 641.370196][T16773] ? path_init+0x11f0/0x11f0 [ 641.374787][T16773] path_lookupat+0x19d/0x6c0 [ 641.379377][T16773] filename_lookup+0x270/0x640 [ 641.384132][T16773] ? hashlen_string+0x110/0x110 [ 641.388966][T16773] ? __might_fault+0xb6/0x110 [ 641.393662][T16773] ? strncpy_from_user+0x1f6/0x350 [ 641.398763][T16773] ? getname_flags+0x1fe/0x650 [ 641.403522][T16773] user_path_at_empty+0x40/0x1a0 [ 641.408453][T16773] __x64_sys_umount+0xf0/0x170 [ 641.413206][T16773] ? path_umount+0xfc0/0xfc0 [ 641.417800][T16773] ? lockdep_hardirqs_on+0x95/0x140 [ 641.423016][T16773] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 641.428994][T16773] do_syscall_64+0x44/0xd0 [ 641.433412][T16773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 641.439323][T16773] RIP: 0033:0x7f326cdbb4c7 [ 641.443826][T16773] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 641.463722][T16773] RSP: 002b:00007fff38267fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 641.472131][T16773] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f326cdbb4c7 [ 641.480090][T16773] RDX: 00007fff382680ac RSI: 000000000000000a RDI: 00007fff382680a0 [ 641.488050][T16773] RBP: 00007fff382680a0 R08: 00000000ffffffff R09: 00007fff38267e70 [ 641.496009][T16773] R10: 000055555579c87b R11: 0000000000000246 R12: 00007f326ce131ea 13:55:06 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000011c0)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) [ 641.504078][T16773] R13: 00007fff38269160 R14: 000055555579c810 R15: 00007fff382691a0 [ 641.512058][T16773] 13:55:06 executing program 5: setgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) setregid(0xffffffffffffffff, 0xffffffffffffffff) [ 641.547757][T16799] device veth51 entered promiscuous mode 13:55:06 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$input_event(r0, 0x0, 0x0) [ 641.592283][T16800] netlink: 2120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 641.627653][T16773] memory: usage 408kB, limit 32kB, failcnt 1102 13:55:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) [ 641.688714][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 641.705898][T16773] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 641.715614][T16773] Memory cgroup stats for /syz4: [ 641.717629][T16773] anon 40960 [ 641.717629][T16773] file 61440 [ 641.717629][T16773] kernel_stack 0 [ 641.717629][T16773] pagetables 8192 [ 641.717629][T16773] percpu 0 [ 641.717629][T16773] sock 0 [ 641.717629][T16773] vmalloc 0 [ 641.717629][T16773] shmem 61440 [ 641.717629][T16773] file_mapped 61440 [ 641.717629][T16773] file_dirty 0 [ 641.717629][T16773] file_writeback 0 [ 641.717629][T16773] swapcached 0 [ 641.717629][T16773] anon_thp 0 [ 641.717629][T16773] file_thp 0 [ 641.717629][T16773] shmem_thp 0 [ 641.717629][T16773] inactive_anon 40960 [ 641.717629][T16773] active_anon 61440 [ 641.717629][T16773] inactive_file 0 [ 641.717629][T16773] active_file 0 [ 641.717629][T16773] unevictable 0 [ 641.717629][T16773] slab_reclaimable 98312 [ 641.717629][T16773] slab_unreclaimable 197512 [ 641.717629][T16773] slab 295824 [ 641.717629][T16773] workingset_refault_anon 0 [ 641.717629][T16773] workingset_refault_file 0 [ 641.717629][T16773] workingset_activate_anon 0 [ 641.830277][T16808] bond21 (uninitialized): Released all slaves [ 641.844591][T16773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16773,uid=0 [ 641.885944][T16773] Memory cgroup out of memory: Killed process 16773 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14528kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 641.924913][ T28] oom_reaper: reaped process 16773 (syz-executor.4), now anon-rss:0kB, file-rss:13656kB, shmem-rss:0kB 13:55:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:06 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 13:55:06 executing program 1: sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x0) r0 = socket(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000400)=[{{&(0x7f00000000c0)=@abs, 0x6e, 0x0}}], 0x1, 0xc084) 13:55:06 executing program 5: syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x0) 13:55:06 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:06 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) 13:55:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000600), 0x4) 13:55:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x1}}], 0x1, 0x0) 13:55:06 executing program 1: r0 = socket(0xa, 0x3, 0x4) bind$vsock_stream(r0, 0x0, 0x0) [ 642.077652][T16826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.150553][T16826] device veth53 entered promiscuous mode 13:55:06 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 13:55:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:06 executing program 5: openat$hwrng(0xffffffffffffff9c, 0x0, 0x216820, 0x0) 13:55:06 executing program 3: r0 = socket(0x2, 0x2, 0x0) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) 13:55:06 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) [ 642.308487][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) [ 642.357333][T16835] bond21 (uninitialized): Released all slaves 13:55:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x40}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 13:55:07 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:07 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) [ 642.486790][ T26] audit: type=1804 audit(1643637307.059:46): pid=16846 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir804012535/syzkaller.a3LuL4/911/bus" dev="sda1" ino=1170 res=1 errno=0 13:55:07 executing program 3: r0 = socket(0xa, 0x3, 0x4) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000040)) 13:55:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 13:55:07 executing program 5: r0 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:55:07 executing program 3: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) [ 642.651416][T16855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.824552][T16855] device veth55 entered promiscuous mode [ 642.850073][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.885946][T16862] bond21 (uninitialized): Released all slaves [ 643.316765][ T54] device hsr_slave_0 left promiscuous mode [ 643.326131][ T54] device hsr_slave_1 left promiscuous mode [ 643.344026][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.364237][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.378093][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.395825][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.417988][ T54] device bridge_slave_1 left promiscuous mode [ 643.424232][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.434521][ T54] device bridge_slave_0 left promiscuous mode [ 643.441763][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.459315][ T54] device veth1_macvtap left promiscuous mode [ 643.465653][ T54] device veth0_macvtap left promiscuous mode [ 643.472422][ T54] device veth1_vlan left promiscuous mode [ 643.478755][ T54] device veth0_vlan left promiscuous mode [ 643.694046][ T54] team0 (unregistering): Port device team_slave_1 removed [ 643.707936][ T54] team0 (unregistering): Port device team_slave_0 removed [ 643.720514][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.736379][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.801782][ T54] bond0 (unregistering): Released all slaves [ 647.905883][ T3644] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 652.776016][ T3644] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 655.588789][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 655.597966][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 655.607608][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 655.617357][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 655.624891][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 655.632248][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 655.719777][T16872] chnl_net:caif_netlink_parms(): no params data found [ 655.761232][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.768603][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.776930][T16872] device bridge_slave_0 entered promiscuous mode [ 655.784849][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.792172][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.800404][T16872] device bridge_slave_1 entered promiscuous mode [ 655.822573][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.834041][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.860623][T16872] team0: Port device team_slave_0 added [ 655.867997][T16872] team0: Port device team_slave_1 added [ 655.889588][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.896811][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.923383][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.935595][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.942986][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.970367][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.000928][T16872] device hsr_slave_0 entered promiscuous mode [ 656.007641][T16872] device hsr_slave_1 entered promiscuous mode [ 656.014119][T16872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.021847][T16872] Cannot create hsr debugfs directory [ 656.089705][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.096934][T16872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.104215][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.111351][T16872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.165028][T16872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.178081][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 656.186931][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.194484][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.204338][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 656.221882][T16872] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.235100][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 656.243781][T14403] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.250876][T14403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.268847][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 656.277877][T14403] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.284939][T14403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.305498][T16872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 656.318878][T16872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.337232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 656.346147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 656.354451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 656.363701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.372189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.380343][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.400178][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.407766][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.423435][T16872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.667651][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 656.687078][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 656.695454][T16872] device veth0_vlan entered promiscuous mode [ 656.707871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 656.715546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 656.726609][T16872] device veth1_vlan entered promiscuous mode [ 656.747636][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 656.756721][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 656.767354][T16872] device veth0_macvtap entered promiscuous mode [ 656.777301][T16872] device veth1_macvtap entered promiscuous mode [ 656.797016][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 656.808608][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.819388][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 656.830565][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.840526][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 656.851522][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.861614][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 656.872255][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.882147][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 656.892787][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.904496][T16872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.913058][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 656.921378][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 656.929834][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 656.938692][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 656.951237][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 656.962213][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.972187][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 656.982644][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.992743][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 657.003656][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.018747][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 657.029249][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.039205][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 657.051599][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.062806][T16872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.074168][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 657.085288][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 657.151296][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.163054][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.183406][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 657.185145][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.199009][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.210296][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 657.412582][T16891] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 657.424081][T16891] CPU: 0 PID: 16891 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 657.432875][T16891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.443305][T16891] Call Trace: [ 657.446582][T16891] [ 657.449515][T16891] dump_stack_lvl+0x201/0x2d8 [ 657.454204][T16891] ? show_regs_print_info+0x12/0x12 [ 657.459397][T16891] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 657.465107][T16891] ? do_raw_spin_lock+0x151/0x8e0 [ 657.470125][T16891] ? asan.module_dtor+0x20/0x20 [ 657.474998][T16891] dump_header+0xdb/0x970 [ 657.479315][T16891] oom_kill_process+0xf5/0x4e0 [ 657.484073][T16891] out_of_memory+0x711/0xa70 [ 657.488661][T16891] ? unregister_oom_notifier+0x20/0x20 [ 657.494125][T16891] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 657.500299][T16891] ? __lock_acquire+0x2b00/0x2b00 [ 657.505352][T16891] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 657.510916][T16891] ? mem_cgroup_oom_trylock+0x220/0x220 [ 657.516496][T16891] ? cgroup_file_notify+0x123/0x190 [ 657.521707][T16891] memory_max_write+0x364/0x4f0 [ 657.526562][T16891] ? memory_max_show+0xa0/0xa0 [ 657.531342][T16891] ? read_lock_is_recursive+0x10/0x10 [ 657.536733][T16891] ? memory_max_show+0xa0/0xa0 [ 657.541485][T16891] cgroup_file_write+0x2a4/0x780 [ 657.546427][T16891] ? cgroup_seqfile_stop+0xd0/0xd0 [ 657.551549][T16891] ? __check_object_size+0x7a/0x340 [ 657.556762][T16891] ? cgroup_seqfile_stop+0xd0/0xd0 [ 657.561864][T16891] kernfs_fop_write_iter+0x3b6/0x510 [ 657.567155][T16891] vfs_write+0xb11/0xe90 [ 657.571423][T16891] ? file_end_write+0x230/0x230 [ 657.576296][T16891] ? mutex_lock_nested+0x1a/0x20 [ 657.581419][T16891] ? __fdget_pos+0x24e/0x2f0 [ 657.586109][T16891] ? ksys_write+0x77/0x2c0 [ 657.590552][T16891] ksys_write+0x18f/0x2c0 [ 657.594898][T16891] ? __ia32_sys_read+0x80/0x80 [ 657.599648][T16891] ? syscall_enter_from_user_mode+0x38/0x1b0 [ 657.605626][T16891] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 657.611618][T16891] do_syscall_64+0x44/0xd0 [ 657.616138][T16891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 657.622020][T16891] RIP: 0033:0x7f1cc5b40059 [ 657.626432][T16891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 657.646057][T16891] RSP: 002b:00007f1cc44b5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 657.654502][T16891] RAX: ffffffffffffffda RBX: 00007f1cc5c52f60 RCX: 00007f1cc5b40059 [ 657.656192][T14286] Bluetooth: hci3: command 0x0409 tx timeout [ 657.662548][T16891] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 657.662565][T16891] RBP: 00007f1cc5b9a08d R08: 0000000000000000 R09: 0000000000000000 [ 657.662578][T16891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.662591][T16891] R13: 00007ffd8ed70d0f R14: 00007f1cc44b5300 R15: 0000000000022000 [ 657.662626][T16891] [ 657.692266][T16891] memory: usage 2660kB, limit 32kB, failcnt 1119 [ 657.712659][T16891] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 657.721505][T16891] Memory cgroup stats for /syz4: [ 657.723319][T16891] anon 2207744 [ 657.723319][T16891] file 65536 [ 657.723319][T16891] kernel_stack 65536 [ 657.723319][T16891] pagetables 94208 [ 657.723319][T16891] percpu 0 [ 657.723319][T16891] sock 0 [ 657.723319][T16891] vmalloc 0 [ 657.723319][T16891] shmem 61440 [ 657.723319][T16891] file_mapped 61440 [ 657.723319][T16891] file_dirty 4096 [ 657.723319][T16891] file_writeback 0 [ 657.723319][T16891] swapcached 0 [ 657.723319][T16891] anon_thp 2097152 [ 657.723319][T16891] file_thp 0 [ 657.723319][T16891] shmem_thp 0 [ 657.723319][T16891] inactive_anon 2129920 [ 657.723319][T16891] active_anon 61440 [ 657.723319][T16891] inactive_file 0 [ 657.723319][T16891] active_file 0 [ 657.723319][T16891] unevictable 0 [ 657.723319][T16891] slab_reclaimable 70872 [ 657.723319][T16891] slab_unreclaimable 159488 [ 657.723319][T16891] slab 230360 [ 657.723319][T16891] workingset_refault_anon 0 [ 657.723319][T16891] workingset_refault_file 0 [ 657.833491][T16891] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16890,uid=0 [ 657.856942][T16891] Memory cgroup out of memory: Killed process 16890 (syz-executor.4) total-vm:60648kB, anon-rss:2428kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 657.895083][ T28] oom_reaper: reaped process 16890 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:55:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:22 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000740)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x1}}], 0x1, 0x0) 13:55:22 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) 13:55:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) 13:55:22 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x10300, 0x0) 13:55:22 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:22 executing program 5: r0 = socket(0x11, 0x2, 0x0) bind$vsock_stream(r0, 0x0, 0x0) [ 658.039343][T16900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 658.073399][T16872] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 658.089095][T16872] CPU: 0 PID: 16872 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 658.097904][T16872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.107972][T16872] Call Trace: [ 658.111361][T16872] [ 658.114301][T16872] dump_stack_lvl+0x201/0x2d8 [ 658.119007][T16872] ? show_regs_print_info+0x12/0x12 [ 658.124230][T16872] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 658.129977][T16872] ? do_raw_spin_lock+0x151/0x8e0 [ 658.135022][T16872] ? asan.module_dtor+0x20/0x20 13:55:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@updsa={0x1d4, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2}, @in6=@mcast2}, [@sa={0xc, 0x6, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2}, @in6=@mcast2}}]}, 0x1d4}}, 0x0) 13:55:22 executing program 1: io_uring_setup(0x3afe, &(0x7f0000000300)={0x0, 0x8d91}) io_uring_setup(0x3a49, &(0x7f0000000000)) [ 658.139900][T16872] dump_header+0xdb/0x970 [ 658.144260][T16872] oom_kill_process+0xf5/0x4e0 [ 658.149053][T16872] out_of_memory+0x711/0xa70 [ 658.153758][T16872] ? unregister_oom_notifier+0x20/0x20 [ 658.159244][T16872] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 658.164812][T16872] ? __lock_acquire+0x2b00/0x2b00 [ 658.169950][T16872] ? mem_cgroup_oom_trylock+0x220/0x220 [ 658.175518][T16872] ? do_raw_spin_unlock+0x134/0x8a0 [ 658.180736][T16872] ? mem_cgroup_iter+0x3c9/0x530 [ 658.185693][T16872] mem_cgroup_oom+0x4ad/0x620 [ 658.190394][T16872] try_charge_memcg+0xd37/0x1010 [ 658.195346][T16872] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 658.201348][T16872] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 658.207151][T16872] ? rcu_lock_acquire+0x30/0x30 [ 658.212015][T16872] ? __lock_acquire+0x2b00/0x2b00 [ 658.217196][T16872] obj_cgroup_charge+0x1b2/0x420 [ 658.222153][T16872] ? mod_objcg_mlstate+0x330/0x330 [ 658.227298][T16872] kmem_cache_alloc+0xbd/0x310 [ 658.232071][T16872] ? ext4_alloc_inode+0x1d/0x570 [ 658.237016][T16872] ? do_raw_spin_unlock+0x134/0x8a0 [ 658.242223][T16872] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 658.248350][T16872] ext4_alloc_inode+0x1d/0x570 [ 658.253131][T16872] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 658.259115][T16872] iget_locked+0x195/0x810 [ 658.263556][T16872] __ext4_iget+0x262/0x4e30 [ 658.268105][T16872] ? ext4_get_projid+0x140/0x140 [ 658.273060][T16872] ? rcu_read_lock_sched_held+0x89/0x130 [ 658.278709][T16872] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 658.284709][T16872] ? ext4_lookup+0x484/0xb90 [ 658.289298][T16872] ? trace_kfree+0x2e/0xd0 [ 658.293725][T16872] ? kfree+0x2f/0x2e0 [ 658.297732][T16872] ? ext4_lookup+0x38f/0xb90 [ 658.302430][T16872] ext4_lookup+0x732/0xb90 [ 658.306878][T16872] ? ext4_add_entry+0x4210/0x4210 [ 658.312056][T16872] ? d_alloc_parallel+0x1478/0x15c0 [ 658.317280][T16872] ? lockdep_init_map_type+0x9f/0x9b0 [ 658.322707][T16872] ? __init_waitqueue_head+0x68/0xd0 [ 658.328185][T16872] __lookup_slow+0x27f/0x3d0 [ 658.332806][T16872] ? lookup_one_len+0x2c0/0x2c0 13:55:22 executing program 1: r0 = mq_open(&(0x7f0000000340)='^(\x00', 0x2, 0x0, 0x0) r1 = socket(0x29, 0x800, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="f30ff36db212394fcf1434c7b5248a86ccb30404f7594f38628c32ac372f8e78001a2a21ca02744c", 0x28, 0x0, &(0x7f0000000100)={0x11, 0xf6, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000300)={r3, 0x1, 0xfffffffffffffefb}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', r6, 0x12, 0x1, 0x8, 0x1, 0x4, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x1, 0x7, 0x5}}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendto$packet(r8, &(0x7f0000000000)="f30ff36db212394fcf1434c7b5248a86ccb30404f7594f38628c32ac372f8e78001a2a21ca02744c", 0x28, 0x0, &(0x7f0000000100)={0x11, 0xf6, r9, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6gre0\x00', r9, 0x4, 0x6, 0xea, 0xff, 0x40, @mcast2, @mcast2, 0x80, 0x8000, 0x4, 0x9}}) sendto$packet(r5, &(0x7f0000000000)="f30ff36db212394fcf1434c7b5248a86ccb30404f7594f38628c32ac372f8e78001a2a21ca02744c", 0x28, 0x0, &(0x7f0000000100)={0x11, 0xf6, r6, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r6, 0x29, 0x4, 0x20, 0x80, 0x7e, @mcast2, @mcast2, 0x80, 0x20, 0x3fd, 0xff}}) mq_timedsend(r0, 0x0, 0x900, 0x0, 0x0) mq_open(&(0x7f0000000000)='\x00', 0x80, 0x18, &(0x7f0000000040)={0x80000000, 0x4, 0x8, 0x3}) [ 658.337681][T16872] ? up_read_non_owner+0x1c0/0x1c0 [ 658.342800][T16872] ? bpf_lsm_inode_permission+0x5/0x10 [ 658.348292][T16872] walk_component+0x516/0x790 [ 658.352990][T16872] ? try_to_unlazy+0xce0/0xce0 [ 658.357850][T16872] ? path_init+0x11f0/0x11f0 [ 658.362470][T16872] path_lookupat+0x19d/0x6c0 [ 658.367080][T16872] filename_lookup+0x270/0x640 [ 658.371887][T16872] ? hashlen_string+0x110/0x110 [ 658.376864][T16872] ? __might_fault+0xb6/0x110 [ 658.381587][T16872] ? strncpy_from_user+0x1f6/0x350 [ 658.386720][T16872] ? getname_flags+0x1fe/0x650 [ 658.391510][T16872] user_path_at_empty+0x40/0x1a0 [ 658.396469][T16872] __x64_sys_umount+0xf0/0x170 [ 658.401249][T16872] ? path_umount+0xfc0/0xfc0 [ 658.405854][T16872] ? lockdep_hardirqs_on+0x95/0x140 [ 658.411067][T16872] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 658.417153][T16872] do_syscall_64+0x44/0xd0 [ 658.421587][T16872] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 658.427478][T16872] RIP: 0033:0x7f1cc5b414c7 [ 658.431902][T16872] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 658.451499][T16872] RSP: 002b:00007ffd8ed6fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 658.459933][T16872] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1cc5b414c7 [ 658.467920][T16872] RDX: 00007ffd8ed6ff3c RSI: 000000000000000a RDI: 00007ffd8ed6ff30 [ 658.475939][T16872] RBP: 00007ffd8ed6ff30 R08: 00000000ffffffff R09: 00007ffd8ed6fd00 [ 658.483924][T16872] R10: 0000555556fb087b R11: 0000000000000246 R12: 00007f1cc5b991ea [ 658.491941][T16872] R13: 00007ffd8ed70ff0 R14: 0000555556fb0810 R15: 00007ffd8ed71030 [ 658.499936][T16872] [ 658.518880][T16900] device veth57 entered promiscuous mode [ 658.522746][T16872] memory: usage 280kB, limit 32kB, failcnt 1139 [ 658.531549][T16872] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 13:55:23 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0/../file0\x00', 0x120) 13:55:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@local, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "48268e8ebb52ca7d849d822c41a5e40c07c5248f"}}, @etimer_thresh={0x8}]}, 0x158}}, 0x0) [ 658.546338][T16872] Memory cgroup stats for /syz4: [ 658.546543][T16872] anon 36864 [ 658.546543][T16872] file 61440 [ 658.546543][T16872] kernel_stack 0 [ 658.546543][T16872] pagetables 8192 [ 658.546543][T16872] percpu 0 [ 658.546543][T16872] sock 0 [ 658.546543][T16872] vmalloc 0 [ 658.546543][T16872] shmem 61440 [ 658.546543][T16872] file_mapped 61440 [ 658.546543][T16872] file_dirty 0 [ 658.546543][T16872] file_writeback 0 [ 658.546543][T16872] swapcached 0 [ 658.546543][T16872] anon_thp 0 [ 658.546543][T16872] file_thp 0 [ 658.546543][T16872] shmem_thp 0 [ 658.546543][T16872] inactive_anon 36864 [ 658.546543][T16872] active_anon 61440 [ 658.546543][T16872] inactive_file 0 [ 658.546543][T16872] active_file 0 [ 658.546543][T16872] unevictable 0 [ 658.546543][T16872] slab_reclaimable 60936 [ 658.546543][T16872] slab_unreclaimable 107624 [ 658.546543][T16872] slab 168560 [ 658.546543][T16872] workingset_refault_anon 0 [ 658.546543][T16872] workingset_refault_file 0 [ 658.546543][T16872] workingset_activate_anon 0 [ 658.673462][T16872] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16872,uid=0 [ 658.713251][T16872] Memory cgroup out of memory: Killed process 16872 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 658.772050][ T28] oom_reaper: reaped process 16872 (syz-executor.4), now anon-rss:0kB, file-rss:13512kB, shmem-rss:0kB 13:55:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:23 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:23 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) 13:55:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast2}}}, [@policy_type={0xa}]}, 0xcc}}, 0x0) 13:55:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x11, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010900)="070003003c0001009d092800630000000600000004000000002600004d00000000b60000a5000000003e00000101000000340000e507", 0x36, 0xc600}, {&(0x7f0000010a00)="04000300f60001003168f0016400000004000000002a554446204c5620496e666f00000000000000000000000102040500000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc800}, {&(0x7f0000010b00)="0000000000000000000000000000000000000009084c696e7578206d6b756466667320322e32000000000000000000000000000000000012084c696e757820756466746f6f6c7320322e3200000000000000000000000000000000130868747470733a2f2f6769746875622e636f6d2f70616c692f756466746f6f6c732f0022002a4c696e757820554446465300000000000000000000000405", 0x9a, 0xc8e0}, {&(0x7f0000010c00)="08000300620001000000f00165", 0xd, 0xca00}, {&(0x7f0000011100)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000fe", 0x19, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) open(0x0, 0x0, 0x0) 13:55:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc000000230001"], 0xcc}}, 0x0) 13:55:23 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RCLUNK(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r1, 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0xc0000082) 13:55:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@local, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "48268e8ebb52ca7d849d822c41a5e40c07c5248f"}}, @etimer_thresh={0x8}]}, 0x158}}, 0x0) [ 659.013872][T16932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@local, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "48268e8ebb52ca7d849d822c41a5e40c07c5248f"}}]}, 0x150}}, 0x0) [ 659.067276][T16940] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 659.092898][T16932] device veth59 entered promiscuous mode 13:55:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x11, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010900)="070003003c0001009d092800630000000600000004000000002600004d00000000b60000a5000000003e00000101000000340000e507", 0x36, 0xc600}, {&(0x7f0000010a00)="04000300f60001003168f0016400000004000000002a554446204c5620496e666f00000000000000000000000102040500000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc800}, {&(0x7f0000010b00)="0000000000000000000000000000000000000009084c696e7578206d6b756466667320322e32000000000000000000000000000000000012084c696e757820756466746f6f6c7320322e3200000000000000000000000000000000130868747470733a2f2f6769746875622e636f6d2f70616c692f756466746f6f6c732f0022002a4c696e757820554446465300000000000000000000000405", 0x9a, 0xc8e0}, {&(0x7f0000010c00)="08000300620001000000f00165", 0xd, 0xca00}, {&(0x7f0000011100)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000fe", 0x19, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 13:55:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {0x0}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:23 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@local, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "48268e8ebb52ca7d849d822c41a5e40c07c5248f"}}]}, 0x150}}, 0x0) 13:55:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@local, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "48268e8ebb52ca7d849d822c41a5e40c07c5248f"}}, @etimer_thresh={0x8}]}, 0x158}}, 0x0) [ 659.290370][T16947] loop2: detected capacity change from 0 to 2816 [ 659.343532][T16949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 659.368585][T16947] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount 13:55:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@local, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "48268e8ebb52ca7d849d822c41a5e40c07c5248f"}}, @etimer_thresh={0x8}]}, 0x158}}, 0x0) 13:55:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@local, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "48268e8ebb52ca7d849d822c41a5e40c07c5248f"}}]}, 0x150}}, 0x0) [ 659.524667][T16006] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 659.561631][T16949] device veth61 entered promiscuous mode 13:55:24 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@local, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "48268e8ebb52ca7d849d822c41a5e40c07c5248f"}}]}, 0x150}}, 0x0) 13:55:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x8200) 13:55:24 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20) 13:55:24 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:24 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xb000eb3d80ef2c2a, 0x0) [ 659.915609][T16968] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 659.996843][T16968] device veth63 entered promiscuous mode [ 660.003679][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 660.059697][T16968] device bond21 entered promiscuous mode 13:55:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8920, &(0x7f00000000c0)) [ 660.146894][T16968] device bond21 left promiscuous mode [ 660.409860][ T10] device hsr_slave_0 left promiscuous mode [ 660.436389][ T10] device hsr_slave_1 left promiscuous mode [ 660.453506][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.476750][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.496468][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.503919][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.553939][ T10] device bridge_slave_1 left promiscuous mode [ 660.575978][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.584805][ T10] device bridge_slave_0 left promiscuous mode [ 660.592312][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.622997][ T10] device veth1_macvtap left promiscuous mode [ 660.644918][ T10] device veth0_macvtap left promiscuous mode [ 660.663141][ T10] device veth1_vlan left promiscuous mode [ 660.695913][ T10] device veth0_vlan left promiscuous mode [ 660.963166][ T10] team0 (unregistering): Port device team_slave_1 removed [ 660.983006][ T10] team0 (unregistering): Port device team_slave_0 removed [ 660.999190][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.013136][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.080373][ T10] bond0 (unregistering): Released all slaves [ 663.101742][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 663.112147][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 663.120642][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.128564][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 663.139950][ T3644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 663.147800][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.236914][T16976] chnl_net:caif_netlink_parms(): no params data found [ 663.274770][T16976] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.282879][T16976] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.291089][T16976] device bridge_slave_0 entered promiscuous mode [ 663.301818][T16976] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.309166][T16976] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.318044][T16976] device bridge_slave_1 entered promiscuous mode [ 663.344449][T16976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.355446][T16976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.378792][T16976] team0: Port device team_slave_0 added [ 663.386800][T16976] team0: Port device team_slave_1 added [ 663.410362][T16976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.417774][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.446021][T16976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.458408][T16976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.465346][T16976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.491812][T16976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.524262][T16976] device hsr_slave_0 entered promiscuous mode [ 663.531562][T16976] device hsr_slave_1 entered promiscuous mode [ 663.538401][T16976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.546168][T16976] Cannot create hsr debugfs directory [ 663.613489][T16976] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.620614][T16976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.628020][T16976] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.635180][T16976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.683783][T16976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.700831][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 663.714385][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.722878][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.744126][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 663.760310][T16976] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.771192][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 663.780034][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.787176][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.808772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.817593][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.824663][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.833687][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 663.843694][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 663.856394][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 663.871273][T16976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 663.883853][T16976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.896427][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.905014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.914284][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.933663][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 663.941198][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.955350][T16976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.199012][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 664.213485][T16976] device veth0_vlan entered promiscuous mode [ 664.222117][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 664.231749][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 664.239821][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 664.253939][T16976] device veth1_vlan entered promiscuous mode [ 664.278798][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 664.287533][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 664.302552][T16976] device veth0_macvtap entered promiscuous mode [ 664.312206][T16976] device veth1_macvtap entered promiscuous mode [ 664.331272][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.341974][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.352263][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.365837][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.375724][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.386700][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.401170][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.414476][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.426958][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 664.437833][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.453091][T16976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.462488][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 664.474818][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 664.482924][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 664.496147][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 664.507396][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.519464][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.530771][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.542845][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.552993][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.563734][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.573849][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.584356][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.595842][T16976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 664.606786][T16976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.618974][T16976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.630807][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 664.639797][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 664.705141][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.717179][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.724596][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.729904][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 664.734975][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.754903][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 665.001199][T16995] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 665.012520][T16995] CPU: 0 PID: 16995 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 665.021309][T16995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.031374][T16995] Call Trace: [ 665.034663][T16995] [ 665.037600][T16995] dump_stack_lvl+0x201/0x2d8 [ 665.042279][T16995] ? show_regs_print_info+0x12/0x12 [ 665.047477][T16995] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 665.053208][T16995] ? lockdep_hardirqs_on+0x95/0x140 [ 665.058399][T16995] ? asan.module_dtor+0x20/0x20 [ 665.063260][T16995] dump_header+0xdb/0x970 [ 665.067601][T16995] oom_kill_process+0xf5/0x4e0 [ 665.072371][T16995] out_of_memory+0x711/0xa70 [ 665.076962][T16995] ? preempt_schedule+0x16b/0x190 [ 665.081985][T16995] ? unregister_oom_notifier+0x20/0x20 [ 665.087460][T16995] ? lockdep_hardirqs_on+0x95/0x140 [ 665.092659][T16995] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 665.098202][T16995] ? preempt_schedule_thunk+0x16/0x18 [ 665.103574][T16995] ? mem_cgroup_oom_trylock+0x220/0x220 [ 665.109299][T16995] ? cgroup_file_notify+0x123/0x190 [ 665.114492][T16995] memory_max_write+0x364/0x4f0 [ 665.119341][T16995] ? memory_max_show+0xa0/0xa0 [ 665.124098][T16995] ? memory_max_show+0xa0/0xa0 [ 665.128849][T16995] cgroup_file_write+0x2a4/0x780 [ 665.133782][T16995] ? cgroup_seqfile_stop+0xd0/0xd0 [ 665.138904][T16995] ? cgroup_seqfile_stop+0xd0/0xd0 [ 665.144003][T16995] kernfs_fop_write_iter+0x3b6/0x510 [ 665.149286][T16995] vfs_write+0xb11/0xe90 [ 665.153526][T16995] ? file_end_write+0x230/0x230 [ 665.158384][T16995] ? mutex_lock_nested+0x1a/0x20 [ 665.163314][T16995] ? __fdget_pos+0x24e/0x2f0 [ 665.167893][T16995] ? ksys_write+0x77/0x2c0 [ 665.172303][T16995] ksys_write+0x18f/0x2c0 [ 665.176623][T16995] ? print_irqtrace_events+0x220/0x220 [ 665.182076][T16995] ? __ia32_sys_read+0x80/0x80 [ 665.186828][T16995] ? lockdep_hardirqs_on+0x95/0x140 [ 665.192025][T16995] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 665.198000][T16995] do_syscall_64+0x44/0xd0 [ 665.202410][T16995] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 665.208294][T16995] RIP: 0033:0x7f61e5b37059 [ 665.212700][T16995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 665.232297][T16995] RSP: 002b:00007f61e44ac168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 665.240702][T16995] RAX: ffffffffffffffda RBX: 00007f61e5c49f60 RCX: 00007f61e5b37059 [ 665.248663][T16995] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 665.256621][T16995] RBP: 00007f61e5b9108d R08: 0000000000000000 R09: 0000000000000000 [ 665.264583][T16995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.272581][T16995] R13: 00007fff7b82316f R14: 00007f61e44ac300 R15: 0000000000022000 [ 665.280563][T16995] [ 665.287219][T14286] Bluetooth: hci3: command 0x0409 tx timeout [ 665.354489][T16995] memory: usage 2676kB, limit 32kB, failcnt 1156 [ 665.365655][T16995] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 665.372681][T16995] Memory cgroup stats for /syz4: [ 665.373872][T16995] anon 2207744 [ 665.373872][T16995] file 65536 [ 665.373872][T16995] kernel_stack 65536 [ 665.373872][T16995] pagetables 94208 [ 665.373872][T16995] percpu 0 [ 665.373872][T16995] sock 0 [ 665.373872][T16995] vmalloc 0 [ 665.373872][T16995] shmem 61440 [ 665.373872][T16995] file_mapped 61440 [ 665.373872][T16995] file_dirty 0 [ 665.373872][T16995] file_writeback 0 [ 665.373872][T16995] swapcached 0 [ 665.373872][T16995] anon_thp 2097152 [ 665.373872][T16995] file_thp 0 [ 665.373872][T16995] shmem_thp 0 [ 665.373872][T16995] inactive_anon 2207744 [ 665.373872][T16995] active_anon 61440 [ 665.373872][T16995] inactive_file 4096 [ 665.373872][T16995] active_file 0 [ 665.373872][T16995] unevictable 0 [ 665.373872][T16995] slab_reclaimable 98312 [ 665.373872][T16995] slab_unreclaimable 174904 [ 665.373872][T16995] slab 273216 [ 665.373872][T16995] workingset_refault_anon 0 [ 665.373872][T16995] workingset_refault_file 0 [ 665.488551][T16995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16994,uid=0 [ 665.519683][T16995] Memory cgroup out of memory: Killed process 16994 (syz-executor.4) total-vm:60648kB, anon-rss:2424kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 