xecuting program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x500]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2658.482383][ T1960] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2658.541166][ T1960] Memory cgroup stats for /syz5: [ 2658.541408][ T1960] anon 102400 [ 2658.541408][ T1960] file 483328 [ 2658.541408][ T1960] kernel 313987072 [ 2658.541408][ T1960] kernel_stack 65536 [ 2658.541408][ T1960] pagetables 69632 [ 2658.541408][ T1960] sec_pagetables 0 [ 2658.541408][ T1960] percpu 4839136 [ 2658.541408][ T1960] sock 0 [ 2658.541408][ T1960] vmalloc 0 [ 2658.541408][ T1960] shmem 483328 [ 2658.541408][ T1960] zswap 0 [ 2658.541408][ T1960] zswapped 0 [ 2658.541408][ T1960] file_mapped 471040 [ 2658.541408][ T1960] file_dirty 0 [ 2658.541408][ T1960] file_writeback 0 [ 2658.541408][ T1960] swapcached 0 [ 2658.541408][ T1960] anon_thp 0 [ 2658.541408][ T1960] file_thp 0 [ 2658.541408][ T1960] shmem_thp 0 [ 2658.541408][ T1960] inactive_anon 204800 [ 2658.541408][ T1960] active_anon 380928 [ 2658.541408][ T1960] inactive_file 0 [ 2658.541408][ T1960] active_file 0 [ 2658.541408][ T1960] unevictable 0 [ 2658.541408][ T1960] slab_reclaimable 54440 [ 2658.541408][ T1960] slab_unreclaimable 308918448 [ 2658.750733][ T1976] bond1178: (slave vlan1041): making interface the new active one [ 2658.859555][ T1976] bond1178: (slave vlan1041): Enslaving as an active interface with an up link [ 2659.004994][ T1960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=1960,uid=0 [ 2659.100663][ T1960] Memory cgroup out of memory: Killed process 1960 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2659.140511][ T1967] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 08:46:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x102]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:07 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x600]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e32}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x3ffff], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2659.211149][ T1996] set_target_v0_checkentry: 11 callbacks suppressed [ 2659.211178][ T1996] Cannot find add_set index 0 as target [ 2659.259445][ T2006] Cannot find add_set index 0 as target [ 2659.282159][ T1954] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2659.363700][ T2000] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2659.380980][ T1954] CPU: 1 PID: 1954 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2659.389640][ T1954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2659.399729][ T1954] Call Trace: [ 2659.403040][ T1954] [ 2659.406262][ T1954] dump_stack_lvl+0xd1/0x138 [ 2659.410915][ T1954] dump_header+0x10b/0x85f [ 2659.415411][ T1954] oom_kill_process.cold+0x10/0x15 [ 2659.420586][ T1954] out_of_memory+0x35c/0x14a0 [ 2659.425325][ T1954] ? find_held_lock+0x2d/0x110 [ 2659.430148][ T1954] ? oom_killer_disable+0x280/0x280 [ 2659.435413][ T1954] ? find_held_lock+0x2d/0x110 [ 2659.440442][ T1954] mem_cgroup_out_of_memory+0x206/0x270 [ 2659.446062][ T1954] ? mem_cgroup_margin+0x130/0x130 [ 2659.451218][ T1954] ? lock_downgrade+0x6e0/0x6e0 [ 2659.456123][ T1954] try_charge_memcg+0xefb/0x12f0 [ 2659.461086][ T1954] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2659.467077][ T1954] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2659.472818][ T1954] ? lock_downgrade+0x6e0/0x6e0 [ 2659.477681][ T1954] ? lock_downgrade+0x6e0/0x6e0 [ 2659.482541][ T1954] ? rcu_read_unlock+0x9/0x60 [ 2659.487245][ T1954] obj_cgroup_charge+0x2af/0x5e0 [ 2659.492198][ T1954] ? copy_process+0x3aa/0x7520 [ 2659.496974][ T1954] kmem_cache_alloc_node+0xb7/0x460 [ 2659.502189][ T1954] copy_process+0x3aa/0x7520 [ 2659.506790][ T1954] ? find_held_lock+0x2d/0x110 [ 2659.511593][ T1954] ? __cleanup_sighand+0xb0/0xb0 [ 2659.516540][ T1954] ? lock_downgrade+0x6e0/0x6e0 [ 2659.521392][ T1954] ? folio_flags.constprop.0+0x53/0x150 [ 2659.526956][ T1954] ? folio_add_lru+0x37b/0x680 [ 2659.531821][ T1954] kernel_clone+0xeb/0x990 [ 2659.536250][ T1954] ? create_io_thread+0xf0/0xf0 [ 2659.541117][ T1954] ? find_held_lock+0x2d/0x110 [ 2659.545918][ T1954] __do_sys_clone+0xba/0x100 [ 2659.550528][ T1954] ? kernel_clone+0x990/0x990 [ 2659.555226][ T1954] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2659.561306][ T1954] do_syscall_64+0x39/0xb0 [ 2659.565761][ T1954] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2659.571662][ T1954] RIP: 0033:0x7fe5bee8d4f1 [ 2659.576083][ T1954] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2659.595814][ T1954] RSP: 002b:00007fffbb0afe68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2659.604234][ T1954] RAX: ffffffffffffffda RBX: 00007fe5bfb6c700 RCX: 00007fe5bee8d4f1 [ 2659.612208][ T1954] RDX: 00007fe5bfb6c9d0 RSI: 00007fe5bfb6c2f0 RDI: 00000000003d0f00 [ 2659.620182][ T1954] RBP: 00007fffbb0b00b0 R08: 00007fe5bfb6c700 R09: 00007fe5bfb6c700 [ 2659.628158][ T1954] R10: 00007fe5bfb6c9d0 R11: 0000000000000206 R12: 00007fffbb0aff1e [ 2659.636132][ T1954] R13: 00007fffbb0aff1f R14: 00007fe5bfb6c300 R15: 0000000000022000 [ 2659.644133][ T1954] [ 2659.739256][ T1954] memory: usage 307196kB, limit 307200kB, failcnt 4671 [ 2659.749471][ T1954] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2659.759550][ T1954] Memory cgroup stats for /syz4: [ 2659.759757][ T1954] anon 147456 [ 2659.759757][ T1954] file 253952 [ 2659.759757][ T1954] kernel 314167296 [ 2659.759757][ T1954] kernel_stack 65536 [ 2659.759757][ T1954] pagetables 77824 [ 2659.759757][ T1954] sec_pagetables 0 [ 2659.759757][ T1954] percpu 4849728 [ 2659.759757][ T1954] sock 0 [ 2659.759757][ T1954] vmalloc 0 [ 2659.759757][ T1954] shmem 253952 [ 2659.759757][ T1954] zswap 0 [ 2659.759757][ T1954] zswapped 0 [ 2659.759757][ T1954] file_mapped 253952 [ 2659.759757][ T1954] file_dirty 0 [ 2659.759757][ T1954] file_writeback 0 [ 2659.759757][ T1954] swapcached 0 [ 2659.759757][ T1954] anon_thp 0 [ 2659.759757][ T1954] file_thp 0 [ 2659.759757][ T1954] shmem_thp 0 [ 2659.759757][ T1954] inactive_anon 217088 [ 2659.759757][ T1954] active_anon 184320 [ 2659.759757][ T1954] inactive_file 0 [ 2659.759757][ T1954] active_file 0 [ 2659.759757][ T1954] unevictable 0 [ 2659.759757][ T1954] slab_reclaimable 55648 [ 2659.759757][ T1954] slab_unreclaimable 309089528 [ 2659.862343][ T2009] device bridge1365 entered promiscuous mode [ 2659.961002][ T1954] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=1954,uid=0 [ 2659.998754][ T1954] Memory cgroup out of memory: Killed process 1954 (syz-executor.4) total-vm:54672kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2660.032485][ T2012] bond1179: (slave vlan1042): making interface the new active one [ 2660.073418][ T2012] bond1179: (slave vlan1042): Enslaving as an active interface with an up link [ 2660.073811][ T2007] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2660.110958][ T2007] CPU: 1 PID: 2007 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2660.119630][ T2007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2660.129720][ T2007] Call Trace: [ 2660.133027][ T2007] [ 2660.140166][ T2007] dump_stack_lvl+0xd1/0x138 [ 2660.144808][ T2007] dump_header+0x10b/0x85f [ 2660.149282][ T2007] oom_kill_process.cold+0x10/0x15 [ 2660.154445][ T2007] out_of_memory+0x35c/0x14a0 [ 2660.159181][ T2007] ? find_held_lock+0x2d/0x110 [ 2660.164000][ T2007] ? oom_killer_disable+0x280/0x280 [ 2660.169260][ T2007] ? find_held_lock+0x2d/0x110 [ 2660.174083][ T2007] mem_cgroup_out_of_memory+0x206/0x270 [ 2660.179689][ T2007] ? mem_cgroup_margin+0x130/0x130 [ 2660.184851][ T2007] ? lock_downgrade+0x6e0/0x6e0 [ 2660.189767][ T2007] try_charge_memcg+0xefb/0x12f0 [ 2660.194757][ T2007] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2660.200791][ T2007] ? lock_downgrade+0x6e0/0x6e0 [ 2660.205710][ T2007] charge_memcg+0x90/0x3b0 [ 2660.210172][ T2007] __mem_cgroup_charge+0x2b/0x90 [ 2660.215137][ T2007] ? copy_mc_to_kernel+0x3e/0x90 [ 2660.220101][ T2007] do_wp_page+0x7ec/0x3370 [ 2660.224568][ T2007] ? lock_release+0x810/0x810 [ 2660.229300][ T2007] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2660.234726][ T2007] ? do_raw_spin_lock+0x124/0x2b0 [ 2660.239797][ T2007] ? rwlock_bug.part.0+0x90/0x90 [ 2660.244781][ T2007] ? lock_chain_count+0x20/0x20 [ 2660.246963][ T2018] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2660.249653][ T2007] __handle_mm_fault+0x1f58/0x3c90 [ 2660.249704][ T2007] ? vm_iomap_memory+0x190/0x190 [ 2660.267872][ T2007] handle_mm_fault+0x1b6/0x850 [ 2660.272698][ T2007] do_user_addr_fault+0x475/0x1210 [ 2660.277862][ T2007] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2660.283466][ T2007] exc_page_fault+0x98/0x170 [ 2660.288193][ T2007] asm_exc_page_fault+0x26/0x30 [ 2660.293078][ T2007] RIP: 0033:0x7f5b1fc36645 [ 2660.297524][ T2007] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d 7e 1a 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 2d 73 17 00 48 8b 53 10 4c 8d 81 00 [ 2660.317207][ T2007] RSP: 002b:00007fff16a820a0 EFLAGS: 00010206 [ 2660.323312][ T2007] RAX: 0000000000000003 RBX: 00007f5b1fdabf80 RCX: 00007f5b1fda80c0 [ 2660.331311][ T2007] RDX: 00007f5b1fda80c0 RSI: 0000000000000080 RDI: 00007f5b1fdabf80 [ 2660.339326][ T2007] RBP: 00007f5b1fdabf80 R08: 00007fff16b24080 R09: 0000000000000000 [ 2660.347337][ T2007] R10: 00007fff16a821b0 R11: 0000000000000246 R12: 00000000002896a2 [ 2660.355347][ T2007] R13: 00007fff16a821b0 R14: 00007f5b1fdabf80 R15: 0000000000000032 [ 2660.363386][ T2007] 08:46:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5d370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:08 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x700]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:08 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10c]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x40000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e33}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:09 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xa00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2660.434347][ T2027] Cannot find add_set index 0 as target [ 2660.450340][ T2018] device bridge1366 entered promiscuous mode [ 2660.460819][ T2007] memory: usage 307196kB, limit 307200kB, failcnt 32175 [ 2660.462601][ T2030] Cannot find add_set index 0 as target [ 2660.494348][ T2007] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2660.564072][ T2007] Memory cgroup stats for /syz5: [ 2660.570734][ T2007] anon 98304 [ 2660.570734][ T2007] file 483328 [ 2660.570734][ T2007] kernel 313987072 [ 2660.570734][ T2007] kernel_stack 65536 [ 2660.570734][ T2007] pagetables 69632 [ 2660.570734][ T2007] sec_pagetables 0 [ 2660.570734][ T2007] percpu 4839136 [ 2660.570734][ T2007] sock 0 [ 2660.570734][ T2007] vmalloc 0 [ 2660.570734][ T2007] shmem 483328 [ 2660.570734][ T2007] zswap 0 [ 2660.570734][ T2007] zswapped 0 [ 2660.570734][ T2007] file_mapped 471040 [ 2660.570734][ T2007] file_dirty 0 [ 2660.570734][ T2007] file_writeback 0 [ 2660.570734][ T2007] swapcached 0 [ 2660.570734][ T2007] anon_thp 0 [ 2660.570734][ T2007] file_thp 0 [ 2660.570734][ T2007] shmem_thp 0 [ 2660.570734][ T2007] inactive_anon 200704 [ 2660.570734][ T2007] active_anon 380928 [ 2660.570734][ T2007] inactive_file 0 [ 2660.570734][ T2007] active_file 0 [ 2660.570734][ T2007] unevictable 0 [ 2660.570734][ T2007] slab_reclaimable 66152 [ 2660.570734][ T2007] slab_unreclaimable 308909328 08:46:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11d]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2660.700169][ T2025] bond1180: (slave vlan1043): making interface the new active one [ 2660.783640][ T2040] Cannot find add_set index 0 as target [ 2660.790395][ T2041] Cannot find add_set index 0 as target [ 2660.808868][ T2025] bond1180: (slave vlan1043): Enslaving as an active interface with an up link [ 2661.004146][ T2007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2007,uid=0 08:46:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa0010000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:09 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xc00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e34}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x201]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x1000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2661.038868][ T2007] Memory cgroup out of memory: Killed process 2007 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2661.121484][ T2054] Cannot find add_set index 0 as target [ 2661.149449][ T2055] Cannot find add_set index 0 as target [ 2661.240166][ T2059] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2661.274173][ T2022] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2661.383999][ T2022] CPU: 0 PID: 2022 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2661.392663][ T2022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2661.402752][ T2022] Call Trace: [ 2661.406055][ T2022] [ 2661.409017][ T2022] dump_stack_lvl+0xd1/0x138 [ 2661.413658][ T2022] dump_header+0x10b/0x85f [ 2661.418130][ T2022] oom_kill_process.cold+0x10/0x15 [ 2661.423298][ T2022] out_of_memory+0x35c/0x14a0 [ 2661.428041][ T2022] ? find_held_lock+0x2d/0x110 [ 2661.432850][ T2022] ? oom_killer_disable+0x280/0x280 [ 2661.438094][ T2022] ? find_held_lock+0x2d/0x110 [ 2661.442921][ T2022] mem_cgroup_out_of_memory+0x206/0x270 [ 2661.448527][ T2022] ? mem_cgroup_margin+0x130/0x130 [ 2661.453689][ T2022] ? lock_downgrade+0x6e0/0x6e0 [ 2661.458619][ T2022] try_charge_memcg+0xefb/0x12f0 [ 2661.463612][ T2022] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2661.469635][ T2022] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2661.475413][ T2022] ? lock_downgrade+0x6e0/0x6e0 [ 2661.480303][ T2022] ? lock_downgrade+0x6e0/0x6e0 [ 2661.485209][ T2022] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2661.490806][ T2022] __alloc_pages+0x1f3/0x5b0 [ 2661.495447][ T2022] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2661.502266][ T2022] ? find_held_lock+0x2d/0x110 [ 2661.507090][ T2022] alloc_pages+0x1aa/0x270 [ 2661.511550][ T2022] pte_alloc_one+0x1a/0x230 [ 2661.516102][ T2022] __pte_alloc+0x6d/0x260 [ 2661.520475][ T2022] ? pmd_install+0x160/0x160 [ 2661.525110][ T2022] ? hugepage_vma_check+0x24e/0x830 [ 2661.530352][ T2022] ? _raw_spin_unlock+0x28/0x40 [ 2661.535246][ T2022] ? __pmd_alloc+0x30c/0x5d0 [ 2661.539914][ T2022] __handle_mm_fault+0x38cf/0x3c90 [ 2661.545080][ T2022] ? vm_iomap_memory+0x190/0x190 [ 2661.550087][ T2022] handle_mm_fault+0x1b6/0x850 [ 2661.554904][ T2022] do_user_addr_fault+0x475/0x1210 [ 2661.560058][ T2022] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2661.565660][ T2022] exc_page_fault+0x98/0x170 [ 2661.570290][ T2022] asm_exc_page_fault+0x26/0x30 [ 2661.575180][ T2022] RIP: 0033:0x7fe5bee2bd49 [ 2661.579623][ T2022] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2661.599273][ T2022] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2661.605384][ T2022] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2661.613389][ T2022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2661.621398][ T2022] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2661.629404][ T2022] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 0000000000289afa [ 2661.631784][ T2060] device bridge1367 entered promiscuous mode [ 2661.637386][ T2022] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2661.637428][ T2022] [ 2661.717682][ T2022] memory: usage 307200kB, limit 307200kB, failcnt 4835 [ 2661.732708][ T2022] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2661.762228][ T2022] Memory cgroup stats for /syz4: [ 2661.762472][ T2022] anon 139264 [ 2661.762472][ T2022] file 253952 [ 2661.762472][ T2022] kernel 314179584 [ 2661.762472][ T2022] kernel_stack 65536 [ 2661.762472][ T2022] pagetables 73728 [ 2661.762472][ T2022] sec_pagetables 0 [ 2661.762472][ T2022] percpu 4849792 [ 2661.762472][ T2022] sock 0 [ 2661.762472][ T2022] vmalloc 0 [ 2661.762472][ T2022] shmem 253952 [ 2661.762472][ T2022] zswap 0 [ 2661.762472][ T2022] zswapped 0 [ 2661.762472][ T2022] file_mapped 253952 [ 2661.762472][ T2022] file_dirty 0 [ 2661.762472][ T2022] file_writeback 0 [ 2661.762472][ T2022] swapcached 0 [ 2661.762472][ T2022] anon_thp 0 [ 2661.762472][ T2022] file_thp 0 [ 2661.762472][ T2022] shmem_thp 0 [ 2661.762472][ T2022] inactive_anon 208896 [ 2661.762472][ T2022] active_anon 184320 [ 2661.762472][ T2022] inactive_file 0 [ 2661.762472][ T2022] active_file 0 [ 2661.762472][ T2022] unevictable 0 [ 2661.762472][ T2022] slab_reclaimable 55648 [ 2661.762472][ T2022] slab_unreclaimable 309100048 [ 2661.939388][ T2022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2022,uid=0 [ 2661.972336][ T2022] Memory cgroup out of memory: Killed process 2022 (syz-executor.4) total-vm:54540kB, anon-rss:456kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2662.080604][ T2063] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2662.101684][ T2063] CPU: 1 PID: 2063 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2662.110327][ T2063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2662.120414][ T2063] Call Trace: [ 2662.123720][ T2063] [ 2662.126679][ T2063] dump_stack_lvl+0xd1/0x138 [ 2662.131321][ T2063] dump_header+0x10b/0x85f [ 2662.135888][ T2063] oom_kill_process.cold+0x10/0x15 [ 2662.141119][ T2063] out_of_memory+0x35c/0x14a0 [ 2662.145840][ T2063] ? find_held_lock+0x2d/0x110 [ 2662.150656][ T2063] ? oom_killer_disable+0x280/0x280 [ 2662.155916][ T2063] ? find_held_lock+0x2d/0x110 [ 2662.160734][ T2063] mem_cgroup_out_of_memory+0x206/0x270 [ 2662.166357][ T2063] ? mem_cgroup_margin+0x130/0x130 [ 2662.171542][ T2063] ? lock_downgrade+0x6e0/0x6e0 [ 2662.176457][ T2063] try_charge_memcg+0xefb/0x12f0 [ 2662.181446][ T2063] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2662.187484][ T2063] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2662.193264][ T2063] ? lock_downgrade+0x6e0/0x6e0 [ 2662.198168][ T2063] ? lock_downgrade+0x6e0/0x6e0 [ 2662.203067][ T2063] ? rcu_read_unlock+0x9/0x60 [ 2662.207814][ T2063] obj_cgroup_charge+0x2af/0x5e0 [ 2662.212818][ T2063] ? copy_process+0x3aa/0x7520 [ 2662.217631][ T2063] kmem_cache_alloc_node+0xb7/0x460 [ 2662.223146][ T2063] copy_process+0x3aa/0x7520 [ 2662.227790][ T2063] ? __lock_acquire+0xbc3/0x56d0 [ 2662.228649][ T2061] bond1181: (slave vlan1044): making interface the new active one [ 2662.232755][ T2063] ? __cleanup_sighand+0xb0/0xb0 [ 2662.232789][ T2063] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2662.232817][ T2063] ? psi_memstall_leave+0x174/0x250 [ 2662.256782][ T2063] kernel_clone+0xeb/0x990 [ 2662.261249][ T2063] ? create_io_thread+0xf0/0xf0 [ 2662.266145][ T2063] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2662.272452][ T2063] ? lock_downgrade+0x6e0/0x6e0 08:46:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5e370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:10 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x222]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:10 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xe04]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x2000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2662.277393][ T2063] __do_sys_clone+0xba/0x100 [ 2662.284000][ T2063] ? kernel_clone+0x990/0x990 [ 2662.288735][ T2063] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2662.294691][ T2063] do_syscall_64+0x39/0xb0 [ 2662.299172][ T2063] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2662.305087][ T2063] RIP: 0033:0x7f5b1fc8d4f1 [ 2662.309510][ T2063] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2662.329137][ T2063] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2662.337565][ T2063] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2662.345541][ T2063] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2662.353516][ T2063] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2662.361490][ T2063] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2662.369464][ T2063] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2662.377457][ T2063] 08:46:11 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x238]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:11 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x1201]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2662.461613][ T2079] Cannot find add_set index 0 as target [ 2662.462323][ T2080] Cannot find add_set index 0 as target [ 2662.493675][ T2063] memory: usage 307200kB, limit 307200kB, failcnt 32264 [ 2662.529185][ T2063] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2662.544529][ T2061] bond1181: (slave vlan1044): Enslaving as an active interface with an up link [ 2662.563691][ T2063] Memory cgroup stats for /syz5: 08:46:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2662.563900][ T2063] anon 143360 [ 2662.563900][ T2063] file 483328 [ 2662.563900][ T2063] kernel 313946112 [ 2662.563900][ T2063] kernel_stack 65536 [ 2662.563900][ T2063] pagetables 77824 [ 2662.563900][ T2063] sec_pagetables 0 [ 2662.563900][ T2063] percpu 4839136 [ 2662.563900][ T2063] sock 0 [ 2662.563900][ T2063] vmalloc 0 [ 2662.563900][ T2063] shmem 483328 [ 2662.563900][ T2063] zswap 0 [ 2662.563900][ T2063] zswapped 0 [ 2662.563900][ T2063] file_mapped 471040 [ 2662.563900][ T2063] file_dirty 0 [ 2662.563900][ T2063] file_writeback 0 [ 2662.563900][ T2063] swapcached 0 [ 2662.563900][ T2063] anon_thp 0 [ 2662.563900][ T2063] file_thp 0 [ 2662.563900][ T2063] shmem_thp 0 [ 2662.563900][ T2063] inactive_anon 245760 [ 2662.563900][ T2063] active_anon 380928 [ 2662.563900][ T2063] inactive_file 0 [ 2662.563900][ T2063] active_file 0 [ 2662.563900][ T2063] unevictable 0 [ 2662.563900][ T2063] slab_reclaimable 16560 [ 2662.563900][ T2063] slab_unreclaimable 308906376 [ 2662.750183][ T2064] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2662.848951][ T2063] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2063,uid=0 [ 2662.874811][ T2063] Memory cgroup out of memory: Killed process 2063 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2662.895650][ T2090] device bridge1368 entered promiscuous mode [ 2662.944871][ T2089] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2663.028299][ T2071] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2663.095965][ T2071] CPU: 0 PID: 2071 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2663.104615][ T2071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2663.114697][ T2071] Call Trace: [ 2663.118000][ T2071] [ 2663.120959][ T2071] dump_stack_lvl+0xd1/0x138 [ 2663.125592][ T2071] dump_header+0x10b/0x85f [ 2663.130063][ T2071] oom_kill_process.cold+0x10/0x15 [ 2663.135220][ T2071] out_of_memory+0x35c/0x14a0 [ 2663.139930][ T2071] ? find_held_lock+0x2d/0x110 [ 2663.141086][ T2091] bond1182: (slave vlan1045): making interface the new active one [ 2663.144700][ T2071] ? oom_killer_disable+0x280/0x280 [ 2663.144746][ T2071] ? find_held_lock+0x2d/0x110 [ 2663.144782][ T2071] mem_cgroup_out_of_memory+0x206/0x270 [ 2663.167882][ T2091] bond1182: (slave vlan1045): Enslaving as an active interface with an up link [ 2663.168066][ T2071] ? mem_cgroup_margin+0x130/0x130 [ 2663.182153][ T2071] ? lock_downgrade+0x6e0/0x6e0 [ 2663.187069][ T2071] try_charge_memcg+0xefb/0x12f0 08:46:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa0030000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:11 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x23a]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x3000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:11 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x1501]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2663.192065][ T2071] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2663.198108][ T2071] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2663.203884][ T2071] ? lock_downgrade+0x6e0/0x6e0 [ 2663.208775][ T2071] ? lock_downgrade+0x6e0/0x6e0 [ 2663.213666][ T2071] ? rcu_read_unlock+0x9/0x60 [ 2663.218490][ T2071] obj_cgroup_charge+0x2af/0x5e0 [ 2663.223475][ T2071] ? alloc_pid+0xd3/0xd70 [ 2663.227852][ T2071] kmem_cache_alloc+0xb5/0x430 [ 2663.232663][ T2071] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2663.238273][ T2071] alloc_pid+0xd3/0xd70 [ 2663.242479][ T2071] ? copy_thread+0x5e0/0xa00 [ 2663.247119][ T2071] ? copy_namespaces+0x1e3/0x4a0 [ 2663.252130][ T2071] copy_process+0x4821/0x7520 [ 2663.256872][ T2071] ? __cleanup_sighand+0xb0/0xb0 [ 2663.261848][ T2071] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2663.267886][ T2071] ? psi_memstall_leave+0x174/0x250 [ 2663.273130][ T2071] kernel_clone+0xeb/0x990 [ 2663.277584][ T2071] ? create_io_thread+0xf0/0xf0 [ 2663.282478][ T2071] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2663.288775][ T2071] ? lock_downgrade+0x6e0/0x6e0 08:46:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x1c00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2663.293680][ T2071] __do_sys_clone+0xba/0x100 [ 2663.298311][ T2071] ? kernel_clone+0x990/0x990 [ 2663.303042][ T2071] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2663.308981][ T2071] do_syscall_64+0x39/0xb0 [ 2663.313448][ T2071] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2663.319380][ T2071] RIP: 0033:0x7fe5bee8d4f1 [ 2663.323828][ T2071] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2663.343983][ T2071] RSP: 002b:00007fffbb0afe68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2663.352442][ T2071] RAX: ffffffffffffffda RBX: 00007fe5bfb6c700 RCX: 00007fe5bee8d4f1 [ 2663.360449][ T2071] RDX: 00007fe5bfb6c9d0 RSI: 00007fe5bfb6c2f0 RDI: 00000000003d0f00 [ 2663.368453][ T2071] RBP: 00007fffbb0b00b0 R08: 00007fe5bfb6c700 R09: 00007fe5bfb6c700 [ 2663.376461][ T2071] R10: 00007fe5bfb6c9d0 R11: 0000000000000206 R12: 00007fffbb0aff1e [ 2663.384468][ T2071] R13: 00007fffbb0aff1f R14: 00007fe5bfb6c300 R15: 0000000000022000 [ 2663.392502][ T2071] [ 2663.499876][ T2071] memory: usage 307200kB, limit 307200kB, failcnt 4950 [ 2663.528131][ T2071] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2663.577343][ T2071] Memory cgroup stats for /syz4: [ 2663.577518][ T2071] anon 106496 [ 2663.577518][ T2071] file 253952 [ 2663.577518][ T2071] kernel 314212352 [ 2663.577518][ T2071] kernel_stack 98304 [ 2663.577518][ T2071] pagetables 69632 [ 2663.577518][ T2071] sec_pagetables 0 [ 2663.577518][ T2071] percpu 4849792 [ 2663.577518][ T2071] sock 0 [ 2663.577518][ T2071] vmalloc 0 [ 2663.577518][ T2071] shmem 253952 [ 2663.577518][ T2071] zswap 0 [ 2663.577518][ T2071] zswapped 0 [ 2663.577518][ T2071] file_mapped 253952 [ 2663.577518][ T2071] file_dirty 0 [ 2663.577518][ T2071] file_writeback 0 [ 2663.577518][ T2071] swapcached 0 [ 2663.577518][ T2071] anon_thp 0 [ 2663.577518][ T2071] file_thp 0 [ 2663.577518][ T2071] shmem_thp 0 [ 2663.577518][ T2071] inactive_anon 176128 [ 2663.577518][ T2071] active_anon 184320 [ 2663.577518][ T2071] inactive_file 0 [ 2663.577518][ T2071] active_file 0 [ 2663.577518][ T2071] unevictable 0 [ 2663.577518][ T2071] slab_reclaimable 53720 [ 2663.577518][ T2071] slab_unreclaimable 309107760 [ 2663.789577][ T2071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2071,uid=0 [ 2663.811080][ T2071] Memory cgroup out of memory: Killed process 2071 (syz-executor.4) total-vm:54672kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:46:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5f370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e36}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x256]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x1f00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x4000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2663.843492][ T2110] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:46:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x278]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2664.052297][ T2106] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2664.134096][ T2106] CPU: 0 PID: 2106 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2664.142768][ T2106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2664.152866][ T2106] Call Trace: [ 2664.156171][ T2106] [ 2664.159133][ T2106] dump_stack_lvl+0xd1/0x138 [ 2664.163772][ T2106] dump_header+0x10b/0x85f [ 2664.168252][ T2106] oom_kill_process.cold+0x10/0x15 [ 2664.173422][ T2106] out_of_memory+0x35c/0x14a0 [ 2664.178160][ T2106] ? find_held_lock+0x2d/0x110 [ 2664.183009][ T2106] ? oom_killer_disable+0x280/0x280 [ 2664.188265][ T2106] ? find_held_lock+0x2d/0x110 [ 2664.193082][ T2106] mem_cgroup_out_of_memory+0x206/0x270 [ 2664.198686][ T2106] ? mem_cgroup_margin+0x130/0x130 [ 2664.203854][ T2106] ? lock_downgrade+0x6e0/0x6e0 [ 2664.208773][ T2106] try_charge_memcg+0xefb/0x12f0 [ 2664.213761][ T2106] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2664.219789][ T2106] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2664.225569][ T2106] ? lock_downgrade+0x6e0/0x6e0 [ 2664.230481][ T2106] obj_cgroup_charge+0x2af/0x5e0 [ 2664.235467][ T2106] ? vm_area_dup+0x7d/0x380 [ 2664.240012][ T2106] kmem_cache_alloc+0xb5/0x430 [ 2664.244825][ T2106] vm_area_dup+0x7d/0x380 [ 2664.249195][ T2106] ? mt_slot+0xa1/0x170 [ 2664.253405][ T2106] ? mas_next_nentry+0x610/0xab0 [ 2664.258397][ T2106] ? mas_next_node+0x547/0xa00 [ 2664.263230][ T2106] ? mas_find+0x211/0xd10 [ 2664.267618][ T2106] ? vm_area_alloc+0x100/0x100 [ 2664.272420][ T2106] ? validate_mm_mt+0x149/0x1b0 [ 2664.277314][ T2106] ? remove_vma+0x130/0x130 [ 2664.281875][ T2106] ? can_vma_merge_before+0x390/0x390 [ 2664.287300][ T2106] __split_vma+0xae/0x5e0 [ 