665.546706][ T28] oom_reaper: reaped process 16994 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:55:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {0x0}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000240)) 13:55:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8949, &(0x7f0000000680)) 13:55:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={0x0}}, 0x0) 13:55:30 executing program 2: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) 13:55:30 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x8903, &(0x7f0000000000)) 13:55:30 executing program 1: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x80000000}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a06820200ff000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 13:55:30 executing program 5: keyctl$session_to_parent(0x7) [ 665.675551][T17004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 665.701219][T16976] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 13:55:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5450, 0x0) [ 665.733703][T16976] CPU: 0 PID: 16976 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 665.742511][T16976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.752588][T16976] Call Trace: [ 665.755888][T16976] [ 665.758828][T16976] dump_stack_lvl+0x201/0x2d8 [ 665.763522][T16976] ? show_regs_print_info+0x12/0x12 [ 665.768733][T16976] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 665.774465][T16976] ? do_raw_spin_lock+0x151/0x8e0 [ 665.779510][T16976] ? asan.module_dtor+0x20/0x20 [ 665.784378][T16976] dump_header+0xdb/0x970 [ 665.788729][T16976] oom_kill_process+0xf5/0x4e0 [ 665.793507][T16976] out_of_memory+0x711/0xa70 [ 665.798111][T16976] ? unregister_oom_notifier+0x20/0x20 [ 665.803683][T16976] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 665.809243][T16976] ? __lock_acquire+0x2b00/0x2b00 [ 665.814279][T16976] ? mem_cgroup_oom_trylock+0x220/0x220 [ 665.819847][T16976] ? do_raw_spin_unlock+0x134/0x8a0 [ 665.825151][T16976] ? mem_cgroup_iter+0x3c9/0x530 13:55:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) [ 665.830107][T16976] mem_cgroup_oom+0x4ad/0x620 [ 665.834804][T16976] try_charge_memcg+0xd37/0x1010 [ 665.839765][T16976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 665.845784][T16976] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 665.851604][T16976] ? rcu_lock_acquire+0x30/0x30 [ 665.856475][T16976] ? __lock_acquire+0x2b00/0x2b00 [ 665.861535][T16976] obj_cgroup_charge+0x1b2/0x420 [ 665.866487][T16976] ? mod_objcg_mlstate+0x330/0x330 [ 665.871634][T16976] kmem_cache_alloc+0xbd/0x310 [ 665.876411][T16976] ? __alloc_file+0x26/0x2f0 13:55:30 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) select(0x40, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={0x8f}, &(0x7f0000000300)={0x0, 0x2710}) [ 665.881024][T16976] __alloc_file+0x26/0x2f0 [ 665.885543][T16976] ? alloc_empty_file+0x49/0x1b0 [ 665.890506][T16976] alloc_empty_file+0xa9/0x1b0 [ 665.895281][T16976] path_openat+0x111/0x36a0 [ 665.899801][T16976] ? arch_stack_walk+0xf8/0x140 [ 665.904675][T16976] ? __lock_acquire+0x1382/0x2b00 [ 665.909711][T16976] ? __lock_acquire+0x1382/0x2b00 [ 665.914756][T16976] ? do_filp_open+0x4f0/0x4f0 [ 665.919467][T16976] ? rcu_read_lock_sched_held+0x89/0x130 [ 665.925110][T16976] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 665.931121][T16976] do_filp_open+0x277/0x4f0 [ 665.935676][T16976] ? vfs_tmpfile+0x230/0x230 [ 665.940275][T16976] ? alloc_fd+0x5e1/0x680 [ 665.944636][T16976] ? _raw_spin_unlock+0x24/0x40 [ 665.949522][T16976] ? alloc_fd+0x5e1/0x680 [ 665.953872][T16976] do_sys_openat2+0x13b/0x500 [ 665.958567][T16976] ? do_sys_open+0x220/0x220 [ 665.963189][T16976] __x64_sys_openat+0x243/0x290 [ 665.968061][T16976] ? __ia32_sys_open+0x270/0x270 [ 665.973018][T16976] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 665.979013][T16976] ? lockdep_hardirqs_on+0x95/0x140 [ 665.984232][T16976] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 665.990323][T16976] do_syscall_64+0x44/0xd0 [ 665.994755][T16976] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 666.000661][T16976] RIP: 0033:0x7f61e5b36b98 [ 666.005098][T16976] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 666.024706][T16976] RSP: 002b:00007fff7b822260 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 666.033201][T16976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f61e5b36b98 [ 666.041427][T16976] RDX: 0000000000090800 RSI: 00007fff7b823450 RDI: 00000000ffffff9c [ 666.049383][T16976] RBP: 00007fff7b82342c R08: 0000000000090800 R09: 00007fff7b823450 [ 666.057344][T16976] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f61e5b901ea [ 666.065304][T16976] R13: 00007fff7b823450 R14: 000000000000000f R15: 00007fff7b823490 [ 666.073283][T16976] [ 666.104529][T17004] device veth65 entered promiscuous mode [ 666.111714][T16976] memory: usage 380kB, limit 32kB, failcnt 1176 [ 666.125442][T16976] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 666.134370][T16976] Memory cgroup stats for /syz4: [ 666.134814][T16976] anon 36864 [ 666.134814][T16976] file 61440 [ 666.134814][T16976] kernel_stack 0 [ 666.134814][T16976] pagetables 8192 [ 666.134814][T16976] percpu 0 [ 666.134814][T16976] sock 0 [ 666.134814][T16976] vmalloc 0 [ 666.134814][T16976] shmem 61440 [ 666.134814][T16976] file_mapped 61440 [ 666.134814][T16976] file_dirty 0 [ 666.134814][T16976] file_writeback 0 [ 666.134814][T16976] swapcached 0 [ 666.134814][T16976] anon_thp 0 [ 666.134814][T16976] file_thp 0 [ 666.134814][T16976] shmem_thp 0 [ 666.134814][T16976] inactive_anon 36864 [ 666.134814][T16976] active_anon 61440 [ 666.134814][T16976] inactive_file 0 [ 666.134814][T16976] active_file 0 [ 666.134814][T16976] unevictable 0 [ 666.134814][T16976] slab_reclaimable 98312 [ 666.134814][T16976] slab_unreclaimable 170152 [ 666.134814][T16976] slab 268464 [ 666.134814][T16976] workingset_refault_anon 0 [ 666.134814][T16976] workingset_refault_file 0 [ 666.134814][T16976] workingset_activate_anon 0 [ 666.231364][T16976] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16976,uid=0 [ 666.251344][T16976] Memory cgroup out of memory: Killed process 16976 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14528kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 666.272850][ T28] oom_reaper: reaped process 16976 (syz-executor.4), now anon-rss:0kB, file-rss:13632kB, shmem-rss:0kB 13:55:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {0x0}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:30 executing program 5: r0 = inotify_init1(0x0) read$FUSE(r0, 0x0, 0x0) 13:55:30 executing program 3: socketpair(0x26, 0x5, 0x5eb2, 0x0) 13:55:30 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x81, 0x67, 0xa4a, 0x1}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 13:55:30 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@mcast1, 0x401}) 13:55:31 executing program 1: socketpair(0xa, 0x0, 0xffffffff, &(0x7f0000000040)) 13:55:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5421, &(0x7f00000000c0)) 13:55:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x4020940d, &(0x7f0000000000)) [ 666.406627][T17029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:31 executing program 3: socketpair(0x2c, 0x3, 0x1, &(0x7f0000000140)) 13:55:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@updpolicy={0x1d4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x7, 0x6e6bb1, 0x1, 0x0, 0x3}, [@policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x4e22, 0x4, 0x4e22, 0x3, 0x2, 0x80, 0xa0, 0x32}, {0x40, 0x6, 0x9, 0x9, 0xfffffffffffff000, 0x0, 0x1, 0xb54b}, {0x7ff, 0x7fffffff, 0x7fffffff, 0x200000081}, 0xffffffff, 0x6e6bb8, 0x2, 0x1, 0x0, 0x1}}, @etimer_thresh={0x8, 0xc, 0x7fffffff}, @lifetime_val={0x24, 0x9, {0xcd5, 0x0, 0x40000000000, 0x6}}, @tmpl={0x44, 0x5, [{{@in=@empty, 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x3502, 0x1, 0x0, 0x80, 0x8, 0x9, 0x400}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x14) [ 666.502689][T17029] device veth67 entered promiscuous mode 13:55:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000680)) 13:55:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/230, 0xe6}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) [ 666.581238][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 666.704982][T17029] device bond22 entered promiscuous mode [ 666.738193][T17029] device bond22 left promiscuous mode 13:55:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev}}}]}]}, 0x44}}, 0x0) 13:55:31 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/uts\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 13:55:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x52, 0x109}, 0x18}}, 0x0) 13:55:31 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:31 executing program 2: syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x4000) 13:55:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000000180)) 13:55:31 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 667.342850][T17053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 13:55:32 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name, 0x2) 13:55:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x13, 0x109}, 0x18}}, 0x0) [ 667.420574][T17053] device veth69 entered promiscuous mode [ 667.459786][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x2c, 0x109, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, 0x38}}, 0x0) [ 667.577209][T17069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 667.643553][T17053] device bond23 entered promiscuous mode [ 667.680558][T17053] device bond23 left promiscuous mode [ 667.733441][ T10] device hsr_slave_0 left promiscuous mode [ 667.756893][ T10] device hsr_slave_1 left promiscuous mode [ 667.786805][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.794269][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.830864][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.844513][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.881274][ T10] device bridge_slave_1 left promiscuous mode [ 667.903968][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.927237][ T10] device bridge_slave_0 left promiscuous mode [ 667.938495][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.969413][ T10] device veth1_macvtap left promiscuous mode [ 667.975620][ T10] device veth0_macvtap left promiscuous mode [ 667.982009][ T10] device veth1_vlan left promiscuous mode [ 667.988429][ T10] device veth0_vlan left promiscuous mode [ 668.174625][ T10] team0 (unregistering): Port device team_slave_1 removed [ 668.192470][ T10] team0 (unregistering): Port device team_slave_0 removed [ 668.208537][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.235520][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.305275][ T10] bond0 (unregistering): Released all slaves [ 670.228813][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 670.238005][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 670.246384][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 670.255018][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 670.264411][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 670.272353][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 670.365302][T17073] chnl_net:caif_netlink_parms(): no params data found [ 670.411264][T17073] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.420649][T17073] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.429353][T17073] device bridge_slave_0 entered promiscuous mode [ 670.438046][T17073] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.445217][T17073] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.453185][T17073] device bridge_slave_1 entered promiscuous mode [ 670.478981][T17073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.490795][T17073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.519406][T17073] team0: Port device team_slave_0 added [ 670.527430][T17073] team0: Port device team_slave_1 added [ 670.544630][T17073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.551724][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.578570][T17073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.591496][T17073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.598624][T17073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.628290][T17073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.657141][T17073] device hsr_slave_0 entered promiscuous mode [ 670.663780][T17073] device hsr_slave_1 entered promiscuous mode [ 670.672387][T17073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.680104][T17073] Cannot create hsr debugfs directory [ 670.749385][T17073] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.756535][T17073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.763872][T17073] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.770974][T17073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.820194][T17073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.833430][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 670.842323][T14287] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.853372][T14287] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.862038][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 670.876191][T17073] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.887059][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 670.895508][T14287] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.902630][T14287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.913665][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 670.922416][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.929533][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.947913][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 670.957583][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 670.976936][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 670.985261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 670.997950][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.008332][T17073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 671.028127][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.035501][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.049796][T17073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.286538][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 671.303378][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 671.312041][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 671.320392][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 671.333157][T17073] device veth0_vlan entered promiscuous mode [ 671.354287][T17073] device veth1_vlan entered promiscuous mode [ 671.367023][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 671.375119][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 671.397035][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 671.405589][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 671.415486][T17073] device veth0_macvtap entered promiscuous mode [ 671.426932][T17073] device veth1_macvtap entered promiscuous mode [ 671.442685][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 671.453640][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.463756][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 671.474307][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.484161][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 671.495393][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.505622][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 671.516506][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.526637][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 671.537099][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.549921][T17073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.559801][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 671.568203][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 671.576511][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 671.585050][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 671.597098][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 671.608622][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.618907][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 671.634824][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.645315][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 671.657775][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.667686][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 671.678294][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.688184][T17073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 671.699679][T17073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.710781][T17073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.720539][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 671.729609][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 671.799535][ T7796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.813697][ T7796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.833700][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.839591][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 671.849110][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.860087][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 672.080494][T17092] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 672.096779][T17092] CPU: 0 PID: 17092 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 672.105675][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.115737][T17092] Call Trace: [ 672.119004][T17092] [ 672.121921][T17092] dump_stack_lvl+0x201/0x2d8 [ 672.126587][T17092] ? show_regs_print_info+0x12/0x12 [ 672.131773][T17092] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 672.137478][T17092] ? asan.module_dtor+0x20/0x20 [ 672.142330][T17092] dump_header+0xdb/0x970 [ 672.146658][T17092] oom_kill_process+0xf5/0x4e0 [ 672.151497][T17092] out_of_memory+0x711/0xa70 [ 672.156097][T17092] ? unregister_oom_notifier+0x20/0x20 [ 672.161567][T17092] ? mem_cgroup_out_of_memory+0x110/0x3b0 [ 672.167277][T17092] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 672.172810][T17092] ? mark_lock+0x191/0x1e00 [ 672.177300][T17092] ? mem_cgroup_oom_trylock+0x220/0x220 [ 672.182839][T17092] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 672.188730][T17092] ? cgroup_file_notify+0x123/0x190 [ 672.193919][T17092] memory_max_write+0x364/0x4f0 [ 672.198756][T17092] ? memory_max_show+0xa0/0xa0 [ 672.203507][T17092] ? read_lock_is_recursive+0x10/0x10 [ 672.208945][T17092] ? memory_max_show+0xa0/0xa0 [ 672.213695][T17092] cgroup_file_write+0x2a4/0x780 [ 672.218621][T17092] ? cgroup_seqfile_stop+0xd0/0xd0 [ 672.223722][T17092] ? cgroup_seqfile_stop+0xd0/0xd0 [ 672.228817][T17092] kernfs_fop_write_iter+0x3b6/0x510 [ 672.234088][T17092] vfs_write+0xb11/0xe90 [ 672.238319][T17092] ? file_end_write+0x230/0x230 [ 672.243163][T17092] ? mutex_lock_nested+0x1a/0x20 [ 672.248082][T17092] ? __fdget_pos+0x24e/0x2f0 [ 672.252666][T17092] ? ksys_write+0x77/0x2c0 [ 672.257066][T17092] ksys_write+0x18f/0x2c0 [ 672.261485][T17092] ? print_irqtrace_events+0x220/0x220 [ 672.267028][T17092] ? __ia32_sys_read+0x80/0x80 [ 672.271784][T17092] ? lockdep_hardirqs_on+0x95/0x140 [ 672.276976][T17092] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 672.282949][T17092] do_syscall_64+0x44/0xd0 [ 672.287358][T17092] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 672.293253][T17092] RIP: 0033:0x7faa4c674059 [ 672.297656][T17092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 672.317450][T17092] RSP: 002b:00007faa4afe9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.325854][T17092] RAX: ffffffffffffffda RBX: 00007faa4c786f60 RCX: 00007faa4c674059 [ 672.333828][T17092] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 672.341793][T17092] RBP: 00007faa4c6ce08d R08: 0000000000000000 R09: 0000000000000000 [ 672.349752][T17092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.357714][T17092] R13: 00007fff3ace6f1f R14: 00007faa4afe9300 R15: 0000000000022000 [ 672.365700][T17092] [ 672.377874][ T927] Bluetooth: hci3: command 0x0409 tx timeout [ 672.405935][T17092] memory: usage 2704kB, limit 32kB, failcnt 1193 [ 672.427588][T17092] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 672.435286][T17092] Memory cgroup stats for /syz4: [ 672.438587][T17092] anon 2207744 [ 672.438587][T17092] file 65536 [ 672.438587][T17092] kernel_stack 65536 [ 672.438587][T17092] pagetables 94208 [ 672.438587][T17092] percpu 0 [ 672.438587][T17092] sock 0 [ 672.438587][T17092] vmalloc 0 [ 672.438587][T17092] shmem 61440 [ 672.438587][T17092] file_mapped 61440 [ 672.438587][T17092] file_dirty 4096 [ 672.438587][T17092] file_writeback 0 [ 672.438587][T17092] swapcached 0 [ 672.438587][T17092] anon_thp 2097152 [ 672.438587][T17092] file_thp 0 [ 672.438587][T17092] shmem_thp 0 [ 672.438587][T17092] inactive_anon 2129920 [ 672.438587][T17092] active_anon 61440 [ 672.438587][T17092] inactive_file 0 [ 672.438587][T17092] active_file 0 [ 672.438587][T17092] unevictable 0 [ 672.438587][T17092] slab_reclaimable 97928 [ 672.438587][T17092] slab_unreclaimable 211240 [ 672.438587][T17092] slab 309168 [ 672.438587][T17092] workingset_refault_anon 0 [ 672.438587][T17092] workingset_refault_file 0 [ 672.555572][T17092] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17091,uid=0 [ 672.582678][T17092] Memory cgroup out of memory: Killed process 17091 (syz-executor.4) total-vm:60648kB, anon-rss:2464kB, file-rss:15052kB, shmem-rss:80kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 672.607478][ T28] oom_reaper: reaped process 17091 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:55:37 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000640)={@private0, 0x0, 0x0, 0xff, 0x1}, 0x20) 13:55:37 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x82, 0x0, 0x4) 13:55:37 executing program 3: accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x180000) 13:55:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001740)={&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x9}, 0x1c, &(0x7f0000001500)=[{0x0}], 0x1}, 0x24008094) 13:55:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/230, 0xe6}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:37 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:37 executing program 3: syz_clone(0x264f6d4492d62520, 0x0, 0x0, &(0x7f000000ecc0), 0x0, 0x0) 13:55:37 executing program 5: socket$tipc(0x1e, 0xd0474fe2c89fc683, 0x0) 13:55:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8948, &(0x7f0000000680)) [ 672.741038][T17100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000200)=0x1, 0x4) [ 672.797891][T17073] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 13:55:37 executing program 5: syz_mount_image$f2fs(0x0, 0x0, 0x1ef3, 0x1, &(0x7f0000001a00)=[{&(0x7f0000000a00)="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", 0x1000}], 0x0, 0x0) [ 672.851265][T17100] device veth71 entered promiscuous mode [ 672.885071][T17073] CPU: 0 PID: 17073 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 672.893875][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.903933][T17073] Call Trace: [ 672.907202][T17073] [ 672.910121][T17073] dump_stack_lvl+0x201/0x2d8 [ 672.914797][T17073] ? show_regs_print_info+0x12/0x12 [ 672.920074][T17073] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 672.925786][T17073] ? do_raw_spin_lock+0x151/0x8e0 [ 672.930808][T17073] ? asan.module_dtor+0x20/0x20 [ 672.935660][T17073] dump_header+0xdb/0x970 [ 672.940000][T17073] oom_kill_process+0xf5/0x4e0 [ 672.944754][T17073] out_of_memory+0x711/0xa70 [ 672.949333][T17073] ? unregister_oom_notifier+0x20/0x20 [ 672.954823][T17073] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 672.960451][T17073] ? __lock_acquire+0x2b00/0x2b00 [ 672.965472][T17073] ? mem_cgroup_oom_trylock+0x220/0x220 [ 672.971014][T17073] ? do_raw_spin_unlock+0x134/0x8a0 [ 672.976203][T17073] ? mem_cgroup_iter+0x3c9/0x530 [ 672.981131][T17073] mem_cgroup_oom+0x4ad/0x620 [ 672.985803][T17073] try_charge_memcg+0xd37/0x1010 [ 672.990731][T17073] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 672.996716][T17073] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 673.002510][T17073] ? rcu_lock_acquire+0x30/0x30 [ 673.007349][T17073] ? __lock_acquire+0x2b00/0x2b00 [ 673.012643][T17073] obj_cgroup_charge+0x1b2/0x420 [ 673.017572][T17073] ? mod_objcg_mlstate+0x330/0x330 [ 673.022681][T17073] kmem_cache_alloc+0xbd/0x310 [ 673.027431][T17073] ? __alloc_file+0x26/0x2f0 [ 673.032015][T17073] __alloc_file+0x26/0x2f0 [ 673.036425][T17073] ? alloc_empty_file+0x49/0x1b0 [ 673.041355][T17073] alloc_empty_file+0xa9/0x1b0 [ 673.046109][T17073] path_openat+0x111/0x36a0 [ 673.050607][T17073] ? arch_stack_walk+0xf8/0x140 [ 673.055464][T17073] ? __lock_acquire+0x1382/0x2b00 [ 673.060491][T17073] ? __lock_acquire+0x1382/0x2b00 [ 673.065506][T17073] ? do_filp_open+0x4f0/0x4f0 [ 673.070181][T17073] ? rcu_read_lock_sched_held+0x89/0x130 [ 673.075800][T17073] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 673.081785][T17073] do_filp_open+0x277/0x4f0 [ 673.086288][T17073] ? vfs_tmpfile+0x230/0x230 [ 673.090880][T17073] ? alloc_fd+0x5e1/0x680 [ 673.095255][T17073] ? _raw_spin_unlock+0x24/0x40 [ 673.100124][T17073] ? alloc_fd+0x5e1/0x680 [ 673.104462][T17073] do_sys_openat2+0x13b/0x500 [ 673.109151][T17073] ? do_sys_open+0x220/0x220 [ 673.113756][T17073] __x64_sys_openat+0x243/0x290 [ 673.118604][T17073] ? __ia32_sys_open+0x270/0x270 [ 673.123535][T17073] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 673.129507][T17073] ? lockdep_hardirqs_on+0x95/0x140 [ 673.134696][T17073] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 673.140666][T17073] do_syscall_64+0x44/0xd0 [ 673.145075][T17073] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 673.150959][T17073] RIP: 0033:0x7faa4c673b98 [ 673.155366][T17073] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 673.174967][T17073] RSP: 002b:00007fff3ace6010 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 673.183376][T17073] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007faa4c673b98 [ 673.191336][T17073] RDX: 0000000000090800 RSI: 00007fff3ace7200 RDI: 00000000ffffff9c [ 673.199399][T17073] RBP: 00007fff3ace71dc R08: 0000000000090800 R09: 00007fff3ace7200 [ 673.207371][T17073] R10: 0000000000000000 R11: 0000000000000287 R12: 00007faa4c6cd1ea [ 673.215335][T17073] R13: 00007fff3ace7200 R14: 000000000000000f R15: 00007fff3ace7240 [ 673.223315][T17073] [ 673.256263][T17107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 673.276029][T17073] memory: usage 416kB, limit 32kB, failcnt 1212 [ 673.282571][T17073] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 673.290895][T17073] Memory cgroup stats for /syz4: [ 673.291199][T17073] anon 36864 [ 673.291199][T17073] file 65536 [ 673.291199][T17073] kernel_stack 0 13:55:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x10000, 0x4) 13:55:37 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003180)='/sys/bus/pci-epf', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x684e849414cd2b14, r0, 0x10000000) [ 673.291199][T17073] pagetables 8192 [ 673.291199][T17073] percpu 0 [ 673.291199][T17073] sock 0 [ 673.291199][T17073] vmalloc 0 [ 673.291199][T17073] shmem 61440 [ 673.291199][T17073] file_mapped 61440 [ 673.291199][T17073] file_dirty 0 [ 673.291199][T17073] file_writeback 0 [ 673.291199][T17073] swapcached 0 [ 673.291199][T17073] anon_thp 0 [ 673.291199][T17073] file_thp 0 [ 673.291199][T17073] shmem_thp 0 [ 673.291199][T17073] inactive_anon 36864 [ 673.291199][T17073] active_anon 61440 [ 673.291199][T17073] inactive_file 4096 13:55:37 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x0, @multicast}, 0x0, {0x2, 0x0, @multicast1}, 'macvtap0\x00'}) [ 673.291199][T17073] active_file 0 [ 673.291199][T17073] unevictable 0 [ 673.291199][T17073] slab_reclaimable 97928 [ 673.291199][T17073] slab_unreclaimable 206488 [ 673.291199][T17073] slab 304416 [ 673.291199][T17073] workingset_refault_anon 0 [ 673.291199][T17073] workingset_refault_file 0 [ 673.291199][T17073] workingset_activate_anon 0 [ 673.397228][T17118] loop5: detected capacity change from 0 to 15 [ 673.422965][T17073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17073,uid=0 [ 673.441051][T17073] Memory cgroup out of memory: Killed process 17073 (syz-executor.4) total-vm:56676kB, anon-rss:364kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 673.459922][ T28] oom_reaper: reaped process 17073 (syz-executor.4), now anon-rss:0kB, file-rss:13620kB, shmem-rss:0kB 13:55:38 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 13:55:38 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x40}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) [ 673.529101][T16105] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 673.590963][T17100] device bond24 entered promiscuous mode [ 673.620648][T16105] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.652919][T16105] buffer_io_error: 6 callbacks suppressed [ 673.652933][T16105] Buffer I/O error on dev loop5, logical block 0, async page read [ 673.667909][T16105] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.677659][T16105] Buffer I/O error on dev loop5, logical block 1, async page read [ 673.685720][T16105] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.694932][T16105] Buffer I/O error on dev loop5, logical block 2, async page read [ 673.703020][T16105] I/O error, dev loop5, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.703461][T17100] device bond24 left promiscuous mode [ 673.712581][T16105] Buffer I/O error on dev loop5, logical block 3, async page read [ 673.712680][T16105] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.740830][T16105] Buffer I/O error on dev loop5, logical block 4, async page read [ 673.752451][T16105] I/O error, dev loop5, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.761973][T16105] Buffer I/O error on dev loop5, logical block 5, async page read [ 673.773115][T16105] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.782614][T16105] Buffer I/O error on dev loop5, logical block 6, async page read [ 673.790908][T16105] I/O error, dev loop5, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 673.800258][T16105] Buffer I/O error on dev loop5, logical block 7, async page read 13:55:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/230, 0xe6}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:38 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0) 13:55:38 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 13:55:38 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)='\v', 0x1}, {&(0x7f00000001c0)="81", 0x1}], 0x2, &(0x7f00000005c0)=[@flowinfo={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x40}, 0xc4) 13:55:38 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 13:55:38 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:38 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000001c0)="81", 0x37fe0}], 0x2}, 0x0) 13:55:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) 13:55:38 executing program 3: chroot(&(0x7f0000000940)='./file1\x00') 13:55:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1ff, 0x0, "cd3461fc84c8e3adc9022e0c7290442f09be19"}) [ 673.952321][T17136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:38 executing program 3: r0 = socket$inet6(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', 0x0}) 13:55:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:38 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 13:55:38 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) [ 674.053079][T17136] device veth73 entered promiscuous mode 13:55:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x1c}}, 0x0) [ 674.123043][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 13:55:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x8935, 0x0) [ 674.287460][T17136] device bond25 entered promiscuous mode [ 674.323221][T17136] device bond25 left promiscuous mode 13:55:39 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8946, &(0x7f00000000c0)) 13:55:39 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done], 0x0, 0x0, 0x0}) 13:55:39 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x101002, 0x0) 13:55:39 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 13:55:39 executing program 1: syz_mount_image$f2fs(&(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) [ 674.570582][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 674.653226][T17172] device bond26 entered promiscuous mode [ 674.687233][T17172] device bond26 left promiscuous mode [ 675.127179][ T1022] device hsr_slave_0 left promiscuous mode [ 675.133747][ T1022] device hsr_slave_1 left promiscuous mode [ 675.147101][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.154648][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.190713][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.205882][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.228123][ T1022] device bridge_slave_1 left promiscuous mode [ 675.234360][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.274775][ T1022] device bridge_slave_0 left promiscuous mode [ 675.291435][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.331412][ T1022] device veth1_macvtap left promiscuous mode [ 675.338064][ T1022] device veth0_macvtap left promiscuous mode [ 675.344336][ T1022] device veth1_vlan left promiscuous mode [ 675.351787][ T1022] device veth0_vlan left promiscuous mode [ 675.528376][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 675.548143][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 675.563322][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.576953][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.643379][ T1022] bond0 (unregistering): Released all slaves [ 677.596588][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 677.604975][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 677.613132][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 677.622249][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 677.631074][ T3644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 677.638568][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 677.734673][T17176] chnl_net:caif_netlink_parms(): no params data found [ 677.779999][T17176] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.787310][T17176] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.795207][T17176] device bridge_slave_0 entered promiscuous mode [ 677.803511][T17176] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.811102][T17176] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.820046][T17176] device bridge_slave_1 entered promiscuous mode [ 677.845491][T17176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.857865][T17176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.882793][T17176] team0: Port device team_slave_0 added [ 677.890394][T17176] team0: Port device team_slave_1 added [ 677.912336][T17176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.919482][T17176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.950412][T17176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.963120][T17176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.970237][T17176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.996534][T17176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.023768][T17176] device hsr_slave_0 entered promiscuous mode [ 678.030899][T17176] device hsr_slave_1 entered promiscuous mode [ 678.037646][T17176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.045579][T17176] Cannot create hsr debugfs directory [ 678.117013][T17176] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.124103][T17176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.131476][T17176] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.138564][T17176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.188086][T17176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.202937][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 678.211772][ T927] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.220939][ T927] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.229146][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 678.243326][T17176] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.267100][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 678.275439][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.282709][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.290764][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 678.299862][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.306977][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.316251][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 678.328202][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 678.336138][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 678.355554][T17176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 678.367476][T17176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.381145][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 678.389689][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 678.401284][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 678.416760][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 678.424186][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 678.440334][T17176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.686220][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 678.699471][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 678.710851][T17176] device veth0_vlan entered promiscuous mode [ 678.718525][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 678.730831][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 678.743896][T17176] device veth1_vlan entered promiscuous mode [ 678.768170][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 678.777283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 678.790137][T17176] device veth0_macvtap entered promiscuous mode [ 678.800539][T17176] device veth1_macvtap entered promiscuous mode [ 678.814772][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 678.826566][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.836768][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 678.847440][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.858303][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 678.869353][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.879551][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 678.893900][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.904263][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 678.914881][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.927500][T17176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.935046][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 678.950471][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 678.958687][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 678.968249][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 678.979581][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 678.993354][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.003583][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 679.014633][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.025027][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 679.036110][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.046076][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 679.060780][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.071099][T17176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 679.081725][T17176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.093012][T17176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.102008][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 679.110855][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 679.171751][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.186182][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.204038][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 679.221926][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.230489][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.241540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 679.494709][T17197] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 679.511474][T17197] CPU: 1 PID: 17197 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 679.520376][T17197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.530466][T17197] Call Trace: [ 679.533733][T17197] [ 679.536655][T17197] dump_stack_lvl+0x201/0x2d8 [ 679.541347][T17197] ? show_regs_print_info+0x12/0x12 [ 679.546541][T17197] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 679.552245][T17197] ? do_raw_spin_lock+0x151/0x8e0 [ 679.557374][T17197] ? asan.module_dtor+0x20/0x20 [ 679.562226][T17197] dump_header+0xdb/0x970 [ 679.566545][T17197] oom_kill_process+0xf5/0x4e0 [ 679.571303][T17197] out_of_memory+0x711/0xa70 [ 679.575887][T17197] ? preempt_schedule+0x16b/0x190 [ 679.580921][T17197] ? unregister_oom_notifier+0x20/0x20 [ 679.586364][T17197] ? lockdep_hardirqs_on+0x95/0x140 [ 679.591570][T17197] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 679.597113][T17197] ? preempt_schedule_thunk+0x16/0x18 [ 679.602473][T17197] ? mem_cgroup_oom_trylock+0x220/0x220 [ 679.608009][T17197] ? cgroup_file_notify+0x123/0x190 [ 679.613204][T17197] memory_max_write+0x364/0x4f0 [ 679.618053][T17197] ? memory_max_show+0xa0/0xa0 [ 679.622806][T17197] ? read_lock_is_recursive+0x10/0x10 [ 679.628161][T17197] ? memory_max_show+0xa0/0xa0 [ 679.632921][T17197] cgroup_file_write+0x2a4/0x780 [ 679.637862][T17197] ? cgroup_seqfile_stop+0xd0/0xd0 [ 679.642972][T17197] ? cgroup_seqfile_stop+0xd0/0xd0 [ 679.648070][T17197] kernfs_fop_write_iter+0x3b6/0x510 [ 679.653346][T17197] vfs_write+0xb11/0xe90 [ 679.657577][T17197] ? file_end_write+0x230/0x230 [ 679.662427][T17197] ? mutex_lock_nested+0x1a/0x20 [ 679.667371][T17197] ? __fdget_pos+0x24e/0x2f0 [ 679.671943][T17197] ? ksys_write+0x77/0x2c0 [ 679.676358][T17197] ksys_write+0x18f/0x2c0 [ 679.680672][T17197] ? print_irqtrace_events+0x220/0x220 [ 679.686121][T17197] ? __ia32_sys_read+0x80/0x80 [ 679.690874][T17197] ? lockdep_hardirqs_on+0x95/0x140 [ 679.696057][T17197] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 679.702046][T17197] do_syscall_64+0x44/0xd0 [ 679.706455][T17197] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 679.712337][T17197] RIP: 0033:0x7f619074a059 [ 679.716736][T17197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 679.736414][T17197] RSP: 002b:00007f618f0bf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 679.744816][T17197] RAX: ffffffffffffffda RBX: 00007f619085cf60 RCX: 00007f619074a059 [ 679.752776][T17197] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 679.760731][T17197] RBP: 00007f61907a408d R08: 0000000000000000 R09: 0000000000000000 [ 679.768684][T17197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.776640][T17197] R13: 00007ffe39b7b61f R14: 00007f618f0bf300 R15: 0000000000022000 [ 679.784614][T17197] [ 679.800834][ T3677] Bluetooth: hci3: command 0x0409 tx timeout [ 679.816493][T17197] memory: usage 2700kB, limit 32kB, failcnt 1230 [ 679.823653][T17197] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 679.834055][T17197] Memory cgroup stats for /syz4: [ 679.840362][T17197] anon 2207744 [ 679.840362][T17197] file 65536 [ 679.840362][T17197] kernel_stack 65536 [ 679.840362][T17197] pagetables 94208 [ 679.840362][T17197] percpu 0 [ 679.840362][T17197] sock 0 [ 679.840362][T17197] vmalloc 0 [ 679.840362][T17197] shmem 61440 [ 679.840362][T17197] file_mapped 61440 [ 679.840362][T17197] file_dirty 0 [ 679.840362][T17197] file_writeback 0 [ 679.840362][T17197] swapcached 0 [ 679.840362][T17197] anon_thp 2097152 [ 679.840362][T17197] file_thp 0 [ 679.840362][T17197] shmem_thp 0 [ 679.840362][T17197] inactive_anon 2207744 [ 679.840362][T17197] active_anon 61440 [ 679.840362][T17197] inactive_file 4096 [ 679.840362][T17197] active_file 0 [ 679.840362][T17197] unevictable 0 [ 679.840362][T17197] slab_reclaimable 97928 [ 679.840362][T17197] slab_unreclaimable 203024 [ 679.840362][T17197] slab 300952 [ 679.840362][T17197] workingset_refault_anon 0 [ 679.840362][T17197] workingset_refault_file 0 [ 679.952040][T17197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17196,uid=0 [ 679.979142][T17197] Memory cgroup out of memory: Killed process 17196 (syz-executor.4) total-vm:60648kB, anon-rss:2428kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 680.011408][ T28] oom_reaper: reaped process 17196 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:55:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000016002101"], 0x14}}, 0x0) 13:55:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_delroute={0x20, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x6}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 13:55:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086607, 0x0) 13:55:44 executing program 2: mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=',fscontext']) 13:55:44 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:44 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x17d) 13:55:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002940)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002e00), r0) 13:55:44 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x1, @empty}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000240)={0x18, 0x2, {0x3, @dev}}, 0x1e) 13:55:44 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmdt(0x0) [ 680.247992][T17176] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=0 [ 680.261570][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.298860][T17176] CPU: 0 PID: 17176 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 680.307667][T17176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.317737][T17176] Call Trace: [ 680.321024][T17176] [ 680.324023][T17176] dump_stack_lvl+0x201/0x2d8 [ 680.328720][T17176] ? show_regs_print_info+0x12/0x12 [ 680.333936][T17176] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 680.339664][T17176] ? do_raw_spin_lock+0x151/0x8e0 [ 680.344727][T17176] ? asan.module_dtor+0x20/0x20 [ 680.349599][T17176] dump_header+0xdb/0x970 [ 680.353947][T17176] oom_kill_process+0xf5/0x4e0 [ 680.358728][T17176] out_of_memory+0x711/0xa70 [ 680.363334][T17176] ? unregister_oom_notifier+0x20/0x20 [ 680.368822][T17176] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 680.374378][T17176] ? __lock_acquire+0x2b00/0x2b00 [ 680.379416][T17176] ? mem_cgroup_oom_trylock+0x220/0x220 [ 680.384979][T17176] ? do_raw_spin_unlock+0x134/0x8a0 [ 680.390190][T17176] ? mem_cgroup_iter+0x3c9/0x530 [ 680.395146][T17176] mem_cgroup_oom+0x4ad/0x620 [ 680.399846][T17176] try_charge_memcg+0xd37/0x1010 [ 680.404797][T17176] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 680.410822][T17176] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 680.416646][T17176] ? rcu_lock_acquire+0x30/0x30 [ 680.421517][T17176] ? __lock_acquire+0x2b00/0x2b00 [ 680.426579][T17176] obj_cgroup_charge+0x1b2/0x420 [ 680.431535][T17176] ? mod_objcg_mlstate+0x330/0x330 [ 680.436679][T17176] kmem_cache_alloc+0xbd/0x310 [ 680.441451][T17176] ? __alloc_file+0x26/0x2f0 13:55:44 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000080)="e2", 0x1}], 0x1, &(0x7f0000000580)=[{0x10}], 0x10}, 0x0) 13:55:44 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x4b, 0x0, &(0x7f0000000100)) [ 680.446058][T17176] __alloc_file+0x26/0x2f0 [ 680.450479][T17176] ? alloc_empty_file+0x49/0x1b0 [ 680.455431][T17176] alloc_empty_file+0xa9/0x1b0 [ 680.460204][T17176] path_openat+0x111/0x36a0 [ 680.464721][T17176] ? arch_stack_walk+0xf8/0x140 [ 680.469599][T17176] ? __lock_acquire+0x1382/0x2b00 [ 680.474639][T17176] ? __lock_acquire+0x1382/0x2b00 [ 680.479684][T17176] ? do_filp_open+0x4f0/0x4f0 [ 680.484385][T17176] ? rcu_read_lock_sched_held+0x89/0x130 [ 680.490029][T17176] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 680.496035][T17176] do_filp_open+0x277/0x4f0 [ 680.500556][T17176] ? vfs_tmpfile+0x230/0x230 [ 680.505156][T17176] ? alloc_fd+0x5e1/0x680 [ 680.509530][T17176] ? _raw_spin_unlock+0x24/0x40 [ 680.514397][T17176] ? alloc_fd+0x5e1/0x680 [ 680.518791][T17176] do_sys_openat2+0x13b/0x500 [ 680.523490][T17176] ? do_sys_open+0x220/0x220 [ 680.528105][T17176] __x64_sys_openat+0x243/0x290 [ 680.532977][T17176] ? __ia32_sys_open+0x270/0x270 [ 680.537927][T17176] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 680.543917][T17176] ? lockdep_hardirqs_on+0x95/0x140 [ 680.549133][T17176] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 680.555150][T17176] do_syscall_64+0x44/0xd0 [ 680.559584][T17176] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 680.565493][T17176] RIP: 0033:0x7f6190749b98 [ 680.569923][T17176] Code: 24 18 31 c0 41 83 e2 40 75 40 89 f0 25 00 00 41 00 3d 00 00 41 00 74 32 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 40 48 8b 4c 24 18 64 48 2b 0c 25 28 00 00 00 [ 680.589544][T17176] RSP: 002b:00007ffe39b7a710 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 680.597973][T17176] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6190749b98 [ 680.605971][T17176] RDX: 0000000000090800 RSI: 00007ffe39b7b900 RDI: 00000000ffffff9c [ 680.613964][T17176] RBP: 00007ffe39b7b8dc R08: 0000000000090800 R09: 00007ffe39b7b900 [ 680.621936][T17176] R10: 0000000000000000 R11: 0000000000000287 R12: 00007f61907a31ea [ 680.629909][T17176] R13: 00007ffe39b7b900 R14: 000000000000000f R15: 00007ffe39b7b940 [ 680.637881][T17176] [ 680.649902][T17176] memory: usage 404kB, limit 32kB, failcnt 1252 [ 680.656408][T17176] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 680.663263][T17176] Memory cgroup stats for /syz4: [ 680.663450][T17176] anon 36864 [ 680.663450][T17176] file 61440 [ 680.663450][T17176] kernel_stack 0 [ 680.663450][T17176] pagetables 8192 [ 680.663450][T17176] percpu 0 [ 680.663450][T17176] sock 0 [ 680.663450][T17176] vmalloc 0 [ 680.663450][T17176] shmem 61440 [ 680.663450][T17176] file_mapped 61440 [ 680.663450][T17176] file_dirty 0 [ 680.663450][T17176] file_writeback 0 [ 680.663450][T17176] swapcached 0 [ 680.663450][T17176] anon_thp 0 [ 680.663450][T17176] file_thp 0 [ 680.663450][T17176] shmem_thp 0 [ 680.663450][T17176] inactive_anon 36864 [ 680.663450][T17176] active_anon 61440 [ 680.663450][T17176] inactive_file 0 [ 680.663450][T17176] active_file 0 [ 680.663450][T17176] unevictable 0 [ 680.663450][T17176] slab_reclaimable 97928 [ 680.663450][T17176] slab_unreclaimable 198272 [ 680.663450][T17176] slab 296200 [ 680.663450][T17176] workingset_refault_anon 0 [ 680.663450][T17176] workingset_refault_file 0 [ 680.663450][T17176] workingset_activate_anon 0 [ 680.668338][T17207] device bond27 entered promiscuous mode [ 680.668464][T17176] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 680.767799][T17207] device bond27 left promiscuous mode [ 680.768340][T17176] ,cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17176,uid=0 [ 680.791875][T17176] Memory cgroup out of memory: Killed process 17176 (syz-executor.4) total-vm:56676kB, anon-rss:372kB, file-rss:14528kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 680.811283][ T28] oom_reaper: reaped process 17176 (syz-executor.4), now anon-rss:0kB, file-rss:13656kB, shmem-rss:0kB 13:55:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {0x0}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000002280)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000000080)='>', 0x1}], 0x1, &(0x7f00000000c0)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4}], 0x1c}, 0x0) 13:55:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000040)=ANY=[], 0x8) 13:55:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 13:55:45 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)) 13:55:45 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='r', 0x1}], 0x1, &(0x7f0000000200)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @sndrcv={0x2c}, @init={0x14}, @sndrcv={0x2c}, @authinfo={0x10}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast1}, @init={0x14}], 0xc8}, 0x0) 13:55:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast1}], 0x30}, 0x0) 13:55:45 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) 13:55:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="cb", 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0x2c}, 0x0) 13:55:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x8000000020000001, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x12, &(0x7f0000000040)={0x2}, 0x1) [ 681.061411][T17234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000001c0), &(0x7f0000000280)=0x98) 13:55:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="cb", 0x1}], 0x1, &(0x7f0000000080)=[@sndrcv], 0x2c}, 0x0) 13:55:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) [ 681.241529][T17243] device bond28 entered promiscuous mode 13:55:45 executing program 5: clock_gettime(0xf0c92c15f6f6b1cd, 0x0) 13:55:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) [ 681.323209][T17243] device bond28 left promiscuous mode 13:55:46 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:46 executing program 2: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2}, 0x10) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 13:55:46 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 13:55:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast1}, @sndinfo={0x1c}, @init={0x14}, @sndrcv={0x2c}, @sndrcv={0x2c}], 0xb8}, 0x0) 13:55:46 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f0000000580)=ANY=[@ANYRES32], 0x8) 13:55:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="cb", 0x1}], 0x1}, 0x0) r2 = dup2(r1, r0) sendmsg$inet_sctp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x118) sendmsg$inet_sctp(r0, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) 13:55:46 executing program 5: setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x26, &(0x7f0000000000), 0x8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) [ 681.527580][T17266] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000140), 0x8) [ 681.674755][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 682.246394][ T7796] device hsr_slave_0 left promiscuous mode [ 682.266421][ T7796] device hsr_slave_1 left promiscuous mode [ 682.285928][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.293399][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.319258][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.340455][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.358335][ T7796] device bridge_slave_1 left promiscuous mode [ 682.364579][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.397430][ T7796] device bridge_slave_0 left promiscuous mode [ 682.403673][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.433100][ T7796] device veth1_macvtap left promiscuous mode [ 682.439288][ T7796] device veth0_macvtap left promiscuous mode [ 682.455160][ T7796] device veth1_vlan left promiscuous mode [ 682.461274][ T7796] device veth0_vlan left promiscuous mode [ 682.629031][ T7796] team0 (unregistering): Port device team_slave_1 removed [ 682.646133][ T7796] team0 (unregistering): Port device team_slave_0 removed [ 682.659533][ T7796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.677183][ T7796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.740267][ T7796] bond0 (unregistering): Released all slaves [ 684.788226][ T3644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 684.798153][ T3644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 684.806340][ T3644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 684.814617][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 684.823093][ T3644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 684.830404][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 684.917905][T17283] chnl_net:caif_netlink_parms(): no params data found [ 684.962621][T17283] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.969878][T17283] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.978586][T17283] device bridge_slave_0 entered promiscuous mode [ 684.987127][T17283] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.994267][T17283] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.004009][T17283] device bridge_slave_1 entered promiscuous mode [ 685.032534][T17283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.043575][T17283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.072749][T17283] team0: Port device team_slave_0 added [ 685.080024][T17283] team0: Port device team_slave_1 added [ 685.103280][T17283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.110750][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.137077][T17283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.149559][T17283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.156678][T17283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.185430][T17283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.216483][T17283] device hsr_slave_0 entered promiscuous mode [ 685.223321][T17283] device hsr_slave_1 entered promiscuous mode [ 685.230094][T17283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.237796][T17283] Cannot create hsr debugfs directory [ 685.310379][T17283] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.317609][T17283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.324899][T17283] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.332052][T17283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.378326][T17283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.395446][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.407766][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.421586][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.430456][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 685.445590][T17283] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.458167][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.466750][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.473816][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.486197][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.494715][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.501852][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.527172][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 685.544612][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.552809][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.562054][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.575216][T17283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.578725][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.588656][T17283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 685.591954][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.600280][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.626573][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.634045][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.645152][T17283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.878231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.899458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.909155][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 685.917666][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.930037][T17283] device veth0_vlan entered promiscuous mode [ 685.943436][T17283] device veth1_vlan entered promiscuous mode [ 685.967564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 685.977256][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.988377][T17283] device veth0_macvtap entered promiscuous mode [ 685.997521][T17283] device veth1_macvtap entered promiscuous mode [ 686.014093][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 686.024851][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.035882][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 686.046446][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.059660][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 686.075082][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.086030][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 686.101307][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.111319][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 686.125826][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.138566][T17283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.148767][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 686.157328][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 686.165270][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 686.174352][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 686.187597][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 686.198132][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.208008][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 686.218726][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.228844][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 686.239909][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.249800][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 686.260249][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.270218][T17283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 686.280718][T17283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.292025][T17283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.301683][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 686.310763][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 686.378606][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.387201][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.399703][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 686.421375][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.429793][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.441988][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 686.716086][T17305] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 686.730095][T17305] CPU: 1 PID: 17305 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 686.738886][T17305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.748942][T17305] Call Trace: [ 686.752217][T17305] [ 686.755142][T17305] dump_stack_lvl+0x201/0x2d8 [ 686.759824][T17305] ? show_regs_print_info+0x12/0x12 [ 686.765024][T17305] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 686.770739][T17305] ? do_raw_spin_lock+0x151/0x8e0 [ 686.775758][T17305] ? asan.module_dtor+0x20/0x20 [ 686.780610][T17305] dump_header+0xdb/0x970 [ 686.784938][T17305] oom_kill_process+0xf5/0x4e0 [ 686.789702][T17305] out_of_memory+0x711/0xa70 [ 686.794547][T17305] ? unregister_oom_notifier+0x20/0x20 [ 686.800002][T17305] ? lockdep_hardirqs_on+0x95/0x140 [ 686.805200][T17305] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 686.810743][T17305] ? mark_lock+0x191/0x1e00 [ 686.815240][T17305] ? mem_cgroup_oom_trylock+0x220/0x220 [ 686.820777][T17305] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 686.826674][T17305] ? cgroup_file_notify+0x123/0x190 [ 686.831898][T17305] memory_max_write+0x364/0x4f0 [ 686.836749][T17305] ? memory_max_show+0xa0/0xa0 [ 686.841504][T17305] ? read_lock_is_recursive+0x10/0x10 [ 686.846867][T17305] ? memory_max_show+0xa0/0xa0 [ 686.851630][T17305] cgroup_file_write+0x2a4/0x780 [ 686.856567][T17305] ? cgroup_seqfile_stop+0xd0/0xd0 [ 686.861686][T17305] ? cgroup_seqfile_stop+0xd0/0xd0 [ 686.866788][T17305] kernfs_fop_write_iter+0x3b6/0x510 [ 686.872073][T17305] vfs_write+0xb11/0xe90 [ 686.876319][T17305] ? file_end_write+0x230/0x230 [ 686.881177][T17305] ? mutex_lock_nested+0x1a/0x20 [ 686.886106][T17305] ? __fdget_pos+0x24e/0x2f0 [ 686.890689][T17305] ? ksys_write+0x77/0x2c0 [ 686.895097][T17305] ksys_write+0x18f/0x2c0 [ 686.899420][T17305] ? __ia32_sys_read+0x80/0x80 [ 686.904174][T17305] ? syscall_enter_from_user_mode+0x38/0x1b0 [ 686.910155][T17305] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 686.916130][T17305] do_syscall_64+0x44/0xd0 [ 686.920537][T17305] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 686.926423][T17305] RIP: 0033:0x7f1eac7a8059 [ 686.930837][T17305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 686.950442][T17305] RSP: 002b:00007f1eab11d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 686.958995][T17305] RAX: ffffffffffffffda RBX: 00007f1eac8baf60 RCX: 00007f1eac7a8059 [ 686.966966][T17305] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 686.974937][T17305] RBP: 00007f1eac80208d R08: 0000000000000000 R09: 0000000000000000 [ 686.982915][T17305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.990880][T17305] R13: 00007ffe483eea5f R14: 00007f1eab11d300 R15: 0000000000022000 [ 686.998869][T17305] [ 687.009794][ T3677] Bluetooth: hci3: command 0x0409 tx timeout [ 687.035395][T17305] memory: usage 2692kB, limit 32kB, failcnt 1269 [ 687.044203][T17305] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 687.065471][T17305] Memory cgroup stats for /syz4: [ 687.072082][T17305] anon 2203648 [ 687.072082][T17305] file 61440 [ 687.072082][T17305] kernel_stack 65536 [ 687.072082][T17305] pagetables 94208 [ 687.072082][T17305] percpu 0 [ 687.072082][T17305] sock 0 [ 687.072082][T17305] vmalloc 0 [ 687.072082][T17305] shmem 61440 [ 687.072082][T17305] file_mapped 61440 [ 687.072082][T17305] file_dirty 0 [ 687.072082][T17305] file_writeback 0 [ 687.072082][T17305] swapcached 0 [ 687.072082][T17305] anon_thp 2097152 [ 687.072082][T17305] file_thp 0 [ 687.072082][T17305] shmem_thp 0 [ 687.072082][T17305] inactive_anon 2203648 [ 687.072082][T17305] active_anon 61440 [ 687.072082][T17305] inactive_file 0 [ 687.072082][T17305] active_file 0 [ 687.072082][T17305] unevictable 0 [ 687.072082][T17305] slab_reclaimable 97928 [ 687.072082][T17305] slab_unreclaimable 203024 [ 687.072082][T17305] slab 300952 [ 687.072082][T17305] workingset_refault_anon 0 [ 687.072082][T17305] workingset_refault_file 0 [ 687.072082][T17305] workingset_activate_anon 0 [ 687.200428][T17305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17304,uid=0 [ 687.219179][T17305] Memory cgroup out of memory: Killed process 17304 (syz-executor.4) total-vm:60648kB, anon-rss:2424kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 687.243688][ T28] oom_reaper: reaped process 17304 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:20kB 13:55:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:52 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x3, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 13:55:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x1}, 0x10) 13:55:52 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) sendmsg$inet_sctp(r2, &(0x7f00000006c0)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x1c}, 0x0) 13:55:52 executing program 3: r0 = socket(0x1c, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 13:55:52 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000180), 0x10) [ 687.579089][T17312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 687.637646][T17320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendto(r0, 0x0, 0x0, 0x104, 0x0, 0x0) [ 687.695847][T17283] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 687.733886][T17283] CPU: 1 PID: 17283 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 13:55:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@prinfo={0x14}], 0x14}, 0x0) [ 687.742697][T17283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.752858][T17283] Call Trace: [ 687.756150][T17283] [ 687.759090][T17283] dump_stack_lvl+0x201/0x2d8 [ 687.763792][T17283] ? show_regs_print_info+0x12/0x12 [ 687.769007][T17283] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 687.774836][T17283] ? do_raw_spin_lock+0x151/0x8e0 [ 687.779880][T17283] ? asan.module_dtor+0x20/0x20 [ 687.784840][T17283] dump_header+0xdb/0x970 [ 687.789195][T17283] oom_kill_process+0xf5/0x4e0 [ 687.793977][T17283] out_of_memory+0x711/0xa70 [ 687.798584][T17283] ? unregister_oom_notifier+0x20/0x20 [ 687.804075][T17283] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 687.809639][T17283] ? __lock_acquire+0x2b00/0x2b00 [ 687.814684][T17283] ? mem_cgroup_oom_trylock+0x220/0x220 [ 687.820254][T17283] ? do_raw_spin_unlock+0x134/0x8a0 [ 687.825557][T17283] ? mem_cgroup_iter+0x3c9/0x530 [ 687.830521][T17283] mem_cgroup_oom+0x4ad/0x620 [ 687.835219][T17283] try_charge_memcg+0xd37/0x1010 [ 687.840258][T17283] ? __bpf_trace_rcu_stall_warning+0x10/0x10 13:55:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="cb", 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB=','], 0x2c}, 0x0) [ 687.846276][T17283] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 687.852103][T17283] ? rcu_lock_acquire+0x30/0x30 [ 687.856971][T17283] ? __lock_acquire+0x2b00/0x2b00 [ 687.862033][T17283] obj_cgroup_charge+0x1b2/0x420 [ 687.867068][T17283] ? mod_objcg_mlstate+0x330/0x330 [ 687.872308][T17283] kmem_cache_alloc+0xbd/0x310 [ 687.877087][T17283] ? __d_alloc+0x2a/0x700 [ 687.881436][T17283] __d_alloc+0x2a/0x700 [ 687.885609][T17283] d_alloc_parallel+0xd3/0x15c0 [ 687.890476][T17283] ? memset+0x1f/0x40 13:55:52 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)="c4", 0x1, 0x185, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 687.894480][T17283] ? lockdep_init_map_type+0x9f/0x9b0 [ 687.899874][T17283] ? lockdep_softirqs_off+0x420/0x420 [ 687.905262][T17283] ? d_hash_and_lookup+0x1c0/0x1c0 [ 687.910383][T17283] ? __init_waitqueue_head+0x68/0xd0 [ 687.915683][T17283] __lookup_slow+0x110/0x3d0 [ 687.920290][T17283] ? lookup_one_len+0x2c0/0x2c0 [ 687.925161][T17283] ? up_read_non_owner+0x1c0/0x1c0 [ 687.930299][T17283] ? bpf_lsm_inode_permission+0x5/0x10 [ 687.935786][T17283] walk_component+0x516/0x790 [ 687.940500][T17283] ? try_to_unlazy+0xce0/0xce0 13:55:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast1}, @sndinfo={0x1c}, @init={0x14}, @sndrcv={0x2c}, @prinfo={0x14}], 0xa0}, 0x0) [ 687.945282][T17283] ? path_init+0x11f0/0x11f0 [ 687.949896][T17283] path_lookupat+0x19d/0x6c0 [ 687.954593][T17283] filename_lookup+0x270/0x640 [ 687.959381][T17283] ? hashlen_string+0x110/0x110 [ 687.964246][T17283] ? __might_fault+0xb6/0x110 [ 687.968961][T17283] ? strncpy_from_user+0x1f6/0x350 [ 687.974089][T17283] ? getname_flags+0x1fe/0x650 [ 687.978866][T17283] user_path_at_empty+0x40/0x1a0 [ 687.983819][T17283] __x64_sys_umount+0xf0/0x170 [ 687.988595][T17283] ? path_umount+0xfc0/0xfc0 [ 687.993197][T17283] ? lockdep_hardirqs_on+0x95/0x140 [ 687.998407][T17283] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 688.004408][T17283] do_syscall_64+0x44/0xd0 [ 688.008842][T17283] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 688.014773][T17283] RIP: 0033:0x7f1eac7a94c7 [ 688.019204][T17283] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 688.038820][T17283] RSP: 002b:00007ffe483edbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 688.047257][T17283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f1eac7a94c7 [ 688.055766][T17283] RDX: 00007ffe483edc98 RSI: 000000000000000a RDI: 00007ffe483edc80 [ 688.063749][T17283] RBP: 00007ffe483edc80 R08: 0000000000000200 R09: 00007ffe483eda50 [ 688.071739][T17283] R10: 00005555555d5853 R11: 0000000000000246 R12: 00007f1eac8011ea [ 688.079778][T17283] R13: 00007ffe483eed40 R14: 00005555555d5810 R15: 00007ffe483eed80 [ 688.087789][T17283] [ 688.095754][T17283] memory: usage 408kB, limit 32kB, failcnt 1337 [ 688.104496][T17283] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 688.123374][T17326] device bond30 entered promiscuous mode [ 688.156301][T17283] Memory cgroup stats for /syz4: [ 688.156807][T17283] anon 40960 [ 688.156807][T17283] file 61440 [ 688.156807][T17283] kernel_stack 0 [ 688.156807][T17283] pagetables 8192 [ 688.156807][T17283] percpu 0 [ 688.156807][T17283] sock 0 [ 688.156807][T17283] vmalloc 0 [ 688.156807][T17283] shmem 61440 [ 688.156807][T17283] file_mapped 61440 [ 688.156807][T17283] file_dirty 0 [ 688.156807][T17283] file_writeback 0 [ 688.156807][T17283] swapcached 0 [ 688.156807][T17283] anon_thp 0 [ 688.156807][T17283] file_thp 0 [ 688.156807][T17283] shmem_thp 0 [ 688.156807][T17283] inactive_anon 40960 [ 688.156807][T17283] active_anon 61440 [ 688.156807][T17283] inactive_file 0 [ 688.156807][T17283] active_file 0 [ 688.156807][T17283] unevictable 0 [ 688.156807][T17283] slab_reclaimable 97928 [ 688.156807][T17283] slab_unreclaimable 198920 [ 688.156807][T17283] slab 296848 [ 688.156807][T17283] workingset_refault_anon 0 [ 688.156807][T17283] workingset_refault_file 0 [ 688.156807][T17283] workingset_activate_anon 0 [ 688.257618][T17326] device bond30 left promiscuous mode [ 688.270928][T17283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17283,uid=0 [ 688.289687][T17283] Memory cgroup out of memory: Killed process 17283 (syz-executor.4) total-vm:56676kB, anon-rss:364kB, file-rss:14528kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 688.310353][ T28] oom_reaper: reaped process 17283 (syz-executor.4), now anon-rss:0kB, file-rss:13640kB, shmem-rss:0kB 13:55:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:52 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:52 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 13:55:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x10, 0x0, 0x4}, 0x98) 13:55:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000000)={0x0, 0xdb69}, 0x8) 13:55:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000580)={0x0, 0x2, "a8ac"}, &(0x7f0000000680)=0xa) 13:55:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000280)={0x3585}, 0x10) 13:55:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 13:55:53 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x45) 13:55:53 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2018c, 0x0, 0x0) [ 688.538213][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x8000000020000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@init={0x14}, @dstaddrv4={0x10, 0x84, 0x9, @local={0xac, 0x14, 0x0}}], 0x24}, 0x0) 13:55:53 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) [ 688.680764][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 688.788504][T17362] device bond31 entered promiscuous mode [ 688.812050][T17362] device bond31 left promiscuous mode [ 689.476415][ T10] device hsr_slave_0 left promiscuous mode [ 689.482919][ T10] device hsr_slave_1 left promiscuous mode [ 689.496764][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.504207][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.538573][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.555836][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.568808][ T10] device bridge_slave_1 left promiscuous mode [ 689.575045][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.607277][ T10] device bridge_slave_0 left promiscuous mode [ 689.618313][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.639910][ T10] device veth1_macvtap left promiscuous mode [ 689.647139][ T10] device veth0_macvtap left promiscuous mode [ 689.653258][ T10] device veth1_vlan left promiscuous mode [ 689.659305][ T10] device veth0_vlan left promiscuous mode [ 689.842034][ T10] team0 (unregistering): Port device team_slave_1 removed [ 689.858594][ T10] team0 (unregistering): Port device team_slave_0 removed [ 689.870882][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.885057][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.952039][ T10] bond0 (unregistering): Released all slaves [ 691.904481][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 691.914833][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 691.922818][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 691.931266][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 691.939179][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 691.946519][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.029496][T17376] chnl_net:caif_netlink_parms(): no params data found [ 692.078749][T17376] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.086168][T17376] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.093983][T17376] device bridge_slave_0 entered promiscuous mode [ 692.102985][T17376] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.110203][T17376] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.119417][T17376] device bridge_slave_1 entered promiscuous mode [ 692.142720][T17376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.153771][T17376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.183510][T17376] team0: Port device team_slave_0 added [ 692.192462][T17376] team0: Port device team_slave_1 added [ 692.211836][T17376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.218986][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.247480][T17376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.260729][T17376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.268672][T17376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.295386][T17376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.329404][T17376] device hsr_slave_0 entered promiscuous mode [ 692.336633][T17376] device hsr_slave_1 entered promiscuous mode [ 692.343059][T17376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.350793][T17376] Cannot create hsr debugfs directory [ 692.421600][T17376] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.428840][T17376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.436244][T17376] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.443348][T17376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.496411][T17376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.510970][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 692.519512][ T927] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.527533][ T927] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.537271][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 692.550403][T17376] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.562860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 692.571475][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.578601][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.596928][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 692.605281][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.612410][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.624569][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 692.637558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 692.654786][T17376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 692.667594][T17376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.679959][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 692.689002][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 692.698125][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 692.706977][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 692.726968][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 692.734417][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 692.747393][T17376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.987610][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 693.002930][T17376] device veth0_vlan entered promiscuous mode [ 693.012087][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 693.022949][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 693.031214][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 693.041926][T17376] device veth1_vlan entered promiscuous mode [ 693.066207][T17376] device veth0_macvtap entered promiscuous mode [ 693.073831][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 693.082705][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 693.093432][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 693.104103][T17376] device veth1_macvtap entered promiscuous mode [ 693.121632][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.132510][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.142767][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.153598][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.163652][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.174444][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.184668][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.196367][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.206337][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 693.217395][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.229178][T17376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.238109][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 693.247432][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 693.256610][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 693.268083][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.279298][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.294875][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.306044][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.317912][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.328462][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.348440][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.359434][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.369881][T17376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 693.380449][T17376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.391463][T17376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.402887][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 693.411691][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 693.473039][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.488896][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.508836][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 693.519957][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.528910][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.541294][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 693.748882][T17395] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 693.760516][T17395] CPU: 1 PID: 17395 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 693.769271][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.779317][T17395] Call Trace: [ 693.782587][T17395] [ 693.785509][T17395] dump_stack_lvl+0x201/0x2d8 [ 693.790175][T17395] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 693.796321][T17395] ? show_regs_print_info+0x12/0x12 [ 693.801509][T17395] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 693.807658][T17395] ? wake_up_klogd+0xb2/0xf0 [ 693.812249][T17395] dump_header+0xdb/0x970 [ 693.816691][T17395] oom_kill_process+0xf5/0x4e0 [ 693.821535][T17395] out_of_memory+0x711/0xa70 [ 693.826120][T17395] ? unregister_oom_notifier+0x20/0x20 [ 693.831577][T17395] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 693.837567][T17395] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 693.843543][T17395] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 693.849084][T17395] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 693.855245][T17395] ? mem_cgroup_oom_trylock+0x220/0x220 [ 693.860794][T17395] memory_max_write+0x364/0x4f0 [ 693.865675][T17395] ? memory_max_show+0xa0/0xa0 [ 693.870449][T17395] ? read_lock_is_recursive+0x10/0x10 [ 693.875821][T17395] ? memory_max_show+0xa0/0xa0 [ 693.880576][T17395] cgroup_file_write+0x2a4/0x780 [ 693.885596][T17395] ? cgroup_seqfile_stop+0xd0/0xd0 [ 693.890718][T17395] ? cgroup_seqfile_stop+0xd0/0xd0 [ 693.895858][T17395] kernfs_fop_write_iter+0x3b6/0x510 [ 693.901137][T17395] vfs_write+0xb11/0xe90 [ 693.905370][T17395] ? file_end_write+0x230/0x230 [ 693.910231][T17395] ? mutex_lock_nested+0x1a/0x20 [ 693.915173][T17395] ? __fdget_pos+0x24e/0x2f0 [ 693.919760][T17395] ? ksys_write+0x77/0x2c0 [ 693.924182][T17395] ksys_write+0x18f/0x2c0 [ 693.928495][T17395] ? print_irqtrace_events+0x220/0x220 [ 693.933947][T17395] ? __ia32_sys_read+0x80/0x80 [ 693.938694][T17395] ? lockdep_hardirqs_on+0x95/0x140 [ 693.943896][T17395] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 693.949949][T17395] do_syscall_64+0x44/0xd0 [ 693.954354][T17395] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 693.960415][T17395] RIP: 0033:0x7f94eaf3e059 [ 693.964838][T17395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 693.984455][T17395] RSP: 002b:00007f94e98b3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 693.992947][T17395] RAX: ffffffffffffffda RBX: 00007f94eb050f60 RCX: 00007f94eaf3e059 [ 694.000916][T17395] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 694.008896][T17395] RBP: 00007f94eaf9808d R08: 0000000000000000 R09: 0000000000000000 [ 694.016856][T17395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.024816][T17395] R13: 00007ffd43233b6f R14: 00007f94e98b3300 R15: 0000000000022000 [ 694.032797][T17395] [ 694.057008][T17395] memory: usage 2692kB, limit 32kB, failcnt 1354 [ 694.059080][T11482] Bluetooth: hci3: command 0x0409 tx timeout [ 694.064288][T17395] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 694.079749][T17395] Memory cgroup stats for /syz4: [ 694.084872][T17395] anon 2203648 [ 694.084872][T17395] file 65536 [ 694.084872][T17395] kernel_stack 65536 [ 694.084872][T17395] pagetables 94208 [ 694.084872][T17395] percpu 0 [ 694.084872][T17395] sock 0 [ 694.084872][T17395] vmalloc 0 [ 694.084872][T17395] shmem 61440 [ 694.084872][T17395] file_mapped 61440 [ 694.084872][T17395] file_dirty 4096 [ 694.084872][T17395] file_writeback 0 [ 694.084872][T17395] swapcached 0 [ 694.084872][T17395] anon_thp 2097152 [ 694.084872][T17395] file_thp 0 [ 694.084872][T17395] shmem_thp 0 [ 694.084872][T17395] inactive_anon 2187264 [ 694.084872][T17395] active_anon 61440 [ 694.084872][T17395] inactive_file 0 [ 694.084872][T17395] active_file 0 [ 694.084872][T17395] unevictable 0 [ 694.084872][T17395] slab_reclaimable 97928 [ 694.084872][T17395] slab_unreclaimable 201616 [ 694.084872][T17395] slab 299544 [ 694.084872][T17395] workingset_refault_anon 0 [ 694.084872][T17395] workingset_refault_file 0 [ 694.205216][T17395] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17394,uid=0 [ 694.240769][T17395] Memory cgroup out of memory: Killed process 17394 (syz-executor.4) total-vm:60648kB, anon-rss:2428kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 694.270122][ T28] oom_reaper: reaped process 17394 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:55:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {0x0}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:58 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000000)=@un=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f00000002c0)=[{0x10}, {0x10}], 0x20}, 0x0) 13:55:58 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x10, &(0x7f0000000080)=0x40, 0x4) 13:55:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={&(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=[@prinfo={0x14}], 0x14}, 0x0) 13:55:58 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4, 0x7ff}, 0x14) 13:55:58 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:59 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x53, &(0x7f0000000280)={0x0, {{0x1c, 0x1c}}, {{0xfffffe26, 0x1c}}}, 0x108) [ 694.453590][T17376] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 694.456975][T17407] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 694.520095][T17376] CPU: 1 PID: 17376 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 694.528907][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.538978][T17376] Call Trace: [ 694.542264][T17376] [ 694.545198][T17376] dump_stack_lvl+0x201/0x2d8 [ 694.549896][T17376] ? show_regs_print_info+0x12/0x12 [ 694.555114][T17376] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 694.560849][T17376] ? do_raw_spin_lock+0x151/0x8e0 [ 694.565898][T17376] ? asan.module_dtor+0x20/0x20 [ 694.570779][T17376] dump_header+0xdb/0x970 [ 694.575149][T17376] oom_kill_process+0xf5/0x4e0 [ 694.579944][T17376] out_of_memory+0x711/0xa70 [ 694.584644][T17376] ? unregister_oom_notifier+0x20/0x20 [ 694.590132][T17376] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 694.595700][T17376] ? __lock_acquire+0x2b00/0x2b00 [ 694.600825][T17376] ? mem_cgroup_oom_trylock+0x220/0x220 [ 694.606394][T17376] ? do_raw_spin_unlock+0x134/0x8a0 [ 694.611614][T17376] ? mem_cgroup_iter+0x3c9/0x530 [ 694.616575][T17376] mem_cgroup_oom+0x4ad/0x620 [ 694.621280][T17376] try_charge_memcg+0xd37/0x1010 [ 694.626232][T17376] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 694.632564][T17376] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 694.638387][T17376] ? rcu_lock_acquire+0x30/0x30 [ 694.643252][T17376] ? __lock_acquire+0x2b00/0x2b00 [ 694.648323][T17376] obj_cgroup_charge+0x1b2/0x420 [ 694.653250][T17376] ? mod_objcg_mlstate+0x330/0x330 [ 694.658357][T17376] kmem_cache_alloc+0xbd/0x310 [ 694.663106][T17376] ? sk_prot_alloc+0x57/0x230 [ 694.667777][T17376] sk_prot_alloc+0x57/0x230 [ 694.672265][T17376] sk_alloc+0x36/0x340 [ 694.676412][T17376] inet_create+0x601/0xd20 [ 694.680890][T17376] __sock_create+0x580/0x8d0 [ 694.685466][T17376] __sys_socket+0x133/0x380 [ 694.689966][T17376] ? sock_create_kern+0x40/0x40 [ 694.694832][T17376] ? lockdep_hardirqs_on+0x95/0x140 [ 694.700048][T17376] __x64_sys_socket+0x76/0x80 [ 694.704750][T17376] do_syscall_64+0x44/0xd0 [ 694.709195][T17376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 694.715109][T17376] RIP: 0033:0x7f94eaf3f6d7 [ 694.719540][T17376] Code: f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 694.739242][T17376] RSP: 002b:00007ffd432336e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 694.747672][T17376] RAX: ffffffffffffffda RBX: 00007ffd43233e50 RCX: 00007f94eaf3f6d7 [ 694.755658][T17376] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 13:55:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), 0x98) 13:55:59 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000680)=@in6={0x1c, 0x1c}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 13:55:59 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002280)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000002200)=[@authinfo={0x10}], 0x10}, 0x0) 13:55:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) sendmsg$inet_sctp(r2, &(0x7f0000000200)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000002400)=[@init={0x14}, @sndrcv={0x2c}, @init={0x14}, @init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @local={0xfe, 0x80, '\x00', 0x0}}, @init={0x14}, @prinfo={0x14}], 0xac}, 0x0) 13:55:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="cb", 0x1}], 0x1, &(0x7f0000000080)=[@sndrcv={0x2c}], 0x2c}, 0x0) [ 694.763653][T17376] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007ffd43233c60 [ 694.771650][T17376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 694.779641][T17376] R13: 00000000000a9560 R14: 000000000000000f R15: 00007ffd43233e90 [ 694.787649][T17376] [ 694.821628][T17376] memory: usage 416kB, limit 32kB, failcnt 1385 [ 694.830726][T17376] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 694.837316][T17407] device veth75 entered promiscuous mode [ 694.848912][T17376] Memory cgroup stats for /syz4: [ 694.849112][T17376] anon 36864 [ 694.849112][T17376] file 61440 [ 694.849112][T17376] kernel_stack 0 [ 694.849112][T17376] pagetables 8192 [ 694.849112][T17376] percpu 0 [ 694.849112][T17376] sock 0 [ 694.849112][T17376] vmalloc 0 [ 694.849112][T17376] shmem 61440 [ 694.849112][T17376] file_mapped 61440 [ 694.849112][T17376] file_dirty 0 [ 694.849112][T17376] file_writeback 0 [ 694.849112][T17376] swapcached 0 [ 694.849112][T17376] anon_thp 0 [ 694.849112][T17376] file_thp 0 [ 694.849112][T17376] shmem_thp 0 [ 694.849112][T17376] inactive_anon 36864 [ 694.849112][T17376] active_anon 61440 [ 694.849112][T17376] inactive_file 0 [ 694.849112][T17376] active_file 0 [ 694.849112][T17376] unevictable 0 [ 694.849112][T17376] slab_reclaimable 111632 [ 694.849112][T17376] slab_unreclaimable 198160 [ 694.849112][T17376] slab 309792 [ 694.849112][T17376] workingset_refault_anon 0 [ 694.849112][T17376] workingset_refault_file 0 [ 694.849112][T17376] workingset_activate_anon 0 [ 694.981488][T17415] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 694.992709][T17376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17376,uid=0 [ 695.019555][T17376] Memory cgroup out of memory: Killed process 17376 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 695.058950][ T28] oom_reaper: reaped process 17376 (syz-executor.4), now anon-rss:0kB, file-rss:13560kB, shmem-rss:0kB 13:55:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {0x0}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:55:59 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$EVIOCGVERSION(r0, 0x4004667f, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) 13:55:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r0, 0x0) 13:55:59 executing program 5: mq_open(&(0x7f0000000000)='\\@$!