2664.291669][ T2106] ? vma_merge+0x2cf/0x870 [ 2664.296131][ T2106] split_vma+0xa3/0xe0 [ 2664.300252][ T2106] mprotect_fixup+0x686/0x960 [ 2664.300302][ T2128] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2664.304955][ T2106] ? mas_find+0x211/0xd10 [ 2664.304984][ T2106] ? change_protection+0x3b30/0x3b30 [ 2664.305022][ T2106] do_mprotect_pkey+0x6fd/0xa70 [ 2664.305058][ T2106] ? mprotect_fixup+0x960/0x960 [ 2664.305086][ T2106] ? up_write+0x1b0/0x520 [ 2664.305160][ T2106] __x64_sys_mprotect+0x78/0xb0 [ 2664.305189][ T2106] do_syscall_64+0x39/0xb0 [ 2664.305229][ T2106] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2664.305252][ T2106] RIP: 0033:0x7f5b1fc8c1d7 [ 2664.305272][ T2106] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2664.305294][ T2106] RSP: 002b:00007fff16a81fe8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2664.305318][ T2106] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5b1fc8c1d7 [ 2664.305334][ T2106] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5b20999000 [ 2664.305348][ T2106] RBP: 00007fff16a820c0 R08: 00000000ffffffff R09: 00007f5b209b8700 [ 2664.305364][ T2106] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff16a821e0 [ 2664.305379][ T2106] R13: 00007f5b209b8700 R14: 0000000000000000 R15: 0000000000022000 [ 2664.305415][ T2106] [ 2664.429211][ T2138] set_target_v0_checkentry: 8 callbacks suppressed [ 2664.429233][ T2138] Cannot find add_set index 0 as target [ 2664.482693][ T2106] memory: usage 307192kB, limit 307200kB, failcnt 32522 [ 2664.504532][ T2106] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2664.514720][ T2106] Memory cgroup stats for /syz5: [ 2664.514898][ T2106] anon 139264 [ 2664.514898][ T2106] file 483328 [ 2664.514898][ T2106] kernel 313942016 [ 2664.514898][ T2106] kernel_stack 65536 [ 2664.514898][ T2106] pagetables 77824 [ 2664.514898][ T2106] sec_pagetables 0 [ 2664.514898][ T2106] percpu 4839136 [ 2664.514898][ T2106] sock 0 [ 2664.514898][ T2106] vmalloc 0 [ 2664.514898][ T2106] shmem 483328 [ 2664.514898][ T2106] zswap 0 [ 2664.514898][ T2106] zswapped 0 [ 2664.514898][ T2106] file_mapped 471040 [ 2664.514898][ T2106] file_dirty 0 [ 2664.514898][ T2106] file_writeback 0 [ 2664.514898][ T2106] swapcached 0 [ 2664.514898][ T2106] anon_thp 0 [ 2664.514898][ T2106] file_thp 0 [ 2664.514898][ T2106] shmem_thp 0 [ 2664.514898][ T2106] inactive_anon 241664 [ 2664.514898][ T2106] active_anon 380928 [ 2664.514898][ T2106] inactive_file 0 [ 2664.514898][ T2106] active_file 0 [ 2664.514898][ T2106] unevictable 0 [ 2664.514898][ T2106] slab_reclaimable 16560 [ 2664.514898][ T2106] slab_unreclaimable 308905512 [ 2664.758790][ T2106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2106,uid=0 [ 2664.767738][ T2139] device bridge1369 entered promiscuous mode [ 2664.801492][ T2106] Memory cgroup out of memory: Killed process 2106 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa3010000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:13 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2002]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x284]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x5000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e37}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2664.918834][ T2126] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2664.969026][ T2126] CPU: 0 PID: 2126 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2664.977698][ T2126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2664.987798][ T2126] Call Trace: [ 2664.991107][ T2126] [ 2664.994070][ T2126] dump_stack_lvl+0xd1/0x138 [ 2664.998702][ T2126] dump_header+0x10b/0x85f [ 2665.003190][ T2126] oom_kill_process.cold+0x10/0x15 [ 2665.008360][ T2126] out_of_memory+0x35c/0x14a0 [ 2665.013093][ T2126] ? find_held_lock+0x2d/0x110 [ 2665.013478][ T2146] Cannot find add_set index 0 as target [ 2665.017894][ T2126] ? oom_killer_disable+0x280/0x280 [ 2665.017939][ T2126] ? find_held_lock+0x2d/0x110 [ 2665.017976][ T2126] mem_cgroup_out_of_memory+0x206/0x270 [ 2665.018013][ T2126] ? mem_cgroup_margin+0x130/0x130 [ 2665.018044][ T2126] ? lock_downgrade+0x6e0/0x6e0 [ 2665.018087][ T2126] try_charge_memcg+0xefb/0x12f0 [ 2665.018122][ T2126] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2665.018149][ T2126] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2665.018185][ T2126] ? lock_downgrade+0x6e0/0x6e0 [ 2665.018210][ T2126] ? lock_downgrade+0x6e0/0x6e0 [ 2665.018250][ T2126] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2665.018280][ T2126] __alloc_pages+0x1f3/0x5b0 [ 2665.018311][ T2126] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2665.018355][ T2126] ? find_held_lock+0x2d/0x110 [ 2665.018399][ T2126] alloc_pages+0x1aa/0x270 [ 2665.018429][ T2126] pte_alloc_one+0x1a/0x230 [ 2665.018461][ T2126] __pte_alloc+0x6d/0x260 [ 2665.018491][ T2126] ? pmd_install+0x160/0x160 [ 2665.018518][ T2126] ? hugepage_vma_check+0x24e/0x830 [ 2665.018551][ T2126] ? _raw_spin_unlock+0x28/0x40 [ 2665.018580][ T2126] ? __pmd_alloc+0x30c/0x5d0 [ 2665.018615][ T2126] __handle_mm_fault+0x38cf/0x3c90 [ 2665.018656][ T2126] ? vm_iomap_memory+0x190/0x190 [ 2665.018718][ T2126] handle_mm_fault+0x1b6/0x850 [ 2665.018758][ T2126] do_user_addr_fault+0x475/0x1210 [ 2665.018791][ T2126] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2665.018832][ T2126] exc_page_fault+0x98/0x170 [ 2665.018860][ T2126] asm_exc_page_fault+0x26/0x30 [ 2665.018885][ T2126] RIP: 0033:0x7fe5bee2bd49 [ 2665.018907][ T2126] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2665.018928][ T2126] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2665.018950][ T2126] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2665.018964][ T2126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2665.018979][ T2126] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2665.018993][ T2126] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000028a96c [ 2665.019008][ T2126] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2665.019044][ T2126] [ 2665.086427][ T2148] Cannot find add_set index 0 as target [ 2665.158067][ T2147] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2665.159570][ T2126] memory: usage 307200kB, limit 307200kB, failcnt 5017 [ 2665.383467][ T2126] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2665.463653][ T2159] device bridge1370 entered promiscuous mode [ 2665.471327][ T2126] Memory cgroup stats for /syz4: [ 2665.471554][ T2126] anon 139264 [ 2665.471554][ T2126] file 253952 [ 2665.471554][ T2126] kernel 314179584 [ 2665.471554][ T2126] kernel_stack 65536 [ 2665.471554][ T2126] pagetables 73728 [ 2665.471554][ T2126] sec_pagetables 0 [ 2665.471554][ T2126] percpu 4849792 [ 2665.471554][ T2126] sock 0 [ 2665.471554][ T2126] vmalloc 0 [ 2665.471554][ T2126] shmem 253952 [ 2665.471554][ T2126] zswap 0 [ 2665.471554][ T2126] zswapped 0 [ 2665.471554][ T2126] file_mapped 253952 [ 2665.471554][ T2126] file_dirty 0 [ 2665.471554][ T2126] file_writeback 0 [ 2665.471554][ T2126] swapcached 0 [ 2665.471554][ T2126] anon_thp 0 [ 2665.471554][ T2126] file_thp 0 [ 2665.471554][ T2126] shmem_thp 0 [ 2665.471554][ T2126] inactive_anon 208896 [ 2665.471554][ T2126] active_anon 184320 [ 2665.471554][ T2126] inactive_file 0 [ 2665.471554][ T2126] active_file 0 [ 2665.471554][ T2126] unevictable 0 [ 2665.471554][ T2126] slab_reclaimable 55648 [ 2665.471554][ T2126] slab_unreclaimable 309100048 [ 2665.683062][ T2126] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2126,uid=0 [ 2665.713300][ T2126] Memory cgroup out of memory: Killed process 2126 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:46:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2003]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x288]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x6000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2665.721836][ T2162] bond1184: (slave vlan1046): making interface the new active one [ 2665.841831][ T2145] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2665.866126][ T2171] Cannot find add_set index 0 as target [ 2665.866580][ T2162] bond1184: (slave vlan1046): Enslaving as an active interface with an up link [ 2665.876552][ T2174] Cannot find add_set index 0 as target [ 2665.923047][ T2158] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2665.942336][ T2145] CPU: 1 PID: 2145 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2665.951001][ T2145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2665.961177][ T2145] Call Trace: [ 2665.964487][ T2145] [ 2665.967447][ T2145] dump_stack_lvl+0xd1/0x138 [ 2665.972077][ T2145] dump_header+0x10b/0x85f [ 2665.976547][ T2145] oom_kill_process.cold+0x10/0x15 [ 2665.981712][ T2145] out_of_memory+0x35c/0x14a0 [ 2665.986447][ T2145] ? find_held_lock+0x2d/0x110 [ 2665.991262][ T2145] ? oom_killer_disable+0x280/0x280 [ 2665.996512][ T2145] ? find_held_lock+0x2d/0x110 [ 2666.001329][ T2145] mem_cgroup_out_of_memory+0x206/0x270 [ 2666.006932][ T2145] ? mem_cgroup_margin+0x130/0x130 [ 2666.012092][ T2145] ? lock_downgrade+0x6e0/0x6e0 [ 2666.017002][ T2145] try_charge_memcg+0xefb/0x12f0 [ 2666.021990][ T2145] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2666.028021][ T2145] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2666.033796][ T2145] ? lock_downgrade+0x6e0/0x6e0 [ 2666.038695][ T2145] ? lock_downgrade+0x6e0/0x6e0 [ 2666.043588][ T2145] ? rcu_read_unlock+0x9/0x60 [ 2666.048331][ T2145] obj_cgroup_charge+0x2af/0x5e0 [ 2666.053321][ T2145] ? copy_process+0x3aa/0x7520 [ 2666.058131][ T2145] kmem_cache_alloc_node+0xb7/0x460 [ 2666.063386][ T2145] copy_process+0x3aa/0x7520 [ 2666.068078][ T2145] ? __lock_acquire+0xbc3/0x56d0 [ 2666.073071][ T2145] ? __cleanup_sighand+0xb0/0xb0 [ 2666.078052][ T2145] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2666.084075][ T2145] ? psi_memstall_leave+0x174/0x250 [ 2666.089328][ T2145] kernel_clone+0xeb/0x990 [ 2666.093807][ T2145] ? create_io_thread+0xf0/0xf0 [ 2666.098706][ T2145] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2666.105003][ T2145] ? lock_downgrade+0x6e0/0x6e0 [ 2666.109912][ T2145] __do_sys_clone+0xba/0x100 [ 2666.114551][ T2145] ? kernel_clone+0x990/0x990 [ 2666.119299][ T2145] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2666.125260][ T2145] do_syscall_64+0x39/0xb0 [ 2666.129736][ T2145] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2666.135678][ T2145] RIP: 0033:0x7f5b1fc8d4f1 [ 2666.140133][ T2145] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2666.159778][ T2145] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 08:46:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e38}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:14 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x29e]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:14 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2202]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2666.168265][ T2145] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2666.176273][ T2145] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2666.184287][ T2145] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2666.192290][ T2145] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2666.200273][ T2145] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2666.208282][ T2145] [ 2666.317363][ T2145] memory: usage 307200kB, limit 307200kB, failcnt 32658 [ 2666.326557][ T2181] Cannot find add_set index 0 as target [ 2666.334527][ T2182] Cannot find add_set index 0 as target [ 2666.350006][ T2186] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2666.473539][ T2145] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2666.490966][ T2145] Memory cgroup stats for /syz5: [ 2666.491143][ T2145] anon 143360 [ 2666.491143][ T2145] file 483328 [ 2666.491143][ T2145] kernel 313946112 [ 2666.491143][ T2145] kernel_stack 65536 [ 2666.491143][ T2145] pagetables 77824 [ 2666.491143][ T2145] sec_pagetables 0 [ 2666.491143][ T2145] percpu 4839136 [ 2666.491143][ T2145] sock 0 [ 2666.491143][ T2145] vmalloc 0 [ 2666.491143][ T2145] shmem 483328 [ 2666.491143][ T2145] zswap 0 [ 2666.491143][ T2145] zswapped 0 [ 2666.491143][ T2145] file_mapped 471040 [ 2666.491143][ T2145] file_dirty 0 [ 2666.491143][ T2145] file_writeback 0 [ 2666.491143][ T2145] swapcached 0 [ 2666.491143][ T2145] anon_thp 0 [ 2666.491143][ T2145] file_thp 0 [ 2666.491143][ T2145] shmem_thp 0 [ 2666.491143][ T2145] inactive_anon 245760 [ 2666.491143][ T2145] active_anon 380928 [ 2666.491143][ T2145] inactive_file 0 [ 2666.491143][ T2145] active_file 0 [ 2666.491143][ T2145] unevictable 0 [ 2666.491143][ T2145] slab_reclaimable 16560 [ 2666.491143][ T2145] slab_unreclaimable 308906376 [ 2666.645186][ T2145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2145,uid=0 [ 2666.671733][ T2188] device bridge1371 entered promiscuous mode [ 2666.701205][ T2145] Memory cgroup out of memory: Killed process 2145 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2666.772273][ T2170] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2666.815813][ T2170] CPU: 0 PID: 2170 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2666.824474][ T2170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2666.834563][ T2170] Call Trace: [ 2666.837872][ T2170] [ 2666.840915][ T2170] dump_stack_lvl+0xd1/0x138 [ 2666.845539][ T2170] dump_header+0x10b/0x85f [ 2666.850012][ T2170] oom_kill_process.cold+0x10/0x15 [ 2666.855178][ T2170] out_of_memory+0x35c/0x14a0 [ 2666.859912][ T2170] ? find_held_lock+0x2d/0x110 [ 2666.864724][ T2170] ? oom_killer_disable+0x280/0x280 [ 2666.869974][ T2170] ? find_held_lock+0x2d/0x110 [ 2666.874784][ T2170] mem_cgroup_out_of_memory+0x206/0x270 [ 2666.880385][ T2170] ? mem_cgroup_margin+0x130/0x130 [ 2666.885549][ T2170] ? lock_downgrade+0x6e0/0x6e0 [ 2666.890461][ T2170] try_charge_memcg+0xefb/0x12f0 [ 2666.895447][ T2170] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2666.901466][ T2170] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2666.907242][ T2170] ? lock_downgrade+0x6e0/0x6e0 [ 2666.912139][ T2170] ? lock_downgrade+0x6e0/0x6e0 [ 2666.917041][ T2170] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2666.922622][ T2170] __alloc_pages+0x1f3/0x5b0 [ 2666.927245][ T2170] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2666.934071][ T2170] ? find_held_lock+0x2d/0x110 [ 2666.938907][ T2170] alloc_pages+0x1aa/0x270 [ 2666.943390][ T2170] pte_alloc_one+0x1a/0x230 [ 2666.947948][ T2170] __pte_alloc+0x6d/0x260 [ 2666.952338][ T2170] ? pmd_install+0x160/0x160 [ 2666.956958][ T2170] ? hugepage_vma_check+0x24e/0x830 [ 2666.962369][ T2170] ? _raw_spin_unlock+0x28/0x40 [ 2666.967263][ T2170] ? __pmd_alloc+0x30c/0x5d0 [ 2666.971911][ T2170] __handle_mm_fault+0x38cf/0x3c90 [ 2666.977065][ T2170] ? vm_iomap_memory+0x190/0x190 [ 2666.982063][ T2170] handle_mm_fault+0x1b6/0x850 [ 2666.986871][ T2170] do_user_addr_fault+0x475/0x1210 [ 2666.992023][ T2170] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2666.997608][ T2170] exc_page_fault+0x98/0x170 [ 2667.002229][ T2170] asm_exc_page_fault+0x26/0x30 [ 2667.007179][ T2170] RIP: 0033:0x7fe5bee2bd49 [ 2667.011605][ T2170] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2667.031222][ T2170] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2667.037301][ T2170] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2667.045300][ T2170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2667.053285][ T2170] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2667.061286][ T2170] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000028b0e5 [ 2667.069284][ T2170] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2667.077292][ T2170] 08:46:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa6020000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x7000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:15 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2a6]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:15 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2203]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2667.194850][ T2196] Cannot find add_set index 0 as target [ 2667.220627][ T2202] Cannot find add_set index 0 as target [ 2667.224975][ T2189] bond1185: (slave vlan1047): making interface the new active one [ 2667.263212][ T2170] memory: usage 307200kB, limit 307200kB, failcnt 5118 08:46:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2667.394352][ T2189] bond1185: (slave vlan1047): Enslaving as an active interface with an up link [ 2667.453645][ T2170] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2667.485780][ T2207] Cannot find add_set index 0 as target [ 2667.543028][ T2170] Memory cgroup stats for /syz4: [ 2667.543254][ T2170] anon 139264 [ 2667.543254][ T2170] file 253952 [ 2667.543254][ T2170] kernel 314179584 [ 2667.543254][ T2170] kernel_stack 65536 [ 2667.543254][ T2170] pagetables 73728 [ 2667.543254][ T2170] sec_pagetables 0 [ 2667.543254][ T2170] percpu 4849792 [ 2667.543254][ T2170] sock 0 [ 2667.543254][ T2170] vmalloc 0 [ 2667.543254][ T2170] shmem 253952 [ 2667.543254][ T2170] zswap 0 [ 2667.543254][ T2170] zswapped 0 [ 2667.543254][ T2170] file_mapped 253952 [ 2667.543254][ T2170] file_dirty 0 [ 2667.543254][ T2170] file_writeback 0 [ 2667.543254][ T2170] swapcached 0 [ 2667.543254][ T2170] anon_thp 0 [ 2667.543254][ T2170] file_thp 0 [ 2667.543254][ T2170] shmem_thp 0 [ 2667.543254][ T2170] inactive_anon 208896 [ 2667.543254][ T2170] active_anon 184320 [ 2667.543254][ T2170] inactive_file 0 [ 2667.543254][ T2170] active_file 0 [ 2667.543254][ T2170] unevictable 0 [ 2667.543254][ T2170] slab_reclaimable 55648 [ 2667.543254][ T2170] slab_unreclaimable 309100048 [ 2667.719083][ T2170] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2170,uid=0 [ 2667.740212][ T2170] Memory cgroup out of memory: Killed process 2170 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2667.784218][ T2198] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2667.826097][ T2198] CPU: 0 PID: 2198 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2667.834752][ T2198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2667.844848][ T2198] Call Trace: [ 2667.848154][ T2198] [ 2667.851111][ T2198] dump_stack_lvl+0xd1/0x138 [ 2667.855758][ T2198] dump_header+0x10b/0x85f [ 2667.860250][ T2198] oom_kill_process.cold+0x10/0x15 [ 2667.865423][ T2198] out_of_memory+0x35c/0x14a0 [ 2667.870154][ T2198] ? oom_killer_disable+0x280/0x280 [ 2667.875400][ T2198] ? find_held_lock+0x2d/0x110 [ 2667.880219][ T2198] mem_cgroup_out_of_memory+0x206/0x270 [ 2667.885831][ T2198] ? mem_cgroup_margin+0x130/0x130 [ 2667.890993][ T2198] ? lock_downgrade+0x6e0/0x6e0 [ 2667.895899][ T2198] try_charge_memcg+0xefb/0x12f0 [ 2667.900887][ T2198] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2667.906921][ T2198] ? lock_downgrade+0x6e0/0x6e0 [ 2667.911835][ T2198] charge_memcg+0x90/0x3b0 [ 2667.916296][ T2198] __mem_cgroup_charge+0x2b/0x90 [ 2667.921265][ T2198] do_wp_page+0x7ec/0x3370 [ 2667.925725][ T2198] ? lock_release+0x810/0x810 [ 2667.930429][ T2198] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2667.935829][ T2198] ? do_raw_spin_lock+0x124/0x2b0 [ 2667.940886][ T2198] ? rwlock_bug.part.0+0x90/0x90 [ 2667.945844][ T2198] ? lock_chain_count+0x20/0x20 [ 2667.950725][ T2198] __handle_mm_fault+0x1f58/0x3c90 [ 2667.955898][ T2198] ? vm_iomap_memory+0x190/0x190 [ 2667.960913][ T2198] handle_mm_fault+0x1b6/0x850 [ 2667.965726][ T2198] do_user_addr_fault+0x475/0x1210 [ 2667.970886][ T2198] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2667.976469][ T2198] exc_page_fault+0x98/0x170 [ 2667.981095][ T2198] asm_exc_page_fault+0x26/0x30 [ 2667.985969][ T2198] RIP: 0033:0x7f5b1fc39570 [ 2667.990410][ T2198] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2668.010045][ T2198] RSP: 002b:00007fff16a81ff0 EFLAGS: 00010246 [ 2668.016134][ T2198] RAX: 00000000960916b0 RBX: 00007f5b1fdac018 RCX: 0000001b31e20000 [ 2668.024174][ T2198] RDX: 0000000000000000 RSI: 0000001b31e20018 RDI: 000000000c5bdb51 [ 2668.032173][ T2198] RBP: 00000000960916b0 R08: 00000000000016b0 R09: 00000000960916b4 [ 2668.040154][ T2198] R10: 00007fff16b24090 R11: 000000000007ef34 R12: 00007f5b1fda0000 [ 2668.048148][ T2198] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff87bf149c [ 2668.056123][ T2198] ? __sock_create+0x2c/0x790 [ 2668.060839][ T2198] 08:46:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:16 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2402]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e39}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2bc]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x8030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2c8]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2668.141343][ T2198] memory: usage 307200kB, limit 307200kB, failcnt 32787 [ 2668.212956][ T2222] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2668.238088][ T2198] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 08:46:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2a00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2668.348107][ T2198] Memory cgroup stats for /syz5: [ 2668.348323][ T2198] anon 114688 [ 2668.348323][ T2198] file 483328 [ 2668.348323][ T2198] kernel 313974784 [ 2668.348323][ T2198] kernel_stack 98304 [ 2668.348323][ T2198] pagetables 69632 [ 2668.348323][ T2198] sec_pagetables 0 [ 2668.348323][ T2198] percpu 4839136 [ 2668.348323][ T2198] sock 0 [ 2668.348323][ T2198] vmalloc 0 [ 2668.348323][ T2198] shmem 483328 [ 2668.348323][ T2198] zswap 0 [ 2668.348323][ T2198] zswapped 0 [ 2668.348323][ T2198] file_mapped 471040 [ 2668.348323][ T2198] file_dirty 0 [ 2668.348323][ T2198] file_writeback 0 [ 2668.348323][ T2198] swapcached 0 [ 2668.348323][ T2198] anon_thp 0 [ 2668.348323][ T2198] file_thp 0 [ 2668.348323][ T2198] shmem_thp 0 [ 2668.348323][ T2198] inactive_anon 217088 [ 2668.348323][ T2198] active_anon 380928 [ 2668.348323][ T2198] inactive_file 0 [ 2668.348323][ T2198] active_file 0 [ 2668.348323][ T2198] unevictable 0 [ 2668.348323][ T2198] slab_reclaimable 14632 [ 2668.348323][ T2198] slab_unreclaimable 308913152 [ 2668.561206][ T2198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2198,uid=0 [ 2668.602542][ T2198] Memory cgroup out of memory: Killed process 2198 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:46:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xaa030000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x13000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2a03]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2668.652375][ T2221] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2668.691977][ T2227] device bridge1372 entered promiscuous mode [ 2668.713037][ T2221] CPU: 1 PID: 2221 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2668.721697][ T2221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2668.731787][ T2221] Call Trace: [ 2668.735093][ T2221] [ 2668.738052][ T2221] dump_stack_lvl+0xd1/0x138 [ 2668.742690][ T2221] dump_header+0x10b/0x85f [ 2668.747161][ T2221] oom_kill_process.cold+0x10/0x15 [ 2668.752334][ T2221] out_of_memory+0x35c/0x14a0 [ 2668.757071][ T2221] ? find_held_lock+0x2d/0x110 [ 2668.761887][ T2221] ? oom_killer_disable+0x280/0x280 [ 2668.767145][ T2221] ? find_held_lock+0x2d/0x110 [ 2668.771970][ T2221] mem_cgroup_out_of_memory+0x206/0x270 [ 2668.777577][ T2221] ? mem_cgroup_margin+0x130/0x130 [ 2668.782747][ T2221] ? lock_downgrade+0x6e0/0x6e0 [ 2668.787664][ T2221] try_charge_memcg+0xefb/0x12f0 [ 2668.792658][ T2221] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2668.798682][ T2221] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2668.804451][ T2221] ? lock_downgrade+0x6e0/0x6e0 [ 2668.809365][ T2221] ? lock_downgrade+0x6e0/0x6e0 [ 2668.814275][ T2221] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2668.819866][ T2221] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2668.826064][ T2221] copy_process+0x4e3/0x7520 [ 2668.830742][ T2221] ? find_held_lock+0x2d/0x110 [ 2668.835568][ T2221] ? __cleanup_sighand+0xb0/0xb0 [ 2668.840545][ T2221] ? lock_downgrade+0x6e0/0x6e0 [ 2668.845444][ T2221] ? folio_flags.constprop.0+0x53/0x150 [ 2668.851055][ T2221] ? folio_add_lru+0x37b/0x680 [ 2668.855871][ T2221] kernel_clone+0xeb/0x990 [ 2668.860344][ T2221] ? create_io_thread+0xf0/0xf0 [ 2668.865246][ T2221] ? find_held_lock+0x2d/0x110 [ 2668.870072][ T2221] __do_sys_clone+0xba/0x100 [ 2668.874702][ T2221] ? kernel_clone+0x990/0x990 [ 2668.879451][ T2221] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2668.885396][ T2221] do_syscall_64+0x39/0xb0 [ 2668.889945][ T2221] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2668.895877][ T2221] RIP: 0033:0x7fe5bee8d4f1 [ 2668.900344][ T2221] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2668.919992][ T2221] RSP: 002b:00007fffbb0afe68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2668.928454][ T2221] RAX: ffffffffffffffda RBX: 00007fe5bfb6c700 RCX: 00007fe5bee8d4f1 [ 2668.936549][ T2221] RDX: 00007fe5bfb6c9d0 RSI: 00007fe5bfb6c2f0 RDI: 00000000003d0f00 [ 2668.944560][ T2221] RBP: 00007fffbb0b00b0 R08: 00007fe5bfb6c700 R09: 00007fe5bfb6c700 [ 2668.952567][ T2221] R10: 00007fe5bfb6c9d0 R11: 0000000000000206 R12: 00007fffbb0aff1e 08:46:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2668.960570][ T2221] R13: 00007fffbb0aff1f R14: 00007fe5bfb6c300 R15: 0000000000022000 [ 2668.968690][ T2221] [ 2669.070488][ T2221] memory: usage 307188kB, limit 307200kB, failcnt 5243 [ 2669.083755][ T2221] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2669.152512][ T2221] Memory cgroup stats for /syz4: [ 2669.152742][ T2221] anon 106496 [ 2669.152742][ T2221] file 253952 [ 2669.152742][ T2221] kernel 314200064 [ 2669.152742][ T2221] kernel_stack 65536 [ 2669.152742][ T2221] pagetables 69632 [ 2669.152742][ T2221] sec_pagetables 0 [ 2669.152742][ T2221] percpu 4849792 [ 2669.152742][ T2221] sock 0 [ 2669.152742][ T2221] vmalloc 0 [ 2669.152742][ T2221] shmem 253952 [ 2669.152742][ T2221] zswap 0 [ 2669.152742][ T2221] zswapped 0 [ 2669.152742][ T2221] file_mapped 253952 [ 2669.152742][ T2221] file_dirty 0 [ 2669.152742][ T2221] file_writeback 0 [ 2669.152742][ T2221] swapcached 0 [ 2669.152742][ T2221] anon_thp 0 [ 2669.152742][ T2221] file_thp 0 [ 2669.152742][ T2221] shmem_thp 0 [ 2669.152742][ T2221] inactive_anon 176128 [ 2669.152742][ T2221] active_anon 184320 [ 2669.152742][ T2221] inactive_file 0 [ 2669.152742][ T2221] active_file 0 [ 2669.152742][ T2221] unevictable 0 [ 2669.152742][ T2221] slab_reclaimable 53720 [ 2669.152742][ T2221] slab_unreclaimable 309107760 [ 2669.188269][ T2234] bond1186: (slave vlan1048): making interface the new active one [ 2669.322403][ T2221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2221,uid=0 [ 2669.373540][ T2221] Memory cgroup out of memory: Killed process 2221 (syz-executor.4) total-vm:54672kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:46:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:18 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2f4]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2669.444052][ T2234] bond1186: (slave vlan1048): Enslaving as an active interface with an up link [ 2669.468713][ T2244] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2669.468748][ T2244] CPU: 0 PID: 2244 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2669.468772][ T2244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2669.468786][ T2244] Call Trace: [ 2669.468794][ T2244] [ 2669.468805][ T2244] dump_stack_lvl+0xd1/0x138 [ 2669.468842][ T2244] dump_header+0x10b/0x85f [ 2669.468882][ T2244] oom_kill_process.cold+0x10/0x15 [ 2669.468921][ T2244] out_of_memory+0x35c/0x14a0 [ 2669.468964][ T2244] ? find_held_lock+0x2d/0x110 [ 2669.468999][ T2244] ? oom_killer_disable+0x280/0x280 [ 2669.469039][ T2244] ? find_held_lock+0x2d/0x110 [ 2669.469078][ T2244] mem_cgroup_out_of_memory+0x206/0x270 [ 2669.469116][ T2244] ? mem_cgroup_margin+0x130/0x130 [ 2669.469149][ T2244] ? lock_downgrade+0x6e0/0x6e0 [ 2669.469190][ T2244] try_charge_memcg+0xefb/0x12f0 [ 2669.469224][ T2244] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2669.469252][ T2244] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2669.469290][ T2244] ? lock_downgrade+0x6e0/0x6e0 [ 2669.469318][ T2244] ? lock_downgrade+0x6e0/0x6e0 [ 2669.469342][ T2244] ? rcu_read_unlock+0x9/0x60 [ 2669.469388][ T2244] obj_cgroup_charge+0x2af/0x5e0 [ 2669.469421][ T2244] ? copy_process+0x3aa/0x7520 [ 2669.469450][ T2244] kmem_cache_alloc_node+0xb7/0x460 [ 2669.469481][ T2244] copy_process+0x3aa/0x7520 [ 2669.469511][ T2244] ? __lock_acquire+0xbc3/0x56d0 [ 2669.469549][ T2244] ? __cleanup_sighand+0xb0/0xb0 [ 2669.469575][ T2244] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2669.469605][ T2244] ? psi_memstall_leave+0x174/0x250 [ 2669.469647][ T2244] kernel_clone+0xeb/0x990 [ 2669.469677][ T2244] ? create_io_thread+0xf0/0xf0 [ 2669.469713][ T2244] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2669.469750][ T2244] ? lock_downgrade+0x6e0/0x6e0 [ 2669.469787][ T2244] __do_sys_clone+0xba/0x100 [ 2669.469814][ T2244] ? kernel_clone+0x990/0x990 [ 2669.469857][ T2244] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2669.469892][ T2244] do_syscall_64+0x39/0xb0 [ 2669.469924][ T2244] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2669.469949][ T2244] RIP: 0033:0x7f5b1fc8d4f1 [ 2669.469969][ T2244] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2669.469992][ T2244] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2669.470017][ T2244] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2669.470032][ T2244] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2669.470048][ T2244] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2669.470063][ T2244] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2669.470078][ T2244] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2669.470115][ T2244] [ 2669.472478][ T2244] memory: usage 307200kB, limit 307200kB, failcnt 32901 [ 2669.472498][ T2244] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2669.472512][ T2244] Memory cgroup stats for /syz5: [ 2669.472667][ T2244] anon 143360 [ 2669.472667][ T2244] file 483328 [ 2669.472667][ T2244] kernel 313946112 [ 2669.472667][ T2244] kernel_stack 65536 [ 2669.472667][ T2244] pagetables 77824 [ 2669.472667][ T2244] sec_pagetables 0 [ 2669.472667][ T2244] percpu 4839136 [ 2669.472667][ T2244] sock 0 [ 2669.472667][ T2244] vmalloc 0 [ 2669.472667][ T2244] shmem 483328 [ 2669.472667][ T2244] zswap 0 [ 2669.472667][ T2244] zswapped 0 [ 2669.472667][ T2244] file_mapped 471040 [ 2669.472667][ T2244] file_dirty 0 [ 2669.472667][ T2244] file_writeback 0 [ 2669.472667][ T2244] swapcached 0 [ 2669.472667][ T2244] anon_thp 0 [ 2669.472667][ T2244] file_thp 0 [ 2669.472667][ T2244] shmem_thp 0 [ 2669.472667][ T2244] inactive_anon 241664 [ 2669.472667][ T2244] active_anon 380928 [ 2669.472667][ T2244] inactive_file 0 [ 2669.472667][ T2244] active_file 0 [ 2669.472667][ T2244] unevictable 0 [ 2669.472667][ T2244] slab_reclaimable 16560 [ 2669.472667][ T2244] slab_unreclaimable 308906376 [ 2669.472733][ T2244] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2244,uid=0 [ 2669.472862][ T2244] Memory cgroup out of memory: Killed process 2244 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2669.833178][ T2254] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 08:46:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e3a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:18 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3203]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x1f000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2670.031162][ T2254] CPU: 1 PID: 2254 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2670.033419][ T2246] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2670.039799][ T2254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2670.039819][ T2254] Call Trace: [ 2670.039827][ T2254] [ 2670.039836][ T2254] dump_stack_lvl+0xd1/0x138 [ 2670.039873][ T2254] dump_header+0x10b/0x85f [ 2670.073270][ T2254] oom_kill_process.cold+0x10/0x15 [ 2670.078444][ T2254] out_of_memory+0x35c/0x14a0 [ 2670.083188][ T2254] ? find_held_lock+0x2d/0x110 [ 2670.088015][ T2254] ? oom_killer_disable+0x280/0x280 [ 2670.093281][ T2254] ? find_held_lock+0x2d/0x110 [ 2670.098135][ T2254] mem_cgroup_out_of_memory+0x206/0x270 [ 2670.103851][ T2254] ? mem_cgroup_margin+0x130/0x130 [ 2670.109017][ T2254] ? lock_downgrade+0x6e0/0x6e0 [ 2670.113931][ T2254] try_charge_memcg+0xefb/0x12f0 [ 2670.118920][ T2254] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2670.124945][ T2254] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2670.130721][ T2254] ? lock_downgrade+0x6e0/0x6e0 [ 2670.135710][ T2254] ? lock_downgrade+0x6e0/0x6e0 [ 2670.135774][ T2268] set_target_v0_checkentry: 7 callbacks suppressed [ 2670.135791][ T2268] Cannot find add_set index 0 as target [ 2670.140583][ T2254] ? rcu_read_unlock+0x9/0x60 [ 2670.140645][ T2254] obj_cgroup_charge+0x2af/0x5e0 [ 2670.140678][ T2254] ? copy_process+0x3aa/0x7520 [ 2670.165385][ T2272] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2670.167063][ T2254] kmem_cache_alloc_node+0xb7/0x460 08:46:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb6030000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2670.167106][ T2254] copy_process+0x3aa/0x7520 [ 2670.185110][ T2254] ? __lock_acquire+0xbc3/0x56d0 [ 2670.190115][ T2254] ? __cleanup_sighand+0xb0/0xb0 [ 2670.195106][ T2254] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2670.201144][ T2254] ? psi_memstall_leave+0x174/0x250 [ 2670.206407][ T2254] kernel_clone+0xeb/0x990 [ 2670.210873][ T2254] ? create_io_thread+0xf0/0xf0 [ 2670.215768][ T2254] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2670.222060][ T2254] ? lock_downgrade+0x6e0/0x6e0 [ 2670.226958][ T2254] __do_sys_clone+0xba/0x100 [ 2670.231589][ T2254] ? kernel_clone+0x990/0x990 [ 2670.236334][ T2254] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2670.242281][ T2254] do_syscall_64+0x39/0xb0 [ 2670.246755][ T2254] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2670.252691][ T2254] RIP: 0033:0x7fe5bee8d4f1 [ 2670.257141][ T2254] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2670.276791][ T2254] RSP: 002b:00007fffbb0afe68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2670.285244][ T2254] RAX: ffffffffffffffda RBX: 00007fe5bfb8d700 RCX: 00007fe5bee8d4f1 [ 2670.293244][ T2254] RDX: 00007fe5bfb8d9d0 RSI: 00007fe5bfb8d2f0 RDI: 00000000003d0f00 [ 2670.301255][ T2254] RBP: 00007fffbb0b00b0 R08: 00007fe5bfb8d700 R09: 00007fe5bfb8d700 [ 2670.309258][ T2254] R10: 00007fe5bfb8d9d0 R11: 0000000000000206 R12: 00007fffbb0aff1e [ 2670.317258][ T2254] R13: 00007fffbb0aff1f R14: 00007fe5bfb8d300 R15: 0000000000022000 [ 2670.325279][ T2254] 08:46:19 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:19 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3602]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2670.478936][ T2280] Cannot find add_set index 0 as target 08:46:19 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x340]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2670.632321][ T2254] memory: usage 307124kB, limit 307200kB, failcnt 5329 [ 2670.670306][ T2254] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2670.675351][ T2286] Cannot find add_set index 0 as target [ 2670.685822][ T2287] Cannot find add_set index 0 as target [ 2670.699159][ T2254] Memory cgroup stats for /syz4: [ 2670.699319][ T2254] anon 94208 [ 2670.699319][ T2254] file 253952 [ 2670.699319][ T2254] kernel 314146816 [ 2670.699319][ T2254] kernel_stack 32768 [ 2670.699319][ T2254] pagetables 69632 [ 2670.699319][ T2254] sec_pagetables 0 [ 2670.699319][ T2254] percpu 4849792 [ 2670.699319][ T2254] sock 0 08:46:19 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3e03]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2670.699319][ T2254] vmalloc 0 [ 2670.699319][ T2254] shmem 253952 [ 2670.699319][ T2254] zswap 0 [ 2670.699319][ T2254] zswapped 0 [ 2670.699319][ T2254] file_mapped 253952 [ 2670.699319][ T2254] file_dirty 0 [ 2670.699319][ T2254] file_writeback 0 [ 2670.699319][ T2254] swapcached 0 [ 2670.699319][ T2254] anon_thp 0 [ 2670.699319][ T2254] file_thp 0 [ 2670.699319][ T2254] shmem_thp 0 [ 2670.699319][ T2254] inactive_anon 163840 [ 2670.699319][ T2254] active_anon 184320 [ 2670.699319][ T2254] inactive_file 0 [ 2670.699319][ T2254] active_file 0 08:46:19 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x354]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2670.699319][ T2254] unevictable 0 [ 2670.699319][ T2254] slab_reclaimable 66720 [ 2670.699319][ T2254] slab_unreclaimable 309093040 [ 2670.884790][ T2295] Cannot find add_set index 0 as target [ 2670.900461][ T2294] Cannot find add_set index 0 as target 08:46:19 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4401]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2670.914292][ T2254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2254,uid=0 [ 2671.020415][ T2254] Memory cgroup out of memory: Killed process 2254 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:46:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:19 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x360]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2671.109062][ T2298] Cannot find add_set index 0 as target [ 2671.144182][ T2274] device bridge1373 entered promiscuous mode [ 2671.212935][ T2302] Cannot find add_set index 0 as target [ 2671.225249][ T2275] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2671.281546][ T2275] CPU: 0 PID: 2275 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2671.290209][ T2275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2671.300299][ T2275] Call Trace: [ 2671.303639][ T2275] [ 2671.306590][ T2275] dump_stack_lvl+0xd1/0x138 [ 2671.311224][ T2275] dump_header+0x10b/0x85f [ 2671.315691][ T2275] oom_kill_process.cold+0x10/0x15 [ 2671.320855][ T2275] out_of_memory+0x35c/0x14a0 [ 2671.325578][ T2275] ? find_held_lock+0x2d/0x110 [ 2671.330390][ T2275] ? oom_killer_disable+0x280/0x280 [ 2671.335633][ T2275] ? find_held_lock+0x2d/0x110 [ 2671.340445][ T2275] mem_cgroup_out_of_memory+0x206/0x270 [ 2671.346040][ T2275] ? mem_cgroup_margin+0x130/0x130 [ 2671.351223][ T2275] ? lock_downgrade+0x6e0/0x6e0 [ 2671.356129][ T2275] try_charge_memcg+0xefb/0x12f0 [ 2671.361112][ T2275] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2671.367165][ T2275] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2671.372932][ T2275] ? lock_downgrade+0x6e0/0x6e0 [ 2671.377821][ T2275] ? lock_downgrade+0x6e0/0x6e0 [ 2671.382716][ T2275] ? rcu_read_unlock+0x9/0x60 [ 2671.387455][ T2275] obj_cgroup_charge+0x2af/0x5e0 [ 2671.392448][ T2275] ? copy_process+0x3aa/0x7520 [ 2671.397248][ T2275] kmem_cache_alloc_node+0xb7/0x460 [ 2671.402499][ T2275] copy_process+0x3aa/0x7520 [ 2671.407138][ T2275] ? find_held_lock+0x2d/0x110 [ 2671.411970][ T2275] ? __cleanup_sighand+0xb0/0xb0 [ 2671.416943][ T2275] ? lock_downgrade+0x6e0/0x6e0 [ 2671.421823][ T2275] ? folio_flags.constprop.0+0x53/0x150 [ 2671.427423][ T2275] ? folio_add_lru+0x37b/0x680 [ 2671.432235][ T2275] kernel_clone+0xeb/0x990 [ 2671.436716][ T2275] ? create_io_thread+0xf0/0xf0 [ 2671.441621][ T2275] ? find_held_lock+0x2d/0x110 [ 2671.446442][ T2275] __do_sys_clone+0xba/0x100 [ 2671.451064][ T2275] ? kernel_clone+0x990/0x990 [ 2671.455795][ T2275] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2671.461756][ T2275] do_syscall_64+0x39/0xb0 [ 2671.466227][ T2275] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2671.472180][ T2275] RIP: 0033:0x7f5b1fc8d4f1 [ 2671.476627][ T2275] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2671.496271][ T2275] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2671.504723][ T2275] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2671.512731][ T2275] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2671.520733][ T2275] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2671.528728][ T2275] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2671.536738][ T2275] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2671.544765][ T2275] [ 2671.709239][ T2277] bond1187: (slave vlan1049): making interface the new active one 08:46:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e3b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x32030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:20 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4601]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2671.776413][ T2277] bond1187: (slave vlan1049): Enslaving as an active interface with an up link [ 2671.860230][ T2313] Cannot find add_set index 0 as target [ 2671.909959][ T2316] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2671.999619][ T2275] memory: usage 307184kB, limit 307200kB, failcnt 33053 [ 2672.019612][ T2275] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2672.068973][ T2275] Memory cgroup stats for /syz5: [ 2672.069206][ T2275] anon 143360 [ 2672.069206][ T2275] file 483328 [ 2672.069206][ T2275] kernel 313929728 [ 2672.069206][ T2275] kernel_stack 65536 [ 2672.069206][ T2275] pagetables 77824 [ 2672.069206][ T2275] sec_pagetables 0 [ 2672.069206][ T2275] percpu 4839072 [ 2672.069206][ T2275] sock 0 [ 2672.069206][ T2275] vmalloc 0 [ 2672.069206][ T2275] shmem 483328 [ 2672.069206][ T2275] zswap 0 [ 2672.069206][ T2275] zswapped 0 [ 2672.069206][ T2275] file_mapped 471040 [ 2672.069206][ T2275] file_dirty 0 [ 2672.069206][ T2275] file_writeback 0 [ 2672.069206][ T2275] swapcached 0 [ 2672.069206][ T2275] anon_thp 0 [ 2672.069206][ T2275] file_thp 0 [ 2672.069206][ T2275] shmem_thp 0 [ 2672.069206][ T2275] inactive_anon 245760 [ 2672.069206][ T2275] active_anon 380928 [ 2672.069206][ T2275] inactive_file 0 [ 2672.069206][ T2275] active_file 0 [ 2672.069206][ T2275] unevictable 0 [ 2672.069206][ T2275] slab_reclaimable 16560 [ 2672.069206][ T2275] slab_unreclaimable 308894592 [ 2672.103474][ T2281] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2672.243009][ T2275] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2275,uid=0 [ 2672.288258][ T2275] Memory cgroup out of memory: Killed process 2275 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2672.383414][ T2303] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2672.412789][ T2303] CPU: 0 PID: 2303 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2672.421443][ T2303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2672.431540][ T2303] Call Trace: [ 2672.434849][ T2303] [ 2672.437824][ T2303] dump_stack_lvl+0xd1/0x138 [ 2672.442459][ T2303] dump_header+0x10b/0x85f [ 2672.447016][ T2303] oom_kill_process.cold+0x10/0x15 [ 2672.452181][ T2303] out_of_memory+0x35c/0x14a0 [ 2672.457015][ T2303] ? find_held_lock+0x2d/0x110 [ 2672.461823][ T2303] ? oom_killer_disable+0x280/0x280 [ 2672.467064][ T2303] ? find_held_lock+0x2d/0x110 [ 2672.471885][ T2303] mem_cgroup_out_of_memory+0x206/0x270 [ 2672.477488][ T2303] ? mem_cgroup_margin+0x130/0x130 [ 2672.479708][ T2319] device bridge1374 entered promiscuous mode [ 2672.482626][ T2303] ? lock_downgrade+0x6e0/0x6e0 [ 2672.482676][ T2303] try_charge_memcg+0xefb/0x12f0 [ 2672.498518][ T2303] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2672.504549][ T2303] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2672.510331][ T2303] ? lock_downgrade+0x6e0/0x6e0 [ 2672.515228][ T2303] ? lock_downgrade+0x6e0/0x6e0 [ 2672.520152][ T2303] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2672.525749][ T2303] __alloc_pages+0x1f3/0x5b0 [ 2672.530408][ T2303] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2672.537218][ T2303] ? find_held_lock+0x2d/0x110 [ 2672.542044][ T2303] alloc_pages+0x1aa/0x270 [ 2672.546505][ T2303] pte_alloc_one+0x1a/0x230 [ 2672.551053][ T2303] __pte_alloc+0x6d/0x260 [ 2672.555429][ T2303] ? pmd_install+0x160/0x160 [ 2672.560058][ T2303] ? hugepage_vma_check+0x24e/0x830 [ 2672.565298][ T2303] ? _raw_spin_unlock+0x28/0x40 [ 2672.570190][ T2303] ? __pmd_alloc+0x30c/0x5d0 [ 2672.574828][ T2303] __handle_mm_fault+0x38cf/0x3c90 [ 2672.579995][ T2303] ? vm_iomap_memory+0x190/0x190 [ 2672.585010][ T2303] handle_mm_fault+0x1b6/0x850 [ 2672.589825][ T2303] do_user_addr_fault+0x475/0x1210 [ 2672.594980][ T2303] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2672.600582][ T2303] exc_page_fault+0x98/0x170 [ 2672.605221][ T2303] asm_exc_page_fault+0x26/0x30 [ 2672.610106][ T2303] RIP: 0033:0x7fe5bee2bd49 [ 2672.614555][ T2303] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2672.634204][ T2303] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2672.640316][ T2303] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2672.648326][ T2303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2672.656331][ T2303] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2672.664338][ T2303] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000028c6b7 [ 2672.672438][ T2303] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2672.680464][ T2303] 08:46:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xbc000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:21 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x380]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:21 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4603]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x3f000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2672.792816][ T2331] Cannot find add_set index 0 as target 08:46:21 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4800]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:21 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x384]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2672.919832][ T2303] memory: usage 307200kB, limit 307200kB, failcnt 5432 [ 2672.932842][ T2303] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2673.022958][ T2303] Memory cgroup stats for /syz4: [ 2673.023170][ T2303] anon 139264 [ 2673.023170][ T2303] file 253952 [ 2673.023170][ T2303] kernel 314179584 [ 2673.023170][ T2303] kernel_stack 65536 [ 2673.023170][ T2303] pagetables 73728 [ 2673.023170][ T2303] sec_pagetables 0 [ 2673.023170][ T2303] percpu 4849792 [ 2673.023170][ T2303] sock 0 [ 2673.023170][ T2303] vmalloc 0 [ 2673.023170][ T2303] shmem 253952 [ 2673.023170][ T2303] zswap 0 [ 2673.023170][ T2303] zswapped 0 [ 2673.023170][ T2303] file_mapped 253952 [ 2673.023170][ T2303] file_dirty 0 [ 2673.023170][ T2303] file_writeback 0 [ 2673.023170][ T2303] swapcached 0 [ 2673.023170][ T2303] anon_thp 0 [ 2673.023170][ T2303] file_thp 0 [ 2673.023170][ T2303] shmem_thp 0 [ 2673.023170][ T2303] inactive_anon 208896 [ 2673.023170][ T2303] active_anon 184320 [ 2673.023170][ T2303] inactive_file 0 [ 2673.023170][ T2303] active_file 0 [ 2673.023170][ T2303] unevictable 0 [ 2673.023170][ T2303] slab_reclaimable 55648 [ 2673.023170][ T2303] slab_unreclaimable 309100048 08:46:21 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x386]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2673.029299][ T2325] bond1188: (slave vlan1050): making interface the new active one [ 2673.072784][ T2325] bond1188: (slave vlan1050): Enslaving as an active interface with an up link [ 2673.384118][ T2303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2303,uid=0 [ 2673.469989][ T2303] Memory cgroup out of memory: Killed process 2303 (syz-executor.4) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2673.503214][ T2330] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:46:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x63050000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:22 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4a02]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x40000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3c8]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e3c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2673.654094][ T2330] CPU: 1 PID: 2330 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2673.662765][ T2330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2673.673120][ T2330] Call Trace: [ 2673.676430][ T2330] [ 2673.679392][ T2330] dump_stack_lvl+0xd1/0x138 [ 2673.683910][ T2360] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2673.684006][ T2330] dump_header+0x10b/0x85f [ 2673.696608][ T2330] oom_kill_process.cold+0x10/0x15 [ 2673.701773][ T2330] out_of_memory+0x35c/0x14a0 [ 2673.706510][ T2330] ? oom_killer_disable+0x280/0x280 [ 2673.711775][ T2330] ? find_held_lock+0x2d/0x110 [ 2673.716591][ T2330] mem_cgroup_out_of_memory+0x206/0x270 [ 2673.722193][ T2330] ? mem_cgroup_margin+0x130/0x130 [ 2673.727350][ T2330] ? lock_downgrade+0x6e0/0x6e0 [ 2673.732251][ T2330] try_charge_memcg+0xefb/0x12f0 [ 2673.737326][ T2330] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2673.743361][ T2330] ? lock_downgrade+0x6e0/0x6e0 [ 2673.748269][ T2330] charge_memcg+0x90/0x3b0 [ 2673.752725][ T2330] __mem_cgroup_charge+0x2b/0x90 [ 2673.757767][ T2330] do_wp_page+0x7ec/0x3370 [ 2673.762249][ T2330] ? lock_release+0x810/0x810 [ 2673.766968][ T2330] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2673.772413][ T2330] ? do_raw_spin_lock+0x124/0x2b0 [ 2673.777478][ T2330] ? rwlock_bug.part.0+0x90/0x90 [ 2673.782463][ T2330] ? lock_chain_count+0x20/0x20 [ 2673.787396][ T2330] __handle_mm_fault+0x1f58/0x3c90 [ 2673.792566][ T2330] ? vm_iomap_memory+0x190/0x190 [ 2673.797581][ T2330] handle_mm_fault+0x1b6/0x850 [ 2673.802925][ T2330] do_user_addr_fault+0x475/0x1210 [ 2673.808084][ T2330] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2673.813695][ T2330] exc_page_fault+0x98/0x170 [ 2673.818328][ T2330] asm_exc_page_fault+0x26/0x30 [ 2673.823218][ T2330] RIP: 0033:0x7f5b1fc39570 [ 2673.827670][ T2330] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2673.847320][ T2330] RSP: 002b:00007fff16a81ff0 EFLAGS: 00010246 [ 2673.853424][ T2330] RAX: 000000002201f9cf RBX: 00007f5b1fdac0e8 RCX: 0000001b31e20000 [ 2673.861432][ T2330] RDX: 0000000000000000 RSI: 0000001b31e20018 RDI: 000000000c5bda87 [ 2673.869446][ T2330] RBP: 000000002201f9cf R08: 00000000000019cf R09: 000000002201f9d3 [ 2673.877454][ T2330] R10: 00007fff16a821b0 R11: 0000000000000246 R12: 00007f5b1fda0000 [ 2673.885470][ T2330] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87bf38fc [ 2673.893478][ T2330] ? __sys_socket+0x7c/0x250 [ 2673.898138][ T2330] [ 2674.072845][ T2365] device bridge1375 entered promiscuous mode [ 2674.120151][ T2330] memory: usage 307200kB, limit 307200kB, failcnt 33150 [ 2674.133430][ T2330] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2674.229229][ T2330] Memory cgroup stats for /syz5: [ 2674.229465][ T2330] anon 110592 [ 2674.229465][ T2330] file 483328 [ 2674.229465][ T2330] kernel 313978880 [ 2674.229465][ T2330] kernel_stack 98304 [ 2674.229465][ T2330] pagetables 69632 [ 2674.229465][ T2330] sec_pagetables 0 [ 2674.229465][ T2330] percpu 4839136 [ 2674.229465][ T2330] sock 0 [ 2674.229465][ T2330] vmalloc 0 [ 2674.229465][ T2330] shmem 483328 [ 2674.229465][ T2330] zswap 0 [ 2674.229465][ T2330] zswapped 0 [ 2674.229465][ T2330] file_mapped 471040 [ 2674.229465][ T2330] file_dirty 0 [ 2674.229465][ T2330] file_writeback 0 [ 2674.229465][ T2330] swapcached 0 [ 2674.229465][ T2330] anon_thp 0 [ 2674.229465][ T2330] file_thp 0 [ 2674.229465][ T2330] shmem_thp 0 [ 2674.229465][ T2330] inactive_anon 212992 [ 2674.229465][ T2330] active_anon 380928 [ 2674.229465][ T2330] inactive_file 0 [ 2674.229465][ T2330] active_file 0 [ 2674.229465][ T2330] unevictable 0 [ 2674.229465][ T2330] slab_reclaimable 16560 [ 2674.229465][ T2330] slab_unreclaimable 308913800 [ 2674.404108][ T2330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2330,uid=0 [ 2674.449359][ T2330] Memory cgroup out of memory: Killed process 2330 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2674.503943][ T2362] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2674.539907][ T2362] CPU: 1 PID: 2362 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2674.548558][ T2362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2674.558624][ T2362] Call Trace: [ 2674.561915][ T2362] [ 2674.564879][ T2362] dump_stack_lvl+0xd1/0x138 [ 2674.569470][ T2362] dump_header+0x10b/0x85f [ 2674.573904][ T2362] oom_kill_process.cold+0x10/0x15 [ 2674.579015][ T2362] out_of_memory+0x35c/0x14a0 [ 2674.583713][ T2362] ? find_held_lock+0x2d/0x110 [ 2674.588499][ T2362] ? oom_killer_disable+0x280/0x280 [ 2674.593753][ T2362] ? find_held_lock+0x2d/0x110 [ 2674.598573][ T2362] mem_cgroup_out_of_memory+0x206/0x270 [ 2674.604264][ T2362] ? mem_cgroup_margin+0x130/0x130 [ 2674.609419][ T2362] ? lock_downgrade+0x6e0/0x6e0 [ 2674.614300][ T2362] try_charge_memcg+0xefb/0x12f0 [ 2674.619264][ T2362] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2674.625241][ T2362] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2674.630963][ T2362] ? lock_downgrade+0x6e0/0x6e0 [ 2674.635841][ T2362] ? lock_downgrade+0x6e0/0x6e0 [ 2674.640724][ T2362] ? rcu_read_unlock+0x9/0x60 [ 2674.645466][ T2362] obj_cgroup_charge+0x2af/0x5e0 [ 2674.650460][ T2362] ? alloc_pid+0xd3/0xd70 [ 2674.654845][ T2362] kmem_cache_alloc+0xb5/0x430 [ 2674.659651][ T2362] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2674.665261][ T2362] alloc_pid+0xd3/0xd70 [ 2674.669447][ T2362] ? copy_thread+0x5e0/0xa00 [ 2674.674044][ T2362] ? copy_namespaces+0x1e3/0x4a0 [ 2674.678980][ T2362] copy_process+0x4821/0x7520 [ 2674.683668][ T2362] ? __cleanup_sighand+0xb0/0xb0 [ 2674.688624][ T2362] ? lock_downgrade+0x6e0/0x6e0 [ 2674.693525][ T2362] ? folio_add_lru+0x37b/0x680 [ 2674.698339][ T2362] kernel_clone+0xeb/0x990 [ 2674.702803][ T2362] ? create_io_thread+0xf0/0xf0 [ 2674.707700][ T2362] ? find_held_lock+0x2d/0x110 [ 2674.712517][ T2362] __do_sys_clone+0xba/0x100 [ 2674.717127][ T2362] ? kernel_clone+0x990/0x990 [ 2674.721807][ T2362] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2674.727717][ T2362] do_syscall_64+0x39/0xb0 [ 2674.732135][ T2362] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2674.738044][ T2362] RIP: 0033:0x7fe5bee8d4f1 [ 2674.742493][ T2362] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2674.762174][ T2362] RSP: 002b:00007fffbb0afe68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2674.770618][ T2362] RAX: ffffffffffffffda RBX: 00007fe5bfb6c700 RCX: 00007fe5bee8d4f1 [ 2674.778612][ T2362] RDX: 00007fe5bfb6c9d0 RSI: 00007fe5bfb6c2f0 RDI: 00000000003d0f00 [ 2674.786598][ T2362] RBP: 00007fffbb0b00b0 R08: 00007fe5bfb6c700 R09: 00007fe5bfb6c700 [ 2674.794607][ T2362] R10: 00007fe5bfb6c9d0 R11: 0000000000000206 R12: 00007fffbb0aff1e 08:46:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xbc030000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4c00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0xa8030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e3d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2674.802618][ T2362] R13: 00007fffbb0aff1f R14: 00007fe5bfb6c300 R15: 0000000000022000 [ 2674.810660][ T2362] 08:46:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3d8]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:23 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4c02]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2674.964777][ T2362] memory: usage 307200kB, limit 307200kB, failcnt 5549 [ 2675.036842][ T2382] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2675.061837][ T2362] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2675.093447][ T2362] Memory cgroup stats for /syz4: [ 2675.093674][ T2362] anon 106496 [ 2675.093674][ T2362] file 253952 [ 2675.093674][ T2362] kernel 314212352 [ 2675.093674][ T2362] kernel_stack 98304 [ 2675.093674][ T2362] pagetables 69632 [ 2675.093674][ T2362] sec_pagetables 0 [ 2675.093674][ T2362] percpu 4849792 [ 2675.093674][ T2362] sock 0 [ 2675.093674][ T2362] vmalloc 0 [ 2675.093674][ T2362] shmem 253952 [ 2675.093674][ T2362] zswap 0 [ 2675.093674][ T2362] zswapped 0 [ 2675.093674][ T2362] file_mapped 253952 [ 2675.093674][ T2362] file_dirty 0 [ 2675.093674][ T2362] file_writeback 0 [ 2675.093674][ T2362] swapcached 0 [ 2675.093674][ T2362] anon_thp 0 [ 2675.093674][ T2362] file_thp 0 [ 2675.093674][ T2362] shmem_thp 0 [ 2675.093674][ T2362] inactive_anon 176128 [ 2675.093674][ T2362] active_anon 184320 [ 2675.093674][ T2362] inactive_file 0 [ 2675.093674][ T2362] active_file 0 [ 2675.093674][ T2362] unevictable 0 [ 2675.093674][ T2362] slab_reclaimable 53720 [ 2675.093674][ T2362] slab_unreclaimable 309107760 [ 2675.199452][ T2384] set_target_v0_checkentry: 8 callbacks suppressed [ 2675.199475][ T2384] Cannot find add_set index 0 as target [ 2675.261795][ T2362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2362,uid=0 [ 2675.292607][ T2388] Cannot find add_set index 0 as target [ 2675.359600][ T2362] Memory cgroup out of memory: Killed process 2362 (syz-executor.4) total-vm:54672kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2675.420545][ T2385] device bridge1376 entered promiscuous mode 08:46:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x63370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:24 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3e2]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x5002]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0xb8020000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2675.523481][ T2395] Cannot find add_set index 0 as target [ 2675.541505][ T2396] Cannot find add_set index 0 as target 08:46:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x5003]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2675.679527][ T2404] Cannot find add_set index 0 as target [ 2675.688615][ T2371] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2675.688658][ T2371] CPU: 0 PID: 2371 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2675.688682][ T2371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2675.688696][ T2371] Call Trace: [ 2675.688704][ T2371] [ 2675.688715][ T2371] dump_stack_lvl+0xd1/0x138 [ 2675.688752][ T2371] dump_header+0x10b/0x85f [ 2675.688793][ T2371] oom_kill_process.cold+0x10/0x15 [ 2675.688831][ T2371] out_of_memory+0x35c/0x14a0 [ 2675.688874][ T2371] ? find_held_lock+0x2d/0x110 [ 2675.688910][ T2371] ? oom_killer_disable+0x280/0x280 [ 2675.688950][ T2371] ? find_held_lock+0x2d/0x110 [ 2675.688990][ T2371] mem_cgroup_out_of_memory+0x206/0x270 [ 2675.689028][ T2371] ? mem_cgroup_margin+0x130/0x130 [ 2675.689060][ T2371] ? lock_downgrade+0x6e0/0x6e0 [ 2675.689101][ T2371] try_charge_memcg+0xefb/0x12f0 [ 2675.689133][ T2371] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2675.689161][ T2371] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2675.689197][ T2371] ? lock_downgrade+0x6e0/0x6e0 [ 2675.689224][ T2371] ? lock_downgrade+0x6e0/0x6e0 [ 2675.689247][ T2371] ? rcu_read_unlock+0x9/0x60 [ 2675.689292][ T2371] obj_cgroup_charge+0x2af/0x5e0 [ 2675.689328][ T2371] ? copy_process+0x3aa/0x7520 [ 2675.689354][ T2371] kmem_cache_alloc_node+0xb7/0x460 [ 2675.689386][ T2371] copy_process+0x3aa/0x7520 [ 2675.689416][ T2371] ? __lock_acquire+0xbc3/0x56d0 [ 2675.689454][ T2371] ? __cleanup_sighand+0xb0/0xb0 [ 