%(\x87}\x02\xff\xf0y[\x9b\x05\a\x00\x00\x00Z\b\x96\xcb\xd5\xben\xc5\xa0\xc2\xd1Xjc\xb3\xe2\xdc\xc4\xf6%\xd8\xc0\x80\xc5\xb3\xf0T\x8a\xa4\xa4\x05 w\xd7\x92y`G#j\x82\xa99\xd6{\xae\x89YQr\x96\x18\x14J*\xbd\xc3\xcf^\x1b\xac-00{\x12Z\xf3\b\x00\x00\x00\x00\x00\x00\x00ynB\xbc\xdd\b\x80\xc7\b\xe4\x02#\xe0X\xbeb\xa3yi\x9a\xd1\x95~\xcb\xda\n\xe3\xc6\xf8|\xf0\xaeE?,\x1d\xcf\xdd*\x03 \x83av\x91&%\x8d\v\xa9Rv\xdd\x9eRu=\xadP\x92Q1B\xe2\x88\xa7;3!\x0f\x059\xdfG\x9e\xce\x06=6\xd0\x1b\xc1\xc1\xd7\xbe\xd6\x89Hc\x1f\xcfd\xd9.\x85 /{\xb3\x95\xf7\x14:>\xb0\bGs\x80\x98]nKx\x9a<\xf0\\\xb02\xed\x03\x17\n\xbfDb\x9a\xdf\x14l\x9d\x06\xcd(\xee\x06hS/.cWM,\xf4b.\xadhV*f\xa9\xf34\xfa\xac+\xe49\xe4\x9c\xb6\x00#\xbc\x96\xeb\xd6\xdeb\x88\x11\x90\x05\x14x\xf0\xfe6\xf9\x91X21\xe3*L\xc1H^5Y\xaf \'\xf7\xd2%\x7f\x8f4\x87%\'j\xb5\xd8\xb2\x0f\x82\x06kfd\x15O}\n\xb9\xdbw%\xa8v<\x18nJ\x02\x14C\xd4\x19%\xc6\x8f\xa4\x96\n\x99PP:\x90\xe1\x83\x16Fc\xedy\xfc6\x12\xd2&\xcfJiK\x10\b\xf3\x9d\x9c\xd5\xd42\"\xe8\x96\xe1\xea\xc6\xee#\xc1L;I\'+u\xeeZ\x1b\xff\x14\xa1\xefl&t\xfcv\xd2\xab\xaf\xa7I\xbcf\xca\xde\xd9~4Cu\x98l\xd9\x8a\xc2|l\x17P@\xd5_\xae\xc7\xb1\xcb\xbb\\\xf03\x05s-\xf3\xec!\x83', 0x800, 0x100, 0x0) 13:55:59 executing program 1: pipe(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0xffffffffffffff9b}, 0x0) 13:55:59 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:55:59 executing program 3: mq_open(&(0x7f0000000000)='\\@$!%(\x87}\x02\xff\xf0y[\x9b\x05\a\x00\x00\x00Z\b\x96\xcb\xd5\xben\xc5\xa0\xc2\xd1X\x8dc\xb3\xe2\xdc\xc4\xf6%\xd8\xc0\x80\xc5\xb3\xf0T\x8a\xa4\xa4\x05 w\xd7\x92y`G#j\x82\xa99\xd6{\xae\x89YQr\x96\x18\x14J(\xbd\xc3\xcf^\x1b\xac-00{\x12Z\xf3%\xaf,\a7\x85\xca\x00ynB\xbc\xdd\b\x80\xc7\b\xe4\x02#\xe0X\xbeb\xa3yi\x9a\xd1\x95~\xcb\xda\n\xe3\xc6\xf8|\xf0\xaeE?,\x1d\xcf\xdd*\x03 \x83av\x91&%\x8d\v\xa9Rv\xdd\x9eRu=\xadP\x92Q1B\xe2\x88\xa7;3!\x0f\x059\xdfG\x9e\xce\x06=6\xd0\x1b\xc1\xc1\xd7\xbe\xd6\x89Hc\x1f\xcfd\xd9.\x85 /{\xb3\x95\xf7\x14:>\xb0\bGs\x80\x98]nKx\x9a<\xf0\\\xb02\xed\x03\x17\n\xbfDb\x9a\xdf\x14l\x9d\x06\xcd(\xee\x06hS/.cWM,\xf4b.\xadhV*f\xa9\xf34\xfa\xac+\xe49\xe4\x9c\xb6\x00#Z\x16ixt\xbc\x96\xeb\xd6\xdeb\x88\x11\x90\x05\x14x\xf0\xfe6', 0x800, 0x0, &(0x7f0000000280)) 13:55:59 executing program 1: mq_open(&(0x7f0000000000)='\\@$!%(\x87}\x02\xff\xf0y[\x9b\x05\a\x00\x00\x00Z\b\x96\xcb\xd5\xben\xc5\xa0\xc2\xd1X\x8dc\xb3\xe2\xdc\xc4\xf6%\xd8\xc0\x80\xc5\xb3\xf0T\x8a\xa4\xa4\x05 w\xd7\x92y`G#j\x82\xa99\xd6{\xae\x89YQr\x96\x18\x14J(\xbd\xc3\xcf^\x1b\xac-00{\x12Z\xf3%\xaf,\a7\x85\xca\x00ynB\xbc\xdd\b\x80\xc7\b\xe4\x02#\xe0X\xbeb\xa3yi\x9a\xd1\x95~\xcb\xda\n\xd1\xc6\xf8|\xf0\xaeE?,\x1d\xcf\xdd*\x03 \x83av\x91&%\x8d\v\xa9Rv\xdd\x9eR\xf7\xc6K\x81\x18\xd1%\x0e\x01u=\xadP\x92Q1B\xe2\x88\xa7;3!\x0f\x00\x00\xdfG\x9e\xceHc\x1f\xcfd\xd9.\x85 /{\xb3\x95\xf7\x14:>\xb0\bGs\x80\x98]nKx\x9a<\xf0\\\xb02\xad\x03\x17\n\xbfDb\x9a\xdf\x14l\x9d\x06\xcd(\xee\x06hS/.cWM,\xf4b.\xadhV*f\xa9\xf34\xfa\xac+\xe49\xe4\x9c\xb6\x00#\xbc\x96\xeb\xd6\xdeb\x88\x11\x90\x05\x14x\xf0\xfe6', 0xc0, 0x0, 0x0) mq_open(&(0x7f0000000140)='[\\{\x00', 0x0, 0x100, &(0x7f0000000180)) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 695.195417][T17442] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:55:59 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000080)='cdg\x00', 0x4) 13:55:59 executing program 5: getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000002bc0), 0x0) [ 695.306933][T17442] device veth77 entered promiscuous mode 13:55:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000002280), &(0x7f00000022c0)=0x8) 13:55:59 executing program 3: symlink(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)='./file0\x00') 13:56:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {0x0}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpid() sendmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="d76a", 0x11d80}], 0x300, &(0x7f0000000280)=[@cred], 0x20}, 0x0) [ 695.386680][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:00 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x47e51f1a379dbcbc) 13:56:00 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$EVIOCGVERSION(r0, 0x4004667f, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) write(r1, 0x0, 0x0) 13:56:00 executing program 1: symlink(&(0x7f0000002c40)='./file0\x00', 0x0) [ 695.578177][T17445] device bond33 entered promiscuous mode [ 695.641832][T17445] device bond33 left promiscuous mode 13:56:00 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:56:00 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$EVIOCGVERSION(r0, 0x4004667f, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r1, r2) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x3f, 0x1, "1c"}, 0x9) 13:56:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 13:56:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x3f, 0x1, "1c"}, 0x9) 13:56:00 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 13:56:00 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f00000009c0)=@abs={0x8}, 0x8, 0x0}, 0x0) [ 695.932494][T17484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000180), &(0x7f0000000000)=0x98) [ 696.076851][T17484] device veth79 entered promiscuous mode [ 696.139790][T17489] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 696.237237][T17484] device bond34 entered promiscuous mode [ 696.264108][T17484] device bond34 left promiscuous mode [ 696.720063][ T54] device hsr_slave_0 left promiscuous mode [ 696.727853][ T54] device hsr_slave_1 left promiscuous mode [ 696.734455][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.749873][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.764575][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.772470][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.782868][ T54] device bridge_slave_1 left promiscuous mode [ 696.789300][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.798119][ T54] device bridge_slave_0 left promiscuous mode [ 696.804300][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.816095][ T54] device veth1_macvtap left promiscuous mode [ 696.822120][ T54] device veth0_macvtap left promiscuous mode [ 696.828518][ T54] device veth1_vlan left promiscuous mode [ 696.834312][ T54] device veth0_vlan left promiscuous mode [ 697.010457][ T54] team0 (unregistering): Port device team_slave_1 removed [ 697.031167][ T54] team0 (unregistering): Port device team_slave_0 removed [ 697.043141][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.060792][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.133498][ T54] bond0 (unregistering): Released all slaves [ 701.095972][ T3650] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 703.907376][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 703.917943][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 703.925975][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 703.934173][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 703.942237][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 703.950603][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 704.035473][T17496] chnl_net:caif_netlink_parms(): no params data found [ 704.080529][T17496] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.087761][T17496] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.095586][T17496] device bridge_slave_0 entered promiscuous mode [ 704.104652][T17496] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.112032][T17496] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.120236][T17496] device bridge_slave_1 entered promiscuous mode [ 704.147473][T17496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.160913][T17496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.189765][T17496] team0: Port device team_slave_0 added [ 704.197695][T17496] team0: Port device team_slave_1 added [ 704.217133][T17496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.224090][T17496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.250314][T17496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.263786][T17496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.271519][T17496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.299197][T17496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.332538][T17496] device hsr_slave_0 entered promiscuous mode [ 704.339597][T17496] device hsr_slave_1 entered promiscuous mode [ 704.346437][T17496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.354006][T17496] Cannot create hsr debugfs directory [ 704.424315][T17496] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.431698][T17496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.439105][T17496] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.446258][T17496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.493602][T17496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.509228][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 704.521912][T14287] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.529968][T14287] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.538816][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 704.552307][T17496] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.566304][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 704.574710][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.581844][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.597330][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 704.606122][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.613186][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.627487][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 704.639933][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 704.648341][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 704.663126][T17496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.674054][T17496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.687277][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 704.695555][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 704.706097][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 704.724171][T17496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.731427][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 704.739490][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 704.986300][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 705.000878][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 705.011516][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 705.019939][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 705.028810][T17496] device veth0_vlan entered promiscuous mode [ 705.043288][T17496] device veth1_vlan entered promiscuous mode [ 705.064552][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 705.073792][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 705.090057][T17496] device veth0_macvtap entered promiscuous mode [ 705.101406][T17496] device veth1_macvtap entered promiscuous mode [ 705.116296][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 705.126894][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.137435][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 705.147999][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.157930][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 705.168495][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.182118][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 705.192870][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.202977][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 705.213552][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.226818][T17496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.235147][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 705.243500][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 705.251663][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 705.260508][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 705.271777][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 705.283542][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.294010][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 705.305492][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.315566][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 705.326408][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.337815][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 705.348385][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.358623][T17496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 705.369320][T17496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.381556][T17496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.395423][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 705.404674][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 705.468792][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.483124][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.494731][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 705.520381][ T7796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.528810][ T7796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.540022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 705.771152][T17515] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 705.783157][T17515] CPU: 1 PID: 17515 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 705.791934][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.802083][T17515] Call Trace: [ 705.805359][T17515] [ 705.808373][T17515] dump_stack_lvl+0x201/0x2d8 [ 705.813055][T17515] ? show_regs_print_info+0x12/0x12 [ 705.818440][T17515] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 705.824153][T17515] ? do_raw_spin_lock+0x151/0x8e0 [ 705.829174][T17515] ? asan.module_dtor+0x20/0x20 [ 705.834022][T17515] dump_header+0xdb/0x970 [ 705.838348][T17515] oom_kill_process+0xf5/0x4e0 [ 705.843372][T17515] out_of_memory+0x711/0xa70 [ 705.847956][T17515] ? unregister_oom_notifier+0x20/0x20 [ 705.853405][T17515] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 705.859378][T17515] ? __lock_acquire+0x2b00/0x2b00 [ 705.864414][T17515] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 705.869967][T17515] ? mem_cgroup_oom_trylock+0x220/0x220 [ 705.875515][T17515] ? cgroup_file_notify+0x123/0x190 [ 705.880708][T17515] memory_max_write+0x364/0x4f0 [ 705.885561][T17515] ? memory_max_show+0xa0/0xa0 [ 705.890317][T17515] ? read_lock_is_recursive+0x10/0x10 [ 705.895685][T17515] ? memory_max_show+0xa0/0xa0 [ 705.900444][T17515] cgroup_file_write+0x2a4/0x780 [ 705.905386][T17515] ? cgroup_seqfile_stop+0xd0/0xd0 [ 705.910526][T17515] ? cgroup_seqfile_stop+0xd0/0xd0 [ 705.915634][T17515] kernfs_fop_write_iter+0x3b6/0x510 [ 705.920926][T17515] vfs_write+0xb11/0xe90 [ 705.925167][T17515] ? file_end_write+0x230/0x230 [ 705.930284][T17515] ? mutex_lock_nested+0x1a/0x20 [ 705.935212][T17515] ? __fdget_pos+0x24e/0x2f0 [ 705.939815][T17515] ? ksys_write+0x77/0x2c0 [ 705.944240][T17515] ksys_write+0x18f/0x2c0 [ 705.948930][T17515] ? __ia32_sys_read+0x80/0x80 [ 705.953720][T17515] ? syscall_enter_from_user_mode+0x38/0x1b0 [ 705.959719][T17515] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 705.965703][T17515] do_syscall_64+0x44/0xd0 [ 705.970123][T17515] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 705.976019][T17515] RIP: 0033:0x7fa23145c059 [ 705.980445][T17515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 706.000045][T17515] RSP: 002b:00007fa22fdd1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 706.008475][T17515] RAX: ffffffffffffffda RBX: 00007fa23156ef60 RCX: 00007fa23145c059 [ 706.016438][T17515] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 706.024408][T17515] RBP: 00007fa2314b608d R08: 0000000000000000 R09: 0000000000000000 [ 706.032369][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.040328][T17515] R13: 00007ffc1042908f R14: 00007fa22fdd1300 R15: 0000000000022000 [ 706.048330][T17515] [ 706.061047][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 706.098407][T17515] memory: usage 2672kB, limit 32kB, failcnt 1402 [ 706.105387][T17515] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.113205][T17515] Memory cgroup stats for /syz4: [ 706.117708][T17515] anon 2207744 [ 706.117708][T17515] file 65536 [ 706.117708][T17515] kernel_stack 65536 [ 706.117708][T17515] pagetables 94208 [ 706.117708][T17515] percpu 0 [ 706.117708][T17515] sock 0 [ 706.117708][T17515] vmalloc 0 [ 706.117708][T17515] shmem 61440 [ 706.117708][T17515] file_mapped 61440 [ 706.117708][T17515] file_dirty 4096 [ 706.117708][T17515] file_writeback 0 [ 706.117708][T17515] swapcached 0 [ 706.117708][T17515] anon_thp 2097152 [ 706.117708][T17515] file_thp 0 [ 706.117708][T17515] shmem_thp 0 [ 706.117708][T17515] inactive_anon 2166784 [ 706.117708][T17515] active_anon 61440 [ 706.117708][T17515] inactive_file 0 [ 706.117708][T17515] active_file 0 [ 706.117708][T17515] unevictable 0 [ 706.117708][T17515] slab_reclaimable 111632 [ 706.117708][T17515] slab_unreclaimable 165280 [ 706.117708][T17515] slab 276912 [ 706.117708][T17515] workingset_refault_anon 0 [ 706.117708][T17515] workingset_refault_file 0 [ 706.234651][T17515] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17514,uid=0 [ 706.266340][T17515] Memory cgroup out of memory: Killed process 17514 (syz-executor.4) total-vm:60648kB, anon-rss:2424kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 706.288767][ T28] oom_reaper: reaped process 17514 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:56:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:10 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$EVIOCGVERSION(r0, 0x4004667f, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r1, r2) 13:56:10 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$EVIOCGVERSION(r0, 0x4004667f, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) r4 = dup(r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)=0x8) 13:56:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r0, 0xe9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendto$inet(r1, &(0x7f0000001800)="e1554868d0926284b76441b6dd5c3f36a30a845df68a401e22beb695433c23660bfb60c4709e237c9a9756261abf9ccf24774c0d953348ef1fd0629332d52f03bd60f664873555a884c5b4ad9fd2c84781359dd26c58e1e207b3ab67c1607ada5b9546725564e0b5963acc1f2b095bb2d8eceb7a739b695cea099fb6889bdaefd0628a667ab691a3f68763e0428836b0b99dd5d0f0b8e06168", 0x99, 0x0, 0x0, 0x0) 13:56:10 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) 13:56:10 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000980), 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:56:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 13:56:11 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$EVIOCGVERSION(r0, 0x4004667f, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r1, r2) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x0, 0x1, "1c"}, 0x9) [ 706.430239][T17523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 706.506818][T17496] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 706.526418][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:11 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) bind(r0, &(0x7f0000000080)=@un=@file={0xa}, 0xa) 13:56:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000080)='O', 0x1, 0x119, &(0x7f0000002a40)={0x10, 0x2}, 0x10) [ 706.586817][T17496] CPU: 1 PID: 17496 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 706.595627][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.605741][T17496] Call Trace: [ 706.609035][T17496] [ 706.611979][T17496] dump_stack_lvl+0x201/0x2d8 [ 706.616679][T17496] ? show_regs_print_info+0x12/0x12 [ 706.621899][T17496] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 706.627638][T17496] ? do_raw_spin_lock+0x151/0x8e0 [ 706.632690][T17496] ? asan.module_dtor+0x20/0x20 [ 706.637563][T17496] dump_header+0xdb/0x970 [ 706.641923][T17496] oom_kill_process+0xf5/0x4e0 [ 706.646705][T17496] out_of_memory+0x711/0xa70 [ 706.651313][T17496] ? unregister_oom_notifier+0x20/0x20 [ 706.656814][T17496] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 706.662386][T17496] ? __lock_acquire+0x2b00/0x2b00 [ 706.667426][T17496] ? mem_cgroup_oom_trylock+0x220/0x220 [ 706.673005][T17496] ? do_raw_spin_unlock+0x134/0x8a0 [ 706.678223][T17496] ? mem_cgroup_iter+0x3c9/0x530 13:56:11 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$EVIOCGVERSION(r0, 0x4004667f, 0xffffffffffffffff) open(0x0, 0x0, 0x0) [ 706.683185][T17496] mem_cgroup_oom+0x4ad/0x620 [ 706.687886][T17496] try_charge_memcg+0xd37/0x1010 [ 706.692863][T17496] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 706.698706][T17496] ? rcu_lock_acquire+0x30/0x30 [ 706.703579][T17496] ? __lock_acquire+0x2b00/0x2b00 [ 706.708640][T17496] charge_memcg+0x104/0x4a0 [ 706.713173][T17496] ? __mem_cgroup_charge+0x80/0x80 [ 706.718312][T17496] __mem_cgroup_charge+0x23/0x80 [ 706.723268][T17496] do_anonymous_page+0x3ab/0xe90 [ 706.728237][T17496] ? fault_around_bytes_set+0xb0/0xb0 13:56:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, @in, 0xffffd97a, 0x0, 0x0, 0x0, 0x8}, 0x98) [ 706.733667][T17496] handle_mm_fault+0x1da3/0x39e0 [ 706.738646][T17496] ? numa_migrate_prep+0x190/0x190 [ 706.743792][T17496] ? vmacache_find+0x228/0x5d0 [ 706.748583][T17496] do_user_addr_fault+0x8c4/0x1060 [ 706.753730][T17496] exc_page_fault+0xa1/0x1e0 [ 706.758341][T17496] ? asm_exc_page_fault+0x8/0x30 [ 706.763302][T17496] asm_exc_page_fault+0x1e/0x30 [ 706.768166][T17496] RIP: 0033:0x7fa231421738 [ 706.772589][T17496] Code: 9e 00 00 00 48 89 fd 4c 8d 66 ff 4c 8d 8c 24 00 01 00 00 4c 8d 6c 24 10 45 31 c0 31 c9 ba ff ff ff ff be 00 80 00 00 4c 89 ef <4c> 89 4c 24 08 e8 0e 3e 00 00 48 89 e9 4c 89 e2 48 89 ee 48 8d 05 [ 706.792208][T17496] RSP: 002b:00007ffc10427f80 EFLAGS: 00010246 [ 706.798294][T17496] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 706.806279][T17496] RDX: 00000000ffffffff RSI: 0000000000008000 RDI: 00007ffc10427f90 [ 706.814268][T17496] RBP: 00007ffc104282b0 R08: 0000000000000000 R09: 00007ffc10428080 [ 706.822342][T17496] R10: 0000000000000231 R11: 0000000000000293 R12: 0000000000000fff [ 706.830327][T17496] R13: 00007ffc10427f90 R14: 00007fa2314b5209 R15: 00007ffc10428110 [ 706.838335][T17496] [ 706.852281][T17533] device bond35 entered promiscuous mode [ 706.871428][T17533] device bond35 left promiscuous mode [ 706.878344][T17496] memory: usage 388kB, limit 32kB, failcnt 1422 [ 706.884812][T17496] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 706.892613][T17496] Memory cgroup stats for /syz4: [ 706.892812][T17496] anon 40960 [ 706.892812][T17496] file 61440 [ 706.892812][T17496] kernel_stack 0 [ 706.892812][T17496] pagetables 8192 [ 706.892812][T17496] percpu 0 [ 706.892812][T17496] sock 0 [ 706.892812][T17496] vmalloc 0 [ 706.892812][T17496] shmem 61440 [ 706.892812][T17496] file_mapped 61440 [ 706.892812][T17496] file_dirty 0 [ 706.892812][T17496] file_writeback 0 [ 706.892812][T17496] swapcached 0 [ 706.892812][T17496] anon_thp 0 [ 706.892812][T17496] file_thp 0 [ 706.892812][T17496] shmem_thp 0 [ 706.892812][T17496] inactive_anon 40960 [ 706.892812][T17496] active_anon 61440 [ 706.892812][T17496] inactive_file 0 [ 706.892812][T17496] active_file 0 [ 706.892812][T17496] unevictable 0 [ 706.892812][T17496] slab_reclaimable 111632 [ 706.892812][T17496] slab_unreclaimable 161176 [ 706.892812][T17496] slab 272808 [ 706.892812][T17496] workingset_refault_anon 0 [ 706.892812][T17496] workingset_refault_file 0 [ 706.892812][T17496] workingset_activate_anon 0 [ 707.000511][T17496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17496,uid=0 [ 707.020448][T17496] Memory cgroup out of memory: Killed process 17496 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 707.039480][ T28] oom_reaper: reaped process 17496 (syz-executor.4), now anon-rss:0kB, file-rss:13544kB, shmem-rss:0kB 13:56:11 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) write$tun(r0, 0x0, 0x0) 13:56:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:11 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 13:56:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x0, 0x0, "9a06da", 0x2}) 13:56:11 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000000)={'team0\x00'}) 13:56:11 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000980), 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:56:11 executing program 5: r0 = socket(0xa, 0x3, 0x80) setsockopt$llc_int(r0, 0x10c, 0x0, 0x0, 0x0) 13:56:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) 13:56:11 executing program 1: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)='t', 0x1, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)='t', 0x1, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000c40), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000d00)="4d1f65e8f6e704912746706f833a665313569b85d38003c626dfb308000000000000005f98d2e579be79c9b4f04b5a2ed157900299c7a319bb67e777c962e74a18a9c2bfb0d7078de3c0a95307c95e9e0cd5a7f5ed2a34a38cd185e016c1d380a57025405a000000000000000000001617f17a81cca104d8b88b7852d9d37e8f99137270ab6927a8bd17cd7246a1c553eae664a2a0abfcd988feddcf6b62529a2f59efc83a0d29719da7d01e68a92a148203d8b79eb3cba4748c2163f7c0a37576736499309ab1c1ebe700e8424c8817c06c5caad20acaf882429f19010fed4b913b1727e6c437a0088e429cc3cdeb7d2195743c923e7d7a86bcabf952b46588efb00e5ae5de56437dd57ff3cd5e280d29b046c50aba97bcbe6a713db85dd20f3e2e7412959bba", 0x127, 0xfffffffffffffffc) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={'wp512\x00'}}) 13:56:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x21, 0x0, &(0x7f00000000c0)) 13:56:11 executing program 5: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)='t', 0x1, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)='t', 0x1, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000c40), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000d00)="4d1f65e8f6e704912746706f833a665313569b85d38003c626dfb308000000000000005f98d2e579be79c9b4f04b5a2ed157900299c7a319bb67e777c962e74a18a9c2bfb0d7078de3c0a95307c95e9e0cd5a7f5ed2a34a38cd185e016c1d380a57025405a000000000000000000001617f17a81cca104d8b88b7852d9d37e8f99137270ab6927a8bd17cd7246a1c553eae664a2a0abfcd988feddcf6b62529a2f59efc83a0d29719da7d01e68a92a148203d8b79eb3cba4748c2163f7c0a37576736499309ab1c1ebe700e8424c8817c06c5caad20acaf882429f19010fed4b913b1727e6c437a0088e429cc3cdeb7d2195743c923e7d7a86", 0xf9, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={'wp512\x00'}}) [ 707.277488][T17560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x3}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454ca, 0x0) [ 707.453143][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:12 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000040)) [ 707.716624][T17569] device bond36 entered promiscuous mode [ 707.786815][T17569] device bond36 left promiscuous mode 13:56:12 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a0, &(0x7f0000000000)={'team0\x00'}) 13:56:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200003, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000080)=""/125, 0x7d}}, 0x120) writev(r1, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000240)="ee", 0x1}], 0x2) write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[], 0x44) r2 = epoll_create(0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) truncate(0x0, 0xa0000) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)) 13:56:12 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000980), 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 708.003832][T17584] loop5: detected capacity change from 0 to 4096 13:56:12 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000040)) 13:56:12 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000040)) [ 708.061043][T17586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 708.182015][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.197839][T17584] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 708.242831][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.321896][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.394391][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 13:56:13 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000040)) [ 708.436983][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.475869][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.513200][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.561974][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.583989][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.615962][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.676088][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.704153][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.713771][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.729378][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.742200][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.753972][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.784012][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.811684][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.840205][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.868593][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 13:56:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x7, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x64}}, 0x0) 13:56:13 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000040)) 13:56:13 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000040)) [ 708.892331][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.909932][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.940213][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 708.968600][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.029721][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.088864][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.113563][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.133840][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.164123][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.187133][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.205774][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.230826][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.263769][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.316156][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.341101][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.359239][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.376340][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.392055][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.408868][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.425870][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.441434][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.456949][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.473601][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.489489][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.506138][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.521484][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.536924][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.552271][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.567722][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.584192][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.600890][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.616346][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.631677][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.647066][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.662681][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.679226][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.695174][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.711856][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.727278][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.742737][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.758197][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.774722][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.790323][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.805789][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.822290][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.837710][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.853061][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.869640][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.885058][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.901963][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.917472][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.932789][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.949379][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.964745][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.980602][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 709.997570][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.012872][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.029517][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.042725][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.050883][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.058534][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.066126][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.073584][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.082155][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.089881][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.097980][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.105451][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.112958][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.120487][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.128038][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.135555][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.143124][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.150675][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.158207][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.165789][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.173248][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.180768][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.188310][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.196364][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.203771][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.211234][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.218920][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.227654][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.235048][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.242553][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.249985][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.257544][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.264943][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.272395][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.279930][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.287384][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.299727][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.307235][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.314641][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.322194][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.329643][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.337640][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.345123][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.352724][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.360177][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.367674][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.375057][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.382992][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.390509][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.399202][T14287] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 710.415463][T14287] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 710.447869][T17594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 710.528660][T16006] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 710.798269][ T44] device hsr_slave_0 left promiscuous mode [ 710.804845][ T44] device hsr_slave_1 left promiscuous mode [ 710.812920][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.821313][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.831230][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.838781][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.848367][ T44] device bridge_slave_1 left promiscuous mode [ 710.854563][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.863367][ T44] device bridge_slave_0 left promiscuous mode [ 710.874251][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.888432][ T44] device veth1_macvtap left promiscuous mode [ 710.894442][ T44] device veth0_macvtap left promiscuous mode [ 710.905532][ T44] device veth1_vlan left promiscuous mode [ 710.912540][ T44] device veth0_vlan left promiscuous mode [ 711.111854][ T44] team0 (unregistering): Port device team_slave_1 removed [ 711.138294][ T44] team0 (unregistering): Port device team_slave_0 removed [ 711.167168][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.185593][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.270257][ T44] bond0 (unregistering): Released all slaves [ 712.330507][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 712.340064][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 712.349160][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 712.361613][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 712.369347][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 712.386052][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.501886][T17623] chnl_net:caif_netlink_parms(): no params data found [ 712.567014][T17623] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.574176][T17623] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.582966][T17623] device bridge_slave_0 entered promiscuous mode [ 712.591428][T17623] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.600428][T17623] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.609425][T17623] device bridge_slave_1 entered promiscuous mode [ 712.633866][T17623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.645820][T17623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.688615][T17623] team0: Port device team_slave_0 added [ 712.700291][T17623] team0: Port device team_slave_1 added [ 712.732796][T17623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.744254][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.772226][T17623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.786833][T17623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.793790][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.820237][T17623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.847941][T17623] device hsr_slave_0 entered promiscuous mode [ 712.856259][T17623] device hsr_slave_1 entered promiscuous mode [ 712.862930][T17623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.870679][T17623] Cannot create hsr debugfs directory [ 712.938421][T17623] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.945510][T17623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.952901][T17623] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.960000][T17623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.009703][T17623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.022542][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.032642][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.040647][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.049339][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 713.064767][T17623] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.075706][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.084045][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.091180][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.112762][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 713.121408][T14287] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.128570][T14287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.150258][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 713.160734][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 713.170470][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 713.179409][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 713.192140][T17623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.204123][T17623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 713.214132][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 713.235007][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.243164][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.256488][T17623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.508029][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 713.521990][T17623] device veth0_vlan entered promiscuous mode [ 713.530571][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 713.539361][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 713.550267][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 713.558623][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 713.569997][T17623] device veth1_vlan entered promiscuous mode [ 713.597326][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 713.605243][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 713.613556][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 713.622422][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 713.634339][T17623] device veth0_macvtap entered promiscuous mode [ 713.646264][T17623] device veth1_macvtap entered promiscuous mode [ 713.664600][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 713.676102][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.687182][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 713.699040][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.708914][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 713.719401][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.729434][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 713.740848][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.751034][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 713.761724][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.773420][T17623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.782773][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 713.791715][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 713.800105][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 713.808999][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 713.820385][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 713.832470][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.842640][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 713.854282][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.864141][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 713.874664][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.885293][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 713.895915][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.906053][T17623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 713.919585][T17623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.930711][T17623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.940150][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 713.949573][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 714.009291][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.023618][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.039801][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 714.053180][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.065956][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.079766][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 714.339027][T17642] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 714.351116][T17642] CPU: 1 PID: 17642 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 714.359893][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.369939][T17642] Call Trace: [ 714.373225][T17642] [ 714.376150][T17642] dump_stack_lvl+0x201/0x2d8 [ 714.380863][T17642] ? show_regs_print_info+0x12/0x12 [ 714.386056][T17642] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 714.391786][T17642] ? do_raw_spin_lock+0x151/0x8e0 [ 714.396838][T17642] ? asan.module_dtor+0x20/0x20 [ 714.401684][T17642] dump_header+0xdb/0x970 [ 714.406015][T17642] oom_kill_process+0xf5/0x4e0 [ 714.410794][T17642] out_of_memory+0x711/0xa70 [ 714.415386][T17642] ? preempt_schedule+0x16b/0x190 [ 714.420405][T17642] ? unregister_oom_notifier+0x20/0x20 [ 714.425852][T17642] ? lockdep_hardirqs_on+0x95/0x140 [ 714.431070][T17642] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 714.436620][T17642] ? preempt_schedule_thunk+0x16/0x18 [ 714.441986][T17642] ? mem_cgroup_oom_trylock+0x220/0x220 [ 714.447548][T17642] ? cgroup_file_notify+0x123/0x190 [ 714.452768][T17642] memory_max_write+0x364/0x4f0 [ 714.455803][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 714.457636][T17642] ? memory_max_show+0xa0/0xa0 [ 714.468449][T17642] ? read_lock_is_recursive+0x10/0x10 [ 714.473838][T17642] ? memory_max_show+0xa0/0xa0 [ 714.478609][T17642] cgroup_file_write+0x2a4/0x780 [ 714.483544][T17642] ? cgroup_seqfile_stop+0xd0/0xd0 [ 714.488666][T17642] ? cgroup_seqfile_stop+0xd0/0xd0 [ 714.493846][T17642] kernfs_fop_write_iter+0x3b6/0x510 [ 714.499244][T17642] vfs_write+0xb11/0xe90 [ 714.503507][T17642] ? file_end_write+0x230/0x230 [ 714.508357][T17642] ? __fget_files+0x1f/0x440 [ 714.512992][T17642] ? mutex_lock_nested+0x1a/0x20 [ 714.517941][T17642] ? __fdget_pos+0x24e/0x2f0 [ 714.522540][T17642] ? ksys_write+0x77/0x2c0 [ 714.527128][T17642] ksys_write+0x18f/0x2c0 [ 714.531470][T17642] ? print_irqtrace_events+0x220/0x220 [ 714.536950][T17642] ? __ia32_sys_read+0x80/0x80 [ 714.541728][T17642] ? lockdep_hardirqs_on+0x95/0x140 [ 714.546935][T17642] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 714.552928][T17642] do_syscall_64+0x44/0xd0 [ 714.557348][T17642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 714.563228][T17642] RIP: 0033:0x7ff4dd74d059 [ 714.567630][T17642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 714.587242][T17642] RSP: 002b:00007ff4dc0c2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.595672][T17642] RAX: ffffffffffffffda RBX: 00007ff4dd85ff60 RCX: 00007ff4dd74d059 [ 714.603818][T17642] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 714.611783][T17642] RBP: 00007ff4dd7a708d R08: 0000000000000000 R09: 0000000000000000 [ 714.619761][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.627725][T17642] R13: 00007ffdeadb847f R14: 00007ff4dc0c2300 R15: 0000000000022000 [ 714.635883][T17642] [ 714.667919][T17642] memory: usage 2656kB, limit 32kB, failcnt 1439 [ 714.674501][T17642] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 714.681936][T17642] Memory cgroup stats for /syz4: [ 714.682834][T17642] anon 2207744 [ 714.682834][T17642] file 61440 [ 714.682834][T17642] kernel_stack 65536 [ 714.682834][T17642] pagetables 94208 [ 714.682834][T17642] percpu 0 [ 714.682834][T17642] sock 0 [ 714.682834][T17642] vmalloc 0 [ 714.682834][T17642] shmem 61440 [ 714.682834][T17642] file_mapped 61440 [ 714.682834][T17642] file_dirty 0 [ 714.682834][T17642] file_writeback 0 [ 714.682834][T17642] swapcached 0 [ 714.682834][T17642] anon_thp 2097152 [ 714.682834][T17642] file_thp 0 [ 714.682834][T17642] shmem_thp 0 [ 714.682834][T17642] inactive_anon 2207744 [ 714.682834][T17642] active_anon 61440 [ 714.682834][T17642] inactive_file 0 [ 714.682834][T17642] active_file 0 [ 714.682834][T17642] unevictable 0 [ 714.682834][T17642] slab_reclaimable 97928 [ 714.682834][T17642] slab_unreclaimable 164632 [ 714.682834][T17642] slab 262560 [ 714.682834][T17642] workingset_refault_anon 0 [ 714.682834][T17642] workingset_refault_file 0 [ 714.682834][T17642] workingset_activate_anon 0 [ 714.801765][T17642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17641,uid=0 [ 714.828264][T17642] Memory cgroup out of memory: Killed process 17641 (syz-executor.4) total-vm:60648kB, anon-rss:2428kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 714.849675][ T28] oom_reaper: reaped process 17641 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:56:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:19 executing program 1: r0 = socket(0x2b, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}}, 0x280400d0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 13:56:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0xc0045878, 0x0) 13:56:19 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000040)) 13:56:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 13:56:19 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 714.994210][T17623] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 715.007262][T17623] CPU: 1 PID: 17623 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 715.016053][T17623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.026122][T17623] Call Trace: [ 715.029411][T17623] [ 715.032354][T17623] dump_stack_lvl+0x201/0x2d8 [ 715.037051][T17623] ? show_regs_print_info+0x12/0x12 [ 715.042363][T17623] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 715.048089][T17623] ? do_raw_spin_lock+0x151/0x8e0 [ 715.053115][T17623] ? asan.module_dtor+0x20/0x20 [ 715.057963][T17623] dump_header+0xdb/0x970 [ 715.062296][T17623] oom_kill_process+0xf5/0x4e0 [ 715.067060][T17623] out_of_memory+0x711/0xa70 [ 715.071650][T17623] ? unregister_oom_notifier+0x20/0x20 [ 715.077134][T17623] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 715.082692][T17623] ? __lock_acquire+0x2b00/0x2b00 [ 715.087820][T17623] ? mem_cgroup_oom_trylock+0x220/0x220 [ 715.093376][T17623] ? do_raw_spin_unlock+0x134/0x8a0 [ 715.098575][T17623] ? mem_cgroup_iter+0x3c9/0x530 [ 715.103688][T17623] mem_cgroup_oom+0x4ad/0x620 [ 715.108369][T17623] try_charge_memcg+0xd37/0x1010 [ 715.113324][T17623] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 715.119138][T17623] ? rcu_lock_acquire+0x30/0x30 [ 715.123981][T17623] ? __lock_acquire+0x2b00/0x2b00 [ 715.128997][T17623] charge_memcg+0x104/0x4a0 [ 715.133493][T17623] ? __mem_cgroup_charge+0x80/0x80 [ 715.138599][T17623] __mem_cgroup_charge+0x23/0x80 [ 715.143524][T17623] do_anonymous_page+0x3ab/0xe90 [ 715.148461][T17623] ? fault_around_bytes_set+0xb0/0xb0 [ 715.153827][T17623] handle_mm_fault+0x1da3/0x39e0 [ 715.158777][T17623] ? numa_migrate_prep+0x190/0x190 [ 715.163896][T17623] ? vmacache_find+0x228/0x5d0 [ 715.168657][T17623] do_user_addr_fault+0x8c4/0x1060 [ 715.173772][T17623] exc_page_fault+0xa1/0x1e0 [ 715.178350][T17623] ? asm_exc_page_fault+0x8/0x30 [ 715.183277][T17623] asm_exc_page_fault+0x1e/0x30 [ 715.188118][T17623] RIP: 0033:0x7ff4dd71c025 [ 715.192527][T17623] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 5a dc 09 00 e8 75 c9 ff ff [ 715.212132][T17623] RSP: 002b:00007ffdeadb7420 EFLAGS: 00010206 [ 715.218217][T17623] RAX: 00000000000187c1 RBX: 00007ff4dd8335e0 RCX: 0000555555c79840 [ 715.226195][T17623] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 715.234161][T17623] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007ff4dd833640 13:56:19 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) 13:56:19 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) dup2(r0, r1) [ 715.242122][T17623] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 715.250079][T17623] R13: 0000000000008040 R14: 0000000000000804 R15: 0000555555c71800 [ 715.258055][T17623] [ 715.268565][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', 0x0}) 13:56:20 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) 13:56:20 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x105040, 0x0) [ 715.463606][T17660] device bond37 entered promiscuous mode [ 715.515976][T17623] memory: usage 368kB, limit 32kB, failcnt 1458 [ 715.530539][T17660] device bond37 left promiscuous mode [ 715.532682][T17623] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 715.556411][T17623] Memory cgroup stats for /syz4: [ 715.556613][T17623] anon 36864 [ 715.556613][T17623] file 61440 [ 715.556613][T17623] kernel_stack 0 [ 715.556613][T17623] pagetables 8192 [ 715.556613][T17623] percpu 0 [ 715.556613][T17623] sock 0 [ 715.556613][T17623] vmalloc 0 [ 715.556613][T17623] shmem 61440 [ 715.556613][T17623] file_mapped 61440 [ 715.556613][T17623] file_dirty 0 [ 715.556613][T17623] file_writeback 0 [ 715.556613][T17623] swapcached 0 [ 715.556613][T17623] anon_thp 0 [ 715.556613][T17623] file_thp 0 [ 715.556613][T17623] shmem_thp 0 [ 715.556613][T17623] inactive_anon 36864 [ 715.556613][T17623] active_anon 61440 13:56:20 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) [ 715.556613][T17623] inactive_file 0 [ 715.556613][T17623] active_file 0 [ 715.556613][T17623] unevictable 0 [ 715.556613][T17623] slab_reclaimable 97928 [ 715.556613][T17623] slab_unreclaimable 160528 [ 715.556613][T17623] slab 258456 [ 715.556613][T17623] workingset_refault_anon 0 [ 715.556613][T17623] workingset_refault_file 0 [ 715.556613][T17623] workingset_activate_anon 0 [ 715.690135][T17623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17623,uid=0 [ 715.794008][T17623] Memory cgroup out of memory: Killed process 17623 (syz-executor.4) total-vm:56676kB, anon-rss:372kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 715.841701][ T28] oom_reaper: reaped process 17623 (syz-executor.4), now anon-rss:0kB, file-rss:13552kB, shmem-rss:0kB 13:56:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:20 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) 13:56:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 13:56:20 executing program 1: socket(0xa, 0x3, 0x5) 13:56:20 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:56:20 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB='fmask=0']) 13:56:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') openat$cgroup_pressure(r0, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) 13:56:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 13:56:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 716.009653][T17678] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 13:56:20 executing program 5: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="1b6f4e05d3b623566768521f498ca2232c6621b517a1da9b20863fa726cb80fbd767ef4032d787c1b6c2a8d00d4ac1e59bac5578767113fef7d12bf11580dab0c43ce27852bf0817fb1c5eb5b2beb6f7a0600a2a215fea58eb3f52548c771f51eb2bf36ac4d5a24bc97827e6fbaa7afb841cc4650c627652a9703c2d0e0d5c4a3d997b70e91de7597b5db39fd9ff5436de22cf64dbfd84fd076432090a526777d4a3cdf320190b610aff191e8a5eb256944405686db7c079819d868de046da9b9a0a1a4c78ba89", 0xc7, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)='t', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r0, r0}, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={'crc32c-intel\x00'}}) [ 716.135158][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000000), 0x10) 13:56:20 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1_vlan\x00'}) [ 716.320649][T17683] device bond38 entered promiscuous mode [ 716.396913][T17683] device bond38 left promiscuous mode [ 717.079925][ T44] device hsr_slave_0 left promiscuous mode [ 717.086619][ T44] device hsr_slave_1 left promiscuous mode [ 717.106136][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.113582][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.138272][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.145825][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.155458][ T44] device bridge_slave_1 left promiscuous mode [ 717.162252][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.176929][ T44] device bridge_slave_0 left promiscuous mode [ 717.183158][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.194887][ T44] device veth1_macvtap left promiscuous mode [ 717.204533][ T44] device veth0_macvtap left promiscuous mode [ 717.211007][ T44] device veth1_vlan left promiscuous mode [ 717.217130][ T44] device veth0_vlan left promiscuous mode [ 717.398052][ T44] team0 (unregistering): Port device team_slave_1 removed [ 717.417999][ T44] team0 (unregistering): Port device team_slave_0 removed [ 717.433464][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.451779][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.516819][ T44] bond0 (unregistering): Released all slaves [ 721.495838][ T3649] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 726.375819][ T3649] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 731.265933][ T3649] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 736.136076][ T3649] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 738.951648][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 738.960373][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 738.969817][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.977998][ T3644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.986637][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 738.993890][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 739.075578][T17712] chnl_net:caif_netlink_parms(): no params data found [ 739.120206][T17712] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.127483][T17712] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.135234][T17712] device bridge_slave_0 entered promiscuous mode [ 739.143563][T17712] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.151474][T17712] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.160048][T17712] device bridge_slave_1 entered promiscuous mode [ 739.183709][T17712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.194662][T17712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.222846][T17712] team0: Port device team_slave_0 added [ 739.230260][T17712] team0: Port device team_slave_1 added [ 739.251041][T17712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.258591][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.285113][T17712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.297920][T17712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.304875][T17712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.331403][T17712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.362763][T17712] device hsr_slave_0 entered promiscuous mode [ 739.369778][T17712] device hsr_slave_1 entered promiscuous mode [ 739.377232][T17712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.384802][T17712] Cannot create hsr debugfs directory [ 739.454164][T17712] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.461282][T17712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.468688][T17712] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.475853][T17712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.524896][T17712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.540729][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 739.549445][ T3677] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.560990][ T3677] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.570682][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 739.595471][T17712] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.610305][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 739.618862][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.625999][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.642739][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 739.651239][T14287] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.658359][T14287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.678455][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 739.687911][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 739.697301][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 739.709581][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 739.724915][T17712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 739.737279][T17712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 739.745348][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 739.765058][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 739.772640][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 739.789045][T17712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.026124][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 740.042414][T17712] device veth0_vlan entered promiscuous mode [ 740.050920][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 740.060355][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 740.068169][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 740.080987][T17712] device veth1_vlan entered promiscuous mode [ 740.088689][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 740.112844][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 740.121899][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 740.133287][T17712] device veth0_macvtap entered promiscuous mode [ 740.147043][T17712] device veth1_macvtap entered promiscuous mode [ 740.163432][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 740.174660][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.184666][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 740.196336][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.206489][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 740.217098][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.227049][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 740.237552][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.247707][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 740.258215][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.270396][T17712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.280114][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 740.288518][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 740.297386][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 740.306587][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 740.317259][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 740.328428][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.338706][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 740.354140][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.365274][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 740.383601][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.393758][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 740.405432][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.415520][T17712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 740.430462][T17712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.441545][T17712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.455449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 740.464394][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 740.527912][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.549348][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.562745][T17600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.566184][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 740.575108][T17600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.593011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 740.802273][T17731] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 740.846144][T17731] CPU: 1 PID: 17731 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 740.854941][T17731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.864983][T17731] Call Trace: [ 740.868252][T17731] [ 740.871166][T17731] dump_stack_lvl+0x201/0x2d8 [ 740.875835][T17731] ? show_regs_print_info+0x12/0x12 [ 740.881017][T17731] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 740.886720][T17731] ? lockdep_hardirqs_on+0x95/0x140 [ 740.891919][T17731] ? asan.module_dtor+0x20/0x20 [ 740.896769][T17731] dump_header+0xdb/0x970 [ 740.901085][T17731] oom_kill_process+0xf5/0x4e0 [ 740.905855][T17731] out_of_memory+0x711/0xa70 [ 740.910429][T17731] ? unregister_oom_notifier+0x20/0x20 [ 740.915958][T17731] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 740.921514][T17731] ? mark_lock+0x191/0x1e00 [ 740.926013][T17731] ? mem_cgroup_oom_trylock+0x220/0x220 [ 740.931544][T17731] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 740.937438][T17731] ? cgroup_file_notify+0x123/0x190 [ 740.942676][T17731] memory_max_write+0x364/0x4f0 [ 740.947523][T17731] ? memory_max_show+0xa0/0xa0 [ 740.952278][T17731] ? memory_max_show+0xa0/0xa0 [ 740.957036][T17731] cgroup_file_write+0x2a4/0x780 [ 740.961972][T17731] ? cgroup_seqfile_stop+0xd0/0xd0 [ 740.967073][T17731] ? cgroup_seqfile_stop+0xd0/0xd0 [ 740.972166][T17731] kernfs_fop_write_iter+0x3b6/0x510 [ 740.977442][T17731] vfs_write+0xb11/0xe90 [ 740.981673][T17731] ? file_end_write+0x230/0x230 [ 740.986534][T17731] ? mutex_lock_nested+0x1a/0x20 [ 740.991571][T17731] ? __fdget_pos+0x24e/0x2f0 [ 740.996163][T17731] ? ksys_write+0x77/0x2c0 [ 741.000580][T17731] ksys_write+0x18f/0x2c0 [ 741.004915][T17731] ? print_irqtrace_events+0x220/0x220 [ 741.010368][T17731] ? __ia32_sys_read+0x80/0x80 [ 741.015122][T17731] ? lockdep_hardirqs_on+0x95/0x140 [ 741.020328][T17731] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 741.026300][T17731] do_syscall_64+0x44/0xd0 [ 741.030714][T17731] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 741.036598][T17731] RIP: 0033:0x7f626e790059 [ 741.040996][T17731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 741.060595][T17731] RSP: 002b:00007f626d105168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 741.069001][T17731] RAX: ffffffffffffffda RBX: 00007f626e8a2f60 RCX: 00007f626e790059 [ 741.077069][T17731] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 741.085026][T17731] RBP: 00007f626e7ea08d R08: 0000000000000000 R09: 0000000000000000 [ 741.092980][T17731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.100930][T17731] R13: 00007fff87aed91f R14: 00007f626d105300 R15: 0000000000022000 [ 741.108914][T17731] [ 741.128050][ T927] Bluetooth: hci3: command 0x0409 tx timeout [ 741.134607][T17731] memory: usage 2576kB, limit 32kB, failcnt 1475 [ 741.147468][T17731] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 741.155178][T17731] Memory cgroup stats for /syz4: [ 741.160358][T17731] anon 2207744 [ 741.160358][T17731] file 65536 [ 741.160358][T17731] kernel_stack 65536 [ 741.160358][T17731] pagetables 94208 [ 741.160358][T17731] percpu 0 [ 741.160358][T17731] sock 0 [ 741.160358][T17731] vmalloc 0 [ 741.160358][T17731] shmem 61440 [ 741.160358][T17731] file_mapped 61440 [ 741.160358][T17731] file_dirty 4096 [ 741.160358][T17731] file_writeback 0 [ 741.160358][T17731] swapcached 0 [ 741.160358][T17731] anon_thp 2097152 [ 741.160358][T17731] file_thp 0 [ 741.160358][T17731] shmem_thp 0 [ 741.160358][T17731] inactive_anon 2158592 [ 741.160358][T17731] active_anon 61440 [ 741.160358][T17731] inactive_file 0 [ 741.160358][T17731] active_file 0 [ 741.160358][T17731] unevictable 0 [ 741.160358][T17731] slab_reclaimable 53896 [ 741.160358][T17731] slab_unreclaimable 121352 [ 741.160358][T17731] slab 175248 [ 741.160358][T17731] workingset_refault_anon 0 [ 741.160358][T17731] workingset_refault_file 0 [ 741.285188][T17731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17730,uid=0 [ 741.307313][T17731] Memory cgroup out of memory: Killed process 17730 (syz-executor.4) total-vm:60648kB, anon-rss:2464kB, file-rss:15132kB, shmem-rss:80kB, UID:0 pgtables:100kB oom_score_adj:1000 13:56:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000200)=ANY=[]}) 13:56:45 executing program 1: unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 13:56:45 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000000), 0x10) 13:56:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x8}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000a00)=""/180, 0x3a, 0xb4, 0x1}, 0x20) 13:56:45 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 741.335424][ T28] oom_reaper: reaped process 17730 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:56:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x38}}, 0x0) 13:56:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xf}}], 0x1, 0x0) 13:56:46 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000000), 0x10) 13:56:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x10e, 0x2, 0x0, 0x0) [ 741.418810][T17741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 741.464431][T17712] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 13:56:46 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000000), 0x10) [ 741.555253][T17712] CPU: 0 PID: 17712 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 741.564177][T17712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.574243][T17712] Call Trace: [ 741.577536][T17712] [ 741.580479][T17712] dump_stack_lvl+0x201/0x2d8 [ 741.585178][T17712] ? show_regs_print_info+0x12/0x12 [ 741.590394][T17712] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 741.596128][T17712] ? do_raw_spin_lock+0x151/0x8e0 [ 741.601154][T17712] ? asan.module_dtor+0x20/0x20 [ 741.605999][T17712] dump_header+0xdb/0x970 [ 741.610321][T17712] oom_kill_process+0xf5/0x4e0 [ 741.615075][T17712] out_of_memory+0x711/0xa70 [ 741.619669][T17712] ? unregister_oom_notifier+0x20/0x20 [ 741.625128][T17712] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 741.630688][T17712] ? __lock_acquire+0x2b00/0x2b00 [ 741.635714][T17712] ? mem_cgroup_oom_trylock+0x220/0x220 [ 741.641355][T17712] ? do_raw_spin_unlock+0x134/0x8a0 [ 741.646546][T17712] ? mem_cgroup_iter+0x3c9/0x530 [ 741.651479][T17712] mem_cgroup_oom+0x4ad/0x620 [ 741.656155][T17712] try_charge_memcg+0xd37/0x1010 [ 741.661080][T17712] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 741.667066][T17712] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 741.672861][T17712] ? rcu_lock_acquire+0x30/0x30 [ 741.678135][T17712] ? __lock_acquire+0x2b00/0x2b00 [ 741.683170][T17712] obj_cgroup_charge+0x1b2/0x420 [ 741.688101][T17712] ? mod_objcg_mlstate+0x330/0x330 [ 741.693240][T17712] kmem_cache_alloc+0xbd/0x310 [ 741.697999][T17712] ? ext4_alloc_inode+0x1d/0x570 [ 741.702925][T17712] ? do_raw_spin_unlock+0x134/0x8a0 [ 741.708115][T17712] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 741.714086][T17712] ext4_alloc_inode+0x1d/0x570 [ 741.718839][T17712] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 741.724808][T17712] iget_locked+0x195/0x810 [ 741.729222][T17712] __ext4_iget+0x262/0x4e30 [ 741.733735][T17712] ? ext4_get_projid+0x140/0x140 [ 741.738665][T17712] ? rcu_read_lock_sched_held+0x89/0x130 [ 741.744289][T17712] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 741.750266][T17712] ? ext4_lookup+0x484/0xb90 [ 741.754860][T17712] ? trace_kfree+0x2e/0xd0 [ 741.759295][T17712] ? kfree+0x2f/0x2e0 [ 741.763266][T17712] ? ext4_lookup+0x38f/0xb90 [ 741.767854][T17712] ext4_lookup+0x732/0xb90 [ 741.772266][T17712] ? ext4_add_entry+0x4210/0x4210 [ 741.777276][T17712] ? d_alloc_parallel+0x1478/0x15c0 [ 741.782464][T17712] ? lockdep_init_map_type+0x9f/0x9b0 [ 741.787846][T17712] ? __init_waitqueue_head+0x68/0xd0 [ 741.793121][T17712] __lookup_slow+0x27f/0x3d0 [ 741.797707][T17712] ? lookup_one_len+0x2c0/0x2c0 [ 741.802554][T17712] ? up_read_non_owner+0x1c0/0x1c0 [ 741.807655][T17712] ? bpf_lsm_inode_permission+0x5/0x10 [ 741.813115][T17712] walk_component+0x516/0x790 [ 741.817873][T17712] ? try_to_unlazy+0xce0/0xce0 [ 741.822713][T17712] ? path_init+0x11f0/0x11f0 [ 741.827302][T17712] path_lookupat+0x19d/0x6c0 [ 741.831891][T17712] filename_lookup+0x270/0x640 [ 741.836654][T17712] ? hashlen_string+0x110/0x110 [ 741.841494][T17712] ? __might_fault+0xb6/0x110 [ 741.846198][T17712] ? strncpy_from_user+0x1f6/0x350 [ 741.851308][T17712] ? getname_flags+0x1fe/0x650 [ 741.856065][T17712] user_path_at_empty+0x40/0x1a0 [ 741.860993][T17712] __x64_sys_umount+0xf0/0x170 [ 741.865762][T17712] ? path_umount+0xfc0/0xfc0 [ 741.870432][T17712] ? lockdep_hardirqs_on+0x95/0x140 [ 741.875628][T17712] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 741.881603][T17712] do_syscall_64+0x44/0xd0 [ 741.886012][T17712] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 741.891893][T17712] RIP: 0033:0x7f626e7914c7 [ 741.896302][T17712] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 741.915919][T17712] RSP: 002b:00007fff87aeca78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 741.924436][T17712] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f626e7914c7 [ 741.932393][T17712] RDX: 00007fff87aecb4c RSI: 000000000000000a RDI: 00007fff87aecb40 [ 741.940358][T17712] RBP: 00007fff87aecb40 R08: 00000000ffffffff R09: 00007fff87aec910 [ 741.948315][T17712] R10: 0000555555d0e87b R11: 0000000000000246 R12: 00007f626e7e91ea 13:56:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 741.956271][T17712] R13: 00007fff87aedc00 R14: 0000555555d0e810 R15: 00007fff87aedc40 [ 741.964262][T17712] [ 742.014349][T17743] device bond39 entered promiscuous mode [ 742.061033][T17712] memory: usage 260kB, limit 32kB, failcnt 1495 [ 742.069190][T17712] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 742.080119][T17743] device bond39 left promiscuous mode [ 742.100666][T17712] Memory cgroup stats for /syz4: [ 742.100870][T17712] anon 40960 [ 742.100870][T17712] file 61440 [ 742.100870][T17712] kernel_stack 0 [ 742.100870][T17712] pagetables 8192 [ 742.100870][T17712] percpu 0 [ 742.100870][T17712] sock 0 [ 742.100870][T17712] vmalloc 0 [ 742.100870][T17712] shmem 61440 [ 742.100870][T17712] file_mapped 61440 [ 742.100870][T17712] file_dirty 0 [ 742.100870][T17712] file_writeback 0 [ 742.100870][T17712] swapcached 0 [ 742.100870][T17712] anon_thp 0 [ 742.100870][T17712] file_thp 0 [ 742.100870][T17712] shmem_thp 0 [ 742.100870][T17712] inactive_anon 40960 [ 742.100870][T17712] active_anon 61440 [ 742.100870][T17712] inactive_file 0 [ 742.100870][T17712] active_file 0 [ 742.100870][T17712] unevictable 0 [ 742.100870][T17712] slab_reclaimable 54280 [ 742.100870][T17712] slab_unreclaimable 90536 [ 742.100870][T17712] slab 144816 [ 742.100870][T17712] workingset_refault_anon 0 [ 742.100870][T17712] workingset_refault_file 0 [ 742.100870][T17712] workingset_activate_anon 0 [ 742.206624][T17712] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17712,uid=0 [ 742.238706][T17712] Memory cgroup out of memory: Killed process 17712 (syz-executor.4) total-vm:56676kB, anon-rss:364kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 742.259191][ T28] oom_reaper: reaped process 17712 (syz-executor.4), now anon-rss:0kB, file-rss:13512kB, shmem-rss:0kB 13:56:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:46 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 13:56:46 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2}, &(0x7f00000000c0)={0x77359400}, 0x0) 13:56:46 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc020660b, 0x0) 13:56:46 executing program 1: bpf$MAP_CREATE(0x1e, &(0x7f0000000bc0)=@bloom_filter, 0x48) 13:56:46 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:56:46 executing program 1: getcwd(&(0x7f00000001c0)=""/75, 0x4b) 13:56:46 executing program 3: socket$inet6(0xa, 0x3, 0x3f) 13:56:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}) 13:56:47 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) 13:56:47 executing program 3: openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x8041, 0x0, 0x8}, 0x18) [ 742.482190][T17762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) 13:56:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) [ 742.592772][T17762] device veth81 entered promiscuous mode [ 742.613354][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:47 executing program 2: socketpair(0x1, 0x0, 0x4, &(0x7f00000000c0)) [ 742.717719][T17776] device bond40 entered promiscuous mode [ 742.820204][T17776] device bond40 left promiscuous mode 13:56:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000f6c0)=[{{&(0x7f0000000040)=@sco={0x1f, @none}, 0x80, 0x0}}], 0x1, 0x0) 13:56:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 13:56:47 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)={0x1, 0x0, @c}, 0x29, 0xffffffffffffffff) 13:56:47 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:56:47 executing program 3: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "2d17aa44aea3a16ba52d282409f3fdb3244deac01b3612f3c1fbf2ca9f8ec85b5031d6c433a6ee6024f0a057d6fc7cca6058e4da36a35b8e291b32c2ec80c9d3"}, 0x48, r0) 13:56:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x7) 13:56:47 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "74fa0193f988a002681a6e30d4fd1187ff18d4907b7076e5aa10308aeee622097b293372f740e5d9896d172268e806a58dbdd596af27e36cc01dfa1d808b9f21"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000200), 0x0, 0x0, 0x0, r0) [ 743.304732][T17789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:47 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) 13:56:47 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={0x0}) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mount$binder(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x22, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)=0x2) 13:56:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000f6c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1}}], 0x1, 0x4000040) [ 743.426633][T17789] device veth83 entered promiscuous mode [ 743.496664][T17799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 743.686693][T17789] device bond41 entered promiscuous mode [ 743.704315][T17789] device bond41 left promiscuous mode [ 743.909333][ T1014] device hsr_slave_0 left promiscuous mode [ 743.919572][ T1014] device hsr_slave_1 left promiscuous mode [ 743.927589][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.935111][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.946681][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.954108][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.964658][ T1014] device bridge_slave_1 left promiscuous mode [ 743.971256][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.983337][ T1014] device bridge_slave_0 left promiscuous mode [ 743.990453][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.007605][ T1014] device veth1_macvtap left promiscuous mode [ 744.013803][ T1014] device veth0_macvtap left promiscuous mode [ 744.020433][ T1014] device veth1_vlan left promiscuous mode [ 744.026529][ T1014] device veth0_vlan left promiscuous mode [ 744.208017][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 744.223371][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 744.235444][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.251295][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.323127][ T1014] bond0 (unregistering): Released all slaves [ 747.018780][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.025118][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.216979][ T3650] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 751.028243][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.038310][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.046632][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.057019][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.064615][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 751.074378][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 751.158999][T17811] chnl_net:caif_netlink_parms(): no params data found [ 751.203449][T17811] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.211377][T17811] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.223044][T17811] device bridge_slave_0 entered promiscuous mode [ 751.231848][T17811] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.239353][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.248084][T17811] device bridge_slave_1 entered promiscuous mode [ 751.271047][T17811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.282855][T17811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.310275][T17811] team0: Port device team_slave_0 added [ 751.318613][T17811] team0: Port device team_slave_1 added [ 751.335182][T17811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.343091][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.371363][T17811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.383518][T17811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.390725][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.416868][T17811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.443327][T17811] device hsr_slave_0 entered promiscuous mode [ 751.450336][T17811] device hsr_slave_1 entered promiscuous mode [ 751.457101][T17811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 751.465063][T17811] Cannot create hsr debugfs directory [ 751.534291][T17811] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.541625][T17811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.549021][T17811] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.556165][T17811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.604993][T17811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.619337][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 751.630298][ T927] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.638486][ T927] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.647025][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 751.662230][T17811] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.675807][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 751.684237][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.691414][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.707086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 751.715552][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.722706][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.739533][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 751.757101][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 