2675.689481][ T2371] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2675.689510][ T2371] ? psi_memstall_leave+0x174/0x250 [ 2675.689551][ T2371] kernel_clone+0xeb/0x990 [ 2675.689582][ T2371] ? create_io_thread+0xf0/0xf0 [ 2675.689613][ T2371] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2675.689656][ T2371] ? lock_downgrade+0x6e0/0x6e0 [ 2675.689694][ T2371] __do_sys_clone+0xba/0x100 [ 2675.689721][ T2371] ? kernel_clone+0x990/0x990 [ 2675.689765][ T2371] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2675.689799][ T2371] do_syscall_64+0x39/0xb0 [ 2675.689832][ T2371] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2675.689858][ T2371] RIP: 0033:0x7f5b1fc8d4f1 [ 2675.689879][ T2371] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2675.689901][ T2371] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2675.689927][ T2371] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2675.689942][ T2371] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2675.689958][ T2371] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2675.689974][ T2371] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2675.689990][ T2371] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2675.690026][ T2371] [ 2675.690068][ T2371] memory: usage 307200kB, limit 307200kB, failcnt 33262 [ 2675.690083][ T2371] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2675.690097][ T2371] Memory cgroup stats for /syz5 [ 2675.872466][ T2390] bond1190: (slave vlan1051): making interface the new active one [ 2676.078335][ T2371] : [ 2676.078546][ T2371] anon 143360 [ 2676.078546][ T2371] file 483328 [ 2676.078546][ T2371] kernel 313946112 [ 2676.078546][ T2371] kernel_stack 65536 [ 2676.078546][ T2371] pagetables 77824 [ 2676.078546][ T2371] sec_pagetables 0 [ 2676.078546][ T2371] percpu 4839136 [ 2676.078546][ T2371] sock 0 [ 2676.078546][ T2371] vmalloc 0 [ 2676.078546][ T2371] shmem 483328 [ 2676.078546][ T2371] zswap 0 [ 2676.078546][ T2371] zswapped 0 [ 2676.078546][ T2371] file_mapped 471040 [ 2676.078546][ T2371] file_dirty 0 [ 2676.078546][ T2371] file_writeback 0 [ 2676.078546][ T2371] swapcached 0 [ 2676.078546][ T2371] anon_thp 0 [ 2676.078546][ T2371] file_thp 0 [ 2676.078546][ T2371] shmem_thp 0 [ 2676.078546][ T2371] inactive_anon 245760 [ 2676.078546][ T2371] active_anon 380928 [ 2676.078546][ T2371] inactive_file 0 [ 2676.078546][ T2371] active_file 0 [ 2676.078546][ T2371] unevictable 0 [ 2676.078546][ T2371] slab_reclaimable 16560 [ 2676.078546][ T2371] slab_unreclaimable 308906376 [ 2676.121720][ T2390] bond1190: (slave vlan1051): Enslaving as an active interface with an up link [ 2676.242296][ T2371] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2371,uid=0 [ 2676.271017][ T2371] Memory cgroup out of memory: Killed process 2371 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2676.320620][ T2401] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2676.366690][ T2378] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2676.377870][ T2401] CPU: 1 PID: 2401 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2676.377904][ T2401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2676.377919][ T2401] Call Trace: [ 2676.377928][ T2401] [ 2676.377940][ T2401] dump_stack_lvl+0xd1/0x138 [ 2676.377979][ T2401] dump_header+0x10b/0x85f [ 2676.378025][ T2401] oom_kill_process.cold+0x10/0x15 [ 2676.378065][ T2401] out_of_memory+0x35c/0x14a0 [ 2676.378109][ T2401] ? find_held_lock+0x2d/0x110 [ 2676.378145][ T2401] ? oom_killer_disable+0x280/0x280 [ 2676.378186][ T2401] ? find_held_lock+0x2d/0x110 [ 2676.378224][ T2401] mem_cgroup_out_of_memory+0x206/0x270 [ 2676.378262][ T2401] ? mem_cgroup_margin+0x130/0x130 [ 2676.378295][ T2401] ? lock_downgrade+0x6e0/0x6e0 [ 2676.378337][ T2401] try_charge_memcg+0xefb/0x12f0 [ 2676.378373][ T2401] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2676.378399][ T2401] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2676.378437][ T2401] ? lock_downgrade+0x6e0/0x6e0 [ 2676.378464][ T2401] ? lock_downgrade+0x6e0/0x6e0 [ 2676.378505][ T2401] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2676.378537][ T2401] __alloc_pages+0x1f3/0x5b0 [ 2676.378568][ T2401] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2676.378627][ T2401] alloc_pages+0x1aa/0x270 [ 2676.378657][ T2401] __pmd_alloc+0x3f/0x5d0 [ 2676.378695][ T2401] __handle_mm_fault+0x932/0x3c90 [ 2676.378737][ T2401] ? vm_iomap_memory+0x190/0x190 [ 2676.378799][ T2401] handle_mm_fault+0x1b6/0x850 [ 2676.378839][ T2401] do_user_addr_fault+0x475/0x1210 [ 2676.378873][ T2401] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2676.378919][ T2401] exc_page_fault+0x98/0x170 [ 2676.378948][ T2401] asm_exc_page_fault+0x26/0x30 [ 2676.378974][ T2401] RIP: 0033:0x7fe5bee2bd49 [ 2676.378994][ T2401] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2676.379022][ T2401] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2676.379045][ T2401] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2676.379061][ T2401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2676.379075][ T2401] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2676.379090][ T2401] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000028d62a [ 2676.379106][ T2401] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2676.379144][ T2401] [ 2676.379242][ T2401] memory: usage 307200kB, limit 307200kB, failcnt 5668 [ 2676.379259][ T2401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2676.379274][ T2401] Memory cgroup stats for /syz4: [ 2676.379474][ T2401] anon 139264 [ 2676.379474][ T2401] file 253952 [ 2676.379474][ T2401] kernel 314179584 [ 2676.379474][ T2401] kernel_stack 65536 [ 2676.379474][ T2401] pagetables 69632 [ 2676.379474][ T2401] sec_pagetables 0 [ 2676.379474][ T2401] percpu 4849792 [ 2676.379474][ T2401] sock 0 [ 2676.379474][ T2401] vmalloc 0 [ 2676.379474][ T2401] shmem 253952 [ 2676.379474][ T2401] zswap 0 [ 2676.379474][ T2401] zswapped 0 [ 2676.379474][ T2401] file_mapped 253952 [ 2676.379474][ T2401] file_dirty 0 [ 2676.379474][ T2401] file_writeback 0 [ 2676.379474][ T2401] swapcached 0 [ 2676.379474][ T2401] anon_thp 0 [ 2676.379474][ T2401] file_thp 0 [ 2676.379474][ T2401] shmem_thp 0 [ 2676.379474][ T2401] inactive_anon 172032 [ 2676.379474][ T2401] active_anon 184320 [ 2676.379474][ T2401] inactive_file 0 [ 2676.379474][ T2401] active_file 0 [ 2676.379474][ T2401] unevictable 0 [ 2676.379474][ T2401] slab_reclaimable 55648 [ 2676.379474][ T2401] slab_unreclaimable 309100048 [ 2676.379536][ T2401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2401,uid=0 [ 2676.379709][ T2401] Memory cgroup out of memory: Killed process 2401 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:46:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc0010000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3e4]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:25 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x6000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0xcaef0000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e3e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x64370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2676.909761][ T2410] Cannot find add_set index 0 as target [ 2676.937926][ T2417] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2676.968900][ T2408] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:46:25 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x6402]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2677.033755][ T2419] Cannot find add_set index 0 as target [ 2677.061392][ T2408] CPU: 1 PID: 2408 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2677.070061][ T2408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2677.080141][ T2408] Call Trace: [ 2677.083441][ T2408] [ 2677.086407][ T2408] dump_stack_lvl+0xd1/0x138 [ 2677.091043][ T2408] dump_header+0x10b/0x85f [ 2677.095514][ T2408] oom_kill_process.cold+0x10/0x15 [ 2677.100681][ T2408] out_of_memory+0x35c/0x14a0 [ 2677.105418][ T2408] ? find_held_lock+0x2d/0x110 [ 2677.110238][ T2408] ? oom_killer_disable+0x280/0x280 [ 2677.115495][ T2408] ? find_held_lock+0x2d/0x110 [ 2677.120321][ T2408] mem_cgroup_out_of_memory+0x206/0x270 [ 2677.125929][ T2408] ? mem_cgroup_margin+0x130/0x130 [ 2677.131094][ T2408] ? lock_downgrade+0x6e0/0x6e0 [ 2677.136007][ T2408] try_charge_memcg+0xefb/0x12f0 [ 2677.141085][ T2408] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2677.147122][ T2408] ? lock_downgrade+0x6e0/0x6e0 [ 2677.152030][ T2408] charge_memcg+0x90/0x3b0 [ 2677.156489][ T2408] __mem_cgroup_charge+0x2b/0x90 [ 2677.161487][ T2408] do_wp_page+0x7ec/0x3370 [ 2677.165964][ T2408] ? lock_release+0x810/0x810 [ 2677.170681][ T2408] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2677.176124][ T2408] ? do_raw_spin_lock+0x124/0x2b0 [ 2677.181192][ T2408] ? rwlock_bug.part.0+0x90/0x90 [ 2677.186173][ T2408] ? lock_chain_count+0x20/0x20 [ 2677.191069][ T2408] __handle_mm_fault+0x1f58/0x3c90 [ 2677.196239][ T2408] ? vm_iomap_memory+0x190/0x190 [ 2677.201246][ T2408] handle_mm_fault+0x1b6/0x850 [ 2677.203584][ T2426] Cannot find add_set index 0 as target [ 2677.206035][ T2408] do_user_addr_fault+0x475/0x1210 [ 2677.206076][ T2408] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2677.206116][ T2408] exc_page_fault+0x98/0x170 [ 2677.226942][ T2408] asm_exc_page_fault+0x26/0x30 [ 2677.231872][ T2408] RIP: 0033:0x7fe5bee39570 [ 2677.236328][ T2408] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2677.255969][ T2408] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 [ 2677.262069][ T2408] RAX: 00000000d0464f56 RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2677.270074][ T2408] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000c5bc2dd 08:46:26 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x6800]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2677.278082][ T2408] RBP: 00000000d0464f56 R08: 0000000000000f56 R09: 00000000d0464f5a [ 2677.286095][ T2408] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 [ 2677.294110][ T2408] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff87bf14ec [ 2677.302115][ T2408] ? __sock_create+0x7c/0x790 [ 2677.306900][ T2408] 08:46:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f4]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2677.377717][ T2429] Cannot find add_set index 0 as target [ 2677.458418][ T2408] memory: usage 307196kB, limit 307200kB, failcnt 5758 [ 2677.481871][ T2408] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2677.493607][ T2408] Memory cgroup stats for /syz4: [ 2677.499403][ T2408] anon 118784 [ 2677.499403][ T2408] file 253952 [ 2677.499403][ T2408] kernel 314187776 [ 2677.499403][ T2408] kernel_stack 65536 [ 2677.499403][ T2408] pagetables 69632 [ 2677.499403][ T2408] sec_pagetables 0 [ 2677.499403][ T2408] percpu 4849856 [ 2677.499403][ T2408] sock 0 [ 2677.499403][ T2408] vmalloc 0 [ 2677.499403][ T2408] shmem 253952 [ 2677.499403][ T2408] zswap 0 [ 2677.499403][ T2408] zswapped 0 [ 2677.499403][ T2408] file_mapped 253952 [ 2677.499403][ T2408] file_dirty 0 [ 2677.499403][ T2408] file_writeback 0 [ 2677.499403][ T2408] swapcached 0 [ 2677.499403][ T2408] anon_thp 0 [ 2677.499403][ T2408] file_thp 0 [ 2677.499403][ T2408] shmem_thp 0 [ 2677.499403][ T2408] inactive_anon 188416 [ 2677.499403][ T2408] active_anon 184320 [ 2677.499403][ T2408] inactive_file 0 [ 2677.499403][ T2408] active_file 0 [ 2677.499403][ T2408] unevictable 0 [ 2677.499403][ T2408] slab_reclaimable 53720 [ 2677.499403][ T2408] slab_unreclaimable 309111184 08:46:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0xd2030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2677.662314][ T2433] Cannot find add_set index 0 as target [ 2677.680140][ T2422] device bridge1377 entered promiscuous mode [ 2677.684243][ T2408] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2408,uid=0 [ 2677.786152][ T2408] Memory cgroup out of memory: Killed process 2408 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2677.932227][ T2427] bond1191: (slave vlan1052): making interface the new active one [ 2677.970247][ T2412] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2678.044310][ T2427] bond1191: (slave vlan1052): Enslaving as an active interface with an up link [ 2678.054770][ T2412] CPU: 1 PID: 2412 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2678.054802][ T2412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2678.054817][ T2412] Call Trace: [ 2678.054826][ T2412] [ 2678.054836][ T2412] dump_stack_lvl+0xd1/0x138 [ 2678.054873][ T2412] dump_header+0x10b/0x85f [ 2678.054913][ T2412] oom_kill_process.cold+0x10/0x15 [ 2678.054953][ T2412] out_of_memory+0x35c/0x14a0 [ 2678.054995][ T2412] ? find_held_lock+0x2d/0x110 [ 2678.055031][ T2412] ? oom_killer_disable+0x280/0x280 [ 2678.055071][ T2412] ? find_held_lock+0x2d/0x110 [ 2678.055110][ T2412] mem_cgroup_out_of_memory+0x206/0x270 [ 2678.055147][ T2412] ? mem_cgroup_margin+0x130/0x130 [ 2678.055180][ T2412] ? lock_downgrade+0x6e0/0x6e0 [ 2678.055220][ T2412] try_charge_memcg+0xefb/0x12f0 [ 2678.055254][ T2412] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2678.055282][ T2412] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2678.055320][ T2412] ? lock_downgrade+0x6e0/0x6e0 [ 2678.055354][ T2412] ? lock_downgrade+0x6e0/0x6e0 [ 2678.055377][ T2412] ? rcu_read_unlock+0x9/0x60 [ 2678.055422][ T2412] obj_cgroup_charge+0x2af/0x5e0 [ 2678.055455][ T2412] ? copy_process+0x3aa/0x7520 [ 2678.055480][ T2412] kmem_cache_alloc_node+0xb7/0x460 [ 2678.055513][ T2412] copy_process+0x3aa/0x7520 [ 2678.055543][ T2412] ? __lock_acquire+0xbc3/0x56d0 [ 2678.055580][ T2412] ? __cleanup_sighand+0xb0/0xb0 [ 2678.055608][ T2412] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2678.055640][ T2412] ? psi_memstall_leave+0x174/0x250 [ 2678.055682][ T2412] kernel_clone+0xeb/0x990 [ 2678.055713][ T2412] ? create_io_thread+0xf0/0xf0 [ 2678.055743][ T2412] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2678.055783][ T2412] ? lock_downgrade+0x6e0/0x6e0 [ 2678.055820][ T2412] __do_sys_clone+0xba/0x100 [ 2678.055847][ T2412] ? kernel_clone+0x990/0x990 [ 2678.055892][ T2412] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2678.055927][ T2412] do_syscall_64+0x39/0xb0 [ 2678.055960][ T2412] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2678.055987][ T2412] RIP: 0033:0x7f5b1fc8d4f1 [ 2678.056008][ T2412] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2678.056031][ T2412] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2678.056056][ T2412] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2678.056073][ T2412] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2678.056089][ T2412] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2678.056106][ T2412] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2678.056122][ T2412] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2678.056158][ T2412] [ 2678.056317][ T2412] memory: usage 307200kB, limit 307200kB, failcnt 33424 [ 2678.056341][ T2412] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2678.056357][ T2412] Memory cgroup stats for /syz5: [ 2678.056551][ T2412] anon 143360 [ 2678.056551][ T2412] file 483328 [ 2678.056551][ T2412] kernel 313946112 [ 2678.056551][ T2412] kernel_stack 65536 [ 2678.056551][ T2412] pagetables 77824 [ 2678.056551][ T2412] sec_pagetables 0 [ 2678.056551][ T2412] percpu 4839136 [ 2678.056551][ T2412] sock 0 [ 2678.056551][ T2412] vmalloc 0 [ 2678.056551][ T2412] shmem 483328 [ 2678.056551][ T2412] zswap 0 [ 2678.056551][ T2412] zswapped 0 [ 2678.056551][ T2412] file_mapped 471040 [ 2678.056551][ T2412] file_dirty 0 [ 2678.056551][ T2412] file_writeback 0 [ 2678.056551][ T2412] swapcached 0 [ 2678.056551][ T2412] anon_thp 0 [ 2678.056551][ T2412] file_thp 0 [ 2678.056551][ T2412] shmem_thp 0 [ 2678.056551][ T2412] inactive_anon 245760 [ 2678.056551][ T2412] active_anon 380928 [ 2678.056551][ T2412] inactive_file 0 [ 2678.056551][ T2412] active_file 0 [ 2678.056551][ T2412] unevictable 0 [ 2678.056551][ T2412] slab_reclaimable 16560 [ 2678.056551][ T2412] slab_unreclaimable 308906376 [ 2678.056624][ T2412] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2412,uid=0 [ 2678.056780][ T2412] Memory cgroup out of memory: Killed process 2412 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2678.552510][ T2423] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:46:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc2000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x6c00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0xe0030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2678.680684][ T2450] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:46:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x6c01]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2678.807681][ T2451] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 08:46:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2678.972221][ T2451] CPU: 1 PID: 2451 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2678.980891][ T2451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2678.990980][ T2451] Call Trace: [ 2678.994290][ T2451] [ 2678.997249][ T2451] dump_stack_lvl+0xd1/0x138 [ 2679.001932][ T2451] dump_header+0x10b/0x85f [ 2679.006492][ T2451] oom_kill_process.cold+0x10/0x15 [ 2679.011663][ T2451] out_of_memory+0x35c/0x14a0 [ 2679.016402][ T2451] ? find_held_lock+0x2d/0x110 [ 2679.021319][ T2451] ? oom_killer_disable+0x280/0x280 [ 2679.026585][ T2451] ? find_held_lock+0x2d/0x110 [ 2679.031415][ T2451] mem_cgroup_out_of_memory+0x206/0x270 [ 2679.037020][ T2451] ? mem_cgroup_margin+0x130/0x130 [ 2679.042196][ T2451] ? lock_downgrade+0x6e0/0x6e0 [ 2679.047110][ T2451] try_charge_memcg+0xefb/0x12f0 [ 2679.052092][ T2451] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2679.058146][ T2451] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2679.063928][ T2451] ? lock_downgrade+0x6e0/0x6e0 08:46:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7002]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2679.068827][ T2451] ? lock_downgrade+0x6e0/0x6e0 [ 2679.073745][ T2451] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2679.079343][ T2451] __alloc_pages+0x1f3/0x5b0 [ 2679.083982][ T2451] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2679.090816][ T2451] ? find_held_lock+0x2d/0x110 [ 2679.095655][ T2451] alloc_pages+0x1aa/0x270 [ 2679.100132][ T2451] pte_alloc_one+0x1a/0x230 [ 2679.104690][ T2451] __pte_alloc+0x6d/0x260 [ 2679.109073][ T2451] ? pmd_install+0x160/0x160 [ 2679.113715][ T2451] ? hugepage_vma_check+0x24e/0x830 [ 2679.118956][ T2451] ? _raw_spin_unlock+0x28/0x40 [ 2679.123848][ T2451] ? __pmd_alloc+0x30c/0x5d0 [ 2679.128480][ T2451] __handle_mm_fault+0x38cf/0x3c90 [ 2679.133622][ T2451] ? vm_iomap_memory+0x190/0x190 [ 2679.138601][ T2451] handle_mm_fault+0x1b6/0x850 [ 2679.143385][ T2451] do_user_addr_fault+0x475/0x1210 [ 2679.148521][ T2451] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2679.154108][ T2451] exc_page_fault+0x98/0x170 [ 2679.158717][ T2451] asm_exc_page_fault+0x26/0x30 [ 2679.163693][ T2451] RIP: 0033:0x7fe5bee2bd49 [ 2679.168134][ T2451] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2679.187760][ T2451] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2679.193834][ T2451] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2679.201808][ T2451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2679.209802][ T2451] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 08:46:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2679.217780][ T2451] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000028dfc9 [ 2679.225843][ T2451] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2679.233848][ T2451] [ 2679.238687][ T2457] device bridge1378 entered promiscuous mode 08:46:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0xfeffffff], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2679.364052][ T2451] memory: usage 307200kB, limit 307200kB, failcnt 5829 [ 2679.402200][ T2451] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2679.442110][ T2451] Memory cgroup stats for /syz4: [ 2679.442344][ T2451] anon 139264 [ 2679.442344][ T2451] file 253952 [ 2679.442344][ T2451] kernel 314179584 [ 2679.442344][ T2451] kernel_stack 65536 [ 2679.442344][ T2451] pagetables 73728 [ 2679.442344][ T2451] sec_pagetables 0 [ 2679.442344][ T2451] percpu 4849792 [ 2679.442344][ T2451] sock 0 [ 2679.442344][ T2451] vmalloc 0 [ 2679.442344][ T2451] shmem 253952 [ 2679.442344][ T2451] zswap 0 [ 2679.442344][ T2451] zswapped 0 [ 2679.442344][ T2451] file_mapped 253952 [ 2679.442344][ T2451] file_dirty 0 [ 2679.442344][ T2451] file_writeback 0 [ 2679.442344][ T2451] swapcached 0 [ 2679.442344][ T2451] anon_thp 0 [ 2679.442344][ T2451] file_thp 0 [ 2679.442344][ T2451] shmem_thp 0 [ 2679.442344][ T2451] inactive_anon 208896 [ 2679.442344][ T2451] active_anon 184320 [ 2679.442344][ T2451] inactive_file 0 [ 2679.442344][ T2451] active_file 0 [ 2679.442344][ T2451] unevictable 0 [ 2679.442344][ T2451] slab_reclaimable 55648 [ 2679.442344][ T2451] slab_unreclaimable 309100048 [ 2679.525388][ T2460] bond1192: (slave vlan1053): making interface the new active one [ 2679.621001][ T2451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2451,uid=0 [ 2679.644238][ T2451] Memory cgroup out of memory: Killed process 2451 (syz-executor.4) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2679.644765][ T2460] bond1192: (slave vlan1053): Enslaving as an active interface with an up link [ 2679.673290][ T2472] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2679.709107][ T2472] CPU: 1 PID: 2472 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2679.717792][ T2472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2679.727894][ T2472] Call Trace: [ 2679.731215][ T2472] [ 2679.734206][ T2472] dump_stack_lvl+0xd1/0x138 [ 2679.738850][ T2472] dump_header+0x10b/0x85f [ 2679.743335][ T2472] oom_kill_process.cold+0x10/0x15 [ 2679.748512][ T2472] out_of_memory+0x35c/0x14a0 [ 2679.753267][ T2472] ? oom_killer_disable+0x280/0x280 [ 2679.758531][ T2472] ? find_held_lock+0x2d/0x110 [ 2679.763358][ T2472] mem_cgroup_out_of_memory+0x206/0x270 [ 2679.768969][ T2472] ? mem_cgroup_margin+0x130/0x130 [ 2679.774138][ T2472] ? lock_downgrade+0x6e0/0x6e0 [ 2679.779067][ T2472] try_charge_memcg+0xefb/0x12f0 [ 2679.784070][ T2472] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2679.790104][ T2472] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2679.795894][ T2472] ? lock_downgrade+0x6e0/0x6e0 [ 2679.800804][ T2472] ? lock_downgrade+0x6e0/0x6e0 [ 2679.805721][ T2472] obj_cgroup_charge+0x2af/0x5e0 [ 2679.810717][ T2472] kmem_cache_alloc_lru+0x145/0x760 [ 2679.815978][ T2472] ? sock_alloc_inode+0x27/0x1d0 [ 2679.820988][ T2472] sock_alloc_inode+0x27/0x1d0 [ 2679.825805][ T2472] ? sock_free_inode+0x30/0x30 [ 2679.830629][ T2472] alloc_inode+0x61/0x230 [ 2679.835017][ T2472] new_inode_pseudo+0x17/0x80 [ 2679.839749][ T2472] sock_alloc+0x40/0x260 [ 2679.844053][ T2472] __sock_create+0xbd/0x790 [ 2679.848625][ T2472] __sys_socket+0x133/0x250 [ 2679.853219][ T2472] ? __sys_socket_file+0x1f0/0x1f0 [ 2679.858436][ T2472] __x64_sys_socket+0x73/0xb0 [ 2679.863883][ T2472] do_syscall_64+0x39/0xb0 [ 2679.868372][ T2472] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2679.874364][ T2472] RIP: 0033:0x7f5b1fc8c0c9 [ 2679.878818][ T2472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2679.898553][ T2472] RSP: 002b:00007f5b209b8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2679.907019][ T2472] RAX: ffffffffffffffda RBX: 00007f5b1fdac050 RCX: 00007f5b1fc8c0c9 [ 2679.915028][ T2472] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2679.923204][ T2472] RBP: 00007f5b1fce7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2679.931215][ T2472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2679.939232][ T2472] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2679.947362][ T2472] [ 2680.047645][ T2472] memory: usage 307188kB, limit 307200kB, failcnt 33545 [ 2680.058610][ T2472] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2680.069607][ T2472] Memory cgroup stats for /syz5: [ 2680.069826][ T2472] anon 102400 [ 2680.069826][ T2472] file 483328 [ 2680.069826][ T2472] kernel 313974784 [ 2680.069826][ T2472] kernel_stack 98304 [ 2680.069826][ T2472] pagetables 69632 [ 2680.069826][ T2472] sec_pagetables 0 [ 2680.069826][ T2472] percpu 4839136 [ 2680.069826][ T2472] sock 0 [ 2680.069826][ T2472] vmalloc 0 [ 2680.069826][ T2472] shmem 483328 [ 2680.069826][ T2472] zswap 0 [ 2680.069826][ T2472] zswapped 0 [ 2680.069826][ T2472] file_mapped 471040 [ 2680.069826][ T2472] file_dirty 0 [ 2680.069826][ T2472] file_writeback 0 [ 2680.069826][ T2472] swapcached 0 [ 2680.069826][ T2472] anon_thp 0 [ 2680.069826][ T2472] file_thp 0 [ 2680.069826][ T2472] shmem_thp 0 [ 2680.069826][ T2472] inactive_anon 204800 [ 2680.069826][ T2472] active_anon 380928 [ 2680.069826][ T2472] inactive_file 0 [ 2680.069826][ T2472] active_file 0 [ 2680.069826][ T2472] unevictable 0 [ 2680.069826][ T2472] slab_reclaimable 14632 [ 2680.069826][ T2472] slab_unreclaimable 308913152 [ 2680.220666][ T2472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2466,uid=0 [ 2680.237883][ T2472] Memory cgroup out of memory: Killed process 2466 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:46:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc2010000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7400]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc01]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0xff000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2680.335775][ T2490] set_target_v0_checkentry: 9 callbacks suppressed [ 2680.335795][ T2490] Cannot find add_set index 0 as target [ 2680.352486][ T2491] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2680.363482][ T2493] Cannot find add_set index 0 as target 08:46:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7403]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd57]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2680.475499][ T2486] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2680.517043][ T2486] CPU: 1 PID: 2486 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2680.525790][ T2486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2680.535876][ T2486] Call Trace: [ 2680.539186][ T2486] [ 2680.542147][ T2486] dump_stack_lvl+0xd1/0x138 [ 2680.546786][ T2486] dump_header+0x10b/0x85f [ 2680.551261][ T2486] oom_kill_process.cold+0x10/0x15 [ 2680.556431][ T2486] out_of_memory+0x35c/0x14a0 [ 2680.561164][ T2486] ? find_held_lock+0x2d/0x110 [ 2680.565982][ T2486] ? oom_killer_disable+0x280/0x280 [ 2680.571251][ T2486] ? find_held_lock+0x2d/0x110 [ 2680.576069][ T2486] mem_cgroup_out_of_memory+0x206/0x270 [ 2680.581730][ T2486] ? mem_cgroup_margin+0x130/0x130 [ 2680.586890][ T2486] ? lock_downgrade+0x6e0/0x6e0 [ 2680.591807][ T2486] try_charge_memcg+0xefb/0x12f0 [ 2680.596799][ T2486] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2680.602823][ T2486] ? lock_downgrade+0x6e0/0x6e0 [ 2680.607706][ T2486] charge_memcg+0x90/0x3b0 [ 2680.612140][ T2486] __mem_cgroup_charge+0x2b/0x90 [ 2680.617092][ T2486] do_wp_page+0x7ec/0x3370 [ 2680.621535][ T2486] ? lock_release+0x810/0x810 [ 2680.626220][ T2486] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2680.631610][ T2486] ? do_raw_spin_lock+0x124/0x2b0 [ 2680.636643][ T2486] ? rwlock_bug.part.0+0x90/0x90 [ 2680.641591][ T2486] ? lock_chain_count+0x20/0x20 [ 2680.646454][ T2486] __handle_mm_fault+0x1f58/0x3c90 [ 2680.651589][ T2486] ? vm_iomap_memory+0x190/0x190 [ 2680.656568][ T2486] handle_mm_fault+0x1b6/0x850 [ 2680.661351][ T2486] do_user_addr_fault+0x475/0x1210 [ 2680.666498][ T2486] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2680.672072][ T2486] exc_page_fault+0x98/0x170 [ 2680.676675][ T2486] asm_exc_page_fault+0x26/0x30 [ 2680.681561][ T2486] RIP: 0033:0x7fe5bee39570 [ 2680.685998][ T2486] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2680.705717][ T2486] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 [ 2680.711796][ T2486] RAX: 00000000f6afa43a RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2680.719793][ T2486] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000d79f723 [ 2680.727767][ T2486] RBP: 00000000f6afa43a R08: 000000000000043a R09: 00000000f6afa43e [ 2680.735744][ T2486] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 [ 2680.743722][ T2486] R13: 0000000000000001 R14: 000000000000002f R15: ffffffff89bcf1ac [ 2680.751697][ T2486] ? xas_load+0x4c/0x140 [ 2680.755974][ T2486] [ 2680.768130][ T2505] Cannot find add_set index 0 as target 08:46:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7501]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0xffff0300], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2680.883993][ T2486] memory: usage 307200kB, limit 307200kB, failcnt 5916 [ 2680.884275][ T2507] Cannot find add_set index 0 as target [ 2680.898018][ T2486] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2680.910089][ T2486] Memory cgroup stats for /syz4: [ 2680.910431][ T2486] anon 135168 [ 2680.910431][ T2486] file 253952 [ 2680.910431][ T2486] kernel 314183680 [ 2680.910431][ T2486] kernel_stack 65536 [ 2680.910431][ T2486] pagetables 69632 [ 2680.910431][ T2486] sec_pagetables 0 [ 2680.910431][ T2486] percpu 4849792 [ 2680.910431][ T2486] sock 0 [ 2680.910431][ T2486] vmalloc 0 [ 2680.910431][ T2486] shmem 253952 [ 2680.910431][ T2486] zswap 0 [ 2680.910431][ T2486] zswapped 0 [ 2680.910431][ T2486] file_mapped 253952 [ 2680.910431][ T2486] file_dirty 0 [ 2680.910431][ T2486] file_writeback 0 [ 2680.910431][ T2486] swapcached 0 [ 2680.910431][ T2486] anon_thp 0 [ 2680.910431][ T2486] file_thp 0 [ 2680.910431][ T2486] shmem_thp 0 [ 2680.910431][ T2486] inactive_anon 204800 [ 2680.910431][ T2486] active_anon 184320 [ 2680.910431][ T2486] inactive_file 0 [ 2680.910431][ T2486] active_file 0 [ 2680.910431][ T2486] unevictable 0 [ 2680.910431][ T2486] slab_reclaimable 65560 [ 2680.910431][ T2486] slab_unreclaimable 309100048 [ 2680.921720][ T2498] device bridge1379 entered promiscuous mode 08:46:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1d01]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:29 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7801]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2681.082525][ T2486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2486,uid=0 [ 2681.099468][ T2510] Cannot find add_set index 0 as target [ 2681.220144][ T2486] Memory cgroup out of memory: Killed process 2486 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2681.249252][ T2520] Cannot find add_set index 0 as target [ 2681.396344][ T2500] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2681.411769][ T2523] Cannot find add_set index 0 as target [ 2681.428359][ T2500] CPU: 0 PID: 2500 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2681.437014][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2681.447107][ T2500] Call Trace: [ 2681.450424][ T2500] [ 2681.453381][ T2500] dump_stack_lvl+0xd1/0x138 [ 2681.458021][ T2500] dump_header+0x10b/0x85f [ 2681.462499][ T2500] oom_kill_process.cold+0x10/0x15 [ 2681.467664][ T2500] out_of_memory+0x35c/0x14a0 [ 2681.472393][ T2500] ? find_held_lock+0x2d/0x110 [ 2681.477204][ T2500] ? oom_killer_disable+0x280/0x280 [ 2681.482455][ T2500] ? find_held_lock+0x2d/0x110 [ 2681.487277][ T2500] mem_cgroup_out_of_memory+0x206/0x270 [ 2681.492869][ T2500] ? mem_cgroup_margin+0x130/0x130 [ 2681.498032][ T2500] ? lock_downgrade+0x6e0/0x6e0 [ 2681.502947][ T2500] try_charge_memcg+0xefb/0x12f0 [ 2681.507940][ T2500] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2681.513964][ T2500] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2681.519741][ T2500] ? lock_downgrade+0x6e0/0x6e0 [ 2681.524636][ T2500] ? lock_downgrade+0x6e0/0x6e0 [ 2681.529568][ T2500] ? rcu_read_unlock+0x9/0x60 [ 2681.534300][ T2500] obj_cgroup_charge+0x2af/0x5e0 [ 2681.539296][ T2500] ? copy_process+0x3aa/0x7520 [ 2681.544100][ T2500] kmem_cache_alloc_node+0xb7/0x460 [ 2681.549354][ T2500] copy_process+0x3aa/0x7520 [ 2681.553980][ T2500] ? find_held_lock+0x2d/0x110 [ 2681.558787][ T2500] ? __cleanup_sighand+0xb0/0xb0 [ 2681.563787][ T2500] ? lock_downgrade+0x6e0/0x6e0 [ 2681.568664][ T2500] ? folio_flags.constprop.0+0x53/0x150 [ 2681.574257][ T2500] ? folio_add_lru+0x37b/0x680 [ 2681.579059][ T2500] kernel_clone+0xeb/0x990 [ 2681.583507][ T2500] ? create_io_thread+0xf0/0xf0 [ 2681.588398][ T2500] ? find_held_lock+0x2d/0x110 [ 2681.593215][ T2500] __do_sys_clone+0xba/0x100 [ 2681.597841][ T2500] ? kernel_clone+0x990/0x990 [ 2681.602594][ T2500] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2681.608533][ T2500] do_syscall_64+0x39/0xb0 [ 2681.613006][ T2500] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2681.618948][ T2500] RIP: 0033:0x7f5b1fc8d4f1 [ 2681.623381][ T2500] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2681.643025][ T2500] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2681.651471][ T2500] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2681.659482][ T2500] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2681.667489][ T2500] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2681.675492][ T2500] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2681.683499][ T2500] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2681.691532][ T2500] [ 2681.709616][ T2504] bond1193: (slave vlan1054): making interface the new active one [ 2681.759700][ T2500] memory: usage 307200kB, limit 307200kB, failcnt 33663 [ 2681.773571][ T2500] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2681.785264][ T2500] Memory cgroup stats for /syz5: [ 2681.785491][ T2500] anon 143360 [ 2681.785491][ T2500] file 483328 [ 2681.785491][ T2500] kernel 313946112 [ 2681.785491][ T2500] kernel_stack 65536 [ 2681.785491][ T2500] pagetables 77824 [ 2681.785491][ T2500] sec_pagetables 0 [ 2681.785491][ T2500] percpu 4839136 [ 2681.785491][ T2500] sock 0 [ 2681.785491][ T2500] vmalloc 0 [ 2681.785491][ T2500] shmem 483328 [ 2681.785491][ T2500] zswap 0 [ 2681.785491][ T2500] zswapped 0 [ 2681.785491][ T2500] file_mapped 471040 [ 2681.785491][ T2500] file_dirty 0 [ 2681.785491][ T2500] file_writeback 0 [ 2681.785491][ T2500] swapcached 0 [ 2681.785491][ T2500] anon_thp 0 [ 2681.785491][ T2500] file_thp 0 [ 2681.785491][ T2500] shmem_thp 0 [ 2681.785491][ T2500] inactive_anon 245760 [ 2681.785491][ T2500] active_anon 380928 [ 2681.785491][ T2500] inactive_file 0 [ 2681.785491][ T2500] active_file 0 [ 2681.785491][ T2500] unevictable 0 [ 2681.785491][ T2500] slab_reclaimable 16560 [ 2681.785491][ T2500] slab_unreclaimable 308906376 [ 2681.814227][ T2504] bond1193: (slave vlan1054): Enslaving as an active interface with an up link [ 2681.943917][ T2500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2500,uid=0 [ 2681.983227][ T2500] Memory cgroup out of memory: Killed process 2500 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2682.050162][ T2521] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:46:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x662c0000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:30 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7802]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0xfffffffe], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e41}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2682.211916][ T2529] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2682.229848][ T2528] Cannot find add_set index 0 as target 08:46:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7900]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2682.261138][ T2530] Cannot find add_set index 0 as target 08:46:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2682.452797][ T2545] Cannot find add_set index 0 as target 08:46:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7a00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2682.554182][ T2526] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2682.629788][ T2526] CPU: 0 PID: 2526 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2682.638449][ T2526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2682.648541][ T2526] Call Trace: [ 2682.651844][ T2526] [ 2682.654801][ T2526] dump_stack_lvl+0xd1/0x138 [ 2682.659463][ T2526] dump_header+0x10b/0x85f [ 2682.663932][ T2526] oom_kill_process.cold+0x10/0x15 [ 2682.669097][ T2526] out_of_memory+0x35c/0x14a0 [ 2682.673826][ T2526] ? find_held_lock+0x2d/0x110 [ 2682.678639][ T2526] ? oom_killer_disable+0x280/0x280 [ 2682.683898][ T2526] ? find_held_lock+0x2d/0x110 [ 2682.688727][ T2526] mem_cgroup_out_of_memory+0x206/0x270 [ 2682.694322][ T2526] ? mem_cgroup_margin+0x130/0x130 [ 2682.699472][ T2526] ? lock_downgrade+0x6e0/0x6e0 [ 2682.704365][ T2526] try_charge_memcg+0xefb/0x12f0 [ 2682.709351][ T2526] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2682.715370][ T2526] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2682.721140][ T2526] ? lock_downgrade+0x6e0/0x6e0 [ 2682.726031][ T2526] ? lock_downgrade+0x6e0/0x6e0 [ 2682.730954][ T2526] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2682.736540][ T2526] __alloc_pages+0x1f3/0x5b0 [ 2682.741187][ T2526] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2682.743421][ T2538] device bridge1380 entered promiscuous mode [ 2682.748073][ T2526] ? find_held_lock+0x2d/0x110 [ 2682.748123][ T2526] alloc_pages+0x1aa/0x270 [ 2682.748152][ T2526] pte_alloc_one+0x1a/0x230 [ 2682.748183][ T2526] __pte_alloc+0x6d/0x260 [ 2682.748214][ T2526] ? pmd_install+0x160/0x160 [ 2682.748241][ T2526] ? hugepage_vma_check+0x24e/0x830 [ 2682.748268][ T2526] ? _raw_spin_unlock+0x28/0x40 [ 2682.748296][ T2526] ? __pmd_alloc+0x30c/0x5d0 [ 2682.748329][ T2526] __handle_mm_fault+0x38cf/0x3c90 [ 2682.748370][ T2526] ? vm_iomap_memory+0x190/0x190 [ 2682.748431][ T2526] handle_mm_fault+0x1b6/0x850 [ 2682.748470][ T2526] do_user_addr_fault+0x475/0x1210 [ 2682.748505][ T2526] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2682.748546][ T2526] exc_page_fault+0x98/0x170 [ 2682.748573][ T2526] asm_exc_page_fault+0x26/0x30 [ 2682.748600][ T2526] RIP: 0033:0x7fe5bee2bd49 [ 2682.748622][ T2526] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2682.748645][ T2526] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2682.748667][ T2526] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 08:46:31 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7e01]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2682.748683][ T2526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2682.748698][ T2526] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2682.748714][ T2526] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000028ee46 [ 2682.748729][ T2526] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2682.748767][ T2526] [ 2682.857633][ T2526] memory: usage 307200kB, limit 307200kB, failcnt 5983 [ 2682.965526][ T2526] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2682.984551][ T2526] Memory cgroup stats for /syz4: [ 2682.984787][ T2526] anon 139264 [ 2682.984787][ T2526] file 253952 [ 2682.984787][ T2526] kernel 314179584 [ 2682.984787][ T2526] kernel_stack 65536 [ 2682.984787][ T2526] pagetables 73728 [ 2682.984787][ T2526] sec_pagetables 0 [ 2682.984787][ T2526] percpu 4849792 [ 2682.984787][ T2526] sock 0 [ 2682.984787][ T2526] vmalloc 0 [ 2682.984787][ T2526] shmem 253952 [ 2682.984787][ T2526] zswap 0 [ 2682.984787][ T2526] zswapped 0 [ 2682.984787][ T2526] file_mapped 253952 [ 2682.984787][ T2526] file_dirty 0 [ 2682.984787][ T2526] file_writeback 0 [ 2682.984787][ T2526] swapcached 0 [ 2682.984787][ T2526] anon_thp 0 [ 2682.984787][ T2526] file_thp 0 [ 2682.984787][ T2526] shmem_thp 0 [ 2682.984787][ T2526] inactive_anon 208896 [ 2682.984787][ T2526] active_anon 184320 [ 2682.984787][ T2526] inactive_file 0 [ 2682.984787][ T2526] active_file 0 08:46:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2202]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2682.984787][ T2526] unevictable 0 [ 2682.984787][ T2526] slab_reclaimable 55648 [ 2682.984787][ T2526] slab_unreclaimable 309100048 [ 2683.209468][ T2526] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2526,uid=0 [ 2683.268058][ T2526] Memory cgroup out of memory: Killed process 2526 (syz-executor.4) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2683.340198][ T2537] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2683.370367][ T2537] CPU: 1 PID: 2537 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2683.379018][ T2537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2683.389092][ T2537] Call Trace: [ 2683.392386][ T2537] [ 2683.395338][ T2537] dump_stack_lvl+0xd1/0x138 [ 2683.399994][ T2537] dump_header+0x10b/0x85f [ 2683.404446][ T2537] oom_kill_process.cold+0x10/0x15 [ 2683.409604][ T2537] out_of_memory+0x35c/0x14a0 [ 2683.414323][ T2537] ? oom_killer_disable+0x280/0x280 [ 2683.419576][ T2537] ? find_held_lock+0x2d/0x110 [ 2683.424393][ T2537] mem_cgroup_out_of_memory+0x206/0x270 [ 2683.430069][ T2537] ? mem_cgroup_margin+0x130/0x130 [ 2683.435261][ T2537] ? lock_downgrade+0x6e0/0x6e0 [ 2683.440148][ T2537] try_charge_memcg+0xefb/0x12f0 [ 2683.445122][ T2537] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2683.451126][ T2537] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2683.456882][ T2537] ? lock_downgrade+0x6e0/0x6e0 [ 2683.461772][ T2537] ? lock_downgrade+0x6e0/0x6e0 [ 2683.466655][ T2537] ? rcu_read_unlock+0x9/0x60 [ 2683.471393][ T2537] obj_cgroup_charge+0x2af/0x5e0 [ 2683.476378][ T2537] ? copy_process+0x3aa/0x7520 [ 2683.481179][ T2537] kmem_cache_alloc_node+0xb7/0x460 [ 2683.486409][ T2537] copy_process+0x3aa/0x7520 [ 2683.491044][ T2537] ? __lock_acquire+0xbc3/0x56d0 [ 2683.496016][ T2537] ? __cleanup_sighand+0xb0/0xb0 [ 2683.499151][ T2544] bond1194: (slave vlan1055): making interface the new active one [ 2683.500953][ T2537] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2683.500988][ T2537] ? psi_memstall_leave+0x174/0x250 [ 2683.519987][ T2537] kernel_clone+0xeb/0x990 [ 2683.524447][ T2537] ? create_io_thread+0xf0/0xf0 [ 2683.529341][ T2537] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2683.535625][ T2537] ? lock_downgrade+0x6e0/0x6e0 [ 2683.540515][ T2537] __do_sys_clone+0xba/0x100 [ 2683.545142][ T2537] ? kernel_clone+0x990/0x990 [ 2683.545274][ T2544] bond1194: (slave vlan1055): Enslaving as an active interface with an up link [ 2683.549864][ T2537] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2683.549902][ T2537] do_syscall_64+0x39/0xb0 [ 2683.569143][ T2537] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2683.575076][ T2537] RIP: 0033:0x7f5b1fc8d4f1 [ 2683.579608][ T2537] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2683.598910][ T2541] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2683.599224][ T2537] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2683.599253][ T2537] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2683.599271][ T2537] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2683.631741][ T2537] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2683.639759][ T2537] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2683.647772][ T2537] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2683.655809][ T2537] [ 2683.721619][ T2537] memory: usage 307200kB, limit 307200kB, failcnt 33806 [ 2683.743496][ T2537] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2683.760242][ T2537] Memory cgroup stats for /syz5: [ 2683.760420][ T2537] anon 143360 [ 2683.760420][ T2537] file 483328 [ 2683.760420][ T2537] kernel 313946112 [ 2683.760420][ T2537] kernel_stack 65536 [ 2683.760420][ T2537] pagetables 77824 [ 2683.760420][ T2537] sec_pagetables 0 [ 2683.760420][ T2537] percpu 4839136 [ 2683.760420][ T2537] sock 0 [ 2683.760420][ T2537] vmalloc 0 [ 2683.760420][ T2537] shmem 483328 [ 2683.760420][ T2537] zswap 0 [ 2683.760420][ T2537] zswapped 0 [ 2683.760420][ T2537] file_mapped 471040 [ 2683.760420][ T2537] file_dirty 0 [ 2683.760420][ T2537] file_writeback 0 [ 2683.760420][ T2537] swapcached 0 [ 2683.760420][ T2537] anon_thp 0 [ 2683.760420][ T2537] file_thp 0 [ 2683.760420][ T2537] shmem_thp 0 [ 2683.760420][ T2537] inactive_anon 245760 [ 2683.760420][ T2537] active_anon 380928 [ 2683.760420][ T2537] inactive_file 0 [ 2683.760420][ T2537] active_file 0 [ 2683.760420][ T2537] unevictable 0 [ 2683.760420][ T2537] slab_reclaimable 16560 [ 2683.760420][ T2537] slab_unreclaimable 308906376 [ 2683.917620][ T2537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2537,uid=0 [ 2683.940526][ T2537] Memory cgroup out of memory: Killed process 2537 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xca030000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3802]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x8100]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x2], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x66370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:32 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x8101]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2684.135200][ T2571] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:46:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3a02]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2684.196136][ T2562] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2684.313515][ T2562] CPU: 0 PID: 2562 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2684.322177][ T2562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2684.332273][ T2562] Call Trace: [ 2684.335575][ T2562] [ 2684.338552][ T2562] dump_stack_lvl+0xd1/0x138 [ 2684.343188][ T2562] dump_header+0x10b/0x85f [ 2684.347658][ T2562] oom_kill_process.cold+0x10/0x15 [ 2684.352823][ T2562] out_of_memory+0x35c/0x14a0 [ 2684.357566][ T2562] ? find_held_lock+0x2d/0x110 [ 2684.362383][ T2562] ? oom_killer_disable+0x280/0x280 [ 2684.367641][ T2562] ? find_held_lock+0x2d/0x110 [ 2684.372462][ T2562] mem_cgroup_out_of_memory+0x206/0x270 [ 2684.378073][ T2562] ? mem_cgroup_margin+0x130/0x130 [ 2684.383238][ T2562] ? lock_downgrade+0x6e0/0x6e0 [ 2684.388156][ T2562] try_charge_memcg+0xefb/0x12f0 [ 2684.393146][ T2562] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2684.399174][ T2562] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2684.404952][ T2562] ? lock_downgrade+0x6e0/0x6e0 [ 2684.409850][ T2562] ? lock_downgrade+0x6e0/0x6e0 [ 2684.414755][ T2562] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2684.420347][ T2562] __alloc_pages+0x1f3/0x5b0 [ 2684.424979][ T2562] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2684.431805][ T2562] ? find_held_lock+0x2d/0x110 [ 2684.436633][ T2562] alloc_pages+0x1aa/0x270 [ 2684.441106][ T2562] pte_alloc_one+0x1a/0x230 [ 2684.445657][ T2562] __pte_alloc+0x6d/0x260 [ 2684.450031][ T2562] ? pmd_install+0x160/0x160 [ 2684.454679][ T2562] ? hugepage_vma_check+0x24e/0x830 [ 2684.459914][ T2562] ? _raw_spin_unlock+0x28/0x40 [ 2684.464805][ T2562] ? __pmd_alloc+0x30c/0x5d0 [ 2684.469446][ T2562] __handle_mm_fault+0x38cf/0x3c90 [ 2684.474638][ T2562] ? vm_iomap_memory+0x190/0x190 [ 2684.479647][ T2562] handle_mm_fault+0x1b6/0x850 [ 2684.484454][ T2562] do_user_addr_fault+0x475/0x1210 [ 2684.489632][ T2562] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2684.495233][ T2562] exc_page_fault+0x98/0x170 [ 2684.499867][ T2562] asm_exc_page_fault+0x26/0x30 [ 2684.504749][ T2562] RIP: 0033:0x7fe5bee2bd49 [ 2684.509198][ T2562] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2684.528844][ T2562] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2684.534944][ T2562] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2684.543032][ T2562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2684.551050][ T2562] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2684.559059][ T2562] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000028f4b1 [ 2684.567078][ T2562] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2684.575113][ T2562] 08:46:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4003]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:33 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x8800]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4400]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2684.874027][ T2581] device bridge1381 entered promiscuous mode [ 2685.088797][ T2562] memory: usage 307200kB, limit 307200kB, failcnt 6045 [ 2685.100066][ T2587] bond1195: (slave vlan1056): making interface the new active one [ 2685.103289][ T2562] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2685.149302][ T2587] bond1195: (slave vlan1056): Enslaving as an active interface with an up link [ 2685.181708][ T2562] Memory cgroup stats for /syz4: [ 2685.181927][ T2562] anon 139264 [ 2685.181927][ T2562] file 253952 [ 2685.181927][ T2562] kernel 314179584 [ 2685.181927][ T2562] kernel_stack 65536 [ 2685.181927][ T2562] pagetables 73728 [ 2685.181927][ T2562] sec_pagetables 0 [ 2685.181927][ T2562] percpu 4849792 [ 2685.181927][ T2562] sock 0 [ 2685.181927][ T2562] vmalloc 0 [ 2685.181927][ T2562] shmem 253952 [ 2685.181927][ T2562] zswap 0 [ 2685.181927][ T2562] zswapped 0 [ 2685.181927][ T2562] file_mapped 253952 [ 2685.181927][ T2562] file_dirty 0 [ 2685.181927][ T2562] file_writeback 0 [ 2685.181927][ T2562] swapcached 0 [ 2685.181927][ T2562] anon_thp 0 [ 2685.181927][ T2562] file_thp 0 [ 2685.181927][ T2562] shmem_thp 0 [ 2685.181927][ T2562] inactive_anon 208896 [ 2685.181927][ T2562] active_anon 184320 [ 2685.181927][ T2562] inactive_file 0 [ 2685.181927][ T2562] active_file 0 [ 2685.181927][ T2562] unevictable 0 [ 2685.181927][ T2562] slab_reclaimable 55648 [ 2685.181927][ T2562] slab_unreclaimable 309100048 [ 2685.353974][ T2562] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2562,uid=0 [ 2685.383976][ T2562] Memory cgroup out of memory: Killed process 2562 (syz-executor.4) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2685.414197][ T2572] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2685.437296][ T2572] CPU: 1 PID: 2572 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2685.445932][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2685.456278][ T2572] Call Trace: [ 2685.459579][ T2572] [ 2685.462540][ T2572] dump_stack_lvl+0xd1/0x138 [ 2685.467180][ T2572] dump_header+0x10b/0x85f [ 2685.471633][ T2572] oom_kill_process.cold+0x10/0x15 [ 2685.476776][ T2572] out_of_memory+0x35c/0x14a0 [ 2685.481477][ T2572] ? oom_killer_disable+0x280/0x280 [ 2685.486679][ T2572] ? find_held_lock+0x2d/0x110 [ 2685.491469][ T2572] mem_cgroup_out_of_memory+0x206/0x270 [ 2685.497123][ T2572] ? mem_cgroup_margin+0x130/0x130 [ 2685.502281][ T2572] ? lock_downgrade+0x6e0/0x6e0 [ 2685.507180][ T2572] try_charge_memcg+0xefb/0x12f0 [ 2685.512159][ T2572] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2685.518179][ T2572] ? lock_downgrade+0x6e0/0x6e0 [ 2685.523072][ T2572] charge_memcg+0x90/0x3b0 [ 2685.527525][ T2572] __mem_cgroup_charge+0x2b/0x90 [ 2685.532491][ T2572] ? copy_mc_to_kernel+0x3e/0x90 [ 2685.537446][ T2572] do_wp_page+0x7ec/0x3370 [ 2685.541866][ T2572] ? lock_release+0x810/0x810 [ 2685.546548][ T2572] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2685.551966][ T2572] ? do_raw_spin_lock+0x124/0x2b0 [ 2685.557022][ T2572] ? rwlock_bug.part.0+0x90/0x90 [ 2685.561992][ T2572] ? lock_chain_count+0x20/0x20 [ 2685.566871][ T2572] __handle_mm_fault+0x1f58/0x3c90 [ 2685.572009][ T2572] ? vm_iomap_memory+0x190/0x190 [ 2685.576988][ T2572] handle_mm_fault+0x1b6/0x850 [ 2685.581770][ T2572] do_user_addr_fault+0x475/0x1210 [ 2685.586913][ T2572] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2685.592478][ T2572] exc_page_fault+0x98/0x170 [ 2685.597096][ T2572] asm_exc_page_fault+0x26/0x30 [ 2685.601972][ T2572] RIP: 0033:0x7f5b1fc36645 [ 2685.606416][ T2572] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d 7e 1a 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 2d 73 17 00 48 8b 53 10 4c 8d 81 00 [ 2685.626064][ T2572] RSP: 002b:00007fff16a820a0 EFLAGS: 00010206 [ 2685.632145][ T2572] RAX: 0000000000000004 RBX: 00007f5b1fdabf80 RCX: 00007f5b1fda80c0 [ 2685.640121][ T2572] RDX: 00007f5b1fda80c0 RSI: ffff80a4e0254074 RDI: 00007f5b1fdabf80 [ 2685.648097][ T2572] RBP: 00007f5b1fdabf80 R08: 0000000000000000 R09: 0000000000000000 [ 2685.656075][ T2572] R10: 00007f5b1f800268 R11: 0000000000000000 R12: 00007f5b1fdabf8c [ 2685.664058][ T2572] R13: 00007f5b1f8002a0 R14: 00007f5b1fdabf80 R15: 0000000000000000 [ 2685.672071][ T2572] [ 2685.728141][ T2572] memory: usage 307200kB, limit 307200kB, failcnt 33895 [ 2685.744890][ T2572] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2685.751878][ T2572] Memory cgroup stats for /syz5: [ 2685.752084][ T2572] anon 106496 [ 2685.752084][ T2572] file 483328 [ 2685.752084][ T2572] kernel 313982976 [ 2685.752084][ T2572] kernel_stack 98304 [ 2685.752084][ T2572] pagetables 77824 [ 2685.752084][ T2572] sec_pagetables 0 [ 2685.752084][ T2572] percpu 4839136 [ 2685.752084][ T2572] sock 0 [ 2685.752084][ T2572] vmalloc 0 [ 2685.752084][ T2572] shmem 483328 [ 2685.752084][ T2572] zswap 0 [ 2685.752084][ T2572] zswapped 0 [ 2685.752084][ T2572] file_mapped 471040 [ 2685.752084][ T2572] file_dirty 0 [ 2685.752084][ T2572] file_writeback 0 [ 2685.752084][ T2572] swapcached 0 [ 2685.752084][ T2572] anon_thp 0 [ 2685.752084][ T2572] file_thp 0 [ 2685.752084][ T2572] shmem_thp 0 [ 2685.752084][ T2572] inactive_anon 208896 [ 2685.752084][ T2572] active_anon 380928 [ 2685.752084][ T2572] inactive_file 0 [ 2685.752084][ T2572] active_file 0 [ 2685.752084][ T2572] unevictable 0 [ 2685.752084][ T2572] slab_reclaimable 16560 [ 2685.752084][ T2572] slab_unreclaimable 308914200 [ 2685.922401][ T2572] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2572,uid=0 [ 2685.952864][ T2572] Memory cgroup out of memory: Killed process 2572 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd6000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:34 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x8903]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e43}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x67370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x4], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2686.056733][ T2608] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2686.062043][ T2609] set_target_v0_checkentry: 11 callbacks suppressed [ 2686.062061][ T2609] Cannot find add_set index 0 as target [ 2686.109152][ T2607] Cannot find add_set index 0 as target 08:46:35 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x9603]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2686.389803][ T2625] Cannot find add_set index 0 as target 08:46:35 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x9803]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2686.429338][ T2610] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2686.482745][ T2627] Cannot find add_set index 0 as target 08:46:35 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xa002]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x5], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2686.569491][ T2610] CPU: 1 PID: 2610 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2686.578154][ T2610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2686.588329][ T2610] Call Trace: [ 2686.591645][ T2610] [ 2686.594604][ T2610] dump_stack_lvl+0xd1/0x138 [ 2686.599038][ T2629] Cannot find add_set index 0 as target [ 2686.599201][ T2610] dump_header+0x10b/0x85f [ 2686.609174][ T2610] oom_kill_process.cold+0x10/0x15 [ 2686.613731][ T2618] device bridge1382 entered promiscuous mode [ 2686.614307][ T2610] out_of_memory+0x35c/0x14a0 [ 2686.614357][ T2610] ? find_held_lock+0x2d/0x110 [ 2686.614393][ T2610] ? oom_killer_disable+0x280/0x280 [ 2686.635085][ T2610] ? find_held_lock+0x2d/0x110 [ 2686.639907][ T2610] mem_cgroup_out_of_memory+0x206/0x270 [ 2686.645507][ T2610] ? mem_cgroup_margin+0x130/0x130 [ 2686.650656][ T2610] ? lock_downgrade+0x6e0/0x6e0 [ 2686.655561][ T2610] try_charge_memcg+0xefb/0x12f0 [ 2686.660546][ T2610] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2686.666566][ T2610] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2686.672331][ T2610] ? lock_downgrade+0x6e0/0x6e0 [ 2686.677229][ T2610] ? lock_downgrade+0x6e0/0x6e0 [ 2686.682126][ T2610] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2686.687713][ T2610] __alloc_pages+0x1f3/0x5b0 [ 2686.692348][ T2610] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2686.699155][ T2610] ? find_held_lock+0x2d/0x110 [ 2686.703975][ T2610] alloc_pages+0x1aa/0x270 [ 2686.708422][ T2610] pte_alloc_one+0x1a/0x230 [ 2686.712949][ T2610] __pte_alloc+0x6d/0x260 [ 2686.717306][ T2610] ? pmd_install+0x160/0x160 [ 2686.721932][ T2610] ? hugepage_vma_check+0x24e/0x830 [ 2686.727169][ T2610] ? _raw_spin_unlock+0x28/0x40 [ 2686.732059][ T2610] ? __pmd_alloc+0x30c/0x5d0 [ 2686.736698][ T2610] __handle_mm_fault+0x38cf/0x3c90 [ 2686.741870][ T2610] ? vm_iomap_memory+0x190/0x190 [ 2686.746885][ T2610] handle_mm_fault+0x1b6/0x850 [ 2686.751697][ T2610] do_user_addr_fault+0x475/0x1210 [ 2686.756855][ T2610] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2686.762447][ T2610] exc_page_fault+0x98/0x170 [ 2686.767070][ T2610] asm_exc_page_fault+0x26/0x30 [ 2686.771952][ T2610] RIP: 0033:0x7fe5bee2bd49 [ 2686.776393][ T2610] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2686.796033][ T2610] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2686.802131][ T2610] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2686.810139][ T2610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2686.818145][ T2610] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2686.826147][ T2610] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000028fd8b [ 2686.834150][ T2610] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2686.842185][ T2610] 08:46:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5403]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2686.875582][ T2635] Cannot find add_set index 0 as target [ 2686.917270][ T2636] Cannot find add_set index 0 as target [ 2687.001303][ T2610] memory: usage 307200kB, limit 307200kB, failcnt 6122 [ 2687.032119][ T2610] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2687.044829][ T2610] Memory cgroup stats for /syz4: [ 2687.045058][ T2610] anon 139264 [ 2687.045058][ T2610] file 253952 [ 2687.045058][ T2610] kernel 314179584 [ 2687.045058][ T2610] kernel_stack 65536 [ 2687.045058][ T2610] pagetables 73728 [ 2687.045058][ T2610] sec_pagetables 0 [ 2687.045058][ T2610] percpu 4849792 [ 2687.045058][ T2610] sock 0 [ 2687.045058][ T2610] vmalloc 0 [ 2687.045058][ T2610] shmem 253952 [ 2687.045058][ T2610] zswap 0 [ 2687.045058][ T2610] zswapped 0 [ 2687.045058][ T2610] file_mapped 253952 [ 2687.045058][ T2610] file_dirty 0 [ 2687.045058][ T2610] file_writeback 0 [ 2687.045058][ T2610] swapcached 0 [ 2687.045058][ T2610] anon_thp 0 [ 2687.045058][ T2610] file_thp 0 [ 2687.045058][ T2610] shmem_thp 0 [ 2687.045058][ T2610] inactive_anon 208896 [ 2687.045058][ T2610] active_anon 184320 [ 2687.045058][ T2610] inactive_file 