751.765442][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 751.774599][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 751.783063][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 751.793003][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 751.810543][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 751.818642][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 751.830662][T17811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.075804][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 752.091066][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 752.101444][T17811] device veth0_vlan entered promiscuous mode [ 752.109444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 752.118209][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 752.133790][T17811] device veth1_vlan entered promiscuous mode [ 752.156605][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 752.164625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 752.183484][T17811] device veth0_macvtap entered promiscuous mode [ 752.194079][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 752.203851][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.218394][T17811] device veth1_macvtap entered promiscuous mode [ 752.227319][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 752.235297][ T927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 752.252975][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 752.263658][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.274102][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 752.286586][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.297135][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 752.308024][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.318098][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 752.328887][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.338946][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 752.349678][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.360909][T17811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.369435][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 752.378950][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 752.402541][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 752.413208][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.423878][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 752.434499][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.444349][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 752.454857][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.464990][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 752.476174][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.486776][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 752.497445][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.512018][T17811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.521109][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 752.529958][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 752.594417][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.615841][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.628280][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.638101][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 752.644542][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.656384][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 752.793557][T17831] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 752.804042][T17831] CPU: 1 PID: 17831 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 752.812850][T17831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.822911][T17831] Call Trace: [ 752.826187][T17831] [ 752.829115][T17831] dump_stack_lvl+0x201/0x2d8 [ 752.833796][T17831] ? show_regs_print_info+0x12/0x12 [ 752.838992][T17831] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 752.844708][T17831] ? do_raw_spin_lock+0x151/0x8e0 [ 752.849732][T17831] ? asan.module_dtor+0x20/0x20 [ 752.854584][T17831] dump_header+0xdb/0x970 [ 752.858911][T17831] oom_kill_process+0xf5/0x4e0 [ 752.863675][T17831] out_of_memory+0x711/0xa70 [ 752.868263][T17831] ? preempt_schedule+0x16b/0x190 [ 752.873278][T17831] ? unregister_oom_notifier+0x20/0x20 [ 752.878786][T17831] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 752.884786][T17831] ? __lock_acquire+0x2b00/0x2b00 [ 752.889807][T17831] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 752.895349][T17831] ? preempt_schedule_thunk+0x16/0x18 [ 752.900721][T17831] ? mem_cgroup_oom_trylock+0x220/0x220 [ 752.906284][T17831] ? cgroup_file_notify+0x123/0x190 [ 752.911485][T17831] memory_max_write+0x364/0x4f0 [ 752.916346][T17831] ? memory_max_show+0xa0/0xa0 [ 752.921106][T17831] ? read_lock_is_recursive+0x10/0x10 [ 752.926561][T17831] ? memory_max_show+0xa0/0xa0 [ 752.931320][T17831] cgroup_file_write+0x2a4/0x780 [ 752.936346][T17831] ? cgroup_seqfile_stop+0xd0/0xd0 [ 752.941554][T17831] ? cgroup_seqfile_stop+0xd0/0xd0 [ 752.946665][T17831] kernfs_fop_write_iter+0x3b6/0x510 [ 752.951952][T17831] vfs_write+0xb11/0xe90 [ 752.956194][T17831] ? file_end_write+0x230/0x230 [ 752.961056][T17831] ? mutex_lock_nested+0x1a/0x20 [ 752.965989][T17831] ? __fdget_pos+0x24e/0x2f0 [ 752.970568][T17831] ? ksys_write+0x77/0x2c0 [ 752.974975][T17831] ksys_write+0x18f/0x2c0 [ 752.979293][T17831] ? print_irqtrace_events+0x220/0x220 [ 752.984751][T17831] ? __ia32_sys_read+0x80/0x80 [ 752.989507][T17831] ? lockdep_hardirqs_on+0x95/0x140 [ 752.994705][T17831] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 753.000680][T17831] do_syscall_64+0x44/0xd0 [ 753.005092][T17831] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.010977][T17831] RIP: 0033:0x7f14ebc9e059 [ 753.015393][T17831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 753.034990][T17831] RSP: 002b:00007f14ea5f2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 753.043398][T17831] RAX: ffffffffffffffda RBX: 00007f14ebdb1030 RCX: 00007f14ebc9e059 [ 753.051359][T17831] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 753.059323][T17831] RBP: 00007f14ebcf808d R08: 0000000000000000 R09: 0000000000000000 [ 753.067286][T17831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.075244][T17831] R13: 00007ffe3c13c28f R14: 00007f14ea5f2300 R15: 0000000000022000 [ 753.083225][T17831] [ 753.101817][T17831] memory: usage 2732kB, limit 32kB, failcnt 1512 [ 753.108910][ T3675] Bluetooth: hci3: command 0x0409 tx timeout [ 753.116121][T17831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 753.122996][T17831] Memory cgroup stats for /syz4: [ 753.123106][T17831] anon 2211840 [ 753.123106][T17831] file 65536 [ 753.123106][T17831] kernel_stack 98304 [ 753.123106][T17831] pagetables 94208 [ 753.123106][T17831] percpu 0 [ 753.123106][T17831] sock 0 [ 753.123106][T17831] vmalloc 0 [ 753.123106][T17831] shmem 61440 [ 753.123106][T17831] file_mapped 61440 [ 753.123106][T17831] file_dirty 4096 [ 753.123106][T17831] file_writeback 0 [ 753.123106][T17831] swapcached 0 [ 753.123106][T17831] anon_thp 2097152 [ 753.123106][T17831] file_thp 0 [ 753.123106][T17831] shmem_thp 0 [ 753.123106][T17831] inactive_anon 2187264 [ 753.123106][T17831] active_anon 61440 [ 753.123106][T17831] inactive_file 0 [ 753.123106][T17831] active_file 0 [ 753.123106][T17831] unevictable 0 [ 753.123106][T17831] slab_reclaimable 98312 [ 753.123106][T17831] slab_unreclaimable 193864 [ 753.123106][T17831] slab 292176 [ 753.123106][T17831] workingset_refault_anon 0 [ 753.123106][T17831] workingset_refault_file 0 [ 753.217908][T17831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17829,uid=0 [ 753.236709][T17831] Memory cgroup out of memory: Killed process 17829 (syz-executor.4) total-vm:60780kB, anon-rss:2424kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 753.259399][ T28] oom_reaper: reaped process 17829 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:56:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:57 executing program 2: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 13:56:57 executing program 5: msgsnd(0x0, &(0x7f0000000c40)=ANY=[], 0x1008, 0x0) 13:56:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) 13:56:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 13:56:57 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:56:58 executing program 3: bpf$MAP_CREATE(0x16, &(0x7f0000000bc0)=@bloom_filter, 0x48) 13:56:58 executing program 1: bpf$MAP_CREATE(0x22, &(0x7f0000000bc0)=@bloom_filter, 0x48) 13:56:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) [ 753.406138][T17840] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:58 executing program 5: bpf$PROG_LOAD(0x22, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 753.476990][T17811] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 753.513422][T17811] CPU: 1 PID: 17811 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 13:56:58 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x1f, 0x8001}]}) 13:56:58 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) [ 753.522228][T17811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.532309][T17811] Call Trace: [ 753.535609][T17811] [ 753.538572][T17811] dump_stack_lvl+0x201/0x2d8 [ 753.543280][T17811] ? show_regs_print_info+0x12/0x12 [ 753.548496][T17811] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 753.554227][T17811] ? do_raw_spin_lock+0x151/0x8e0 [ 753.559277][T17811] ? asan.module_dtor+0x20/0x20 [ 753.564158][T17811] dump_header+0xdb/0x970 [ 753.568509][T17811] oom_kill_process+0xf5/0x4e0 [ 753.573297][T17811] out_of_memory+0x711/0xa70 [ 753.577907][T17811] ? unregister_oom_notifier+0x20/0x20 [ 753.583374][T17811] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 753.588911][T17811] ? __lock_acquire+0x2b00/0x2b00 [ 753.593933][T17811] ? mem_cgroup_oom_trylock+0x220/0x220 [ 753.599561][T17811] ? do_raw_spin_unlock+0x134/0x8a0 [ 753.604764][T17811] ? mem_cgroup_iter+0x3c9/0x530 [ 753.609706][T17811] mem_cgroup_oom+0x4ad/0x620 [ 753.614391][T17811] try_charge_memcg+0xd37/0x1010 [ 753.619335][T17811] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 753.625356][T17811] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 753.631157][T17811] ? rcu_lock_acquire+0x30/0x30 [ 753.635996][T17811] ? __lock_acquire+0x2b00/0x2b00 [ 753.641029][T17811] obj_cgroup_charge+0x1b2/0x420 [ 753.645962][T17811] ? mod_objcg_mlstate+0x330/0x330 [ 753.651102][T17811] kmem_cache_alloc+0xbd/0x310 [ 753.655859][T17811] ? __d_alloc+0x2a/0x700 [ 753.660193][T17811] __d_alloc+0x2a/0x700 [ 753.664350][T17811] d_alloc_parallel+0xd3/0x15c0 [ 753.669192][T17811] ? memset+0x1f/0x40 [ 753.673163][T17811] ? lockdep_init_map_type+0x9f/0x9b0 [ 753.678529][T17811] ? lockdep_softirqs_off+0x420/0x420 [ 753.683903][T17811] ? d_hash_and_lookup+0x1c0/0x1c0 [ 753.689011][T17811] ? __init_waitqueue_head+0x68/0xd0 [ 753.694290][T17811] __lookup_slow+0x110/0x3d0 [ 753.698872][T17811] ? lookup_one_len+0x2c0/0x2c0 [ 753.703716][T17811] ? up_read_non_owner+0x1c0/0x1c0 [ 753.708812][T17811] ? bpf_lsm_inode_permission+0x5/0x10 [ 753.714385][T17811] walk_component+0x516/0x790 [ 753.719083][T17811] ? try_to_unlazy+0xce0/0xce0 [ 753.723860][T17811] ? path_init+0x11f0/0x11f0 [ 753.728464][T17811] path_lookupat+0x19d/0x6c0 [ 753.733062][T17811] filename_lookup+0x270/0x640 [ 753.737915][T17811] ? hashlen_string+0x110/0x110 [ 753.742757][T17811] ? __might_fault+0xb6/0x110 [ 753.747442][T17811] ? strncpy_from_user+0x1f6/0x350 [ 753.752543][T17811] ? getname_flags+0x1fe/0x650 [ 753.757308][T17811] user_path_at_empty+0x40/0x1a0 [ 753.762238][T17811] __x64_sys_umount+0xf0/0x170 [ 753.766992][T17811] ? path_umount+0xfc0/0xfc0 [ 753.771571][T17811] ? lockdep_hardirqs_on+0x95/0x140 [ 753.776761][T17811] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 753.782732][T17811] do_syscall_64+0x44/0xd0 [ 753.787147][T17811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.793031][T17811] RIP: 0033:0x7f14ebc9f4c7 [ 753.797440][T17811] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 753.817033][T17811] RSP: 002b:00007ffe3c13b3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 753.825439][T17811] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14ebc9f4c7 [ 753.833398][T17811] RDX: 00007ffe3c13b4ba RSI: 000000000000000a RDI: 00007ffe3c13b4b0 [ 753.841359][T17811] RBP: 00007ffe3c13b4b0 R08: 00000000ffffffff R09: 00007ffe3c13b280 [ 753.849339][T17811] R10: 0000555555e3a8c3 R11: 0000000000000246 R12: 00007f14ebcf71ea [ 753.857300][T17811] R13: 00007ffe3c13c570 R14: 0000555555e3a810 R15: 00007ffe3c13c5b0 [ 753.865273][T17811] [ 753.896163][T17840] device veth85 entered promiscuous mode [ 753.926057][T17847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 753.977501][ T26] audit: type=1326 audit(1643637418.549:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26846b5059 code=0x0 [ 754.015754][T17811] memory: usage 408kB, limit 32kB, failcnt 1531 [ 754.037854][T17811] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 754.044834][T17811] Memory cgroup stats for /syz4: [ 754.045029][T17811] anon 45056 [ 754.045029][T17811] file 61440 [ 754.045029][T17811] kernel_stack 0 [ 754.045029][T17811] pagetables 8192 [ 754.045029][T17811] percpu 0 [ 754.045029][T17811] sock 0 [ 754.045029][T17811] vmalloc 0 [ 754.045029][T17811] shmem 61440 [ 754.045029][T17811] file_mapped 61440 [ 754.045029][T17811] file_dirty 0 [ 754.045029][T17811] file_writeback 0 [ 754.045029][T17811] swapcached 0 [ 754.045029][T17811] anon_thp 0 [ 754.045029][T17811] file_thp 0 [ 754.045029][T17811] shmem_thp 0 [ 754.045029][T17811] inactive_anon 45056 [ 754.045029][T17811] active_anon 61440 [ 754.045029][T17811] inactive_file 0 [ 754.045029][T17811] active_file 0 [ 754.045029][T17811] unevictable 0 [ 754.045029][T17811] slab_reclaimable 101256 [ 754.045029][T17811] slab_unreclaimable 189496 [ 754.045029][T17811] slab 290752 [ 754.045029][T17811] workingset_refault_anon 0 [ 754.045029][T17811] workingset_refault_file 0 [ 754.045029][T17811] workingset_activate_anon 0 [ 754.148616][T17848] device bond42 entered promiscuous mode [ 754.156981][T17811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17811,uid=0 [ 754.173002][T17848] device bond42 left promiscuous mode [ 754.176141][T17811] Memory cgroup out of memory: Killed process 17811 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 754.197509][ T28] oom_reaper: reaped process 17811 (syz-executor.4), now anon-rss:0kB, file-rss:13560kB, shmem-rss:0kB 13:56:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:56:58 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:56:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 13:56:58 executing program 5: setrlimit(0x6, &(0x7f00000000c0)) 13:56:58 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xfd08) 13:56:58 executing program 3: r0 = socket(0x10, 0x2, 0x0) write$binfmt_elf32(r0, 0x0, 0x2) 13:56:58 executing program 3: msgget$private(0x0, 0xa0) 13:56:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x3, r0, 0x0) 13:56:58 executing program 1: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000002840)=ANY=[], 0xfffffed7) write$FUSE_LSEEK(r0, 0x0, 0x0) 13:56:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000480), 0x0, 0x0) 13:56:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0}, 0x0) 13:56:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) [ 754.512630][T17867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.618097][T17867] device veth87 entered promiscuous mode [ 754.659183][T17876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 754.770883][T17878] device bond43 entered promiscuous mode [ 754.795307][T17878] device bond43 left promiscuous mode [ 755.394190][ T1014] device hsr_slave_0 left promiscuous mode [ 755.415237][ T1014] device hsr_slave_1 left promiscuous mode [ 755.428823][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.442495][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.457312][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.464959][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.483147][ T1014] device bridge_slave_1 left promiscuous mode [ 755.491192][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.509757][ T1014] device bridge_slave_0 left promiscuous mode [ 755.522725][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.539470][ T1014] device veth1_macvtap left promiscuous mode [ 755.553493][ T1014] device veth0_macvtap left promiscuous mode [ 755.561555][ T1014] device veth1_vlan left promiscuous mode [ 755.572950][ T1014] device veth0_vlan left promiscuous mode [ 755.735139][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 755.754594][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 755.770999][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.784766][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.858031][ T1014] bond0 (unregistering): Released all slaves [ 757.745151][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 757.755042][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 757.763087][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 757.770966][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 757.779228][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 757.787478][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 757.869626][T17886] chnl_net:caif_netlink_parms(): no params data found [ 757.914441][T17886] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.921735][T17886] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.929752][T17886] device bridge_slave_0 entered promiscuous mode [ 757.938562][T17886] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.945916][T17886] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.953716][T17886] device bridge_slave_1 entered promiscuous mode [ 757.974670][T17886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.986298][T17886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.015148][T17886] team0: Port device team_slave_0 added [ 758.023550][T17886] team0: Port device team_slave_1 added [ 758.042381][T17886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.049519][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.075757][T17886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.088342][T17886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.095487][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.122759][T17886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.156165][T17886] device hsr_slave_0 entered promiscuous mode [ 758.162908][T17886] device hsr_slave_1 entered promiscuous mode [ 758.169820][T17886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.177483][T17886] Cannot create hsr debugfs directory [ 758.249110][T17886] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.256274][T17886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.263578][T17886] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.271029][T17886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.317022][T17886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.333977][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 758.342950][T14287] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.351561][T14287] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.359954][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 758.374864][T17886] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.385542][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 758.398796][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.406129][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.421285][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.430410][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.437558][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.459416][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.468147][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.487998][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.496765][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 758.504891][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 758.518309][T17886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 758.535339][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.543914][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.558408][T17886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.807220][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 758.821734][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 758.833696][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 758.842181][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 758.851611][T17886] device veth0_vlan entered promiscuous mode [ 758.864349][T17886] device veth1_vlan entered promiscuous mode [ 758.872522][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 758.894125][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 758.903738][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 758.914003][T17886] device veth0_macvtap entered promiscuous mode [ 758.925334][T17886] device veth1_macvtap entered promiscuous mode [ 758.942493][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 758.954261][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.964504][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 758.975435][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.985361][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 758.996011][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.005901][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 759.016419][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.027339][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 759.038732][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.049741][T17886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.059314][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 759.068515][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 759.076888][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 759.085379][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 759.097281][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.108367][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.118578][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.129547][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.140827][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.151540][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.162289][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.172972][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.185500][T17886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 759.196916][T17886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.210288][T17886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.220056][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 759.229195][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 759.299506][T17600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.307667][T17600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.321195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 759.347347][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.355540][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.368722][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 759.568919][T17905] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 759.583156][T17905] CPU: 1 PID: 17905 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 759.591953][T17905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.602175][T17905] Call Trace: [ 759.605458][T17905] [ 759.608380][T17905] dump_stack_lvl+0x201/0x2d8 [ 759.613053][T17905] ? show_regs_print_info+0x12/0x12 [ 759.618340][T17905] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 759.624090][T17905] ? do_raw_spin_lock+0x151/0x8e0 [ 759.629261][T17905] ? asan.module_dtor+0x20/0x20 [ 759.634142][T17905] dump_header+0xdb/0x970 [ 759.638486][T17905] oom_kill_process+0xf5/0x4e0 [ 759.643262][T17905] out_of_memory+0x711/0xa70 [ 759.647867][T17905] ? preempt_schedule+0x16b/0x190 [ 759.652892][T17905] ? unregister_oom_notifier+0x20/0x20 [ 759.658450][T17905] ? lockdep_hardirqs_on+0x95/0x140 [ 759.663672][T17905] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 759.669224][T17905] ? preempt_schedule_thunk+0x16/0x18 [ 759.674599][T17905] ? mem_cgroup_oom_trylock+0x220/0x220 [ 759.680157][T17905] ? cgroup_file_notify+0x123/0x190 [ 759.685356][T17905] memory_max_write+0x364/0x4f0 [ 759.690211][T17905] ? memory_max_show+0xa0/0xa0 [ 759.695055][T17905] ? print_irqtrace_events+0x220/0x220 [ 759.700511][T17905] ? memory_max_show+0xa0/0xa0 [ 759.705267][T17905] cgroup_file_write+0x2a4/0x780 [ 759.710205][T17905] ? cgroup_seqfile_stop+0xd0/0xd0 [ 759.715321][T17905] ? cgroup_seqfile_stop+0xd0/0xd0 [ 759.720423][T17905] kernfs_fop_write_iter+0x3b6/0x510 [ 759.725710][T17905] vfs_write+0xb11/0xe90 [ 759.729960][T17905] ? file_end_write+0x230/0x230 [ 759.734821][T17905] ? mutex_lock_nested+0x1a/0x20 [ 759.739753][T17905] ? __fdget_pos+0x24e/0x2f0 [ 759.744337][T17905] ? ksys_write+0x77/0x2c0 [ 759.748836][T17905] ksys_write+0x18f/0x2c0 [ 759.753156][T17905] ? print_irqtrace_events+0x220/0x220 [ 759.758620][T17905] ? __ia32_sys_read+0x80/0x80 [ 759.763378][T17905] ? lockdep_hardirqs_on+0x95/0x140 [ 759.768579][T17905] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 759.774558][T17905] do_syscall_64+0x44/0xd0 [ 759.778970][T17905] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 759.784856][T17905] RIP: 0033:0x7f5a69698059 [ 759.789265][T17905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 759.808866][T17905] RSP: 002b:00007f5a6800d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 759.817273][T17905] RAX: ffffffffffffffda RBX: 00007f5a697aaf60 RCX: 00007f5a69698059 [ 759.825234][T17905] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 759.833196][T17905] RBP: 00007f5a696f208d R08: 0000000000000000 R09: 0000000000000000 [ 759.841157][T17905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.849121][T17905] R13: 00007ffecf5bc92f R14: 00007f5a6800d300 R15: 0000000000022000 [ 759.857110][T17905] [ 759.895104][ T3675] Bluetooth: hci3: command 0x0409 tx timeout [ 759.898476][T17905] memory: usage 2708kB, limit 32kB, failcnt 1548 [ 759.909862][T17905] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 759.924068][T17905] Memory cgroup stats for /syz4: [ 759.925088][T17905] anon 2207744 [ 759.925088][T17905] file 65536 [ 759.925088][T17905] kernel_stack 65536 [ 759.925088][T17905] pagetables 90112 [ 759.925088][T17905] percpu 0 [ 759.925088][T17905] sock 0 [ 759.925088][T17905] vmalloc 0 [ 759.925088][T17905] shmem 61440 [ 759.925088][T17905] file_mapped 61440 [ 759.925088][T17905] file_dirty 4096 [ 759.925088][T17905] file_writeback 0 [ 759.925088][T17905] swapcached 0 [ 759.925088][T17905] anon_thp 2097152 [ 759.925088][T17905] file_thp 0 [ 759.925088][T17905] shmem_thp 0 [ 759.925088][T17905] inactive_anon 2150400 [ 759.925088][T17905] active_anon 61440 [ 759.925088][T17905] inactive_file 0 [ 759.925088][T17905] active_file 0 [ 759.925088][T17905] unevictable 0 [ 759.925088][T17905] slab_reclaimable 100872 [ 759.925088][T17905] slab_unreclaimable 210040 [ 759.925088][T17905] slab 310912 [ 759.925088][T17905] workingset_refault_anon 0 [ 759.925088][T17905] workingset_refault_file 0 [ 760.034309][T17905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17904,uid=0 [ 760.051370][T17905] Memory cgroup out of memory: Killed process 17904 (syz-executor.4) total-vm:60648kB, anon-rss:2464kB, file-rss:15036kB, shmem-rss:80kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 760.080282][ T28] oom_reaper: reaped process 17904 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:57:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:57:04 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{}, "ed2a7019e668dcbb", "35152a3029d203b2b1deeb8db4a5b6db", "470cf652", "31dddd51a4ace18c"}, 0x28) 13:57:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$FUSE_LK(r0, 0x0, 0xfffffffffffffd8e) 13:57:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0}, 0x4000) 13:57:04 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x4) 13:57:04 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:04 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000280), 0x4) 13:57:04 executing program 2: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000), 0x1, 0x1) 13:57:04 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f00000001c0)) [ 760.246921][T17886] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 760.285396][T17915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 760.312537][T17886] CPU: 0 PID: 17886 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 760.321341][T17886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.331404][T17886] Call Trace: [ 760.334699][T17886] [ 760.337637][T17886] dump_stack_lvl+0x201/0x2d8 [ 760.342340][T17886] ? show_regs_print_info+0x12/0x12 [ 760.347576][T17886] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 760.353317][T17886] ? do_raw_spin_lock+0x151/0x8e0 [ 760.358370][T17886] ? asan.module_dtor+0x20/0x20 [ 760.363254][T17886] dump_header+0xdb/0x970 [ 760.367715][T17886] oom_kill_process+0xf5/0x4e0 [ 760.372497][T17886] out_of_memory+0x711/0xa70 [ 760.377108][T17886] ? unregister_oom_notifier+0x20/0x20 [ 760.382683][T17886] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 760.388243][T17886] ? __lock_acquire+0x2b00/0x2b00 [ 760.393281][T17886] ? mem_cgroup_oom_trylock+0x220/0x220 [ 760.398846][T17886] ? do_raw_spin_unlock+0x134/0x8a0 [ 760.404060][T17886] ? mem_cgroup_iter+0x3c9/0x530 [ 760.409025][T17886] mem_cgroup_oom+0x4ad/0x620 [ 760.413719][T17886] try_charge_memcg+0xd37/0x1010 [ 760.418673][T17886] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 760.424693][T17886] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 760.430517][T17886] ? rcu_lock_acquire+0x30/0x30 [ 760.435382][T17886] ? __lock_acquire+0x2b00/0x2b00 [ 760.440454][T17886] obj_cgroup_charge+0x1b2/0x420 [ 760.445440][T17886] ? mod_objcg_mlstate+0x330/0x330 [ 760.450583][T17886] kmem_cache_alloc+0xbd/0x310 [ 760.455356][T17886] ? ext4_alloc_inode+0x1d/0x570 [ 760.460307][T17886] ? do_raw_spin_unlock+0x134/0x8a0 [ 760.465522][T17886] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 760.471517][T17886] ext4_alloc_inode+0x1d/0x570 [ 760.476294][T17886] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 760.482288][T17886] iget_locked+0x195/0x810 [ 760.486730][T17886] __ext4_iget+0x262/0x4e30 [ 760.491274][T17886] ? ext4_get_projid+0x140/0x140 [ 760.496234][T17886] ? rcu_read_lock_sched_held+0x89/0x130 [ 760.501882][T17886] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 760.507882][T17886] ? ext4_lookup+0x484/0xb90 [ 760.512485][T17886] ? trace_kfree+0x2e/0xd0 [ 760.517085][T17886] ? kfree+0x2f/0x2e0 [ 760.521084][T17886] ? ext4_lookup+0x38f/0xb90 [ 760.525691][T17886] ext4_lookup+0x732/0xb90 [ 760.530132][T17886] ? ext4_add_entry+0x4210/0x4210 [ 760.535250][T17886] ? d_alloc_parallel+0x1478/0x15c0 [ 760.540468][T17886] ? lockdep_init_map_type+0x9f/0x9b0 [ 760.545877][T17886] ? __init_waitqueue_head+0x68/0xd0 [ 760.551189][T17886] __lookup_slow+0x27f/0x3d0 [ 760.555798][T17886] ? lookup_one_len+0x2c0/0x2c0 13:57:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$char_usb(r2, 0x0, 0x20) 13:57:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) 13:57:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$cgroup_subtree(r2, 0x0, 0x0) [ 760.560670][T17886] ? up_read_non_owner+0x1c0/0x1c0 [ 760.565789][T17886] ? bpf_lsm_inode_permission+0x5/0x10 [ 760.571272][T17886] walk_component+0x516/0x790 [ 760.575973][T17886] ? try_to_unlazy+0xce0/0xce0 [ 760.580921][T17886] ? path_init+0x11f0/0x11f0 [ 760.585537][T17886] path_lookupat+0x19d/0x6c0 [ 760.590147][T17886] filename_lookup+0x270/0x640 [ 760.594930][T17886] ? hashlen_string+0x110/0x110 [ 760.599785][T17886] ? __might_fault+0xb6/0x110 [ 760.604501][T17886] ? strncpy_from_user+0x1f6/0x350 [ 760.609632][T17886] ? getname_flags+0x1fe/0x650 [ 760.614410][T17886] user_path_at_empty+0x40/0x1a0 [ 760.619368][T17886] __x64_sys_umount+0xf0/0x170 [ 760.624143][T17886] ? path_umount+0xfc0/0xfc0 [ 760.628773][T17886] ? lockdep_hardirqs_on+0x95/0x140 [ 760.633964][T17886] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 760.639946][T17886] do_syscall_64+0x44/0xd0 [ 760.644381][T17886] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 760.650261][T17886] RIP: 0033:0x7f5a696994c7 [ 760.654661][T17886] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 760.674255][T17886] RSP: 002b:00007ffecf5bba88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 760.682674][T17886] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5a696994c7 [ 760.690720][T17886] RDX: 00007ffecf5bbb5e RSI: 000000000000000a RDI: 00007ffecf5bbb50 [ 760.698675][T17886] RBP: 00007ffecf5bbb50 R08: 00000000ffffffff R09: 00007ffecf5bb920 [ 760.706633][T17886] R10: 0000555556bd68e3 R11: 0000000000000246 R12: 00007f5a696f11ea [ 760.714594][T17886] R13: 00007ffecf5bcc10 R14: 0000555556bd6810 R15: 00007ffecf5bcc50 [ 760.722572][T17886] [ 760.735956][T17886] memory: usage 396kB, limit 32kB, failcnt 1577 [ 760.742250][T17886] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 760.742776][T17915] device veth89 entered promiscuous mode [ 760.749719][T17886] Memory cgroup stats for /syz4: [ 760.755452][T17886] anon 40960 [ 760.755452][T17886] file 61440 [ 760.755452][T17886] kernel_stack 0 [ 760.755452][T17886] pagetables 8192 [ 760.755452][T17886] percpu 0 [ 760.755452][T17886] sock 0 [ 760.755452][T17886] vmalloc 0 [ 760.755452][T17886] shmem 61440 [ 760.755452][T17886] file_mapped 61440 [ 760.755452][T17886] file_dirty 0 [ 760.755452][T17886] file_writeback 0 [ 760.755452][T17886] swapcached 0 [ 760.755452][T17886] anon_thp 0 [ 760.755452][T17886] file_thp 0 [ 760.755452][T17886] shmem_thp 0 [ 760.755452][T17886] inactive_anon 40960 [ 760.755452][T17886] active_anon 61440 [ 760.755452][T17886] inactive_file 0 [ 760.755452][T17886] active_file 0 [ 760.755452][T17886] unevictable 0 [ 760.755452][T17886] slab_reclaimable 104968 [ 760.755452][T17886] slab_unreclaimable 179224 [ 760.755452][T17886] slab 284192 [ 760.755452][T17886] workingset_refault_anon 0 [ 760.755452][T17886] workingset_refault_file 0 [ 760.755452][T17886] workingset_activate_anon 0 [ 760.795286][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 760.854652][T17886] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17886,uid=0 [ 760.875861][T17886] Memory cgroup out of memory: Killed process 17886 (syz-executor.4) total-vm:56676kB, anon-rss:364kB, file-rss:14528kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 760.896153][ T28] oom_reaper: reaped process 17886 (syz-executor.4), now anon-rss:0kB, file-rss:13640kB, shmem-rss:0kB [ 760.941639][T17929] device bond44 entered promiscuous mode [ 760.975041][T17929] device bond44 left promiscuous mode 13:57:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:57:05 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6, 0x8, 0x1f, 0x8001}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 13:57:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) accept4$inet6(r2, &(0x7f0000000180), &(0x7f0000000000)=0xfffffe26, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000240)=0x220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @local}, 0x10) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x9c13, 0x4000811, 0x0, 0x55) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom$packet(r1, &(0x7f00000000c0)=""/40, 0x28, 0x20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:57:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, 0x0) 13:57:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in6={0xa, 0x100, 0x0, @ipv4}, 0x80) 13:57:05 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r1, &(0x7f0000000980), 0x20) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r5, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:05 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/mnt\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13:57:05 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0x8) [ 761.098261][ T26] audit: type=1326 audit(1643637425.669:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17931 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae35fac059 code=0x0 [ 761.128960][T17935] device vlan0 entered promiscuous mode [ 761.136509][T17940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:57:05 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) close(r0) 13:57:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) [ 761.206247][T17940] device veth91 entered promiscuous mode 13:57:05 executing program 3: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 13:57:05 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) 13:57:06 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000280)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="e0", 0x1}], 0x4}, 0x0) [ 761.428383][T17935] device vlan0 left promiscuous mode [ 761.492228][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 761.614870][T17948] device bond45 entered promiscuous mode [ 761.659039][T17948] device bond45 left promiscuous mode 13:57:06 executing program 2: open$dir(&(0x7f00000011c0)='./file0\x00', 0x818c72990ed9a318, 0x0) [ 762.408771][ T1014] device hsr_slave_0 left promiscuous mode [ 762.424328][ T1014] device hsr_slave_1 left promiscuous mode [ 762.448707][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.466920][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.498211][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.533223][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.556028][ T1014] device bridge_slave_1 left promiscuous mode [ 762.583132][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.607445][ T1014] device bridge_slave_0 left promiscuous mode [ 762.624036][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state 13:57:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) accept4$inet6(r2, &(0x7f0000000180), &(0x7f0000000000)=0xfffffe26, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000240)=0x220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @local}, 0x10) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x9c13, 0x4000811, 0x0, 0x55) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom$packet(r1, &(0x7f00000000c0)=""/40, 0x28, 0x20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:57:07 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="8df98de7e759", @remote, @val, {@ipv6}}, 0x0) 13:57:07 executing program 1: r0 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./file0\x00', r0, &(0x7f0000000540)='./file0\x00') linkat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x0) 13:57:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:07 executing program 2: syz_emit_ethernet(0x4f, &(0x7f0000000100)={@random="8df98de7e759", @local, @val, {@ipv6}}, 0x0) [ 762.647443][ T1014] device veth1_macvtap left promiscuous mode [ 762.656571][ T1014] device veth0_macvtap left promiscuous mode [ 762.662718][ T1014] device veth1_vlan left promiscuous mode [ 762.684042][ T1014] device veth0_vlan left promiscuous mode 13:57:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) accept4$inet6(r2, &(0x7f0000000180), &(0x7f0000000000)=0xfffffe26, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000240)=0x220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @local}, 0x10) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x9c13, 0x4000811, 0x0, 0x55) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom$packet(r1, &(0x7f00000000c0)=""/40, 0x28, 0x20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:57:07 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x81, 0x0) [ 763.323693][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 763.367940][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 763.410023][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.449769][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.692898][ T1014] bond0 (unregistering): Released all slaves [ 763.817784][T17967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 763.888078][T17967] device veth93 entered promiscuous mode [ 763.903082][T17974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 763.952246][T17975] device vlan0 entered promiscuous mode [ 764.023288][T17980] device vlan0 left promiscuous mode [ 767.176969][ T3650] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 772.055779][ T3650] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 774.869576][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 774.878994][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 774.887005][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 774.894801][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 774.902485][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 774.911601][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 775.000803][T17995] chnl_net:caif_netlink_parms(): no params data found [ 775.044632][T17995] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.052027][T17995] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.060429][T17995] device bridge_slave_0 entered promiscuous mode [ 775.068949][T17995] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.076435][T17995] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.084234][T17995] device bridge_slave_1 entered promiscuous mode [ 775.110609][T17995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.122986][T17995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.148596][T17995] team0: Port device team_slave_0 added [ 775.156719][T17995] team0: Port device team_slave_1 added [ 775.175217][T17995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.182948][T17995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.209029][T17995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.221549][T17995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.228607][T17995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.254621][T17995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.283181][T17995] device hsr_slave_0 entered promiscuous mode [ 775.291131][T17995] device hsr_slave_1 entered promiscuous mode [ 775.297815][T17995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.305363][T17995] Cannot create hsr debugfs directory [ 775.374611][T17995] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.381803][T17995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.389222][T17995] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.396472][T17995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.445259][T17995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.458586][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 775.468738][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.478048][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.486524][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 775.501815][T17995] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.515366][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 775.524893][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.532061][ T3675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.558233][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 775.567299][T14287] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.574377][T14287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.583745][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 775.592719][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 775.607162][T17995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 775.620672][T17995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.635944][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 775.643782][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 775.653033][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 775.674925][T17995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.684552][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 775.692190][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 775.699986][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 775.938691][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 775.953473][T17995] device veth0_vlan entered promiscuous mode [ 775.961946][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 775.974940][T17995] device veth1_vlan entered promiscuous mode [ 775.983260][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 775.992297][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 776.000918][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 776.019335][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 776.032218][T17995] device veth0_macvtap entered promiscuous mode [ 776.042394][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 776.051948][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 776.063016][T17995] device veth1_macvtap entered promiscuous mode [ 776.073115][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 776.081889][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 776.096656][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 776.108637][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.118509][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 776.129022][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.139528][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 776.150118][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.160287][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 776.170794][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.181841][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 776.192459][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.204069][T17995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.212892][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 776.221818][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 776.233807][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 776.245815][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.256203][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 776.267423][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.277721][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 776.288645][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.299267][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 776.313396][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.323710][T17995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 776.334506][T17995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.346746][T17995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.354470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 776.363467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 776.429247][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.442884][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.460624][ T7796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.461551][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 776.472202][ T7796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.490439][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 776.751525][T18014] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 776.778563][T18014] CPU: 1 PID: 18014 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 776.787369][T18014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.797525][T18014] Call Trace: [ 776.800806][T18014] [ 776.803724][T18014] dump_stack_lvl+0x201/0x2d8 [ 776.808408][T18014] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 776.814595][T18014] ? show_regs_print_info+0x12/0x12 [ 776.819826][T18014] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 776.826002][T18014] ? wake_up_klogd+0xb2/0xf0 [ 776.830622][T18014] dump_header+0xdb/0x970 [ 776.834963][T18014] oom_kill_process+0xf5/0x4e0 [ 776.839735][T18014] out_of_memory+0x711/0xa70 [ 776.844316][T18014] ? preempt_schedule+0x16b/0x190 [ 776.849861][T18014] ? unregister_oom_notifier+0x20/0x20 [ 776.855332][T18014] ? lockdep_hardirqs_on+0x95/0x140 [ 776.860544][T18014] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 776.866097][T18014] ? preempt_schedule_thunk+0x16/0x18 [ 776.871576][T18014] ? mem_cgroup_oom_trylock+0x220/0x220 [ 776.877130][T18014] ? cgroup_file_notify+0x123/0x190 [ 776.882334][T18014] memory_max_write+0x364/0x4f0 [ 776.887186][T18014] ? memory_max_show+0xa0/0xa0 [ 776.891945][T18014] ? read_lock_is_recursive+0x10/0x10 [ 776.897402][T18014] ? memory_max_show+0xa0/0xa0 [ 776.902174][T18014] cgroup_file_write+0x2a4/0x780 [ 776.907113][T18014] ? cgroup_seqfile_stop+0xd0/0xd0 [ 776.912231][T18014] ? cgroup_seqfile_stop+0xd0/0xd0 [ 776.917332][T18014] kernfs_fop_write_iter+0x3b6/0x510 [ 776.922616][T18014] vfs_write+0xb11/0xe90 [ 776.926861][T18014] ? file_end_write+0x230/0x230 [ 776.931720][T18014] ? mutex_lock_nested+0x1a/0x20 [ 776.936648][T18014] ? __fdget_pos+0x24e/0x2f0 [ 776.941236][T18014] ? ksys_write+0x77/0x2c0 [ 776.945664][T18014] ksys_write+0x18f/0x2c0 [ 776.950017][T18014] ? __ia32_sys_read+0x80/0x80 [ 776.954810][T18014] ? syscall_enter_from_user_mode+0x38/0x1b0 [ 776.960786][T18014] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 776.966776][T18014] do_syscall_64+0x44/0xd0 [ 776.971208][T18014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 776.977120][T18014] RIP: 0033:0x7f1788d21059 [ 776.981801][T18014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 777.001481][T18014] RSP: 002b:00007f1787696168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 777.009971][T18014] RAX: ffffffffffffffda RBX: 00007f1788e33f60 RCX: 00007f1788d21059 [ 777.017931][T18014] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 777.025887][T18014] RBP: 00007f1788d7b08d R08: 0000000000000000 R09: 0000000000000000 [ 777.033845][T18014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.041805][T18014] R13: 00007fff4c53055f R14: 00007f1787696300 R15: 0000000000022000 [ 777.049800][T18014] [ 777.069591][T14287] Bluetooth: hci3: command 0x0409 tx timeout [ 777.085888][T18014] memory: usage 2584kB, limit 32kB, failcnt 1594 [ 777.092493][T18014] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 777.106227][T18014] Memory cgroup stats for /syz4: [ 777.113810][T18014] anon 2207744 [ 777.113810][T18014] file 65536 [ 777.113810][T18014] kernel_stack 65536 [ 777.113810][T18014] pagetables 94208 [ 777.113810][T18014] percpu 0 [ 777.113810][T18014] sock 0 [ 777.113810][T18014] vmalloc 0 [ 777.113810][T18014] shmem 61440 [ 777.113810][T18014] file_mapped 61440 [ 777.113810][T18014] file_dirty 0 [ 777.113810][T18014] file_writeback 0 [ 777.113810][T18014] swapcached 0 [ 777.113810][T18014] anon_thp 2097152 [ 777.113810][T18014] file_thp 0 [ 777.113810][T18014] shmem_thp 0 [ 777.113810][T18014] inactive_anon 2207744 [ 777.113810][T18014] active_anon 61440 [ 777.113810][T18014] inactive_file 4096 [ 777.113810][T18014] active_file 0 [ 777.113810][T18014] unevictable 0 [ 777.113810][T18014] slab_reclaimable 58376 [ 777.113810][T18014] slab_unreclaimable 122000 [ 777.113810][T18014] slab 180376 [ 777.113810][T18014] workingset_refault_anon 0 [ 777.113810][T18014] workingset_refault_file 0 [ 777.228907][T18014] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18013,uid=0 [ 777.254222][T18014] Memory cgroup out of memory: Killed process 18013 (syz-executor.4) total-vm:60648kB, anon-rss:2464kB, file-rss:15064kB, shmem-rss:80kB, UID:0 pgtables:100kB oom_score_adj:1000 13:57:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:57:21 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000140)={@random="8df98de7e759", @local, @val, {@ipv6}}, 0x0) 13:57:21 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @loopback, @remote, @broadcast}}}}, 0x0) 13:57:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) accept4$inet6(r2, &(0x7f0000000180), &(0x7f0000000000)=0xfffffe26, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000240)=0x220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @local}, 0x10) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x9c13, 0x4000811, 0x0, 0x55) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom$packet(r1, &(0x7f00000000c0)=""/40, 0x28, 0x20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:57:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) accept4$inet6(r2, &(0x7f0000000180), &(0x7f0000000000)=0xfffffe26, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000240)=0x220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @local}, 0x10) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x9c13, 0x4000811, 0x0, 0x55) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom$packet(r1, &(0x7f00000000c0)=""/40, 0x28, 0x20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) [ 777.287551][ T28] oom_reaper: reaped process 18013 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:57:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00000015c0)=[{&(0x7f0000000080)="adb414d1b1cd9cfc4080261a7e726dd6b77094b2d8d67fdc122e32f3dfd9940524363883b022d5fa919778cb28fc2205c879b345cd2e03c9b59e93de2a5e1ede1df2457a5a3a04c17fb34b6336764fbb40c9a0c4a4d1c831e2b531fedfae06d7da6fce0afde769b8bab54da24bfc75f66ca9ca8b20119aff4ddae4220afb11ba97e35c17b7043f5c613a65717099bc955b086d880aa0b4642acb844838aeaf2ee7f077df193c512dff99922d452aaf7b35f7b87a68fdae48126543eea4813a6fce03c064decbbd6e1c3f72c2e0846dc15cfcfaccc8c3528b2d", 0xd9}, {&(0x7f0000000180)="ada81a0a34dfe153e9b6228b0dcf5958bd628bf511b3e48ec83d394d43327f193e005b01c6c94dfc3284b65e01da89c0d26a4f7657c43d23fcf5d06acdc6cfbeed5fd20f1d3707f8f961b9ebd23f2a4622545120dd66766869615e37e27c0e814633dabc0add683aa68ba95572e4700ada82a61de34d9167d3ca3ed613d32769cdfc632bbbe2229eaebee350ccf682ba00dbc7a55f6455b098d53da93a537e4055fef409c01954b39f84f2e2126b875a8a4a6d468810b19f2c44f1", 0xbb}, {&(0x7f0000000240)="f68d379211b033cd3806b35a57962b5210cd9ec117288aefe3bd075473c545057b3022d0aa3d71c671eeb0b8f24bd2aef0ba7f8ef777e9142b73cede834314ef97555cb82f8a5b5c0532ab18a4f2e55aba0081f177b24dfc1056247a1cd1dc19bf372db1387067a262fce0e733fde77bdf6d6d26930a7caab39244f12c06ffdd35e9111d893dc347c394fcd06b2e980ad5b9192408d3394ebcc349d53cdcfdb85746dad0684e65bb9919ed0c9ad33c5ef2", 0xb1}, {&(0x7f0000000300)="a7fca42c01d0a23f8f4dcf06eecfebdf5b54d2f71e423570c77e573aeda6db3bd21a9b5095fb742d9af67fffe9619394e1ecdc97e806d26dcfce41b21fa73c7703bc82735f21e1a34da781a64ab2b9a9298b38ce8b0cd93005706275142c04874e5279d491dcd77c8b3a4b5d51ef7ca498f29758f9e1a5700d2d7a93a7c62d98c617e73c5291004bb83f25b6d1fbb590488f5b452ce3770d3ae57d7a6008ef194d8b92c9e50fd25f7dcfbd6aa3f2af30205fa2c5db2a9275a81c6b6f460462dc2d6d67201ccafa8f2f46622a6984eea895620e3d0e915e015f484671a0156e7edfe639bd148b574e5c994702c683", 0xee}, {&(0x7f0000000400)="3cb21ba2a6796c604aac561014a966c67a014a4a6156275add05bc78302f06ef6dc6f2283355599e902759c7c139", 0x2e}, {0x0}, {&(0x7f0000000480)="1b3806db944527f8db05ae4bf051a2498e5c2e196d36a9450bb6e5", 0x1b}, {&(0x7f00000004c0)="5200516831a5b24a4f3466da17330e9aeaae05ac8bf9c08cf1b124345fc60cd9ca355ed61707194489dee12867b209349b72409abbcd5830ce1751cb444af857ed0891b6e2194781f8d3fcc421a186313bef", 0x52}, {&(0x7f0000000540)="2ecbabad115b4623d6d19f0ce5582768bc64967308989a01c98158cacf986a29f5a821ce3842b4c759aa4e8682e27e053aee21e6a069d50c1a9f34d80fcd83ecda02f453e5e812e51f7f7639b0dd6fe1457437ddc6fdce9e083a433eefbfa4fb4041f301024875d9e67c39c371c620963d3d636b8e3ec5e1d62e1c63462a4989244258e529e657c2116c1779856d2481609d6e5c42d8dec37719fbdca417eba335739f1be012ff0e81843e0e669363990b16258df020dc1f331b79eb6ced5e0204e1113c7edf548113d83a9bbb50453bd8c8c67ac09c0390b49804f80d6bcf9e965f53322fba1cfb824e5aca96e76e35b14c58192fabe6ac30268f3ff4daff86b05bfaa19f1074c8dd23fa915cd095649aaf71f55fca056faf0e9f2a19be882dd91fd9aaa00d20e8534355eaa7a715f664410672bdb5e64db9f102486728538b33b581c9accd019b2401db866a0f183c2c00b9c54f9b795b757ac5a31c28eaaac6c2ef98e5b6161b299b03284ec21f21cafeac97f4b2799539884114ed033bc9b2a8acaa70f11af34f3d4f392e41ba79cf876dc26a178eec241fa9260ae36f84caa60e0e72b156beaab1d60f68fc66473c7c75659e42462e4a349fe0b5e0ffc4e3b76d36a19986a2993565c34cc214b8e0099d896dade544efdacb63ce10aae3cc00218e3bfad75943cda820144572aa32db864c0d356967ebd4f0a458f31687a2e7f59d24e6909c6a82798f915d0ba539fbaa2e077a27a8d6770ea897095b8f2427a02319932acb7c88d9d589efd690461ea8b88cc974d2f287dfc82a4262e24e94101dc488f9304510de0ada1e0a6dd2b4ad54c671eea222553dca7880024707d7aeca2195be4f2c1587aafb4491a70f5c36f83180b7e09c8165d3c1b8ec15caeccce4d9a879d33f870ec4f76b0976b7d38f4c1345fe359384165e06b22d957bc4db52ab7cfdae6c9b585a037ac4b4f90284d50b404f5ef8edf0c6cf0cf7a689307d78ae141c2daa84f710a6d5763c014723fb74677b5dd0b599acee964c39fb38efc66fc470f7b0065350d0f3920a803a5d64661abe4f723ea94d3800e9a71ed1f6675f0d43ebec29e25737bb8c219ec874e5be0005c4b8e46ee57def5f10874a38290e5cfc3a811013c9f9dc453457eba161bf1c24de648181e640598e6cef9a50d873a8c4f7204d5276af9977142fa6ad40c8ab352a57d450d3e4daa5bbc8cd564d643b39ccc61de69a9b0de49cf679cc0d9526056d5ecc40a06984716ac6e807d60551680a23f26c0d7ad6ae5057d05f8a9ac0f533c441d076ec4bf73c2b389d3c1915e122376e0a806d1eee5995348a2aed24d87229313e7582ee258b77e99b698b215c78fafc153e88ef2ec2a536c8722a27a955b5ec99e514e29e28e5aef293ec8f5bcb9a1feec8eea90f1cc068fb59defeb195165a2d5e333f785db18f48d016bcd86800494e12499e472623943795a9a53b8e1f8b0a9737378070d90bff167e45a39ffa1da8bba891a83f1924d4", 0x433}], 0x9}, 0x0) 13:57:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000180)=@un=@abs={0x8}, 0x8) [ 777.345937][T18019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 777.355001][T17995] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 777.402220][T17995] CPU: 1 PID: 17995 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 777.411123][T17995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.421284][T17995] Call Trace: [ 777.424590][T17995] [ 777.427541][T17995] dump_stack_lvl+0x201/0x2d8 [ 777.432259][T17995] ? show_regs_print_info+0x12/0x12 [ 777.437623][T17995] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 777.443997][T17995] ? do_raw_spin_lock+0x151/0x8e0 [ 777.449057][T17995] ? asan.module_dtor+0x20/0x20 [ 777.453932][T17995] dump_header+0xdb/0x970 [ 777.458281][T17995] oom_kill_process+0xf5/0x4e0 [ 777.463065][T17995] out_of_memory+0x711/0xa70 [ 777.467672][T17995] ? unregister_oom_notifier+0x20/0x20 [ 777.473244][T17995] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 777.478798][T17995] ? __lock_acquire+0x2b00/0x2b00 [ 777.483840][T17995] ? mem_cgroup_oom_trylock+0x220/0x220 [ 777.489407][T17995] ? do_raw_spin_unlock+0x134/0x8a0 [ 777.494624][T17995] ? mem_cgroup_iter+0x3c9/0x530 [ 777.499589][T17995] mem_cgroup_oom+0x4ad/0x620 [ 777.504288][T17995] try_charge_memcg+0xd37/0x1010 [ 777.509241][T17995] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 777.515258][T17995] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 777.521094][T17995] ? rcu_lock_acquire+0x30/0x30 [ 777.525967][T17995] ? __lock_acquire+0x2b00/0x2b00 [ 777.531042][T17995] obj_cgroup_charge+0x1b2/0x420 [ 777.536010][T17995] ? mod_objcg_mlstate+0x330/0x330 [ 777.541154][T17995] kmem_cache_alloc+0xbd/0x310 [ 777.545931][T17995] ? __d_alloc+0x2a/0x700 [ 777.550298][T17995] __d_alloc+0x2a/0x700 [ 777.554480][T17995] d_alloc_parallel+0xd3/0x15c0 [ 777.559453][T17995] ? memset+0x1f/0x40 [ 777.563467][T17995] ? lockdep_init_map_type+0x9f/0x9b0 [ 777.568850][T17995] ? lockdep_softirqs_off+0x420/0x420 [ 777.574233][T17995] ? d_hash_and_lookup+0x1c0/0x1c0 [ 777.579374][T17995] ? __init_waitqueue_head+0x68/0xd0 [ 777.584693][T17995] __lookup_slow+0x110/0x3d0 [ 777.589278][T17995] ? lookup_one_len+0x2c0/0x2c0 [ 777.594122][T17995] ? up_read_non_owner+0x1c0/0x1c0 [ 777.599246][T17995] ? bpf_lsm_inode_permission+0x5/0x10 [ 777.604712][T17995] walk_component+0x516/0x790 [ 777.609400][T17995] ? try_to_unlazy+0xce0/0xce0 [ 777.614153][T17995] ? path_init+0x11f0/0x11f0 [ 777.618750][T17995] path_lookupat+0x19d/0x6c0 [ 777.623362][T17995] filename_lookup+0x270/0x640 [ 777.628151][T17995] ? hashlen_string+0x110/0x110 [ 777.633010][T17995] ? __might_fault+0xb6/0x110 [ 777.637753][T17995] ? strncpy_from_user+0x1f6/0x350 [ 777.642886][T17995] ? getname_flags+0x1fe/0x650 [ 777.647673][T17995] user_path_at_empty+0x40/0x1a0 [ 777.652629][T17995] __x64_sys_umount+0xf0/0x170 [ 777.657415][T17995] ? path_umount+0xfc0/0xfc0 [ 777.662020][T17995] ? lockdep_hardirqs_on+0x95/0x140 [ 777.667228][T17995] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 777.673226][T17995] do_syscall_64+0x44/0xd0 [ 777.677664][T17995] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 777.683576][T17995] RIP: 0033:0x7f1788d224c7 [ 777.688007][T17995] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 777.707623][T17995] RSP: 002b:00007fff4c52f6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 777.716062][T17995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1788d224c7 [ 777.724056][T17995] RDX: 00007fff4c52f78a RSI: 000000000000000a RDI: 00007fff4c52f780 [ 777.732138][T17995] RBP: 00007fff4c52f780 R08: 00000000ffffffff R09: 00007fff4c52f550 [ 777.740138][T17995] R10: 00005555560168c3 R11: 0000000000000246 R12: 00007f1788d7a1ea 13:57:22 executing program 3: openat$ptmx(0xffffff9c, &(0x7f0000000600), 0x0, 0x0) [ 777.748125][T17995] R13: 00007fff4c530840 R14: 0000555556016810 R15: 00007fff4c530880 [ 777.756134][T17995] [ 777.767367][T18019] device veth95 entered promiscuous mode 13:57:22 executing program 2: open(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) [ 777.803602][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:57:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='cubic\x00', 0x6) 13:57:22 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) bind(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) [ 778.062945][T18024] device bond46 entered promiscuous mode [ 778.106647][T18024] device bond46 left promiscuous mode [ 778.453636][T17995] memory: usage 292kB, limit 32kB, failcnt 1613 [ 778.471526][T17995] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 778.487382][T17995] Memory cgroup stats for /syz4: [ 778.487607][T17995] anon 45056 [ 778.487607][T17995] file 61440 [ 778.487607][T17995] kernel_stack 0 [ 778.487607][T17995] pagetables 8192 [ 778.487607][T17995] percpu 0 [ 778.487607][T17995] sock 0 [ 778.487607][T17995] vmalloc 0 [ 778.487607][T17995] shmem 61440 [ 778.487607][T17995] file_mapped 61440 [ 778.487607][T17995] file_dirty 0 [ 778.487607][T17995] file_writeback 0 [ 778.487607][T17995] swapcached 0 [ 778.487607][T17995] anon_thp 0 [ 778.487607][T17995] file_thp 0 [ 778.487607][T17995] shmem_thp 0 [ 778.487607][T17995] inactive_anon 45056 [ 778.487607][T17995] active_anon 61440 [ 778.487607][T17995] inactive_file 0 [ 778.487607][T17995] active_file 0 [ 778.487607][T17995] unevictable 0 [ 778.487607][T17995] slab_reclaimable 56840 [ 778.487607][T17995] slab_unreclaimable 117248 [ 778.487607][T17995] slab 174088 [ 778.487607][T17995] workingset_refault_anon 0 [ 778.487607][T17995] workingset_refault_file 0 [ 778.487607][T17995] workingset_activate_anon 0 [ 778.746466][T17995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=17995,uid=0 [ 778.777192][T17995] Memory cgroup out of memory: Killed process 17995 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 778.802890][ T28] oom_reaper: reaped process 17995 (syz-executor.4), now anon-rss:0kB, file-rss:13584kB, shmem-rss:0kB 13:57:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:57:23 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000200)={0x1c, 0x1c, 0x1}, 0x1c) 13:57:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 13:57:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) accept4$inet6(r2, &(0x7f0000000180), &(0x7f0000000000)=0xfffffe26, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000240)=0x220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @local}, 0x10) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x9c13, 0x4000811, 0x0, 0x55) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom$packet(r1, &(0x7f00000000c0)=""/40, 0x28, 0x20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:57:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) accept4$inet6(r2, &(0x7f0000000180), &(0x7f0000000000)=0xfffffe26, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000240)=0x220, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x1, 0x6, @local}, 0x10) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x9c13, 0x4000811, 0x0, 0x55) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) recvfrom$packet(r1, &(0x7f00000000c0)=""/40, 0x28, 0x20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 13:57:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x100}, 0x98) [ 778.993252][T18063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:57:23 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, &(0x7f0000000180)="14", 0x1, 0x100, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 779.122686][T18063] device veth97 entered promiscuous mode 13:57:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) [ 779.232157][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:57:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x1, 0x10}, 0x98) 13:57:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x192afd14ba085061) [ 779.448997][T18069] device bond47 entered promiscuous mode 13:57:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080), 0xb) [ 779.517543][T18069] device bond47 left promiscuous mode 13:57:24 executing program 3: openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x8044c, 0x0) 13:57:24 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 13:57:24 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c}, 0x1c) socket$inet6_sctp(0x1c, 0x0, 0x84) 13:57:24 executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 779.891693][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 780.036353][T18108] device veth99 entered promiscuous mode [ 780.117994][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 780.751001][ T7796] device hsr_slave_0 left promiscuous mode [ 780.759654][ T7796] device hsr_slave_1 left promiscuous mode [ 780.798060][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.822658][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.852659][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.874681][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.904696][ T7796] device bridge_slave_1 left promiscuous mode [ 780.922578][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.953152][ T7796] device bridge_slave_0 left promiscuous mode [ 780.974380][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.018931][ T7796] device veth1_macvtap left promiscuous mode [ 781.039276][ T7796] device veth0_macvtap left promiscuous mode [ 781.061340][ T7796] device veth1_vlan left promiscuous mode [ 781.078971][ T7796] device veth0_vlan left promiscuous mode 13:57:25 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xb) 13:57:25 executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040)={0x0, 0x1}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0xb) 13:57:25 executing program 5: unshare(0x4040400) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f0000000580), 0x400000000000092, 0x0, &(0x7f0000005500)) [ 781.572116][ T7796] team0 (unregistering): Port device team_slave_1 removed [ 781.588844][ T7796] team0 (unregistering): Port device team_slave_0 removed [ 781.601185][ T7796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.619478][ T7796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.692693][ T7796] bond0 (unregistering): Released all slaves [ 781.740517][T18120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 781.760131][T18120] device veth101 entered promiscuous mode [ 781.768982][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 781.793105][T18129] device bond49 entered promiscuous mode [ 781.801002][T18129] device bond49 left promiscuous mode [ 783.342467][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 783.352833][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 783.361375][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 783.370209][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 783.379715][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 783.387106][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 783.473956][T18132] chnl_net:caif_netlink_parms(): no params data found [ 783.521459][T18132] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.528760][T18132] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.537613][T18132] device bridge_slave_0 entered promiscuous mode [ 783.545750][T18132] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.552903][T18132] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.561136][T18132] device bridge_slave_1 entered promiscuous mode [ 783.584787][T18132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.596921][T18132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.626327][T18132] team0: Port device team_slave_0 added [ 783.633790][T18132] team0: Port device team_slave_1 added [ 783.653545][T18132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.660695][T18132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.686746][T18132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.699593][T18132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.706945][T18132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.735246][T18132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.763736][T18132] device hsr_slave_0 entered promiscuous mode [ 783.771027][T18132] device hsr_slave_1 entered promiscuous mode [ 783.778236][T18132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.785918][T18132] Cannot create hsr debugfs directory [ 783.908006][T18132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.926995][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 783.934777][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.947747][T18132] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.958329][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 783.967024][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 783.975268][T14287] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.982390][T14287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.991360][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 784.011154][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 784.019881][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 784.031181][T14287] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.038355][T14287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.046634][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 784.057504][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 784.066592][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 784.076256][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 784.086756][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 784.096390][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 784.104956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 784.122939][T18132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 784.134843][T18132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 784.156674][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 784.165026][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 784.174193][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 784.184670][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 784.193743][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 784.204298][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.216056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.229342][T18132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.478591][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 784.491392][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 784.500843][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 784.509251][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 784.520520][T18132] device veth0_vlan entered promiscuous mode [ 784.536261][T18132] device veth1_vlan entered promiscuous mode [ 784.559037][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 784.570363][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 784.579119][T14403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 784.594836][T18132] device veth0_macvtap entered promiscuous mode [ 784.604444][T18132] device veth1_macvtap entered promiscuous mode [ 784.620562][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.633013][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.644500][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.655323][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.665403][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.676456][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.686735][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.700669][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.711143][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 784.722700][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.733831][T18132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.744474][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 784.752943][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 784.762465][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 784.773371][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.784422][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.795535][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.806461][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.817134][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.827680][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.837570][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.848918][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.860300][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 784.870913][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.882101][T18132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.890111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 784.901848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 784.977320][ T7796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.987041][ T7796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.004811][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 785.019698][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.028463][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.039727][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 785.312502][T18151] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 785.323549][T18151] CPU: 1 PID: 18151 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 785.332308][T18151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.342365][T18151] Call Trace: [ 785.345643][T18151] [ 785.348609][T18151] dump_stack_lvl+0x201/0x2d8 [ 785.353284][T18151] ? show_regs_print_info+0x12/0x12 [ 785.358475][T18151] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 785.364191][T18151] ? do_raw_spin_lock+0x151/0x8e0 [ 785.369321][T18151] ? asan.module_dtor+0x20/0x20 [ 785.374177][T18151] dump_header+0xdb/0x970 [ 785.378503][T18151] oom_kill_process+0xf5/0x4e0 [ 785.383259][T18151] out_of_memory+0x711/0xa70 [ 785.387853][T18151] ? preempt_schedule+0x16b/0x190 [ 785.392891][T18151] ? unregister_oom_notifier+0x20/0x20 [ 785.398337][T18151] ? lockdep_hardirqs_on+0x95/0x140 [ 785.403554][T18151] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 785.409112][T18151] ? preempt_schedule_thunk+0x16/0x18 [ 785.414493][T18151] ? mem_cgroup_oom_trylock+0x220/0x220 [ 785.420033][T18151] ? cgroup_file_notify+0x123/0x190 [ 785.425255][T18151] memory_max_write+0x364/0x4f0 [ 785.430103][T18151] ? memory_max_show+0xa0/0xa0 [ 785.434870][T18151] ? memory_max_show+0xa0/0xa0 [ 785.439636][T18151] cgroup_file_write+0x2a4/0x780 [ 785.444572][T18151] ? cgroup_seqfile_stop+0xd0/0xd0 [ 785.449688][T18151] ? cgroup_seqfile_stop+0xd0/0xd0 [ 785.454831][T18151] kernfs_fop_write_iter+0x3b6/0x510 [ 785.460119][T18151] vfs_write+0xb11/0xe90 [ 785.464360][T18151] ? file_end_write+0x230/0x230 [ 785.469192][T18151] ? rcu_lock_acquire+0x9/0x30 [ 785.473955][T18151] ? mutex_lock_nested+0x1a/0x20 [ 785.478878][T18151] ? __fdget_pos+0x24e/0x2f0 [ 785.483456][T18151] ? ksys_write+0x77/0x2c0 [ 785.487866][T18151] ksys_write+0x18f/0x2c0 [ 785.492181][T18151] ? print_irqtrace_events+0x220/0x220 [ 785.497640][T18151] ? __ia32_sys_read+0x80/0x80 [ 785.502397][T18151] ? lockdep_hardirqs_on+0x95/0x140 [ 785.507601][T18151] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 785.513577][T18151] do_syscall_64+0x44/0xd0 [ 785.518007][T18151] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 785.523887][T18151] RIP: 0033:0x7fabcef0e059 [ 785.528293][T18151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 785.548322][T18151] RSP: 002b:00007fabcd883168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 785.556732][T18151] RAX: ffffffffffffffda RBX: 00007fabcf020f60 RCX: 00007fabcef0e059 [ 785.564698][T18151] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 785.572666][T18151] RBP: 00007fabcef6808d R08: 0000000000000000 R09: 0000000000000000 [ 785.580625][T18151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.588585][T18151] R13: 00007ffc8182ddef R14: 00007fabcd883300 R15: 0000000000022000 [ 785.596565][T18151] [ 785.611296][ T3680] Bluetooth: hci3: command 0x0409 tx timeout [ 785.628549][T18151] memory: usage 2676kB, limit 32kB, failcnt 1630 [ 785.636515][T18151] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 785.644685][T18151] Memory cgroup stats for /syz4: [ 785.651151][T18151] anon 2207744 [ 785.651151][T18151] file 65536 [ 785.651151][T18151] kernel_stack 65536 [ 785.651151][T18151] pagetables 94208 [ 785.651151][T18151] percpu 0 [ 785.651151][T18151] sock 0 [ 785.651151][T18151] vmalloc 0 [ 785.651151][T18151] shmem 61440 [ 785.651151][T18151] file_mapped 61440 [ 785.651151][T18151] file_dirty 0 [ 785.651151][T18151] file_writeback 0 [ 785.651151][T18151] swapcached 0 [ 785.651151][T18151] anon_thp 2097152 [ 785.651151][T18151] file_thp 0 [ 785.651151][T18151] shmem_thp 0 [ 785.651151][T18151] inactive_anon 2207744 [ 785.651151][T18151] active_anon 61440 [ 785.651151][T18151] inactive_file 4096 [ 785.651151][T18151] active_file 0 [ 785.651151][T18151] unevictable 0 [ 785.651151][T18151] slab_reclaimable 100872 [ 785.651151][T18151] slab_unreclaimable 174904 [ 785.651151][T18151] slab 275776 [ 785.651151][T18151] workingset_refault_anon 0 [ 785.651151][T18151] workingset_refault_file 0 [ 785.768626][T18151] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18150,uid=0 [ 785.790821][T18151] Memory cgroup out of memory: Killed process 18150 (syz-executor.4) total-vm:60648kB, anon-rss:2428kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 785.829238][ T28] oom_reaper: reaped process 18150 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB 13:57:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:57:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000000), 0x8) 13:57:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000), 0x14) 13:57:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000000), 0x8) 13:57:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x88) 13:57:30 executing program 0: connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) 13:57:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x88) 13:57:30 executing program 5: setuid(0xee01) socket(0x2, 0x3, 0x4) 13:57:30 executing program 2: r0 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$chown(0x4, r2, 0x0, 0x0) [ 786.027002][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 786.049931][T18132] syz-executor.4 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 786.098959][T18132] CPU: 1 PID: 18132 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 786.107772][T18132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.117838][T18132] Call Trace: [ 786.121136][T18132] [ 786.124081][T18132] dump_stack_lvl+0x201/0x2d8 [ 786.128788][T18132] ? show_regs_print_info+0x12/0x12 [ 786.134018][T18132] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 786.139833][T18132] ? do_raw_spin_lock+0x151/0x8e0 [ 786.144894][T18132] ? asan.module_dtor+0x20/0x20 [ 786.149772][T18132] dump_header+0xdb/0x970 [ 786.154179][T18132] oom_kill_process+0xf5/0x4e0 [ 786.158973][T18132] out_of_memory+0x711/0xa70 [ 786.163595][T18132] ? unregister_oom_notifier+0x20/0x20 [ 786.169095][T18132] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 786.174664][T18132] ? __lock_acquire+0x2b00/0x2b00 [ 786.179711][T18132] ? mem_cgroup_oom_trylock+0x220/0x220 [ 786.185282][T18132] ? do_raw_spin_unlock+0x134/0x8a0 [ 786.190512][T18132] ? mem_cgroup_iter+0x3c9/0x530 [ 786.195472][T18132] mem_cgroup_oom+0x4ad/0x620 [ 786.200185][T18132] try_charge_memcg+0xd37/0x1010 [ 786.205230][T18132] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 786.211258][T18132] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 786.217088][T18132] ? rcu_lock_acquire+0x30/0x30 [ 786.221968][T18132] ? __lock_acquire+0x2b00/0x2b00 [ 786.227090][T18132] obj_cgroup_charge+0x1b2/0x420 [ 786.232059][T18132] ? mod_objcg_mlstate+0x330/0x330 [ 786.237214][T18132] kmem_cache_alloc+0xbd/0x310 [ 786.241994][T18132] ? ext4_alloc_inode+0x1d/0x570 [ 786.246945][T18132] ? do_raw_spin_unlock+0x134/0x8a0 [ 786.252166][T18132] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 786.258177][T18132] ext4_alloc_inode+0x1d/0x570 [ 786.262963][T18132] ? ext4_mark_recovery_complete+0x3c0/0x3c0 [ 786.269048][T18132] iget_locked+0x195/0x810 [ 786.273501][T18132] __ext4_iget+0x262/0x4e30 [ 786.278046][T18132] ? ext4_get_projid+0x140/0x140 [ 786.283003][T18132] ? rcu_read_lock_sched_held+0x89/0x130 [ 786.288654][T18132] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 786.294671][T18132] ? ext4_lookup+0x484/0xb90 [ 786.299290][T18132] ? trace_kfree+0x2e/0xd0 [ 786.303723][T18132] ? kfree+0x2f/0x2e0 [ 786.307815][T18132] ? ext4_lookup+0x38f/0xb90 [ 786.312427][T18132] ext4_lookup+0x732/0xb90 [ 786.316871][T18132] ? ext4_add_entry+0x4210/0x4210 [ 786.321911][T18132] ? d_alloc_parallel+0x1478/0x15c0 [ 786.327131][T18132] ? lockdep_init_map_type+0x9f/0x9b0 [ 786.332542][T18132] ? __init_waitqueue_head+0x68/0xd0 [ 786.337850][T18132] __lookup_slow+0x27f/0x3d0 [ 786.342467][T18132] ? lookup_one_len+0x2c0/0x2c0 [ 786.347340][T18132] ? up_read_non_owner+0x1c0/0x1c0 [ 786.352440][T18132] ? bpf_lsm_inode_permission+0x5/0x10 [ 786.357909][T18132] walk_component+0x516/0x790 [ 786.362612][T18132] ? try_to_unlazy+0xce0/0xce0 [ 786.367471][T18132] ? path_init+0x11f0/0x11f0 [ 786.372174][T18132] path_lookupat+0x19d/0x6c0 [ 786.376847][T18132] filename_lookup+0x270/0x640 [ 786.381627][T18132] ? hashlen_string+0x110/0x110 [ 786.386468][T18132] ? __might_fault+0xb6/0x110 [ 786.391148][T18132] ? strncpy_from_user+0x1f6/0x350 [ 786.396259][T18132] ? getname_flags+0x1fe/0x650 [ 786.401033][T18132] user_path_at_empty+0x40/0x1a0 [ 786.405970][T18132] __x64_sys_umount+0xf0/0x170 [ 786.410729][T18132] ? path_umount+0xfc0/0xfc0 [ 786.415335][T18132] ? lockdep_hardirqs_on+0x95/0x140 [ 786.420632][T18132] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 786.426611][T18132] do_syscall_64+0x44/0xd0 [ 786.431035][T18132] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.436944][T18132] RIP: 0033:0x7fabcef0f4c7 [ 786.441370][T18132] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 786.460982][T18132] RSP: 002b:00007ffc8182cf48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 786.469398][T18132] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fabcef0f4c7 [ 786.477385][T18132] RDX: 00007ffc8182d01e RSI: 000000000000000a RDI: 00007ffc8182d010 [ 786.485364][T18132] RBP: 00007ffc8182d010 R08: 00000000ffffffff R09: 00007ffc8182cde0 13:57:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002500), 0x0, 0x0) r2 = syz_clone(0x48000000, &(0x7f0000002300)="e4b37aa5cd88baee10e29152b0c4d107d98844f27a63166fa925599ee0b1549bb4ad1d3b30555753775f4d7fa2b038aea88c93b862645a5e21331b32f9df387bcf656fe7b637d7b1da59ec20794841fb0843a89d0bba5e8b47f598c69fe40ac5e2b1430158d13e26d0b9", 0x6a, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002880)="1ab4ee8ac7150709e8a5357e06ae3b884e61333885891de96f57e9e328656a9411d19358e88a2d0fab4d5530fe59fb3f45b2f4ad13a6d745a05903b01ef9fa04fd1619eaa29de684d81d6309a6c8cbb9224c7e26992d513e4165020c569071bcded4bf1ffce9f1eabd56fead27e1f0e15f6cebe12f1f30e3b429b05e5be681369f257e1d75867f158a2f6294a393bafed74811b82a824b1e332e057e1ec3856d2ad1af6481398b779a9dd6221c6e4efc6c6078f47988ed2b094fdcc223ccff92a960e1fc7dee96b47f494440b5b04ba87c686b754d7a4d708ecf42bdc7ea68cb54235a14d85fcce5dda07a2b6cef549c3df273bdec85424cf9dae1fb0ba40e379f81bfd1e3bf0d435804a97b2c32bf3aa3c5a70274acda84a0ee899f03b4b5ace1808189196f896a2576b918c46e0f632eb7d4e406d8e4616ae73dac0655bf3158964ba2abb918177d5eec392314fc34736c9e824ba36b8cb5111a267893a66546fc28238b47ab8a0b99f524df1f5ae620bd442ffa9a6911827b9db03f6aa133f83d4dc2dd928e89a0b0ee21967225cfada18ca2d11356920766bc420f216f1a095e0bfd45427493f926655b2aff24a9e49513f52ce58452bb89cbbcb0cdd655a933306fa9e56b28e4e2c1102ca63fb3dddebcf81bf035b4b3e168a55ea53971be4c6122f891fb604bb783fb9055099dc6598e3ec853059a6e978e8b0dfe4205610ef94d463078bcb00f498a216543eee9f31d737e01fa3e98b05720da7ab262eadc734f8f07653ce9fb4caad21ee6ae8c1afb50ef895640a1fd279372b08f88ab70b3dd27af75f01bc97285a19e1c5f15635c2d54efba70e9bb85bdf3f5c616e962f6659752ad5331eb8f20d4b41cf4c67935adaca8301ae1f47d1e8949b46cb7b3162db928aa145fd7ab9b0a3aaae7e5edea6169b4d72fe3a3610d1a907623e5c68c2e40b7972eb06b70620adbda92668785a52b9680b5f9fb32bbeb9bbb027ea3b510df1ecf42a9ba37f29da1af35c195155f8edac8205294401cf7addcdfd85cfb327e9a06bfe415750b3919a310bad0058ca443af2f8f5035a2bf15c2346e76bd0f7854cb9f3744baabfa5bfbae65d90372d5335b810c8cd26c5721f7ec4fcaf09a6215b57988dcf10cd025232eca5651c0c9dc77f30c2cb814953ae93bd2e62fd4afbb6e33e01c289483c74dcc7a1f2e9f626afb6fcbfcc57e29b0d6bbe0d5343fed623213749236b1efb23069db90646b1271d74e41bb8a92d48a61fe7548034e1c361256909b0c418c99ade3248b981c059e8a15fb9d84b2f0c96c027d308f961a81cc548dd0dd852117c4ea8f8448d7d2ab434d3fca91e8f6b141218e8fab10ecd6218b4eee2012da4681dcc0c3d2afab482f52be466a765d3ed4a7720e57f3f21d6469d141b6d68e1c7c898165ffcd45d42d0d26a058852da933ad6fc6cd4ace18d7a956f4ac60a1e3bfa6c9826beaf5fda7862903006a78d0b1a4e29548ad58405c3f64ce9cfe1396d4d5cb0bc30c8b98c9695af08250b10997e27a2c784951c53dc3aa8f2848699fd7b0956024f727b555ddcb6fa83692c5ccaedb746c74d0da27ab7f1587e6e36d9fbfaffe49b341e7a0cbc4ccb3112ca1141a454edff37277aec1498e655db1bb39ed187198f2d77376b453b82e7ef21c215853d768c0cb7b8ea5de6e2226500c298265da5ee385d5f2b610128dd07be72dad4c86e9e02980fe7538ceea669c13a6079ac43d57b81df1027fcc0ca95c8fb2398fd6f08cd8555d8f2a6ae174b10726ba945d70c1a8c94c470c324ed167053f61500d943f84dd02dd7896026261083b9a34f46bf8e14eced1a489af97fc5de63d497e934b08c53f504060f69e0b28067239f8f5d6882160aed4a4ea93abef76ad32c63d41a79158ae7ed0fbbb69551952b280b81c8d01f5cd13e031e75e2bd3462652709d4cf2548d21851aa2928d743288dee742a82b5c34375181de07da5aee8aa098acc8f66129a7b5d983374fcfdf70970fa9d0ea6bbaed01a2fb989bf70bd3474548ae46a756d17c4cb2453fe89c788177cb2ac7eb59a2a3ec4cd726c809579a1a4b45b8e8674846c47d83ab51093eb1f1fc5201ce4030c361bff0fd111b509e13598ecb73829d8b0d99430972d7c528f3f62a626b592caf1cd23e1e0aa4ea24f48a43751ed917eab870e82befcfe598e467eac72a42a70a7ff913a229ca29e00458cf02da1dbfc49b8ade7e39a7001c2e3e943717fe96abd754dde0cf798191ebe7f3ec8a32f08b7b79b02879f71231938315d59e7e4ed65529659d02891880ca873565aa4bc1c041d3cb1dd19cc9923c659af3787d9022ef9373433257c8d18c3f83046bc002d44f9575dcb025f94dac2344925fbc192a068b8dcf324a0be9e1616e0ead164a154a0b9a6f4b8c6cf83f6cfd032372c579b2de7712eec310e5f547a552736a6e2a8acfba76e57708a04d5b33e583ad34fb58f01f97c597581da4647400c217cf9520127a29eb2a8de890eacd047fc63acc0a00b56462c5ae2ee8bf72b90849c84ed56cdf67a0707e49077a60362b2eeca5ba335716d93b56cf780ee7e93d621092701c0cb9aac48e6638bd75c00459e9cc6ef71a90b7c97df1a90794f1c642687820895b039a64d7f15394b13f3397643e5de27ef089c904a770186018b216155139b631a037377d8379abd604364fd471583d31b25b1b1b5cdd442bda44b9de87c0fbbb79b66c4fbda81461e4b34065ec68fb85eb89e2ec378e54b49c40de8c15e670e0a621e4cac4066e6364dbc1f77cfda8376db671dedd958c5e529045f7e01b456cec4477a2f7279d730286aabbf00892aa14647017a04c1651950e2b630d7f8f40ef77362e68c7754fdfbbb0197291b8ad7235bf72d2313f31745b5042867f503f9e01da4725f913865d13aaedb59bac93a771f80a98954c33499d7375b1223ddea82018ed47cbca0fb52a6d257251601a1dd5fa62a1c0c688e943a2e5f766b2018c677df271e7d469ff4bf3f1844b5fa766a88488cb7c9609d0194b811cae460e6ebf6e62e90e5be08a5a5a20954a4c585b6a611781db48adb022f61470fc36bb6a595b384a9a727c43d8db64b6db9ddb8bf338fe3ba59b00eb16a3cce1661823ffe29b1480baa329531b8fb4e13e4b0de2303965954b3cd40daf9d813850c9c5090a7f031b42307fd7cf2168e7748f899e430c482e37aba2dec3887f0b867e6e5b395ebdc4c491a8b051285669980c5e723a831f0fc93683fcf606c6637e2b28f8fea2b7b23f2e4255e721c9f565f7622e6212bf3c6d9f66f9c782d477855522791f7a9858f3c832b6f6d16fcea242d5a440783691ac3fcbd1cdfa034685cc8a054862e2f38c8eca07af7d6ff0f71c17635216abda30598d71491342c6f12bc748d726ce9046dccc34ff06f13c50065ce8aa153edbf7f5451ded6bec91b15606021ff9c84f3f5109b20a0bc3836816c77334d74de1512f6443854054843f37a175f0ca2a51cf57db34837be229c4e408adc8e74285981bbcdc6931e0ee9870eb451aadbdde4122400b5c840fd975817c202426dce1606d0ac490aea828e33009400b92caf043988f551f2875e7070b6af73e26954b19782ee98ede3d3cda79b380570547267e2c9a5fbeed83c30cb599df6add7f4d3e9e80d39adf02e53ad1e3a7a50409e7dae0a2eca48373dd092f6a87e9371ae56e455e41e259dfee5de2314cda6ee0fd07fb1f8782e76c94fe333ebfc4ba341332bd022658f204ee4037ba183d993ca5eeb7b7a11c36c8dd7385d33940e1bf63dc79256aa875b8137a2eaf7d00975d0aa607ab708a12dd3ef1cb74dcfd819a8916c73a4c55f0032a3569a32ff0264835b5ba2eaf3676c59fe4e69d49fa7996a7e7d928f57f0598916fd353c81b2bd051e079a516368ac62b3af1cb56a7312f9926efd2620170f40b0f31ecd67c5c707754dcb0e29ff56483c6bebcfc7809ce708c4384a5f9eb09dbff2b0a4d9252a650ef42cb4a7843c07c88e75be3b9bc9a9362523a49fc3f25d38dd1bea35e6ef8c27dbe7550f502c67675c47026b3ed3341927dbf6575238ff95c788ba3e5a7fbde7717f5af6939c378fbbc556bcffa7daa338bf8158e484bebbf272b3c627c6c73427512ea4722e769e5a3651c2afdd6a94454b07e23f0ae4d3396fef2b3d93ab32c0e301c3b18435a564fd2eff536290a4971d9796a8e59620a7cd1bc3edf752717e1cfeacac5e0fa464cccf6459c01798f422c77c2783db7caab2e7470c809dc83b30d27fc7041e897ccbbfdde5a06c84726969381231c788141f4eb4f6f816eea30a2dd6ec5f45c22d7a420aeca3dc2a6b81f3623f37aa3ba6734acc7a25a9ec767770721db14cdc008d8d334d5d73f6bab1f357b583158ed742d7690769adbb5a35d97ce0b199b550af2e3c93b50582f878206fe9d2baaa77e047bb97ddd76d921d2df8deb0a9605c66fc9c97bf21457a500848ea7759df1ae3cac701720fcd7ceeab602110c57a159069619e1c9aa11c349adc94908223bc94a0b2134e5b08ae641550297ceb87d9d1de829cdbea8f88a4f13761b07a13c879cad5dd534300669f95b60d7225795483c967773f3a7e41a0727dcceb4213201640a8f8241f03046e448ae8b56b13c9ee46f562f2ce556a91db69db484bb164649bc953b64accff39621a65f610d44f61df16deaf89836257cf7cd71ef29c5c6069547f7fff37dd56756ade9925e8a58b12f265e4a4277ef5df70cb96c84a013d0f4fe0527b8b811c155c042836c49b9cad4a8c00fc1cb88055f08c21729cd41e06f403ab2a435e06a21fb6321f169637b7c8587ed69ba5dc7ccca97c60ac21013021c70cbe25722ef78c84e24fe854c91f6690bab824e1118e7f628e5992860fc650412a3476887133eaf90c07de7abeffdf95575772d4a4bb77891912b300841038f25ac36c0ee3ab94c3993025e91f36ca7db7f68bcfe7f87a3abc2e27fc1859e12e3e7361df7044e4ac43899c4981e8f08652c8645e1c508395dd989473b90974890e358f486c659cee00eda0be9363ef3be46ae1ea86c00b0ffc16c8915b35cd1e2111079051047bcad6c367592bc4b3149708e36a94d2acfeba05d09b9cc21f72f3acef6851759684ea104505c11ae4e04cd6ede4fa44379dcba05ae3ea41a44292efaf16d657425fc1f3a0072628e397efc585c55178e147506dc599d10431fdf25b5d13265e8a8df6487139ae348d7f3af378e76586ad1f9a71172b2c2226d03e76025aca8e6f210c43aa31b43c5a0546ad3cfeb8d12dcdb3a67fceb27a97bd6cb4f990029d9a2832896f19fd20b7e823a03dbc072c860c2d784b09b3e6383c8d75736a6b58199af02643b85589f7fdc8df9f966a4ce9852e773630fa33fc3ed16b66d8636c79f081556276524ba650739dbe344993c75d5824b62a896941428ef4c171703ccd8d25757b4c5ab2acfc58af62a802ded1670ce9e38da9c4cce7339a1d51af1fbb6259cddfbed28235124159177133bb40dec0ab84a9a19a6eab2b19c6175714ba2dbeafefccb2f11043dc2641f6e6532e51525e5000607aa853971792dc3abc477a7d491340acc36a169229da52f2972a11464059ae38ee24dffac684950cc18ad5566f1ca3c876ae27dc5b2e92b0cb0a80a39917b848a840052f99fb43a0c8975fdcca3cb7768ac31694086ad61cdf470698eeaa705a1ee7b4a659226ca393a1784c05cd14291a76e2f4a26684e8eacaa7e492bc438ea5cb12323f6800da4545e58d0ce1f530d9c9438") syz_open_dev$vcsa(&(0x7f0000002480), 0xe0, 0x800c0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000026c0), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000024c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc, &(0x7f0000002540)=[{&(0x7f0000003880)={0x20c, 0x28, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x1ef, 0x38, 0x0, 0x1, [@typed={0x8, 0x88, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x64, 0x0, 0x0, @fd=r0}, @generic="4608fe8bb11cf6f3e20e1f802f99bfccba46fc88736088fe442a92e03381c824e63173e7361a1418ba3ce65da84d8c887c1bb8980647ebc652001838567afff15b71d9e39a9bb0f40d92fc67c999c26da2da962c91c8b16606b961c2336ee6d7493e46ea77ed0f5f4eb17ae3e0176729be3815ed3554", @generic="8a85146d9a798e94cc43d597e2619baf606f97ff467c7008799cdfc2dd8bf6ff3470d08cfedeaabcab2dee98957efc3d8b4422f32df2b4e6355f121e0349c26b6f2a8720ef329cac3be3f377fde268aa5eca0dc227c7516e5415e0adc2b79fa6c32946ce8b07be923102b1e75bbf9a68e1c0af772b65f60cb2204469baf366b5453fb2f226fbb4e7d97d4b97f0ebb7f8447ed2778481c500c80f86ee13e9aa77d5369e7ee7aec225faa68b0ece1a9d4328dbdfb8bb1ba6ac1a37e43fcf335030108d50e3d9b1658485ee9a6806b246e09de52787b7aef168fc9e", @generic="9a68547a07086075725792dfc7daa662d8926e240293447c8ec51a9954071b4058cfb058105bd2783829c61781ca74452fa3ec3c3718f155b5e6194bbad71b8c4abcb0ded0c6639457f32728c83c106fa4cf30031283948efa8900b177f510981258227e67ffaa7f8511c79f48a987f2d83963f0fa7701021bb48fb5b918ffacbb789b", @typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}, @typed={0xc, 0x77, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20c}], 0x1, &(0x7f0000002780)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40, 0x4000441}, 0x0) timer_create(0x6, &(0x7f0000002400)={0x0, 0x5, 0x0, @tid=r2}, &(0x7f0000002440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x18, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000021c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x64, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 13:57:30 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff002) [ 786.493337][T18132] R10: 0000555556ffb933 R11: 0000000000000246 R12: 00007fabcef671ea [ 786.501318][T18132] R13: 00007ffc8182e0d0 R14: 0000555556ffb810 R15: 00007ffc8182e110 [ 786.509319][T18132] [ 786.523168][T18132] memory: usage 400kB, limit 32kB, failcnt 1661 [ 786.529666][T18132] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 786.548529][T18161] device veth103 entered promiscuous mode [ 786.569120][T18132] Memory cgroup stats for /syz4: [ 786.569332][T18132] anon 45056 [ 786.569332][T18132] file 61440 [ 786.569332][T18132] kernel_stack 0 [ 786.569332][T18132] pagetables 12288 [ 786.569332][T18132] percpu 0 [ 786.569332][T18132] sock 0 [ 786.569332][T18132] vmalloc 0 [ 786.569332][T18132] shmem 61440 [ 786.569332][T18132] file_mapped 61440 [ 786.569332][T18132] file_dirty 0 [ 786.569332][T18132] file_writeback 0 [ 786.569332][T18132] swapcached 0 [ 786.569332][T18132] anon_thp 0 [ 786.569332][T18132] file_thp 0 [ 786.569332][T18132] shmem_thp 0 [ 786.569332][T18132] inactive_anon 45056 [ 786.569332][T18132] active_anon 61440 [ 786.569332][T18132] inactive_file 0 [ 786.569332][T18132] active_file 0 [ 786.569332][T18132] unevictable 0 [ 786.569332][T18132] slab_reclaimable 110088 [ 786.569332][T18132] slab_unreclaimable 170800 [ 786.569332][T18132] slab 280888 [ 786.569332][T18132] workingset_refault_anon 0 [ 786.569332][T18132] workingset_refault_file 0 [ 786.569332][T18132] workingset_activate_anon 0 [ 786.608242][T18161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 786.667063][T18132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18132,uid=0 [ 786.692009][T18132] Memory cgroup out of memory: Killed process 18132 (syz-executor.4) total-vm:56676kB, anon-rss:368kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 786.712407][ T28] oom_reaper: reaped process 18132 (syz-executor.4), now anon-rss:0kB, file-rss:13560kB, shmem-rss:0kB [ 786.762920][T18181] device bond50 entered promiscuous mode [ 786.792146][T18181] device bond50 left promiscuous mode 13:57:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:57:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002500), 0x0, 0x0) r2 = syz_clone(0x48000000, &(0x7f0000002300)="e4b37aa5cd88baee10e29152b0c4d107d98844f27a63166fa925599ee0b1549bb4ad1d3b30555753775f4d7fa2b038aea88c93b862645a5e21331b32f9df387bcf656fe7b637d7b1da59ec20794841fb0843a89d0bba5e8b47f598c69fe40ac5e2b1430158d13e26d0b9", 0x6a, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002880)="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") syz_open_dev$vcsa(&(0x7f0000002480), 0xe0, 0x800c0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x6, &(0x7f0000002400)={0x0, 0x5, 0x0, @tid=r2}, &(0x7f0000002440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x18, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000021c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x64, r3, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 13:57:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000d40)={0x0, [], 0x0, "7b57c104af1635"}) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240040000f801", 0xffffffffffffffbc}, {0x0}], 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000240)='./file1\x00', 0x0) 13:57:31 executing program 2: futex(0x0, 0x106, 0x0, 0x0, 0x0, 0x0) 13:57:31 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:31 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/156, 0x9c}], 0x1) 13:57:31 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x103) [ 786.989525][T18191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:57:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) [ 787.085136][T18191] device veth105 entered promiscuous mode 13:57:31 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x103) quotactl(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 787.154871][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 787.243028][T18199] device bond51 entered promiscuous mode 13:57:31 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000580)={[{@fat=@codepage={'codepage', 0x3d, '936'}}]}) [ 787.301253][T18199] device bond51 left promiscuous mode 13:57:32 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 787.446601][T18206] loop5: detected capacity change from 0 to 6 13:57:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002500), 0x0, 0x0) r2 = syz_clone(0x48000000, &(0x7f0000002300)="e4b37aa5cd88baee10e29152b0c4d107d98844f27a63166fa925599ee0b1549bb4ad1d3b30555753775f4d7fa2b038aea88c93b862645a5e21331b32f9df387bcf656fe7b637d7b1da59ec20794841fb0843a89d0bba5e8b47f598c69fe40ac5e2b1430158d13e26d0b9", 0x6a, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002880)="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") syz_open_dev$vcsa(&(0x7f0000002480), 0xe0, 0x800c0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x6, &(0x7f0000002400)={0x0, 0x5, 0x0, @tid=r2}, &(0x7f0000002440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x18, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000021c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x64, r3, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) [ 787.493654][T18206] FAT-fs (loop5): Directory bread(block 6) failed 13:57:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$alg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\f', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 787.563561][T18208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 787.661658][T18208] device veth107 entered promiscuous mode [ 787.694259][T16006] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 13:57:32 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10db0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 787.731142][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:57:32 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080)=0x1, 0x0, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)=0x1, 0x0) 13:57:32 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR02', 0x6, 0x8800}, {&(0x7f0000010300)="01000200a400010054fbf001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c16351c1d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="0000000000000000010000000000000000000000000000000000000000000000060002002d0001002caee8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e5001040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500020055000100c535f001620000000500000001000000002b4e53523032000000000000000000000000000000000000000000000000000002", 0x9a, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010900)="070002003b0001009d092800630000000600000004000000002600004d00000000b60000a5000000003e00000101000000340000e507", 0x36, 0xc600}, {&(0x7f0000010a00)="0400020058000100aa52f0016400000004000000002a554446204c5620496e666f00000000000000000000005001040500000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc800}, {&(0x7f0000010b00)="0000000000000000000000000000000000000009084c696e7578206d6b756466667320322e32000000000000000000000000000000000012084c696e757820756466746f6f6c7320322e3200000000000000000000000000000000130868747470733a2f2f6769746875622e636f6d2f70616c692f756466746f6f6c732f0022002a4c696e757820554446465300000000000000000000000405", 0x9a, 0xc8e0}, {&(0x7f0000010c00)="08000200610001000000f00165", 0xd, 0xca00}, {0x0}, {&(0x7f0000011100)="02000200fd0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="07010200b3000100204840000000000000000000040000000100000100000000000000002800000000340040060000000012004037000000003e004041000000003e004061000000003e044081", 0x4d, 0xa4000}, {&(0x7f0000011a00)="0001020098000100e59ef001200000007810e4070913142c16351c1d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011b00)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000400000000000000000000000002a4f5354412055444620436f6d706c69616e74000000005001", 0xda, 0xa80e0}, {0x0}, {&(0x7f0000012200)="05010200cd0001005381b0004000000000000000040000000100000400000000000001000000000000000000a53c00000200000000000000440100000000000001000000000000000010e4070913122c16351c1d0010e4070913122c17130e360010e4070913122c17130e360100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000100000004401000060", 0xb5, 0xac000}, {&(0x7f0000012300)="0101020036000100279218006000000001000a00000200004000000000000000000000000000000001010200c000010045ea2c006000000001000116000200008000000000000000100000000000084e6f6e2d416c6c6f63617461626c652053706163650101020014000100f0a31c00600000000100020600020000210000000000000011000000000008", 0x8b, 0xb0000}], 0x0, &(0x7f0000013300)) chown(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) [ 787.880314][T18210] device bond52 entered promiscuous mode [ 787.929888][T18210] device bond52 left promiscuous mode 13:57:32 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000002000000000"]}) close(r1) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0xffffffffffffffff, 0xee00, r2}, 0xc) clock_nanosleep(0x2, 0x0, &(0x7f0000000040), 0x0) fcntl$setpipe(r0, 0x407, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r4, 0xc81, 0xb778, 0x6}) 13:57:32 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/156, 0x9c}], 0x1) 13:57:32 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 788.065662][T18222] loop5: detected capacity change from 0 to 2816 [ 788.115252][T18226] bridge0: port 3(veth0_to_bond) entered blocking state [ 788.141703][T16006] udevd[16006]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system [ 788.168873][T18222] UDF-fs: warning (device loop5): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 788.188426][T18226] bridge0: port 3(veth0_to_bond) entered disabled state [ 788.211419][T16006] udevd[16006]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system [ 788.233955][T18226] device veth0_to_bond entered promiscuous mode [ 788.252708][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 788.322498][T18230] device veth109 entered promiscuous mode [ 788.331127][T16006] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 788.406054][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 788.486598][T18230] device bond53 entered promiscuous mode [ 788.516642][T18230] device bond53 left promiscuous mode [ 788.729508][ T7796] device hsr_slave_0 left promiscuous mode [ 788.749492][ T7796] device hsr_slave_1 left promiscuous mode [ 788.768586][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.785759][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.811994][ T7796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.824146][ T7796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.846287][ T7796] device bridge_slave_1 left promiscuous mode [ 788.859373][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.881607][ T7796] device bridge_slave_0 left promiscuous mode [ 788.894731][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.923244][ T7796] device veth1_macvtap left promiscuous mode [ 788.929530][ T7796] device veth0_macvtap left promiscuous mode [ 788.936434][ T7796] device veth1_vlan left promiscuous mode [ 788.952281][ T7796] device veth0_vlan left promiscuous mode [ 789.162847][ T7796] team0 (unregistering): Port device team_slave_1 removed [ 789.179485][ T7796] team0 (unregistering): Port device team_slave_0 removed [ 789.192303][ T7796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.206838][ T7796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.273172][ T7796] bond0 (unregistering): Released all slaves [ 791.190651][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 791.201378][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 791.210996][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 791.222997][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 791.230939][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 791.238381][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 791.391127][T18237] chnl_net:caif_netlink_parms(): no params data found [ 791.455139][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.462485][T18237] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.471387][T18237] device bridge_slave_0 entered promiscuous mode [ 791.484267][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.492790][T18237] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.502896][T18237] device bridge_slave_1 entered promiscuous mode [ 791.552835][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.573446][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.636527][T18237] team0: Port device team_slave_0 added [ 791.644507][T18237] team0: Port device team_slave_1 added [ 791.692178][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.713420][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.745911][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.759308][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.766755][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.793101][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.858481][T18237] device hsr_slave_0 entered promiscuous mode [ 791.865446][T18237] device hsr_slave_1 entered promiscuous mode [ 791.880877][T18237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.888960][T18237] Cannot create hsr debugfs directory [ 791.986442][T18237] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.993557][T18237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.000969][T18237] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.008194][T18237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.107732][T18237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.124156][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 792.133754][T14287] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.143347][T14287] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.153874][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 792.170513][T18237] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.183645][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 792.193087][T14287] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.200238][T14287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.226796][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 792.235271][T14287] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.242409][T14287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.277931][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 792.287165][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 792.296383][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 792.309615][T18237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 792.326645][T18237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 792.336728][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 792.344766][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 792.366149][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 792.373645][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 792.387402][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.849642][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 792.868988][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 792.906561][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 792.914967][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 792.924491][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 792.933274][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 792.947218][T18237] device veth0_vlan entered promiscuous mode [ 792.958893][T18237] device veth1_vlan entered promiscuous mode [ 792.977736][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 792.986552][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 792.995303][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 793.003975][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 793.015240][T18237] device veth0_macvtap entered promiscuous mode [ 793.027913][T18237] device veth1_macvtap entered promiscuous mode [ 793.044392][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.055867][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.065800][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.077047][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.086949][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.099014][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.109005][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.119726][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.129591][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 793.140862][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.152244][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.161252][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 793.170097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 793.178675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 793.187862][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 793.200187][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.211334][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.221583][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.232179][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.243044][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.253748][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.256921][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 793.264954][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.280217][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.290810][T18237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 793.301351][T18237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.312829][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.321562][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 793.330380][T14286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 793.399859][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.411603][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.433429][ T7796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.434031][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 793.450104][ T7796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.462421][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 793.673634][T18256] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 793.684565][T18256] CPU: 1 PID: 18256 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 793.693331][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.703379][T18256] Call Trace: [ 793.706774][T18256] [ 793.709784][T18256] dump_stack_lvl+0x201/0x2d8 [ 793.714460][T18256] ? show_regs_print_info+0x12/0x12 [ 793.719654][T18256] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 793.725383][T18256] ? do_raw_spin_lock+0x151/0x8e0 [ 793.730401][T18256] ? asan.module_dtor+0x20/0x20 [ 793.735246][T18256] dump_header+0xdb/0x970 [ 793.739578][T18256] oom_kill_process+0xf5/0x4e0 [ 793.744353][T18256] out_of_memory+0x711/0xa70 [ 793.748932][T18256] ? preempt_schedule+0x16b/0x190 [ 793.753947][T18256] ? unregister_oom_notifier+0x20/0x20 [ 793.759398][T18256] ? lockdep_hardirqs_on+0x95/0x140 [ 793.764614][T18256] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 793.770153][T18256] ? preempt_schedule_thunk+0x16/0x18 [ 793.775522][T18256] ? mem_cgroup_oom_trylock+0x220/0x220 [ 793.781068][T18256] ? cgroup_file_notify+0x123/0x190 [ 793.786617][T18256] memory_max_write+0x364/0x4f0 [ 793.791466][T18256] ? memory_max_show+0xa0/0xa0 [ 793.796223][T18256] ? memory_max_show+0xa0/0xa0 [ 793.800975][T18256] cgroup_file_write+0x2a4/0x780 [ 793.805911][T18256] ? cgroup_seqfile_stop+0xd0/0xd0 [ 793.811014][T18256] ? kernfs_fop_write_iter+0x313/0x510 [ 793.816470][T18256] ? cgroup_file_write+0xd/0x780 [ 793.821409][T18256] ? cgroup_seqfile_stop+0xd0/0xd0 [ 793.826513][T18256] kernfs_fop_write_iter+0x3b6/0x510 [ 793.831800][T18256] vfs_write+0xb11/0xe90 [ 793.836038][T18256] ? file_end_write+0x230/0x230 [ 793.840894][T18256] ? mutex_lock_nested+0x1a/0x20 [ 793.845834][T18256] ? __fdget_pos+0x24e/0x2f0 [ 793.850412][T18256] ? ksys_write+0x77/0x2c0 [ 793.854845][T18256] ksys_write+0x18f/0x2c0 [ 793.859168][T18256] ? print_irqtrace_events+0x220/0x220 [ 793.864623][T18256] ? __ia32_sys_read+0x80/0x80 [ 793.869375][T18256] ? lockdep_hardirqs_on+0x95/0x140 [ 793.874565][T18256] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 793.880540][T18256] do_syscall_64+0x44/0xd0 [ 793.884950][T18256] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.890835][T18256] RIP: 0033:0x7f7037f8d059 [ 793.895267][T18256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 793.914862][T18256] RSP: 002b:00007f7036902168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 793.923270][T18256] RAX: ffffffffffffffda RBX: 00007f703809ff60 RCX: 00007f7037f8d059 [ 793.931232][T18256] RDX: 0000000000000012 RSI: 0000000020000240 RDI: 000000000000000d [ 793.939189][T18256] RBP: 00007f7037fe708d R08: 0000000000000000 R09: 0000000000000000 [ 793.947155][T18256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.955289][T18256] R13: 00007ffca4fe060f R14: 00007f7036902300 R15: 0000000000022000 [ 793.963268][T18256] [ 793.985921][T18256] memory: usage 2700kB, limit 32kB, failcnt 1678 [ 793.992922][T18256] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 794.013568][T18256] Memory cgroup stats for /syz4: [ 794.019374][T18256] anon 2207744 [ 794.019374][T18256] file 65536 [ 794.019374][T18256] kernel_stack 65536 [ 794.019374][T18256] pagetables 94208 [ 794.019374][T18256] percpu 0 [ 794.019374][T18256] sock 0 [ 794.019374][T18256] vmalloc 0 [ 794.019374][T18256] shmem 61440 [ 794.019374][T18256] file_mapped 61440 [ 794.019374][T18256] file_dirty 4096 [ 794.019374][T18256] file_writeback 0 [ 794.019374][T18256] swapcached 0 [ 794.019374][T18256] anon_thp 2097152 [ 794.019374][T18256] file_thp 0 [ 794.019374][T18256] shmem_thp 0 [ 794.019374][T18256] inactive_anon 2203648 [ 794.019374][T18256] active_anon 61440 [ 794.019374][T18256] inactive_file 0 [ 794.019374][T18256] active_file 0 [ 794.019374][T18256] unevictable 0 [ 794.019374][T18256] slab_reclaimable 107144 [ 794.019374][T18256] slab_unreclaimable 191344 [ 794.019374][T18256] slab 298488 [ 794.019374][T18256] workingset_refault_anon 0 [ 794.019374][T18256] workingset_refault_file 0 [ 794.142117][T18256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18255,uid=0 13:57:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) 13:57:38 executing program 5: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x13, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR02', 0x6, 0x8800}, {&(0x7f0000010300)="01000200a400010054fbf001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c16351c1d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="0000000000000000010000000000000000000000000000000000000000000000060002002d0001002caee8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e5001040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500020055000100c535f001620000000500000001000000002b4e53523032000000000000000000000000000000000000000000000000000002", 0x9a, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010900)="070002003b0001009d092800630000000600000004000000002600004d00000000b60000a5000000003e00000101000000340000e507", 0x36, 0xc600}, {&(0x7f0000010a00)="0400020058000100aa52f0016400000004000000002a554446204c5620496e666f00000000000000000000005001040500000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc800}, {&(0x7f0000010b00)="0000000000000000000000000000000000000009084c696e7578206d6b756466667320322e32000000000000000000000000000000000012084c696e757820756466746f6f6c7320322e3200000000000000000000000000000000130868747470733a2f2f6769746875622e636f6d2f70616c692f756466746f6f6c732f0022002a4c696e757820554446465300000000000000000000000405", 0x9a, 0xc8e0}, {&(0x7f0000010c00)="08000200610001000000f00165", 0xd, 0xca00}, {&(0x7f0000011100)="02000200fd0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="07010200b3000100204840000000000000000000040000000100000100000000000000002800000000340040060000000012004037000000003e004041000000003e004061000000003e044081", 0x4d, 0xa4000}, {&(0x7f0000011a00)="0001020098000100e59ef001200000007810e4070913142c16351c1d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011b00)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000400000000000000000000000002a4f5354412055444620436f6d706c69616e74000000005001", 0xda, 0xa80e0}, {&(0x7f0000011c00)="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", 0x130, 0xa8200}, {&(0x7f0000012200)="05010200cd0001005381b0004000000000000000040000000100000400000000000001000000000000000000a53c00000200000000000000440100000000000001000000000000000010e4070913122c16351c1d0010e4070913122c17130e360010e4070913122c17130e360100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000000000000000000000000000100000004401000060", 0xb5, 0xac000}, {&(0x7f0000012300)="0101020036000100279218006000000001000a00000200004000000000000000000000000000000001010200c000010045ea2c006000000001000116000200008000000000000000100000000000084e6f6e2d416c6c6f63617461626c652053706163650101020014000100f0a31c0060000000010002060002000021000000000000001100000000000866696c6530", 0x90, 0xb0000}], 0x0, &(0x7f0000013300)) chown(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 13:57:38 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000002000000000"]}) close(r1) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0xffffffffffffffff, 0xee00, r2}, 0xc) clock_nanosleep(0x2, 0x0, &(0x7f0000000040), 0x0) fcntl$setpipe(r0, 0x407, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r4, 0xc81, 0xb778, 0x6}) 13:57:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002500), 0x0, 0x0) r2 = syz_clone(0x48000000, &(0x7f0000002300)="e4b37aa5cd88baee10e29152b0c4d107d98844f27a63166fa925599ee0b1549bb4ad1d3b30555753775f4d7fa2b038aea88c93b862645a5e21331b32f9df387bcf656fe7b637d7b1da59ec20794841fb0843a89d0bba5e8b47f598c69fe40ac5e2b1430158d13e26d0b9", 0x6a, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002880)="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") syz_open_dev$vcsa(&(0x7f0000002480), 0xe0, 0x800c0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x6, &(0x7f0000002400)={0x0, 0x5, 0x0, @tid=r2}, &(0x7f0000002440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x18, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000021c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x64, r3, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 13:57:38 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:38 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/156, 0x9c}], 0x1) [ 794.177038][T18256] Memory cgroup out of memory: Killed process 18255 (syz-executor.4) total-vm:60648kB, anon-rss:2428kB, file-rss:14336kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 794.204611][ T28] oom_reaper: reaped process 18255 (syz-executor.4), now anon-rss:0kB, file-rss:14336kB, shmem-rss:16kB [ 794.233430][T18237] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 794.264383][T18262] loop5: detected capacity change from 0 to 2816 [ 794.280497][T18237] CPU: 1 PID: 18237 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller #0 [ 794.289298][T18237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.299371][T18237] Call Trace: [ 794.302659][T18237] [ 794.305591][T18237] dump_stack_lvl+0x201/0x2d8 [ 794.310277][T18237] ? show_regs_print_info+0x12/0x12 [ 794.315483][T18237] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 794.321209][T18237] ? do_raw_spin_lock+0x151/0x8e0 [ 794.326246][T18237] ? asan.module_dtor+0x20/0x20 [ 794.331109][T18237] dump_header+0xdb/0x970 [ 794.335458][T18237] oom_kill_process+0xf5/0x4e0 [ 794.340248][T18237] out_of_memory+0x711/0xa70 [ 794.344855][T18237] ? unregister_oom_notifier+0x20/0x20 [ 794.350325][T18237] mem_cgroup_out_of_memory+0x25d/0x3b0 [ 794.355877][T18237] ? __lock_acquire+0x2b00/0x2b00 [ 794.360898][T18237] ? mem_cgroup_oom_trylock+0x220/0x220 [ 794.366445][T18237] ? do_raw_spin_unlock+0x134/0x8a0 [ 794.371645][T18237] ? mem_cgroup_iter+0x3c9/0x530 [ 794.376584][T18237] mem_cgroup_oom+0x4ad/0x620 [ 794.381257][T18237] try_charge_memcg+0xd37/0x1010 [ 794.386209][T18237] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 794.392116][T18237] ? rcu_lock_acquire+0x30/0x30 [ 794.396958][T18237] ? __lock_acquire+0x2b00/0x2b00 [ 794.401976][T18237] charge_memcg+0x104/0x4a0 [ 794.406503][T18237] ? __mem_cgroup_charge+0x80/0x80 [ 794.411623][T18237] __mem_cgroup_charge+0x23/0x80 [ 794.416555][T18237] do_anonymous_page+0x3ab/0xe90 [ 794.421523][T18237] ? fault_around_bytes_set+0xb0/0xb0 [ 794.426906][T18237] handle_mm_fault+0x1da3/0x39e0 [ 794.431864][T18237] ? numa_migrate_prep+0x190/0x190 [ 794.436988][T18237] ? vmacache_find+0x228/0x5d0 [ 794.441754][T18237] do_user_addr_fault+0x8c4/0x1060 [ 794.446868][T18237] exc_page_fault+0xa1/0x1e0 [ 794.451451][T18237] ? asm_exc_page_fault+0x8/0x30 [ 794.456389][T18237] asm_exc_page_fault+0x1e/0x30 [ 794.461234][T18237] RIP: 0033:0x7f7037f4bb5a [ 794.465644][T18237] Code: 89 fb 83 e3 02 0f 85 85 03 00 00 f3 41 0f 6f 0e 49 8b 46 10 be 25 00 00 00 4c 89 ef 48 89 85 c8 fb ff ff 0f 11 8d b8 fb ff ff 91 b5 fd ff 41 81 e7 00 80 00 00 48 89 85 30 fb ff ff 48 89 85 [ 794.485508][T18237] RSP: 002b:00007ffca4fdefa0 EFLAGS: 00010246 [ 794.491568][T18237] RAX: 00007ffca4fdf6b0 RBX: 0000000000000000 RCX: 0000000000000000 [ 794.499532][T18237] RDX: 00007ffca4fdf690 RSI: 0000000000000025 RDI: 00007f7037fe6209 [ 794.507580][T18237] RBP: 00007ffca4fdf4f0 R08: 0000000000000000 R09: 00007ffca4fdf600 [ 794.515549][T18237] R10: 0000000000000231 R11: 0000000000000293 R12: 00007ffca4fdf510 [ 794.523508][T18237] R13: 00007f7037fe6209 R14: 00007ffca4fdf690 R15: 00000000fbad8001 [ 794.531770][T18237] [ 794.550853][T18264] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 794.551003][T18237] memory: usage 412kB, limit 32kB, failcnt 1697 [ 794.568885][T18237] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 794.577112][T18237] Memory cgroup stats for /syz4: [ 794.577305][T18237] anon 40960 [ 794.577305][T18237] file 65536 [ 794.577305][T18237] kernel_stack 0 [ 794.577305][T18237] pagetables 8192 [ 794.577305][T18237] percpu 0 [ 794.577305][T18237] sock 0 [ 794.577305][T18237] vmalloc 0 [ 794.577305][T18237] shmem 61440 [ 794.577305][T18237] file_mapped 61440 [ 794.577305][T18237] file_dirty 0 [ 794.577305][T18237] file_writeback 4096 [ 794.577305][T18237] swapcached 0 [ 794.577305][T18237] anon_thp 0 [ 794.577305][T18237] file_thp 0 [ 794.577305][T18237] shmem_thp 0 [ 794.577305][T18237] inactive_anon 40960 [ 794.577305][T18237] active_anon 61440 [ 794.577305][T18237] inactive_file 4096 [ 794.577305][T18237] active_file 0 [ 794.577305][T18237] unevictable 0 [ 794.577305][T18237] slab_reclaimable 107144 [ 794.577305][T18237] slab_unreclaimable 187240 [ 794.577305][T18237] slab 294384 [ 794.577305][T18237] workingset_refault_anon 0 [ 794.577305][T18237] workingset_refault_file 0 [ 794.577305][T18237] workingset_activate_anon 0 [ 794.593175][T18262] UDF-fs: warning (device loop5): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 794.678648][T18237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18237,uid=0 [ 794.695153][T16006] udevd[16006]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system 13:57:39 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') [ 794.700816][T18237] Memory cgroup out of memory: Killed process 18237 (syz-executor.4) total-vm:56676kB, anon-rss:372kB, file-rss:14464kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:0 [ 794.737621][T16006] udevd[16006]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system [ 794.780968][ T28] oom_reaper: reaped process 18237 (syz-executor.4), now anon-rss:0kB, file-rss:13552kB, shmem-rss:0kB [ 794.793908][T18264] device veth111 entered promiscuous mode [ 794.823102][T16006] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 13:57:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="71cd2bd28c03", 0x6}, {0x0}, {&(0x7f0000000080)="fc", 0x1}], 0x3}, 0x0) 13:57:39 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 13:57:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x404, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) [ 794.940836][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 794.941203][T18277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:57:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000200)) 13:57:39 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8918, 0x0) 13:57:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000580)=""/230, 0xe6}], 0x4}, 0x101) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc080661a, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'rdma'}, {0x0, 'io'}, {0x2b, 'devices'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'io'}, {0x0, 'hugetlb'}]}, 0x2d) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240)=0x8ae3, 0x12) [ 795.209452][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:57:39 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/156, 0x9c}], 0x1) 13:57:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000002500), 0x0, 0x0) r2 = syz_clone(0x48000000, &(0x7f0000002300)="e4b37aa5cd88baee10e29152b0c4d107d98844f27a63166fa925599ee0b1549bb4ad1d3b30555753775f4d7fa2b038aea88c93b862645a5e21331b32f9df387bcf656fe7b637d7b1da59ec20794841fb0843a89d0bba5e8b47f598c69fe40ac5e2b1430158d13e26d0b9", 0x6a, &(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002880)="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") syz_open_dev$vcsa(&(0x7f0000002480), 0xe0, 0x800c0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x6, &(0x7f0000002400)={0x0, 0x5, 0x0, @tid=r2}, &(0x7f0000002440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x8}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x18, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000021c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x64, r3, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 13:57:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 13:57:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000100)={0xa, 0x4e24, 0x0, @remote, 0x6}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000140)="a9", 0x1}], 0x2}, 0x0) [ 795.310694][T18284] device veth113 entered promiscuous mode 13:57:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2}}) 13:57:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast2, 0x0, 0x7f80}}) [ 795.373608][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 795.530338][T18288] device bond55 entered promiscuous mode [ 795.553079][T18288] device bond55 left promiscuous mode 13:57:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e22, 0x0, @private0}, 0x1c, 0xfffffffffffffffc, 0x0, &(0x7f0000000840)=ANY=[], 0x28}, 0x0) 13:57:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@dstopts_2292={{0x18}}], 0x18}, 0x0) 13:57:40 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_aout(r2, &(0x7f0000000980), 0x20) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0101000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002413e20f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x24, 0x2e, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x2, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x3fd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r9}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 13:57:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 13:57:40 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)=@buf) [ 795.879340][T18313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 795.976403][T18313] device veth115 entered promiscuous mode [ 796.084578][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 796.169515][T18317] device bond56 entered promiscuous mode [ 796.229608][T18317] device bond56 left promiscuous mode [ 796.457913][ T1022] device hsr_slave_0 left promiscuous mode [ 796.465240][ T1022] device hsr_slave_1 left promiscuous mode [ 796.485487][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.512918][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.533191][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.567681][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.586335][ T1022] device bridge_slave_1 left promiscuous mode [ 796.592586][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.609340][ T1022] device bridge_slave_0 left promiscuous mode [ 796.633222][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.657406][ T1022] device veth1_macvtap left promiscuous mode [ 796.663460][ T1022] device veth0_macvtap left promiscuous mode [ 796.670082][ T1022] device veth1_vlan left promiscuous mode [ 796.675951][ T1022] device veth0_vlan left promiscuous mode [ 796.852862][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 796.870502][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 796.883155][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.899513][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.962752][ T1022] bond0 (unregistering): Released all slaves [ 799.016754][ C1] ------------[ cut here ]------------