0 [ 2687.045058][ T2610] active_file 0 [ 2687.045058][ T2610] unevictable 0 [ 2687.045058][ T2610] slab_reclaimable 55648 [ 2687.045058][ T2610] slab_unreclaimable 309100048 [ 2687.144134][ T2622] bond1196: (slave vlan1057): making interface the new active one [ 2687.182414][ T2622] bond1196: (slave vlan1057): Enslaving as an active interface with an up link [ 2687.230873][ T2610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2610,uid=0 [ 2687.299714][ T2610] Memory cgroup out of memory: Killed process 2610 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2687.342414][ T2613] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2687.364514][ T2613] CPU: 1 PID: 2613 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2687.373173][ T2613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2687.383259][ T2613] Call Trace: [ 2687.386562][ T2613] [ 2687.389525][ T2613] dump_stack_lvl+0xd1/0x138 [ 2687.394156][ T2613] dump_header+0x10b/0x85f [ 2687.398694][ T2613] oom_kill_process.cold+0x10/0x15 [ 2687.403894][ T2613] out_of_memory+0x35c/0x14a0 [ 2687.408580][ T2613] ? oom_killer_disable+0x280/0x280 [ 2687.413776][ T2613] ? find_held_lock+0x2d/0x110 [ 2687.418574][ T2613] mem_cgroup_out_of_memory+0x206/0x270 [ 2687.424128][ T2613] ? mem_cgroup_margin+0x130/0x130 [ 2687.429249][ T2613] ? lock_downgrade+0x6e0/0x6e0 [ 2687.434151][ T2613] try_charge_memcg+0xefb/0x12f0 [ 2687.439128][ T2613] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2687.445145][ T2613] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2687.450896][ T2613] ? lock_downgrade+0x6e0/0x6e0 [ 2687.455761][ T2613] ? lock_downgrade+0x6e0/0x6e0 [ 2687.460620][ T2613] ? rcu_read_unlock+0x9/0x60 [ 2687.465324][ T2613] obj_cgroup_charge+0x2af/0x5e0 [ 2687.470273][ T2613] ? copy_process+0x3aa/0x7520 [ 2687.475054][ T2613] kmem_cache_alloc_node+0xb7/0x460 [ 2687.480283][ T2613] copy_process+0x3aa/0x7520 [ 2687.484999][ T2613] ? __lock_acquire+0xbc3/0x56d0 [ 2687.490151][ T2613] ? __cleanup_sighand+0xb0/0xb0 [ 2687.495207][ T2613] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2687.501555][ T2613] ? psi_memstall_leave+0x174/0x250 [ 2687.506772][ T2613] kernel_clone+0xeb/0x990 [ 2687.511200][ T2613] ? create_io_thread+0xf0/0xf0 [ 2687.516063][ T2613] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2687.522322][ T2613] ? lock_downgrade+0x6e0/0x6e0 [ 2687.527187][ T2613] __do_sys_clone+0xba/0x100 [ 2687.531791][ T2613] ? kernel_clone+0x990/0x990 [ 2687.536505][ T2613] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2687.542501][ T2613] do_syscall_64+0x39/0xb0 [ 2687.546935][ T2613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2687.552835][ T2613] RIP: 0033:0x7f5b1fc8d4f1 [ 2687.557253][ T2613] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2687.576970][ T2613] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2687.585392][ T2613] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2687.593368][ T2613] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2687.601360][ T2613] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2687.609334][ T2613] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2687.617308][ T2613] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2687.625318][ T2613] [ 2687.730876][ T2613] memory: usage 307200kB, limit 307200kB, failcnt 33972 [ 2687.742714][ T2613] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2687.753576][ T2613] Memory cgroup stats for /syz5: [ 2687.753796][ T2613] anon 143360 [ 2687.753796][ T2613] file 483328 [ 2687.753796][ T2613] kernel 313946112 [ 2687.753796][ T2613] kernel_stack 65536 [ 2687.753796][ T2613] pagetables 77824 [ 2687.753796][ T2613] sec_pagetables 0 [ 2687.753796][ T2613] percpu 4839136 [ 2687.753796][ T2613] sock 0 [ 2687.753796][ T2613] vmalloc 0 [ 2687.753796][ T2613] shmem 483328 [ 2687.753796][ T2613] zswap 0 [ 2687.753796][ T2613] zswapped 0 [ 2687.753796][ T2613] file_mapped 471040 [ 2687.753796][ T2613] file_dirty 0 [ 2687.753796][ T2613] file_writeback 0 [ 2687.753796][ T2613] swapcached 0 [ 2687.753796][ T2613] anon_thp 0 [ 2687.753796][ T2613] file_thp 0 [ 2687.753796][ T2613] shmem_thp 0 [ 2687.753796][ T2613] inactive_anon 245760 [ 2687.753796][ T2613] active_anon 380928 [ 2687.753796][ T2613] inactive_file 0 [ 2687.753796][ T2613] active_file 0 [ 2687.753796][ T2613] unevictable 0 [ 2687.753796][ T2613] slab_reclaimable 16560 [ 2687.753796][ T2613] slab_unreclaimable 308906376 [ 2687.908995][ T2613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2613,uid=0 [ 2687.929526][ T2613] Memory cgroup out of memory: Killed process 2613 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd6030000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5602]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:36 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xa402]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e44}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x6], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2688.053412][ T2645] Cannot find add_set index 0 as target [ 2688.079369][ T2643] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2688.121797][ T2654] Cannot find add_set index 0 as target 08:46:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xa800]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2688.202899][ T2648] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 08:46:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x570d]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2688.319250][ T2663] Cannot find add_set index 0 as target [ 2688.389143][ T2648] CPU: 1 PID: 2648 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2688.397809][ T2648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2688.407890][ T2648] Call Trace: [ 2688.411211][ T2648] [ 2688.414176][ T2648] dump_stack_lvl+0xd1/0x138 [ 2688.418810][ T2648] dump_header+0x10b/0x85f [ 2688.423276][ T2648] oom_kill_process.cold+0x10/0x15 [ 2688.428436][ T2648] out_of_memory+0x35c/0x14a0 [ 2688.433169][ T2648] ? find_held_lock+0x2d/0x110 [ 2688.437976][ T2648] ? oom_killer_disable+0x280/0x280 [ 2688.443226][ T2648] ? find_held_lock+0x2d/0x110 [ 2688.448039][ T2648] mem_cgroup_out_of_memory+0x206/0x270 [ 2688.453631][ T2648] ? mem_cgroup_margin+0x130/0x130 [ 2688.458784][ T2648] ? lock_downgrade+0x6e0/0x6e0 [ 2688.463683][ T2648] try_charge_memcg+0xefb/0x12f0 [ 2688.468667][ T2648] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2688.474683][ T2648] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2688.480476][ T2648] ? lock_downgrade+0x6e0/0x6e0 [ 2688.485363][ T2648] ? lock_downgrade+0x6e0/0x6e0 [ 2688.490258][ T2648] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2688.495842][ T2648] __alloc_pages+0x1f3/0x5b0 [ 2688.500473][ T2648] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2688.507302][ T2648] alloc_pages+0x1aa/0x270 [ 2688.511758][ T2648] __pmd_alloc+0x3f/0x5d0 [ 2688.516125][ T2648] __handle_mm_fault+0x932/0x3c90 [ 2688.521179][ T2648] ? vm_iomap_memory+0x190/0x190 [ 2688.526160][ T2648] handle_mm_fault+0x1b6/0x850 [ 2688.530984][ T2648] do_user_addr_fault+0x475/0x1210 [ 2688.536119][ T2648] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2688.541688][ T2648] exc_page_fault+0x98/0x170 [ 2688.546297][ T2648] asm_exc_page_fault+0x26/0x30 [ 2688.551189][ T2648] RIP: 0033:0x7fe5bee2bd49 [ 2688.555625][ T2648] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2688.575245][ T2648] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2688.581325][ T2648] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2688.589302][ T2648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2688.597279][ T2648] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2688.605257][ T2648] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000029047b [ 2688.613235][ T2648] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2688.621241][ T2648] 08:46:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xa802]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2688.718576][ T2648] memory: usage 307196kB, limit 307200kB, failcnt 6213 [ 2688.753071][ T2648] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2688.780242][ T2648] Memory cgroup stats for /syz4: [ 2688.780450][ T2648] anon 139264 [ 2688.780450][ T2648] file 253952 [ 2688.780450][ T2648] kernel 314175488 [ 2688.780450][ T2648] kernel_stack 65536 [ 2688.780450][ T2648] pagetables 69632 [ 2688.780450][ T2648] sec_pagetables 0 [ 2688.780450][ T2648] percpu 4849792 [ 2688.780450][ T2648] sock 0 [ 2688.780450][ T2648] vmalloc 0 [ 2688.780450][ T2648] shmem 253952 [ 2688.780450][ T2648] zswap 0 [ 2688.780450][ T2648] zswapped 0 [ 2688.780450][ T2648] file_mapped 253952 [ 2688.780450][ T2648] file_dirty 0 [ 2688.780450][ T2648] file_writeback 0 [ 2688.780450][ T2648] swapcached 0 [ 2688.780450][ T2648] anon_thp 0 [ 2688.780450][ T2648] file_thp 0 [ 2688.780450][ T2648] shmem_thp 0 [ 2688.780450][ T2648] inactive_anon 208896 [ 2688.780450][ T2648] active_anon 184320 [ 2688.780450][ T2648] inactive_file 0 [ 2688.780450][ T2648] active_file 0 [ 2688.780450][ T2648] unevictable 0 [ 2688.780450][ T2648] slab_reclaimable 55648 [ 2688.780450][ T2648] slab_unreclaimable 309100048 [ 2688.790938][ T2656] device bridge1383 entered promiscuous mode 08:46:37 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xa803]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x7], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2688.961778][ T2648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2648,uid=0 [ 2689.011887][ T2648] Memory cgroup out of memory: Killed process 2648 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2689.264040][ T2658] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2689.323461][ T2658] CPU: 1 PID: 2658 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2689.332115][ T2658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2689.342236][ T2658] Call Trace: [ 2689.345532][ T2658] [ 2689.348478][ T2658] dump_stack_lvl+0xd1/0x138 [ 2689.353100][ T2658] dump_header+0x10b/0x85f [ 2689.357562][ T2658] oom_kill_process.cold+0x10/0x15 [ 2689.358992][ T2659] bond1197: (slave vlan1058): making interface the new active one [ 2689.362709][ T2658] out_of_memory+0x35c/0x14a0 [ 2689.362755][ T2658] ? find_held_lock+0x2d/0x110 [ 2689.380011][ T2658] ? oom_killer_disable+0x280/0x280 [ 2689.385269][ T2658] ? find_held_lock+0x2d/0x110 [ 2689.390088][ T2658] mem_cgroup_out_of_memory+0x206/0x270 [ 2689.395692][ T2658] ? mem_cgroup_margin+0x130/0x130 [ 2689.400846][ T2658] ? lock_downgrade+0x6e0/0x6e0 [ 2689.405749][ T2658] try_charge_memcg+0xefb/0x12f0 [ 2689.410730][ T2658] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2689.411544][ T2659] bond1197: (slave vlan1058): Enslaving as an active interface with an up link [ 2689.416715][ T2658] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2689.416757][ T2658] ? lock_downgrade+0x6e0/0x6e0 [ 2689.416784][ T2658] ? lock_downgrade+0x6e0/0x6e0 [ 2689.441151][ T2658] ? rcu_read_unlock+0x9/0x60 [ 2689.445882][ T2658] obj_cgroup_charge+0x2af/0x5e0 [ 2689.450865][ T2658] ? copy_process+0x3aa/0x7520 [ 2689.455661][ T2658] kmem_cache_alloc_node+0xb7/0x460 [ 2689.460897][ T2658] copy_process+0x3aa/0x7520 [ 2689.465525][ T2658] ? __lock_acquire+0xbc3/0x56d0 [ 2689.470511][ T2658] ? __cleanup_sighand+0xb0/0xb0 [ 2689.475485][ T2658] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2689.481502][ T2658] ? psi_memstall_leave+0x174/0x250 [ 2689.486785][ T2658] kernel_clone+0xeb/0x990 [ 2689.491239][ T2658] ? create_io_thread+0xf0/0xf0 [ 2689.496132][ T2658] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2689.502412][ T2658] ? lock_downgrade+0x6e0/0x6e0 [ 2689.505916][ T2660] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2689.507283][ T2658] __do_sys_clone+0xba/0x100 [ 2689.519955][ T2658] ? kernel_clone+0x990/0x990 [ 2689.524684][ T2658] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2689.530616][ T2658] do_syscall_64+0x39/0xb0 [ 2689.535072][ T2658] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2689.540998][ T2658] RIP: 0033:0x7f5b1fc8d4f1 [ 2689.545437][ T2658] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2689.565074][ T2658] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2689.573549][ T2658] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2689.581549][ T2658] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2689.589579][ T2658] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2689.597583][ T2658] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2689.605580][ T2658] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2689.613582][ T2658] [ 2689.673327][ T2658] memory: usage 307200kB, limit 307200kB, failcnt 34131 [ 2689.692843][ T2658] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2689.705420][ T2658] Memory cgroup stats for /syz5: [ 2689.705639][ T2658] anon 143360 [ 2689.705639][ T2658] file 483328 [ 2689.705639][ T2658] kernel 313946112 [ 2689.705639][ T2658] kernel_stack 65536 [ 2689.705639][ T2658] pagetables 77824 [ 2689.705639][ T2658] sec_pagetables 0 [ 2689.705639][ T2658] percpu 4839136 [ 2689.705639][ T2658] sock 0 [ 2689.705639][ T2658] vmalloc 0 [ 2689.705639][ T2658] shmem 483328 [ 2689.705639][ T2658] zswap 0 [ 2689.705639][ T2658] zswapped 0 [ 2689.705639][ T2658] file_mapped 471040 [ 2689.705639][ T2658] file_dirty 0 [ 2689.705639][ T2658] file_writeback 0 [ 2689.705639][ T2658] swapcached 0 [ 2689.705639][ T2658] anon_thp 0 [ 2689.705639][ T2658] file_thp 0 [ 2689.705639][ T2658] shmem_thp 0 [ 2689.705639][ T2658] inactive_anon 241664 [ 2689.705639][ T2658] active_anon 380928 [ 2689.705639][ T2658] inactive_file 0 [ 2689.705639][ T2658] active_file 0 [ 2689.705639][ T2658] unevictable 0 [ 2689.705639][ T2658] slab_reclaimable 16560 [ 2689.705639][ T2658] slab_unreclaimable 308906376 [ 2689.871219][ T2658] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2658,uid=0 [ 2689.898261][ T2658] Memory cgroup out of memory: Killed process 2658 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xda020000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6003]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:38 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xad02]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x13], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e45}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2690.022967][ T2687] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:46:38 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xb000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2690.191718][ T2690] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2690.292813][ T2690] CPU: 0 PID: 2690 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2690.301472][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2690.311561][ T2690] Call Trace: [ 2690.314946][ T2690] [ 2690.317900][ T2690] dump_stack_lvl+0xd1/0x138 [ 2690.322529][ T2690] dump_header+0x10b/0x85f [ 2690.326980][ T2690] oom_kill_process.cold+0x10/0x15 [ 2690.332140][ T2690] out_of_memory+0x35c/0x14a0 [ 2690.336957][ T2690] ? find_held_lock+0x2d/0x110 [ 2690.341774][ T2690] ? oom_killer_disable+0x280/0x280 [ 2690.347008][ T2690] ? find_held_lock+0x2d/0x110 [ 2690.351793][ T2690] mem_cgroup_out_of_memory+0x206/0x270 [ 2690.357356][ T2690] ? mem_cgroup_margin+0x130/0x130 [ 2690.362479][ T2690] ? lock_downgrade+0x6e0/0x6e0 [ 2690.367351][ T2690] try_charge_memcg+0xefb/0x12f0 [ 2690.372301][ T2690] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2690.378291][ T2690] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2690.384027][ T2690] ? lock_downgrade+0x6e0/0x6e0 [ 2690.388900][ T2690] ? lock_downgrade+0x6e0/0x6e0 [ 2690.393813][ T2690] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2690.399378][ T2690] __alloc_pages+0x1f3/0x5b0 [ 2690.403982][ T2690] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2690.410770][ T2690] ? find_held_lock+0x2d/0x110 [ 2690.415556][ T2690] alloc_pages+0x1aa/0x270 [ 2690.420001][ T2690] pte_alloc_one+0x1a/0x230 [ 2690.424529][ T2690] __pte_alloc+0x6d/0x260 [ 2690.428961][ T2690] ? pmd_install+0x160/0x160 [ 2690.433566][ T2690] ? hugepage_vma_check+0x24e/0x830 [ 2690.438777][ T2690] ? _raw_spin_unlock+0x28/0x40 [ 2690.443639][ T2690] ? __pmd_alloc+0x30c/0x5d0 [ 2690.448244][ T2690] __handle_mm_fault+0x38cf/0x3c90 [ 2690.453398][ T2690] ? vm_iomap_memory+0x190/0x190 [ 2690.458372][ T2690] handle_mm_fault+0x1b6/0x850 [ 2690.463155][ T2690] do_user_addr_fault+0x475/0x1210 [ 2690.468280][ T2690] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2690.473854][ T2690] exc_page_fault+0x98/0x170 [ 2690.478454][ T2690] asm_exc_page_fault+0x26/0x30 [ 2690.483311][ T2690] RIP: 0033:0x7fe5bee2bd49 [ 2690.487733][ T2690] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2690.507344][ T2690] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2690.513417][ T2690] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2690.521391][ T2690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2690.529367][ T2690] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2690.537339][ T2690] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 0000000000290c0d [ 2690.545312][ T2690] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2690.553304][ T2690] 08:46:39 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xb100]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2690.682311][ T2690] memory: usage 307200kB, limit 307200kB, failcnt 6302 08:46:39 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xb900]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x2b8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2690.748525][ T2702] device bridge1384 entered promiscuous mode [ 2690.764485][ T2690] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2690.809619][ T2690] Memory cgroup stats for /syz4: [ 2690.809838][ T2690] anon 139264 [ 2690.809838][ T2690] file 253952 [ 2690.809838][ T2690] kernel 314179584 [ 2690.809838][ T2690] kernel_stack 65536 [ 2690.809838][ T2690] pagetables 73728 [ 2690.809838][ T2690] sec_pagetables 0 [ 2690.809838][ T2690] percpu 4849792 [ 2690.809838][ T2690] sock 0 [ 2690.809838][ T2690] vmalloc 0 [ 2690.809838][ T2690] shmem 253952 [ 2690.809838][ T2690] zswap 0 [ 2690.809838][ T2690] zswapped 0 [ 2690.809838][ T2690] file_mapped 253952 [ 2690.809838][ T2690] file_dirty 0 [ 2690.809838][ T2690] file_writeback 0 [ 2690.809838][ T2690] swapcached 0 [ 2690.809838][ T2690] anon_thp 0 [ 2690.809838][ T2690] file_thp 0 [ 2690.809838][ T2690] shmem_thp 0 [ 2690.809838][ T2690] inactive_anon 208896 [ 2690.809838][ T2690] active_anon 184320 [ 2690.809838][ T2690] inactive_file 0 [ 2690.809838][ T2690] active_file 0 [ 2690.809838][ T2690] unevictable 0 [ 2690.809838][ T2690] slab_reclaimable 55648 [ 2690.809838][ T2690] slab_unreclaimable 309100048 [ 2690.920456][ T2690] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2690,uid=0 [ 2690.949128][ T2690] Memory cgroup out of memory: Killed process 2690 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2691.126943][ T2707] bond1198: (slave vlan1059): making interface the new active one [ 2691.147158][ T2707] bond1198: (slave vlan1059): Enslaving as an active interface with an up link [ 2691.169968][ T2697] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2691.193360][ T2697] CPU: 1 PID: 2697 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2691.202012][ T2697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2691.212096][ T2697] Call Trace: [ 2691.215403][ T2697] [ 2691.218361][ T2697] dump_stack_lvl+0xd1/0x138 [ 2691.222990][ T2697] dump_header+0x10b/0x85f [ 2691.227449][ T2697] oom_kill_process.cold+0x10/0x15 [ 2691.232646][ T2697] out_of_memory+0x35c/0x14a0 [ 2691.237379][ T2697] ? find_held_lock+0x2d/0x110 [ 2691.242186][ T2697] ? oom_killer_disable+0x280/0x280 [ 2691.247426][ T2697] ? find_held_lock+0x2d/0x110 [ 2691.252235][ T2697] mem_cgroup_out_of_memory+0x206/0x270 [ 2691.257823][ T2697] ? mem_cgroup_margin+0x130/0x130 [ 2691.262978][ T2697] ? lock_downgrade+0x6e0/0x6e0 [ 2691.267879][ T2697] try_charge_memcg+0xefb/0x12f0 [ 2691.272887][ T2697] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2691.278923][ T2697] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2691.284697][ T2697] ? lock_downgrade+0x6e0/0x6e0 [ 2691.289591][ T2697] ? lock_downgrade+0x6e0/0x6e0 [ 2691.294556][ T2697] ? rcu_read_unlock+0x9/0x60 [ 2691.295134][ T2703] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2691.299265][ T2697] obj_cgroup_charge+0x2af/0x5e0 [ 2691.312283][ T2697] ? copy_process+0x3aa/0x7520 [ 2691.317078][ T2697] kmem_cache_alloc_node+0xb7/0x460 [ 2691.322318][ T2697] copy_process+0x3aa/0x7520 [ 2691.326958][ T2697] ? __lock_acquire+0xbc3/0x56d0 [ 2691.331948][ T2697] ? __cleanup_sighand+0xb0/0xb0 [ 2691.336918][ T2697] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2691.342940][ T2697] ? psi_memstall_leave+0x174/0x250 [ 2691.348189][ T2697] kernel_clone+0xeb/0x990 [ 2691.352649][ T2697] ? create_io_thread+0xf0/0xf0 [ 2691.357537][ T2697] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2691.363831][ T2697] ? lock_downgrade+0x6e0/0x6e0 [ 2691.368726][ T2697] __do_sys_clone+0xba/0x100 [ 2691.373344][ T2697] ? kernel_clone+0x990/0x990 [ 2691.378066][ T2697] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2691.383999][ T2697] do_syscall_64+0x39/0xb0 [ 2691.388452][ T2697] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2691.394369][ T2697] RIP: 0033:0x7f5b1fc8d4f1 [ 2691.398809][ T2697] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2691.418455][ T2697] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2691.426909][ T2697] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2691.434908][ T2697] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2691.442897][ T2697] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2691.450890][ T2697] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2691.458896][ T2697] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2691.466935][ T2697] [ 2691.548533][ T2697] memory: usage 307200kB, limit 307200kB, failcnt 34252 [ 2691.559381][ T2697] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2691.580756][ T2697] Memory cgroup stats for /syz5: [ 2691.580986][ T2697] anon 143360 [ 2691.580986][ T2697] file 483328 [ 2691.580986][ T2697] kernel 313946112 [ 2691.580986][ T2697] kernel_stack 65536 [ 2691.580986][ T2697] pagetables 77824 [ 2691.580986][ T2697] sec_pagetables 0 [ 2691.580986][ T2697] percpu 4839136 [ 2691.580986][ T2697] sock 0 [ 2691.580986][ T2697] vmalloc 0 [ 2691.580986][ T2697] shmem 483328 [ 2691.580986][ T2697] zswap 0 [ 2691.580986][ T2697] zswapped 0 [ 2691.580986][ T2697] file_mapped 471040 [ 2691.580986][ T2697] file_dirty 0 [ 2691.580986][ T2697] file_writeback 0 [ 2691.580986][ T2697] swapcached 0 [ 2691.580986][ T2697] anon_thp 0 [ 2691.580986][ T2697] file_thp 0 [ 2691.580986][ T2697] shmem_thp 0 [ 2691.580986][ T2697] inactive_anon 245760 [ 2691.580986][ T2697] active_anon 380928 [ 2691.580986][ T2697] inactive_file 0 [ 2691.580986][ T2697] active_file 0 [ 2691.580986][ T2697] unevictable 0 [ 2691.580986][ T2697] slab_reclaimable 16560 [ 2691.580986][ T2697] slab_unreclaimable 308906376 [ 2691.753145][ T2697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2697,uid=0 [ 2691.788531][ T2697] Memory cgroup out of memory: Killed process 2697 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:40 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xc000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe4000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x300], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e46}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2691.952666][ T2736] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2691.962142][ T2733] set_target_v0_checkentry: 11 callbacks suppressed [ 2691.962161][ T2733] Cannot find add_set index 0 as target [ 2692.035383][ T2730] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2692.038733][ T2732] Cannot find add_set index 0 as target 08:46:40 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xc603]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7802]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2692.170080][ T2730] CPU: 1 PID: 2730 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2692.178746][ T2730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2692.188838][ T2730] Call Trace: [ 2692.192144][ T2730] [ 2692.195098][ T2730] dump_stack_lvl+0xd1/0x138 [ 2692.199736][ T2730] dump_header+0x10b/0x85f [ 2692.204203][ T2730] oom_kill_process.cold+0x10/0x15 [ 2692.209375][ T2730] out_of_memory+0x35c/0x14a0 [ 2692.214103][ T2730] ? find_held_lock+0x2d/0x110 [ 2692.218909][ T2730] ? oom_killer_disable+0x280/0x280 [ 2692.224157][ T2730] ? find_held_lock+0x2d/0x110 [ 2692.228973][ T2730] mem_cgroup_out_of_memory+0x206/0x270 [ 2692.234575][ T2730] ? mem_cgroup_margin+0x130/0x130 [ 2692.239731][ T2730] ? lock_downgrade+0x6e0/0x6e0 [ 2692.244718][ T2730] try_charge_memcg+0xefb/0x12f0 [ 2692.249702][ T2730] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2692.255713][ T2730] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2692.261474][ T2730] ? lock_downgrade+0x6e0/0x6e0 [ 2692.266335][ T2730] ? lock_downgrade+0x6e0/0x6e0 [ 2692.271203][ T2730] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2692.276765][ T2730] __alloc_pages+0x1f3/0x5b0 [ 2692.281374][ T2730] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2692.288157][ T2730] ? find_held_lock+0x2d/0x110 [ 2692.292944][ T2730] alloc_pages+0x1aa/0x270 [ 2692.297378][ T2730] pte_alloc_one+0x1a/0x230 [ 2692.301915][ T2730] __pte_alloc+0x6d/0x260 [ 2692.306256][ T2730] ? pmd_install+0x160/0x160 [ 2692.310856][ T2730] ? hugepage_vma_check+0x24e/0x830 [ 2692.316061][ T2730] ? _raw_spin_unlock+0x28/0x40 [ 2692.320936][ T2730] ? __pmd_alloc+0x30c/0x5d0 [ 2692.325543][ T2730] __handle_mm_fault+0x38cf/0x3c90 [ 2692.331110][ T2730] ? vm_iomap_memory+0x190/0x190 [ 2692.336085][ T2730] handle_mm_fault+0x1b6/0x850 [ 2692.340872][ T2730] do_user_addr_fault+0x475/0x1210 [ 2692.345997][ T2730] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2692.351562][ T2730] exc_page_fault+0x98/0x170 [ 2692.356177][ T2730] asm_exc_page_fault+0x26/0x30 [ 2692.361035][ T2730] RIP: 0033:0x7fe5bee2bd49 [ 2692.365454][ T2730] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2692.385065][ T2730] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2692.391138][ T2730] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2692.399109][ T2730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2692.407094][ T2730] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2692.415071][ T2730] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 0000000000291361 [ 2692.423048][ T2730] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2692.431046][ T2730] [ 2692.496824][ T2741] device bridge1385 entered promiscuous mode [ 2692.509301][ T2749] Cannot find add_set index 0 as target [ 2692.534163][ T2730] memory: usage 307200kB, limit 307200kB, failcnt 6371 08:46:41 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xc701]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x308], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2692.549434][ T2750] Cannot find add_set index 0 as target [ 2692.559022][ T2730] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 08:46:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2692.602025][ T2730] Memory cgroup stats for /syz4: [ 2692.602240][ T2730] anon 139264 [ 2692.602240][ T2730] file 253952 [ 2692.602240][ T2730] kernel 314179584 [ 2692.602240][ T2730] kernel_stack 65536 [ 2692.602240][ T2730] pagetables 73728 [ 2692.602240][ T2730] sec_pagetables 0 [ 2692.602240][ T2730] percpu 4849792 [ 2692.602240][ T2730] sock 0 [ 2692.602240][ T2730] vmalloc 0 [ 2692.602240][ T2730] shmem 253952 [ 2692.602240][ T2730] zswap 0 [ 2692.602240][ T2730] zswapped 0 [ 2692.602240][ T2730] file_mapped 253952 [ 2692.602240][ T2730] file_dirty 0 [ 2692.602240][ T2730] file_writeback 0 [ 2692.602240][ T2730] swapcached 0 [ 2692.602240][ T2730] anon_thp 0 [ 2692.602240][ T2730] file_thp 0 [ 2692.602240][ T2730] shmem_thp 0 [ 2692.602240][ T2730] inactive_anon 208896 [ 2692.602240][ T2730] active_anon 184320 [ 2692.602240][ T2730] inactive_file 0 [ 2692.602240][ T2730] active_file 0 [ 2692.602240][ T2730] unevictable 0 [ 2692.602240][ T2730] slab_reclaimable 55648 [ 2692.602240][ T2730] slab_unreclaimable 309100048 [ 2692.751989][ T2752] Cannot find add_set index 0 as target [ 2692.751988][ T2730] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2730,uid=0 [ 2692.767938][ T2761] Cannot find add_set index 0 as target [ 2692.784043][ T2730] Memory cgroup out of memory: Killed process 2730 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:46:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6a370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2692.820735][ T2735] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:46:41 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xc802]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2692.900108][ T2735] CPU: 1 PID: 2735 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2692.908946][ T2735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2692.919037][ T2735] Call Trace: [ 2692.922344][ T2735] [ 2692.925308][ T2735] dump_stack_lvl+0xd1/0x138 [ 2692.929988][ T2735] dump_header+0x10b/0x85f [ 2692.934450][ T2735] oom_kill_process.cold+0x10/0x15 [ 2692.939613][ T2735] out_of_memory+0x35c/0x14a0 [ 2692.944341][ T2735] ? find_held_lock+0x2d/0x110 [ 2692.949147][ T2735] ? oom_killer_disable+0x280/0x280 [ 2692.954413][ T2735] ? find_held_lock+0x2d/0x110 [ 2692.959222][ T2735] mem_cgroup_out_of_memory+0x206/0x270 [ 2692.964816][ T2735] ? mem_cgroup_margin+0x130/0x130 [ 2692.969982][ T2735] ? lock_downgrade+0x6e0/0x6e0 [ 2692.972849][ T2746] bond1199: (slave vlan1060): making interface the new active one [ 2692.974862][ T2735] try_charge_memcg+0xefb/0x12f0 [ 2692.974905][ T2735] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2692.974930][ T2735] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2692.999428][ T2735] ? lock_downgrade+0x6e0/0x6e0 [ 2693.004335][ T2735] obj_cgroup_charge+0x2af/0x5e0 [ 2693.009341][ T2735] ? __anon_vma_prepare+0x64/0x580 [ 2693.014498][ T2735] kmem_cache_alloc+0xb5/0x430 [ 2693.019301][ T2735] __anon_vma_prepare+0x64/0x580 [ 2693.023207][ T2746] bond1199: (slave vlan1060): Enslaving as an active interface with an up link [ 2693.024256][ T2735] ? __pmd_alloc+0x30c/0x5d0 [ 2693.024300][ T2735] __handle_mm_fault+0x392f/0x3c90 [ 2693.024341][ T2735] ? vm_iomap_memory+0x190/0x190 [ 2693.047962][ T2735] handle_mm_fault+0x1b6/0x850 [ 2693.052779][ T2735] do_user_addr_fault+0x475/0x1210 [ 2693.057966][ T2735] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2693.063560][ T2735] exc_page_fault+0x98/0x170 [ 2693.068186][ T2735] asm_exc_page_fault+0x26/0x30 [ 2693.073072][ T2735] RIP: 0033:0x7f5b1fc2bd49 [ 2693.077511][ T2735] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2693.097154][ T2735] RSP: 002b:00007fff16a82090 EFLAGS: 00010246 [ 2693.103288][ T2735] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2693.111294][ T2735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555592f2e8 [ 2693.119296][ T2735] RBP: 00007fff16a82188 R08: 0000000000000000 R09: 0000000000000000 [ 2693.127289][ T2735] R10: 00007f5b1f8000c8 R11: 0000000000000246 R12: 00000000002913ed [ 2693.135294][ T2735] R13: 00007fff16a821b0 R14: 00007f5b1fdabf80 R15: 0000000000000032 [ 2693.143330][ T2735] [ 2693.240824][ T2735] memory: usage 307188kB, limit 307200kB, failcnt 34390 [ 2693.252793][ T2735] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2693.263912][ T2735] Memory cgroup stats for /syz5: [ 2693.264133][ T2735] anon 135168 [ 2693.264133][ T2735] file 483328 [ 2693.264133][ T2735] kernel 313942016 [ 2693.264133][ T2735] kernel_stack 65536 [ 2693.264133][ T2735] pagetables 77824 [ 2693.264133][ T2735] sec_pagetables 0 [ 2693.264133][ T2735] percpu 4839136 [ 2693.264133][ T2735] sock 0 [ 2693.264133][ T2735] vmalloc 0 [ 2693.264133][ T2735] shmem 483328 [ 2693.264133][ T2735] zswap 0 [ 2693.264133][ T2735] zswapped 0 [ 2693.264133][ T2735] file_mapped 471040 [ 2693.264133][ T2735] file_dirty 0 [ 2693.264133][ T2735] file_writeback 0 [ 2693.264133][ T2735] swapcached 0 [ 2693.264133][ T2735] anon_thp 0 [ 2693.264133][ T2735] file_thp 0 [ 2693.264133][ T2735] shmem_thp 0 [ 2693.264133][ T2735] inactive_anon 237568 [ 2693.264133][ T2735] active_anon 380928 [ 2693.264133][ T2735] inactive_file 0 [ 2693.264133][ T2735] active_file 0 [ 2693.264133][ T2735] unevictable 0 [ 2693.264133][ T2735] slab_reclaimable 16560 [ 2693.264133][ T2735] slab_unreclaimable 308905112 [ 2693.277853][ T2766] Cannot find add_set index 0 as target [ 2693.419175][ T2735] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2735,uid=0 [ 2693.442472][ T2735] Memory cgroup out of memory: Killed process 2735 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe4ffffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8003]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x332], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e47}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:42 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xc902]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2693.503570][ T2764] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2693.549398][ T2771] Cannot find add_set index 0 as target [ 2693.556409][ T2772] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2693.646012][ T2764] CPU: 0 PID: 2764 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2693.654668][ T2764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2693.664749][ T2764] Call Trace: [ 2693.668056][ T2764] [ 2693.671009][ T2764] dump_stack_lvl+0xd1/0x138 [ 2693.675138][ T2781] Cannot find add_set index 0 as target [ 2693.675619][ T2764] dump_header+0x10b/0x85f [ 2693.685602][ T2764] oom_kill_process.cold+0x10/0x15 [ 2693.690764][ T2764] out_of_memory+0x35c/0x14a0 [ 2693.695497][ T2764] ? find_held_lock+0x2d/0x110 [ 2693.700306][ T2764] ? oom_killer_disable+0x280/0x280 [ 2693.705553][ T2764] ? find_held_lock+0x2d/0x110 [ 2693.710360][ T2764] mem_cgroup_out_of_memory+0x206/0x270 [ 2693.715955][ T2764] ? mem_cgroup_margin+0x130/0x130 [ 2693.721099][ T2764] ? lock_downgrade+0x6e0/0x6e0 [ 2693.725987][ T2764] try_charge_memcg+0xefb/0x12f0 [ 2693.731030][ T2764] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2693.737018][ T2764] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2693.742756][ T2764] ? lock_downgrade+0x6e0/0x6e0 [ 2693.747618][ T2764] ? lock_downgrade+0x6e0/0x6e0 [ 2693.752490][ T2764] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2693.758048][ T2764] __alloc_pages+0x1f3/0x5b0 [ 2693.762650][ T2764] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2693.769433][ T2764] ? find_held_lock+0x2d/0x110 [ 2693.774223][ T2764] alloc_pages+0x1aa/0x270 [ 2693.778650][ T2764] pte_alloc_one+0x1a/0x230 [ 2693.783173][ T2764] __pte_alloc+0x6d/0x260 [ 2693.787516][ T2764] ? pmd_install+0x160/0x160 [ 2693.792123][ T2764] ? hugepage_vma_check+0x24e/0x830 [ 2693.797432][ T2764] ? _raw_spin_unlock+0x28/0x40 [ 2693.802292][ T2764] ? __pmd_alloc+0x30c/0x5d0 [ 2693.806914][ T2764] __handle_mm_fault+0x38cf/0x3c90 [ 2693.812049][ T2764] ? vm_iomap_memory+0x190/0x190 [ 2693.817026][ T2764] handle_mm_fault+0x1b6/0x850 [ 2693.821900][ T2764] do_user_addr_fault+0x475/0x1210 [ 2693.827043][ T2764] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2693.832612][ T2764] exc_page_fault+0x98/0x170 [ 2693.837211][ T2764] asm_exc_page_fault+0x26/0x30 [ 2693.842070][ T2764] RIP: 0033:0x7fe5bee2bd49 [ 2693.846488][ T2764] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2693.866207][ T2764] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2693.872282][ T2764] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2693.880272][ T2764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2693.888249][ T2764] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 08:46:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8402]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2693.896229][ T2764] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000029194d [ 2693.904202][ T2764] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2693.912197][ T2764] 08:46:42 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xca01]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2693.993868][ T2786] Cannot find add_set index 0 as target 08:46:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8403]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2694.063230][ T2764] memory: usage 307200kB, limit 307200kB, failcnt 6467 [ 2694.090216][ T2764] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2694.124329][ T2764] Memory cgroup stats for /syz4: [ 2694.130171][ T2764] anon 139264 [ 2694.130171][ T2764] file 253952 [ 2694.130171][ T2764] kernel 314179584 [ 2694.130171][ T2764] kernel_stack 65536 [ 2694.130171][ T2764] pagetables 73728 [ 2694.130171][ T2764] sec_pagetables 0 [ 2694.130171][ T2764] percpu 4849792 [ 2694.130171][ T2764] sock 0 [ 2694.130171][ T2764] vmalloc 0 [ 2694.130171][ T2764] shmem 253952 [ 2694.130171][ T2764] zswap 0 [ 2694.130171][ T2764] zswapped 0 [ 2694.130171][ T2764] file_mapped 253952 [ 2694.130171][ T2764] file_dirty 0 [ 2694.130171][ T2764] file_writeback 0 [ 2694.130171][ T2764] swapcached 0 [ 2694.130171][ T2764] anon_thp 0 [ 2694.130171][ T2764] file_thp 0 [ 2694.130171][ T2764] shmem_thp 0 [ 2694.130171][ T2764] inactive_anon 208896 [ 2694.130171][ T2764] active_anon 184320 [ 2694.130171][ T2764] inactive_file 0 [ 2694.130171][ T2764] active_file 0 [ 2694.130171][ T2764] unevictable 0 [ 2694.130171][ T2764] slab_reclaimable 55648 [ 2694.130171][ T2764] slab_unreclaimable 309100048 08:46:43 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xca03]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3a8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2694.330055][ T2779] device bridge1386 entered promiscuous mode [ 2694.689837][ T2789] bond1200: (slave vlan1061): making interface the new active one [ 2694.693144][ T2764] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2694.742184][ T2789] bond1200: (slave vlan1061): Enslaving as an active interface with an up link [ 2694.811471][ T2764] ,cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2764,uid=0 [ 2694.834955][ T2764] Memory cgroup out of memory: Killed process 2764 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:46:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6b370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8603]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2694.981593][ T2800] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2694.991364][ T2802] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2694.991401][ T2802] CPU: 0 PID: 2802 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2694.991425][ T2802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2694.991439][ T2802] Call Trace: [ 2694.991447][ T2802] [ 2694.991457][ T2802] dump_stack_lvl+0xd1/0x138 [ 2694.991493][ T2802] dump_header+0x10b/0x85f [ 2694.991534][ T2802] oom_kill_process.cold+0x10/0x15 [ 2694.991575][ T2802] out_of_memory+0x35c/0x14a0 [ 2694.991618][ T2802] ? find_held_lock+0x2d/0x110 [ 2694.991654][ T2802] ? oom_killer_disable+0x280/0x280 [ 2694.991700][ T2802] ? find_held_lock+0x2d/0x110 [ 2694.991740][ T2802] mem_cgroup_out_of_memory+0x206/0x270 [ 2694.991778][ T2802] ? mem_cgroup_margin+0x130/0x130 [ 2694.991810][ T2802] ? lock_downgrade+0x6e0/0x6e0 [ 2694.991853][ T2802] try_charge_memcg+0xefb/0x12f0 [ 2694.991888][ T2802] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2694.991916][ T2802] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2694.991954][ T2802] ? lock_downgrade+0x6e0/0x6e0 [ 2694.991981][ T2802] ? lock_downgrade+0x6e0/0x6e0 [ 2694.992021][ T2802] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2694.992052][ T2802] __alloc_pages+0x1f3/0x5b0 [ 2694.992083][ T2802] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2694.992128][ T2802] ? find_held_lock+0x2d/0x110 [ 2694.992172][ T2802] alloc_pages+0x1aa/0x270 [ 2694.992203][ T2802] pte_alloc_one+0x1a/0x230 [ 2694.992235][ T2802] __pte_alloc+0x6d/0x260 [ 2694.992266][ T2802] ? pmd_install+0x160/0x160 [ 2694.992294][ T2802] ? hugepage_vma_check+0x24e/0x830 [ 2694.992320][ T2802] ? _raw_spin_unlock+0x28/0x40 [ 2694.992350][ T2802] ? __pmd_alloc+0x30c/0x5d0 [ 2694.992387][ T2802] __handle_mm_fault+0x38cf/0x3c90 [ 2694.992429][ T2802] ? vm_iomap_memory+0x190/0x190 [ 2694.992491][ T2802] handle_mm_fault+0x1b6/0x850 [ 2694.992532][ T2802] do_user_addr_fault+0x475/0x1210 [ 2694.992566][ T2802] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2694.992608][ T2802] exc_page_fault+0x98/0x170 [ 2694.992635][ T2802] asm_exc_page_fault+0x26/0x30 [ 2694.992661][ T2802] RIP: 0033:0x7fe5bee2bd49 [ 2694.992682][ T2802] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2694.992716][ T2802] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2694.992737][ T2802] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2694.992753][ T2802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2694.992768][ T2802] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2694.992784][ T2802] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 0000000000291f1b [ 2694.992800][ T2802] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2694.992838][ T2802] [ 2694.992927][ T2802] memory: usage 307200kB, limit 307200kB, failcnt 6581 [ 2694.992944][ T2802] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2694.992960][ T2802] Memory cgroup stats for /syz4: [ 2694.993113][ T2802] anon 139264 [ 2694.993113][ T2802] file 253952 [ 2694.993113][ T2802] kernel 314179584 [ 2694.993113][ T2802] kernel_stack 65536 [ 2694.993113][ T2802] pagetables 73728 [ 2694.993113][ T2802] sec_pagetables 0 [ 2694.993113][ T2802] percpu 4849792 [ 2694.993113][ T2802] sock 0 [ 2694.993113][ T2802] vmalloc 0 [ 2694.993113][ T2802] shmem 253952 [ 2694.993113][ T2802] zswap 0 [ 2694.993113][ T2802] zswapped 0 [ 2694.993113][ T2802] file_mapped 253952 [ 2694.993113][ T2802] file_dirty 0 [ 2694.993113][ T2802] file_writeback 0 [ 2694.993113][ T2802] swapcached 0 [ 2694.993113][ T2802] anon_thp 0 [ 2694.993113][ T2802] file_thp 0 [ 2694.993113][ T2802] shmem_thp 0 [ 2694.993113][ T2802] inactive_anon 159744 [ 2694.993113][ T2802] active_anon 184320 [ 2694.993113][ T2802] inactive_file 0 [ 2694.993113][ T2802] active_file 0 [ 2694.993113][ T2802] unevictable 0 [ 2694.993113][ T2802] slab_reclaimable 55648 [ 2694.993113][ T2802] slab_unreclaimable 309100048 [ 2694.993175][ T2802] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2802,uid=0 [ 2694.993317][ T2802] Memory cgroup out of memory: Killed process 2802 (syz-executor.4) total-vm:54540kB, anon-rss:484kB, file-rss:8736kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2695.192678][ T2782] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2695.535536][ T2782] CPU: 0 PID: 2782 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2695.544184][ T2782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2695.554256][ T2782] Call Trace: [ 2695.557594][ T2782] [ 2695.560554][ T2782] dump_stack_lvl+0xd1/0x138 [ 2695.565184][ T2782] dump_header+0x10b/0x85f [ 2695.569650][ T2782] oom_kill_process.cold+0x10/0x15 [ 2695.574804][ T2782] out_of_memory+0x35c/0x14a0 [ 2695.579533][ T2782] ? find_held_lock+0x2d/0x110 [ 2695.584765][ T2782] ? oom_killer_disable+0x280/0x280 [ 2695.589998][ T2782] ? find_held_lock+0x2d/0x110 [ 2695.594967][ T2782] mem_cgroup_out_of_memory+0x206/0x270 [ 2695.600632][ T2782] ? mem_cgroup_margin+0x130/0x130 [ 2695.605771][ T2782] ? lock_downgrade+0x6e0/0x6e0 [ 2695.610660][ T2782] try_charge_memcg+0xefb/0x12f0 [ 2695.615629][ T2782] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2695.621630][ T2782] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2695.627380][ T2782] ? lock_downgrade+0x6e0/0x6e0 [ 2695.632249][ T2782] ? lock_downgrade+0x6e0/0x6e0 [ 2695.637117][ T2782] ? rcu_read_unlock+0x9/0x60 [ 2695.641833][ T2782] obj_cgroup_charge+0x2af/0x5e0 [ 2695.646790][ T2782] ? copy_process+0x3aa/0x7520 [ 2695.651572][ T2782] kmem_cache_alloc_node+0xb7/0x460 [ 2695.656794][ T2782] copy_process+0x3aa/0x7520 [ 2695.661407][ T2782] ? __lock_acquire+0xbc3/0x56d0 [ 2695.666371][ T2782] ? __cleanup_sighand+0xb0/0xb0 [ 2695.671330][ T2782] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2695.677319][ T2782] ? psi_memstall_leave+0x174/0x250 [ 2695.682535][ T2782] kernel_clone+0xeb/0x990 [ 2695.686963][ T2782] ? create_io_thread+0xf0/0xf0 [ 2695.691826][ T2782] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2695.698088][ T2782] ? lock_downgrade+0x6e0/0x6e0 [ 2695.702959][ T2782] __do_sys_clone+0xba/0x100 [ 2695.707554][ T2782] ? kernel_clone+0x990/0x990 [ 2695.712249][ T2782] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2695.718155][ T2782] do_syscall_64+0x39/0xb0 [ 2695.722584][ T2782] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2695.728482][ T2782] RIP: 0033:0x7f5b1fc8d4f1 [ 2695.732899][ T2782] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2695.752508][ T2782] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2695.760930][ T2782] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2695.768905][ T2782] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2695.776891][ T2782] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2695.784869][ T2782] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2695.792843][ T2782] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2695.800845][ T2782] [ 2695.872319][ T2782] memory: usage 307200kB, limit 307200kB, failcnt 34575 [ 2695.881221][ T2782] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2695.888430][ T2782] Memory cgroup stats for /syz5: [ 2695.888625][ T2782] anon 143360 [ 2695.888625][ T2782] file 483328 [ 2695.888625][ T2782] kernel 313929728 [ 2695.888625][ T2782] kernel_stack 65536 [ 2695.888625][ T2782] pagetables 77824 [ 2695.888625][ T2782] sec_pagetables 0 [ 2695.888625][ T2782] percpu 4839072 [ 2695.888625][ T2782] sock 0 [ 2695.888625][ T2782] vmalloc 0 [ 2695.888625][ T2782] shmem 483328 [ 2695.888625][ T2782] zswap 0 [ 2695.888625][ T2782] zswapped 0 [ 2695.888625][ T2782] file_mapped 471040 [ 2695.888625][ T2782] file_dirty 0 [ 2695.888625][ T2782] file_writeback 0 [ 2695.888625][ T2782] swapcached 0 [ 2695.888625][ T2782] anon_thp 0 [ 2695.888625][ T2782] file_thp 0 [ 2695.888625][ T2782] shmem_thp 0 [ 2695.888625][ T2782] inactive_anon 237568 [ 2695.888625][ T2782] active_anon 380928 [ 2695.888625][ T2782] inactive_file 0 [ 2695.888625][ T2782] active_file 0 [ 2695.888625][ T2782] unevictable 0 [ 2695.888625][ T2782] slab_reclaimable 16560 [ 2695.888625][ T2782] slab_unreclaimable 308897144 [ 2696.033682][ T2782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2782,uid=0 [ 2696.049568][ T2782] Memory cgroup out of memory: Killed process 2782 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe8020000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:44 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xcc00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3d2], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e48}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8800]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2696.162965][ T2811] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:46:45 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xce00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8802]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:45 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xd400]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2696.389147][ T2810] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2696.427281][ T2810] CPU: 0 PID: 2810 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2696.435950][ T2810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2696.446035][ T2810] Call Trace: [ 2696.449338][ T2810] [ 2696.452300][ T2810] dump_stack_lvl+0xd1/0x138 [ 2696.456933][ T2810] dump_header+0x10b/0x85f [ 2696.461403][ T2810] oom_kill_process.cold+0x10/0x15 [ 2696.466567][ T2810] out_of_memory+0x35c/0x14a0 [ 2696.471297][ T2810] ? find_held_lock+0x2d/0x110 [ 2696.476108][ T2810] ? oom_killer_disable+0x280/0x280 [ 2696.481354][ T2810] ? find_held_lock+0x2d/0x110 [ 2696.486170][ T2810] mem_cgroup_out_of_memory+0x206/0x270 [ 2696.491753][ T2810] ? mem_cgroup_margin+0x130/0x130 [ 2696.496893][ T2810] ? lock_downgrade+0x6e0/0x6e0 [ 2696.501779][ T2810] try_charge_memcg+0xefb/0x12f0 [ 2696.506744][ T2810] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2696.512758][ T2810] ? lock_downgrade+0x6e0/0x6e0 [ 2696.517649][ T2810] charge_memcg+0x90/0x3b0 [ 2696.522093][ T2810] __mem_cgroup_charge+0x2b/0x90 [ 2696.527062][ T2810] do_wp_page+0x7ec/0x3370 [ 2696.531526][ T2810] ? lock_release+0x810/0x810 [ 2696.536217][ T2810] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2696.541619][ T2810] ? do_raw_spin_lock+0x124/0x2b0 [ 2696.546660][ T2810] ? rwlock_bug.part.0+0x90/0x90 [ 2696.551616][ T2810] ? lock_chain_count+0x20/0x20 [ 2696.556493][ T2810] __handle_mm_fault+0x1f58/0x3c90 [ 2696.561645][ T2810] ? vm_iomap_memory+0x190/0x190 [ 2696.566636][ T2810] handle_mm_fault+0x1b6/0x850 [ 2696.571436][ T2810] do_user_addr_fault+0x475/0x1210 [ 2696.576575][ T2810] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2696.582156][ T2810] exc_page_fault+0x98/0x170 [ 2696.586766][ T2810] asm_exc_page_fault+0x26/0x30 [ 2696.591639][ T2810] RIP: 0033:0x7fe5bee39570 [ 2696.596061][ T2810] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2696.615675][ T2810] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 [ 2696.621757][ T2810] RAX: 00000000d0464f56 RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2696.629732][ T2810] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000c5bc2dd 08:46:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8900]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2696.637704][ T2810] RBP: 00000000d0464f56 R08: 0000000000000f56 R09: 00000000d0464f5a [ 2696.645676][ T2810] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 [ 2696.653648][ T2810] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff87bf14ec [ 2696.661623][ T2810] ? __sock_create+0x7c/0x790 [ 2696.666333][ T2810] 08:46:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9e02]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2696.830575][ T2815] device bridge1387 entered promiscuous mode 08:46:45 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xda01]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2696.931078][ T2810] memory: usage 307180kB, limit 307200kB, failcnt 6643 [ 2696.946807][ T2810] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2696.966111][ T2810] Memory cgroup stats for /syz4: [ 2696.966342][ T2810] anon 118784 [ 2696.966342][ T2810] file 253952 [ 2696.966342][ T2810] kernel 314171392 [ 2696.966342][ T2810] kernel_stack 65536 [ 2696.966342][ T2810] pagetables 69632 [ 2696.966342][ T2810] sec_pagetables 0 [ 2696.966342][ T2810] percpu 4849792 [ 2696.966342][ T2810] sock 0 [ 2696.966342][ T2810] vmalloc 0 [ 2696.966342][ T2810] shmem 253952 [ 2696.966342][ T2810] zswap 0 [ 2696.966342][ T2810] zswapped 0 [ 2696.966342][ T2810] file_mapped 253952 [ 2696.966342][ T2810] file_dirty 0 [ 2696.966342][ T2810] file_writeback 0 [ 2696.966342][ T2810] swapcached 0 [ 2696.966342][ T2810] anon_thp 0 [ 2696.966342][ T2810] file_thp 0 [ 2696.966342][ T2810] shmem_thp 0 [ 2696.966342][ T2810] inactive_anon 188416 [ 2696.966342][ T2810] active_anon 184320 [ 2696.966342][ T2810] inactive_file 0 [ 2696.966342][ T2810] active_file 0 [ 2696.966342][ T2810] unevictable 0 [ 2696.966342][ T2810] slab_reclaimable 53720 [ 2696.966342][ T2810] slab_unreclaimable 309099704 [ 2697.099844][ T2819] bond1201: (slave vlan1062): making interface the new active one [ 2697.146805][ T2819] bond1201: (slave vlan1062): Enslaving as an active interface with an up link [ 2697.177856][ T2810] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2810,uid=0 [ 2697.193593][ T2810] Memory cgroup out of memory: Killed process 2810 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2697.229744][ T2829] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2697.303292][ T2827] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2697.330885][ T2827] CPU: 1 PID: 2827 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2697.339552][ T2827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2697.349646][ T2827] Call Trace: [ 2697.352948][ T2827] [ 2697.355899][ T2827] dump_stack_lvl+0xd1/0x138 [ 2697.360532][ T2827] dump_header+0x10b/0x85f [ 2697.364996][ T2827] oom_kill_process.cold+0x10/0x15 [ 2697.370151][ T2827] out_of_memory+0x35c/0x14a0 [ 2697.374868][ T2827] ? find_held_lock+0x2d/0x110 [ 2697.379668][ T2827] ? oom_killer_disable+0x280/0x280 [ 2697.384891][ T2827] ? find_held_lock+0x2d/0x110 [ 2697.389706][ T2827] mem_cgroup_out_of_memory+0x206/0x270 [ 2697.395307][ T2827] ? mem_cgroup_margin+0x130/0x130 [ 2697.400467][ T2827] ? lock_downgrade+0x6e0/0x6e0 [ 2697.405375][ T2827] try_charge_memcg+0xefb/0x12f0 [ 2697.410358][ T2827] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2697.416375][ T2827] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2697.422132][ T2827] ? lock_downgrade+0x6e0/0x6e0 [ 2697.427019][ T2827] obj_cgroup_charge+0x2af/0x5e0 [ 2697.431976][ T2827] ? vm_area_dup+0x7d/0x380 [ 2697.436507][ T2827] kmem_cache_alloc+0xb5/0x430 [ 2697.441315][ T2827] vm_area_dup+0x7d/0x380 [ 2697.445684][ T2827] ? mt_slot+0xa1/0x170 [ 2697.449887][ T2827] ? mas_next_nentry+0x610/0xab0 [ 2697.454873][ T2827] ? mas_next_node+0x547/0xa00 [ 2697.459682][ T2827] ? mas_find+0x211/0xd10 [ 2697.464052][ T2827] ? vm_area_alloc+0x100/0x100 [ 2697.468832][ T2827] ? validate_mm_mt+0x149/0x1b0 [ 2697.473704][ T2827] ? remove_vma+0x130/0x130 [ 2697.478226][ T2827] ? can_vma_merge_before+0x390/0x390 [ 2697.483624][ T2827] __split_vma+0xae/0x5e0 [ 2697.487970][ T2827] ? vma_merge+0x2cf/0x870 [ 2697.492412][ T2827] split_vma+0xa3/0xe0 [ 2697.496505][ T2827] mprotect_fixup+0x686/0x960 [ 2697.501210][ T2827] ? mas_find+0x211/0xd10 [ 2697.505556][ T2827] ? change_protection+0x3b30/0x3b30 [ 2697.510879][ T2827] do_mprotect_pkey+0x6fd/0xa70 [ 2697.515839][ T2827] ? mprotect_fixup+0x960/0x960 [ 2697.520712][ T2827] ? up_write+0x1b0/0x520 [ 2697.525089][ T2827] __x64_sys_mprotect+0x78/0xb0 [ 2697.529949][ T2827] do_syscall_64+0x39/0xb0 [ 2697.534380][ T2827] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2697.540285][ T2827] RIP: 0033:0x7f5b1fc8c1d7 [ 2697.544702][ T2827] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2697.564311][ T2827] RSP: 002b:00007fff16a81fe8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2697.572731][ T2827] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5b1fc8c1d7 [ 2697.580704][ T2827] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5b20999000 [ 2697.588682][ T2827] RBP: 00007fff16a820c0 R08: 00000000ffffffff R09: 00007f5b209b8700 [ 2697.596667][ T2827] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff16a821e0 [ 2697.604641][ T2827] R13: 00007f5b209b8700 R14: 0000000000000000 R15: 0000000000022000 [ 2697.613499][ T2827] [ 2697.700756][ T2827] memory: usage 307192kB, limit 307200kB, failcnt 34758 [ 2697.711113][ T2827] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2697.721089][ T2827] Memory cgroup stats for /syz5: [ 2697.721219][ T2827] anon 139264 [ 2697.721219][ T2827] file 483328 [ 2697.721219][ T2827] kernel 313942016 [ 2697.721219][ T2827] kernel_stack 65536 [ 2697.721219][ T2827] pagetables 77824 [ 2697.721219][ T2827] sec_pagetables 0 [ 2697.721219][ T2827] percpu 4839136 [ 2697.721219][ T2827] sock 0 [ 2697.721219][ T2827] vmalloc 0 [ 2697.721219][ T2827] shmem 483328 [ 2697.721219][ T2827] zswap 0 [ 2697.721219][ T2827] zswapped 0 [ 2697.721219][ T2827] file_mapped 471040 [ 2697.721219][ T2827] file_dirty 0 [ 2697.721219][ T2827] file_writeback 0 [ 2697.721219][ T2827] swapcached 0 [ 2697.721219][ T2827] anon_thp 0 [ 2697.721219][ T2827] file_thp 0 [ 2697.721219][ T2827] shmem_thp 0 [ 2697.721219][ T2827] inactive_anon 241664 [ 2697.721219][ T2827] active_anon 380928 [ 2697.721219][ T2827] inactive_file 0 [ 2697.721219][ T2827] active_file 0 [ 2697.721219][ T2827] unevictable 0 [ 2697.721219][ T2827] slab_reclaimable 16560 [ 2697.721219][ T2827] slab_unreclaimable 308905512 [ 2697.879856][ T2827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2827,uid=0 [ 2697.914992][ T2827] Memory cgroup out of memory: Killed process 2827 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8928kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xea000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa602]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xdb00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3e0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e49}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2697.980641][ T2840] set_target_v0_checkentry: 12 callbacks suppressed [ 2697.980664][ T2840] Cannot find add_set index 0 as target [ 2698.030934][ T2847] Cannot find add_set index 0 as target [ 2698.038288][ T2844] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:46:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xdc00]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2698.241904][ T2859] Cannot find add_set index 0 as target [ 2698.259755][ T2848] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2698.289201][ T2862] Cannot find add_set index 0 as target [ 2698.316345][ T2848] CPU: 0 PID: 2848 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2698.325082][ T2848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2698.335159][ T2848] Call Trace: [ 2698.338551][ T2848] [ 2698.341508][ T2848] dump_stack_lvl+0xd1/0x138 [ 2698.346145][ T2848] dump_header+0x10b/0x85f [ 2698.350605][ T2848] oom_kill_process.cold+0x10/0x15 [ 2698.355754][ T2848] out_of_memory+0x35c/0x14a0 [ 2698.360467][ T2848] ? find_held_lock+0x2d/0x110 [ 2698.365258][ T2848] ? oom_killer_disable+0x280/0x280 [ 2698.370493][ T2848] ? find_held_lock+0x2d/0x110 [ 2698.375285][ T2848] mem_cgroup_out_of_memory+0x206/0x270 [ 2698.380861][ T2848] ? mem_cgroup_margin+0x130/0x130 [ 2698.385999][ T2848] ? lock_downgrade+0x6e0/0x6e0 [ 2698.390903][ T2848] try_charge_memcg+0xefb/0x12f0 [ 2698.395872][ T2848] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2698.401886][ T2848] ? lock_downgrade+0x6e0/0x6e0 [ 2698.406857][ T2848] charge_memcg+0x90/0x3b0 [ 2698.411302][ T2848] __mem_cgroup_charge+0x2b/0x90 [ 2698.416260][ T2848] do_wp_page+0x7ec/0x3370 [ 2698.420711][ T2848] ? lock_release+0x810/0x810 [ 2698.425393][ T2848] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2698.430798][ T2848] ? do_raw_spin_lock+0x124/0x2b0 [ 2698.435841][ T2848] ? rwlock_bug.part.0+0x90/0x90 [ 2698.440793][ T2848] ? lock_chain_count+0x20/0x20 [ 2698.445914][ T2848] __handle_mm_fault+0x1f58/0x3c90 [ 2698.451054][ T2848] ? vm_iomap_memory+0x190/0x190 [ 2698.456025][ T2848] handle_mm_fault+0x1b6/0x850 [ 2698.460809][ T2848] do_user_addr_fault+0x475/0x1210 [ 2698.465943][ T2848] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2698.471521][ T2848] exc_page_fault+0x98/0x170 [ 2698.476120][ T2848] asm_exc_page_fault+0x26/0x30 [ 2698.480975][ T2848] RIP: 0033:0x7fe5bee39570 [ 2698.485494][ T2848] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2698.505117][ T2848] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 [ 2698.511187][ T2848] RAX: 00000000f6afa43a RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2698.519164][ T2848] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000d79f723 [ 2698.527136][ T2848] RBP: 00000000f6afa43a R08: 000000000000043a R09: 00000000f6afa43e [ 2698.535107][ T2848] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 [ 2698.543080][ T2848] R13: 0000000000000001 R14: 000000000000002f R15: ffffffff89bcf1ac [ 2698.551055][ T2848] ? xas_load+0x4c/0x140 [ 2698.555330][ T2848] 08:46:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x500], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:47 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xe800]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb802]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2698.662685][ T2853] device bridge1388 entered promiscuous mode [ 2698.719313][ T2868] Cannot find add_set index 0 as target [ 2698.733512][ T2871] Cannot find add_set index 0 as target 08:46:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xbc02]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2698.829930][ T2854] bond1202: (slave vlan1063): making interface the new active one [ 2698.921032][ T2848] memory: usage 307188kB, limit 307200kB, failcnt 6718 [ 2698.926900][ T2873] Cannot find add_set index 0 as target [ 2698.954763][ T2848] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2698.962087][ T2854] bond1202: (slave vlan1063): Enslaving as an active interface with an up link [ 2699.002890][ T2848] Memory cgroup stats for /syz4: [ 2699.003178][ T2848] anon 135168 [ 2699.003178][ T2848] file 253952 [ 2699.003178][ T2848] kernel 314171392 [ 2699.003178][ T2848] kernel_stack 65536 [ 2699.003178][ T2848] pagetables 69632 [ 2699.003178][ T2848] sec_pagetables 0 [ 2699.003178][ T2848] percpu 4849792 [ 2699.003178][ T2848] sock 0 [ 2699.003178][ T2848] vmalloc 0 [ 2699.003178][ T2848] shmem 253952 [ 2699.003178][ T2848] zswap 0 [ 2699.003178][ T2848] zswapped 0 [ 2699.003178][ T2848] file_mapped 253952 [ 2699.003178][ T2848] file_dirty 0 [ 2699.003178][ T2848] file_writeback 0 [ 2699.003178][ T2848] swapcached 0 [ 2699.003178][ T2848] anon_thp 0 [ 2699.003178][ T2848] file_thp 0 [ 2699.003178][ T2848] shmem_thp 0 [ 2699.003178][ T2848] inactive_anon 204800 [ 2699.003178][ T2848] active_anon 184320 [ 2699.003178][ T2848] inactive_file 0 [ 2699.003178][ T2848] active_file 0 [ 2699.003178][ T2848] unevictable 0 [ 2699.003178][ T2848] slab_reclaimable 53720 [ 2699.003178][ T2848] slab_unreclaimable 309099400 [ 2699.210559][ T2848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2848,uid=0 [ 2699.233793][ T2848] Memory cgroup out of memory: Killed process 2848 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2699.282369][ T2861] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2699.393352][ T2852] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2699.418629][ T2852] CPU: 0 PID: 2852 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2699.427276][ T2852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2699.437358][ T2852] Call Trace: [ 2699.440660][ T2852] [ 2699.443616][ T2852] dump_stack_lvl+0xd1/0x138 [ 2699.448272][ T2852] dump_header+0x10b/0x85f [ 2699.452736][ T2852] oom_kill_process.cold+0x10/0x15 [ 2699.457891][ T2852] out_of_memory+0x35c/0x14a0 [ 2699.462628][ T2852] ? find_held_lock+0x2d/0x110 [ 2699.467438][ T2852] ? oom_killer_disable+0x280/0x280 [ 2699.472687][ T2852] ? find_held_lock+0x2d/0x110 [ 2699.477496][ T2852] mem_cgroup_out_of_memory+0x206/0x270 [ 2699.483087][ T2852] ? mem_cgroup_margin+0x130/0x130 [ 2699.488235][ T2852] ? lock_downgrade+0x6e0/0x6e0 [ 2699.493129][ T2852] try_charge_memcg+0xefb/0x12f0 [ 2699.498110][ T2852] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2699.504124][ T2852] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2699.509880][ T2852] ? lock_downgrade+0x6e0/0x6e0 [ 2699.514769][ T2852] obj_cgroup_charge+0x2af/0x5e0 [ 2699.519735][ T2852] ? vm_area_dup+0x7d/0x380 [ 2699.524249][ T2852] kmem_cache_alloc+0xb5/0x430 [ 2699.529039][ T2852] vm_area_dup+0x7d/0x380 [ 2699.533392][ T2852] ? mt_slot+0xa1/0x170 [ 2699.537574][ T2852] ? mas_next_nentry+0x610/0xab0 [ 2699.542637][ T2852] ? mas_next_node+0x547/0xa00 [ 2699.547432][ T2852] ? mas_find+0x211/0xd10 [ 2699.551793][ T2852] ? vm_area_alloc+0x100/0x100 [ 2699.556582][ T2852] ? validate_mm_mt+0x149/0x1b0 [ 2699.561463][ T2852] ? remove_vma+0x130/0x130 [ 2699.565983][ T2852] ? can_vma_merge_before+0x390/0x390 [ 2699.571393][ T2852] __split_vma+0xae/0x5e0 [ 2699.575729][ T2852] ? vma_merge+0x2cf/0x870 [ 2699.580154][ T2852] split_vma+0xa3/0xe0 [ 2699.584237][ T2852] mprotect_fixup+0x686/0x960 [ 2699.588931][ T2852] ? mas_find+0x211/0xd10 [ 2699.593266][ T2852] ? change_protection+0x3b30/0x3b30 [ 2699.598569][ T2852] do_mprotect_pkey+0x6fd/0xa70 [ 2699.603438][ T2852] ? mprotect_fixup+0x960/0x960 [ 2699.608296][ T2852] ? up_write+0x1b0/0x520 [ 2699.612674][ T2852] __x64_sys_mprotect+0x78/0xb0 [ 2699.617540][ T2852] do_syscall_64+0x39/0xb0 [ 2699.621972][ T2852] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2699.627872][ T2852] RIP: 0033:0x7f5b1fc8c1d7 [ 2699.632290][ T2852] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2699.651908][ T2852] RSP: 002b:00007fff16a81fe8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2699.660327][ T2852] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5b1fc8c1d7 [ 2699.668300][ T2852] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5b20999000 [ 2699.676278][ T2852] RBP: 00007fff16a820c0 R08: 00000000ffffffff R09: 00007f5b209b8700 [ 2699.684252][ T2852] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff16a821e0 [ 2699.692224][ T2852] R13: 00007f5b209b8700 R14: 0000000000000000 R15: 0000000000022000 [ 2699.700218][ T2852] [ 2699.801370][ T2852] memory: usage 307200kB, limit 307200kB, failcnt 34949 [ 2699.812062][ T2852] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2699.821504][ T2852] Memory cgroup stats for /syz5: [ 2699.821654][ T2852] anon 139264 [ 2699.821654][ T2852] file 483328 [ 2699.821654][ T2852] kernel 313950208 [ 2699.821654][ T2852] kernel_stack 65536 [ 2699.821654][ T2852] pagetables 77824 [ 2699.821654][ T2852] sec_pagetables 0 [ 2699.821654][ T2852] percpu 4839136 [ 2699.821654][ T2852] sock 0 [ 2699.821654][ T2852] vmalloc 8192 [ 2699.821654][ T2852] shmem 483328 [ 2699.821654][ T2852] zswap 0 [ 2699.821654][ T2852] zswapped 0 [ 2699.821654][ T2852] file_mapped 471040 [ 2699.821654][ T2852] file_dirty 0 [ 2699.821654][ T2852] file_writeback 0 [ 2699.821654][ T2852] swapcached 0 [ 2699.821654][ T2852] anon_thp 0 [ 2699.821654][ T2852] file_thp 0 [ 2699.821654][ T2852] shmem_thp 0 [ 2699.821654][ T2852] inactive_anon 225280 [ 2699.821654][ T2852] active_anon 380928 [ 2699.821654][ T2852] inactive_file 0 [ 2699.821654][ T2852] active_file 0 [ 2699.821654][ T2852] unevictable 0 [ 2699.821654][ T2852] slab_reclaimable 16560 [ 2699.821654][ T2852] slab_unreclaimable 308905512 [ 2699.989348][ T2852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2852,uid=0 08:46:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xea030000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:48 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xf202]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc802]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x600], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e4a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6d370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2700.030283][ T2852] Memory cgroup out of memory: Killed process 2852 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2700.107520][ T2878] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2700.170711][ T2882] Cannot find add_set index 0 as target [ 2700.194090][ T2884] Cannot find add_set index 0 as target [ 2700.229994][ T2877] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2700.300719][ T2877] CPU: 1 PID: 2877 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2700.309374][ T2877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2700.319464][ T2877] Call Trace: [ 2700.322777][ T2877] [ 2700.325735][ T2877] dump_stack_lvl+0xd1/0x138 [ 2700.330368][ T2877] dump_header+0x10b/0x85f [ 2700.334828][ T2877] oom_kill_process.cold+0x10/0x15 [ 2700.339988][ T2877] out_of_memory+0x35c/0x14a0 [ 2700.344718][ T2877] ? find_held_lock+0x2d/0x110 [ 2700.349527][ T2877] ? oom_killer_disable+0x280/0x280 [ 2700.354776][ T2877] ? find_held_lock+0x2d/0x110 [ 2700.359601][ T2877] mem_cgroup_out_of_memory+0x206/0x270 [ 2700.365197][ T2877] ? mem_cgroup_margin+0x130/0x130 [ 2700.370346][ T2877] ? lock_downgrade+0x6e0/0x6e0 [ 2700.375244][ T2877] try_charge_memcg+0xefb/0x12f0 [ 2700.380224][ T2877] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2700.386239][ T2877] ? lock_downgrade+0x6e0/0x6e0 [ 2700.391119][ T2877] charge_memcg+0x90/0x3b0 [ 2700.395555][ T2877] __mem_cgroup_charge+0x2b/0x90 [ 2700.400600][ T2877] do_wp_page+0x7ec/0x3370 [ 2700.405042][ T2877] ? lock_release+0x810/0x810 [ 2700.409746][ T2877] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2700.415157][ T2877] ? do_raw_spin_lock+0x124/0x2b0 [ 2700.420223][ T2877] ? rwlock_bug.part.0+0x90/0x90 [ 2700.425184][ T2877] ? lock_chain_count+0x20/0x20 [ 2700.430047][ T2877] __handle_mm_fault+0x1f58/0x3c90 [ 2700.435180][ T2877] ? vm_iomap_memory+0x190/0x190 [ 2700.440156][ T2877] handle_mm_fault+0x1b6/0x850 [ 2700.444953][ T2877] do_user_addr_fault+0x475/0x1210 [ 2700.450080][ T2877] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2700.455643][ T2877] exc_page_fault+0x98/0x170 [ 2700.460241][ T2877] asm_exc_page_fault+0x26/0x30 [ 2700.465110][ T2877] RIP: 0033:0x7fe5bee39570 [ 2700.469550][ T2877] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2700.489181][ T2877] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 [ 2700.495258][ T2877] RAX: 000000002d5c6283 RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2700.503232][ T2877] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000a2539a9 [ 2700.511202][ T2877] RBP: 000000002d5c6283 R08: 0000000000000283 R09: 000000002d5c6287 [ 2700.519174][ T2877] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 [ 2700.527145][ T2877] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d0e5c7 [ 2700.535118][ T2877] ? apparmor_socket_create+0x137/0x660 [ 2700.540704][ T2877] 08:46:49 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xf401]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc803]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2700.610734][ T2896] Cannot find add_set index 0 as target 08:46:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xcc03]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2700.663066][ T2877] memory: usage 307184kB, limit 307200kB, failcnt 6775 [ 2700.678761][ T2877] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2700.718821][ T2877] Memory cgroup stats for /syz4: [ 2700.719044][ T2877] anon 131072 [ 2700.719044][ T2877] file 253952 [ 2700.719044][ T2877] kernel 314171392 [ 2700.719044][ T2877] kernel_stack 65536 [ 2700.719044][ T2877] pagetables 69632 [ 2700.719044][ T2877] sec_pagetables 0 [ 2700.719044][ T2877] percpu 4849792 [ 2700.719044][ T2877] sock 0 [ 2700.719044][ T2877] vmalloc 0 [ 2700.719044][ T2877] shmem 253952 [ 2700.719044][ T2877] zswap 0 [ 2700.719044][ T2877] zswapped 0 [ 2700.719044][ T2877] file_mapped 253952 [ 2700.719044][ T2877] file_dirty 0 [ 2700.719044][ T2877] file_writeback 0 [ 2700.719044][ T2877] swapcached 0 [ 2700.719044][ T2877] anon_thp 0 [ 2700.719044][ T2877] file_thp 0 [ 2700.719044][ T2877] shmem_thp 0 [ 2700.719044][ T2877] inactive_anon 200704 [ 2700.719044][ T2877] active_anon 184320 [ 2700.719044][ T2877] inactive_file 0 [ 2700.719044][ T2877] active_file 0 [ 2700.719044][ T2877] unevictable 0 [ 2700.719044][ T2877] slab_reclaimable 53720 [ 2700.719044][ T2877] slab_unreclaimable 309099400 08:46:49 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xf403]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd803]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x700], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2700.851908][ T2886] device bridge1389 entered promiscuous mode [ 2700.959783][ T2877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2877,uid=0 [ 2700.981202][ T2892] bond1203: (slave vlan1064): making interface the new active one [ 2700.997316][ T2892] bond1203: (slave vlan1064): Enslaving as an active interface with an up link [ 2701.104672][ T2877] Memory cgroup out of memory: Killed process 2877 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2701.146095][ T2889] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2701.210415][ T2885] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2701.259380][ T2885] CPU: 1 PID: 2885 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2701.268047][ T2885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2701.278107][ T2885] Call Trace: [ 2701.281387][ T2885] [ 2701.284325][ T2885] dump_stack_lvl+0xd1/0x138 [ 2701.288938][ T2885] dump_header+0x10b/0x85f [ 2701.293380][ T2885] oom_kill_process.cold+0x10/0x15 [ 2701.298510][ T2885] out_of_memory+0x35c/0x14a0 [ 2701.303229][ T2885] ? find_held_lock+0x2d/0x110 [ 2701.308015][ T2885] ? oom_killer_disable+0x280/0x280 [ 2701.313238][ T2885] ? find_held_lock+0x2d/0x110 [ 2701.318040][ T2885] mem_cgroup_out_of_memory+0x206/0x270 [ 2701.323615][ T2885] ? mem_cgroup_margin+0x130/0x130 [ 2701.328741][ T2885] ? lock_downgrade+0x6e0/0x6e0 [ 2701.333617][ T2885] try_charge_memcg+0xefb/0x12f0 [ 2701.338576][ T2885] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2701.344569][ T2885] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2701.350310][ T2885] ? lock_downgrade+0x6e0/0x6e0 [ 2701.355204][ T2885] obj_cgroup_charge+0x2af/0x5e0 [ 2701.360156][ T2885] ? vm_area_dup+0x7d/0x380 [ 2701.364669][ T2885] kmem_cache_alloc+0xb5/0x430 [ 2701.369448][ T2885] vm_area_dup+0x7d/0x380 [ 2701.373785][ T2885] ? mt_slot+0xa1/0x170 [ 2701.377956][ T2885] ? mas_next_nentry+0x610/0xab0 [ 2701.382912][ T2885] ? mas_next_node+0x547/0xa00 [ 2701.387698][ T2885] ? mas_find+0x211/0xd10 [ 2701.392043][ T2885] ? vm_area_alloc+0x100/0x100 [ 2701.396820][ T2885] ? validate_mm_mt+0x149/0x1b0 [ 2701.401682][ T2885] ? remove_vma+0x130/0x130 [ 2701.406198][ T2885] ? can_vma_merge_before+0x390/0x390 [ 2701.411584][ T2885] __split_vma+0xae/0x5e0 [ 2701.416001][ T2885] ? vma_merge+0x2cf/0x870 [ 2701.420447][ T2885] split_vma+0xa3/0xe0 [ 2701.424546][ T2885] mprotect_fixup+0x686/0x960 [ 2701.429351][ T2885] ? mas_find+0x211/0xd10 [ 2701.433705][ T2885] ? change_protection+0x3b30/0x3b30 [ 2701.439049][ T2885] do_mprotect_pkey+0x6fd/0xa70 [ 2701.443926][ T2885] ? mprotect_fixup+0x960/0x960 [ 2701.448806][ T2885] ? up_write+0x1b0/0x520 [ 2701.453197][ T2885] __x64_sys_mprotect+0x78/0xb0 [ 2701.458076][ T2885] do_syscall_64+0x39/0xb0 [ 2701.462522][ T2885] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2701.468447][ T2885] RIP: 0033:0x7f5b1fc8c1d7 [ 2701.473080][ T2885] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2701.492712][ T2885] RSP: 002b:00007fff16a81fe8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2701.501148][ T2885] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5b1fc8c1d7 [ 2701.509140][ T2885] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5b20999000 [ 2701.517116][ T2885] RBP: 00007fff16a820c0 R08: 00000000ffffffff R09: 00007f5b209b8700 [ 2701.525108][ T2885] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff16a821e0 [ 2701.533099][ T2885] R13: 00007f5b209b8700 R14: 0000000000000000 R15: 0000000000022000 [ 2701.541092][ T2885] [ 2701.621859][ T2885] memory: usage 307200kB, limit 307200kB, failcnt 35131 [ 2701.631480][ T2885] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2701.648652][ T2885] Memory cgroup stats for /syz5: [ 2701.648863][ T2885] anon 139264 [ 2701.648863][ T2885] file 483328 [ 2701.648863][ T2885] kernel 313942016 [ 2701.648863][ T2885] kernel_stack 65536 [ 2701.648863][ T2885] pagetables 77824 [ 2701.648863][ T2885] sec_pagetables 0 [ 2701.648863][ T2885] percpu 4839136 [ 2701.648863][ T2885] sock 0 [ 2701.648863][ T2885] vmalloc 0 [ 2701.648863][ T2885] shmem 483328 [ 2701.648863][ T2885] zswap 0 [ 2701.648863][ T2885] zswapped 0 [ 2701.648863][ T2885] file_mapped 471040 [ 2701.648863][ T2885] file_dirty 0 [ 2701.648863][ T2885] file_writeback 0 [ 2701.648863][ T2885] swapcached 0 [ 2701.648863][ T2885] anon_thp 0 [ 2701.648863][ T2885] file_thp 0 [ 2701.648863][ T2885] shmem_thp 0 [ 2701.648863][ T2885] inactive_anon 241664 [ 2701.648863][ T2885] active_anon 380928 [ 2701.648863][ T2885] inactive_file 0 [ 2701.648863][ T2885] active_file 0 [ 2701.648863][ T2885] unevictable 0 [ 2701.648863][ T2885] slab_reclaimable 16560 [ 2701.648863][ T2885] slab_unreclaimable 308905512 [ 2701.801957][ T2885] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2885,uid=0 [ 2701.830233][ T2885] Memory cgroup out of memory: Killed process 2885 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:50 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xf503]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe203]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e4b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6e370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x803], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe403]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:50 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xf803]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2701.984021][ T2922] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:46:50 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xfa03]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xef02]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2702.141629][ T2919] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:46:51 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xfc02]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2702.263884][ T2919] CPU: 1 PID: 2919 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2702.272539][ T2919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2702.282621][ T2919] Call Trace: [ 2702.285920][ T2919] [ 2702.288878][ T2919] dump_stack_lvl+0xd1/0x138 [ 2702.293507][ T2919] dump_header+0x10b/0x85f [ 2702.297968][ T2919] oom_kill_process.cold+0x10/0x15 [ 2702.303124][ T2919] out_of_memory+0x35c/0x14a0 [ 2702.307857][ T2919] ? find_held_lock+0x2d/0x110 [ 2702.312658][ T2919] ? oom_killer_disable+0x280/0x280 [ 2702.317903][ T2919] ? find_held_lock+0x2d/0x110 [ 2702.322712][ T2919] mem_cgroup_out_of_memory+0x206/0x270 [ 2702.328312][ T2919] ? mem_cgroup_margin+0x130/0x130 [ 2702.333457][ T2919] ? lock_downgrade+0x6e0/0x6e0 [ 2702.338351][ T2919] try_charge_memcg+0xefb/0x12f0 [ 2702.343317][ T2919] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2702.349318][ T2919] ? lock_downgrade+0x6e0/0x6e0 [ 2702.354189][ T2919] charge_memcg+0x90/0x3b0 [ 2702.358619][ T2919] __mem_cgroup_charge+0x2b/0x90 [ 2702.363582][ T2919] do_wp_page+0x7ec/0x3370 [ 2702.368017][ T2919] ? lock_release+0x810/0x810 [ 2702.372695][ T2919] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2702.378079][ T2919] ? do_raw_spin_lock+0x124/0x2b0 [ 2702.383109][ T2919] ? rwlock_bug.part.0+0x90/0x90 [ 2702.388055][ T2919] ? lock_chain_count+0x20/0x20 [ 2702.392916][ T2919] __handle_mm_fault+0x1f58/0x3c90 [ 2702.398048][ T2919] ? vm_iomap_memory+0x190/0x190 [ 2702.403119][ T2919] handle_mm_fault+0x1b6/0x850 [ 2702.407902][ T2919] do_user_addr_fault+0x475/0x1210 [ 2702.413026][ T2919] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2702.418588][ T2919] exc_page_fault+0x98/0x170 [ 2702.423183][ T2919] asm_exc_page_fault+0x26/0x30 [ 2702.428039][ T2919] RIP: 0033:0x7fe5bee39570 [ 2702.432457][ T2919] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2702.452067][ T2919] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 08:46:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x1300], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2702.458137][ T2919] RAX: 00000000f6afa43a RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2702.466112][ T2919] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000d79f723 [ 2702.474082][ T2919] RBP: 00000000f6afa43a R08: 000000000000043a R09: 00000000f6afa43e [ 2702.482062][ T2919] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 [ 2702.490038][ T2919] R13: 0000000000000001 R14: 000000000000002f R15: ffffffff89bcf1ac [ 2702.498018][ T2919] ? xas_load+0x4c/0x140 [ 2702.502312][ T2919] [ 2702.631048][ T2926] device bridge1390 entered promiscuous mode [ 2702.800020][ T2919] memory: usage 307188kB, limit 307200kB, failcnt 6850 [ 2702.807499][ T2919] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2702.836179][ T2919] Memory cgroup stats for /syz4: [ 2702.836413][ T2919] anon 135168 [ 2702.836413][ T2919] file 253952 [ 2702.836413][ T2919] kernel 314171392 [ 2702.836413][ T2919] kernel_stack 65536 [ 2702.836413][ T2919] pagetables 69632 [ 2702.836413][ T2919] sec_pagetables 0 [ 2702.836413][ T2919] percpu 4849792 [ 2702.836413][ T2919] sock 0 [ 2702.836413][ T2919] vmalloc 0 [ 2702.836413][ T2919] shmem 253952 [ 2702.836413][ T2919] zswap 0 [ 2702.836413][ T2919] zswapped 0 [ 2702.836413][ T2919] file_mapped 253952 [ 2702.836413][ T2919] file_dirty 0 [ 2702.836413][ T2919] file_writeback 0 [ 2702.836413][ T2919] swapcached 0 [ 2702.836413][ T2919] anon_thp 0 [ 2702.836413][ T2919] file_thp 0 [ 2702.836413][ T2919] shmem_thp 0 [ 2702.836413][ T2919] inactive_anon 204800 [ 2702.836413][ T2919] active_anon 184320 [ 2702.836413][ T2919] inactive_file 0 [ 2702.836413][ T2919] active_file 0 [ 2702.836413][ T2919] unevictable 0 [ 2702.836413][ T2919] slab_reclaimable 53720 [ 2702.836413][ T2919] slab_unreclaimable 309099400 [ 2703.020866][ T2919] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2919,uid=0 [ 2703.034555][ T2931] bond1204: (slave vlan1065): making interface the new active one [ 2703.050877][ T2919] Memory cgroup out of memory: Killed process 2919 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2703.061090][ T2931] bond1204: (slave vlan1065): Enslaving as an active interface with an up link [ 2703.139968][ T2935] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2703.231050][ T2927] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2703.252097][ T2927] CPU: 1 PID: 2927 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2703.260737][ T2927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2703.270888][ T2927] Call Trace: [ 2703.274169][ T2927] [ 2703.277100][ T2927] dump_stack_lvl+0xd1/0x138 [ 2703.281708][ T2927] dump_header+0x10b/0x85f [ 2703.286147][ T2927] oom_kill_process.cold+0x10/0x15 [ 2703.291285][ T2927] out_of_memory+0x35c/0x14a0 [ 2703.295981][ T2927] ? find_held_lock+0x2d/0x110 [ 2703.300759][ T2927] ? oom_killer_disable+0x280/0x280 [ 2703.305979][ T2927] ? find_held_lock+0x2d/0x110 [ 2703.310792][ T2927] mem_cgroup_out_of_memory+0x206/0x270 [ 2703.316357][ T2927] ? mem_cgroup_margin+0x130/0x130 [ 2703.321569][ T2927] ? lock_downgrade+0x6e0/0x6e0 [ 2703.326437][ T2927] try_charge_memcg+0xefb/0x12f0 [ 2703.331391][ T2927] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2703.337378][ T2927] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2703.343118][ T2927] ? lock_downgrade+0x6e0/0x6e0 [ 2703.347991][ T2927] obj_cgroup_charge+0x2af/0x5e0 [ 2703.352954][ T2927] ? vm_area_dup+0x7d/0x380 [ 2703.357464][ T2927] kmem_cache_alloc+0xb5/0x430 [ 2703.362245][ T2927] vm_area_dup+0x7d/0x380 [ 2703.366581][ T2927] ? mt_slot+0xa1/0x170 [ 2703.370752][ T2927] ? mas_next_nentry+0x610/0xab0 [ 2703.375704][ T2927] ? mas_next_node+0x547/0xa00 [ 2703.380484][ T2927] ? mas_find+0x211/0xd10 [ 2703.384829][ T2927] ? vm_area_alloc+0x100/0x100 [ 2703.389598][ T2927] ? validate_mm_mt+0x149/0x1b0 [ 2703.394455][ T2927] ? remove_vma+0x130/0x130 [ 2703.398971][ T2927] ? can_vma_merge_before+0x390/0x390 [ 2703.404357][ T2927] __split_vma+0xae/0x5e0 [ 2703.408695][ T2927] ? vma_merge+0x2cf/0x870 [ 2703.413122][ T2927] split_vma+0xa3/0xe0 [ 2703.417200][ T2927] mprotect_fixup+0x686/0x960 [ 2703.421896][ T2927] ? mas_find+0x211/0xd10 [ 2703.426241][ T2927] ? change_protection+0x3b30/0x3b30 [ 2703.431544][ T2927] do_mprotect_pkey+0x6fd/0xa70 [ 2703.436409][ T2927] ? mprotect_fixup+0x960/0x960 [ 2703.441269][ T2927] ? up_write+0x1b0/0x520 [ 2703.445648][ T2927] __x64_sys_mprotect+0x78/0xb0 [ 2703.450507][ T2927] do_syscall_64+0x39/0xb0 [ 2703.454938][ T2927] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2703.460835][ T2927] RIP: 0033:0x7f5b1fc8c1d7 [ 2703.465254][ T2927] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2703.484865][ T2927] RSP: 002b:00007fff16a81fe8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2703.493303][ T2927] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5b1fc8c1d7 [ 2703.501291][ T2927] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5b20999000 [ 2703.509271][ T2927] RBP: 00007fff16a820c0 R08: 00000000ffffffff R09: 00007f5b209b8700 [ 2703.517255][ T2927] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff16a821e0 [ 2703.525233][ T2927] R13: 00007f5b209b8700 R14: 0000000000000000 R15: 0000000000022000 [ 2703.533245][ T2927] [ 2703.622559][ T2927] memory: usage 307192kB, limit 307200kB, failcnt 35291 [ 2703.639845][ T2927] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2703.650801][ T2927] Memory cgroup stats for /syz5: [ 2703.651019][ T2927] anon 139264 [ 2703.651019][ T2927] file 483328 [ 2703.651019][ T2927] kernel 313942016 [ 2703.651019][ T2927] kernel_stack 65536 [ 2703.651019][ T2927] pagetables 77824 [ 2703.651019][ T2927] sec_pagetables 0 [ 2703.651019][ T2927] percpu 4839136 [ 2703.651019][ T2927] sock 0 [ 2703.651019][ T2927] vmalloc 0 [ 2703.651019][ T2927] shmem 483328 [ 2703.651019][ T2927] zswap 0 [ 2703.651019][ T2927] zswapped 0 [ 2703.651019][ T2927] file_mapped 471040 [ 2703.651019][ T2927] file_dirty 0 [ 2703.651019][ T2927] file_writeback 0 [ 2703.651019][ T2927] swapcached 0 [ 2703.651019][ T2927] anon_thp 0 [ 2703.651019][ T2927] file_thp 0 [ 2703.651019][ T2927] shmem_thp 0 [ 2703.651019][ T2927] inactive_anon 237568 [ 2703.651019][ T2927] active_anon 380928 [ 2703.651019][ T2927] inactive_file 0 [ 2703.651019][ T2927] active_file 0 [ 2703.651019][ T2927] unevictable 0 [ 2703.651019][ T2927] slab_reclaimable 16560 [ 2703.651019][ T2927] slab_unreclaimable 308905512 08:46:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf2010000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf402]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:52 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xfc03]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x1f00], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e4c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6f370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2703.812715][ T2927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2927,uid=0 [ 2703.840224][ T2927] Memory cgroup out of memory: Killed process 2927 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2703.920055][ T2953] set_target_v0_checkentry: 11 callbacks suppressed [ 2703.920075][ T2953] Cannot find add_set index 0 as target [ 2703.948937][ T2956] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2703.981920][ T2949] Cannot find add_set index 0 as target 08:46:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf403]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2704.112242][ T2952] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2704.163219][ T2952] CPU: 0 PID: 2952 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2704.171871][ T2952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2704.181954][ T2952] Call Trace: [ 2704.185261][ T2952] [ 2704.188215][ T2952] dump_stack_lvl+0xd1/0x138 [ 2704.192846][ T2952] dump_header+0x10b/0x85f [ 2704.197313][ T2952] oom_kill_process.cold+0x10/0x15 [ 2704.202472][ T2952] out_of_memory+0x35c/0x14a0 [ 2704.207183][ T2952] ? find_held_lock+0x2d/0x110 [ 2704.211983][ T2952] ? oom_killer_disable+0x280/0x280 [ 2704.217229][ T2952] ? find_held_lock+0x2d/0x110 [ 2704.222037][ T2952] mem_cgroup_out_of_memory+0x206/0x270 [ 2704.227627][ T2952] ? mem_cgroup_margin+0x130/0x130 [ 2704.232783][ T2952] ? lock_downgrade+0x6e0/0x6e0 [ 2704.237688][ T2952] try_charge_memcg+0xefb/0x12f0 [ 2704.242669][ T2952] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2704.248678][ T2952] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2704.254443][ T2952] ? lock_downgrade+0x6e0/0x6e0 [ 2704.259326][ T2952] ? lock_downgrade+0x6e0/0x6e0 [ 2704.263749][ T2963] device bridge1391 entered promiscuous mode [ 2704.264199][ T2952] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2704.264236][ T2952] __alloc_pages+0x1f3/0x5b0 [ 2704.280351][ T2952] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2704.287171][ T2952] ? find_held_lock+0x2d/0x110 [ 2704.291997][ T2952] alloc_pages+0x1aa/0x270 [ 2704.296451][ T2952] pte_alloc_one+0x1a/0x230 [ 2704.300994][ T2952] __pte_alloc+0x6d/0x260 [ 2704.305368][ T2952] ? pmd_install+0x160/0x160 [ 2704.309992][ T2952] ? hugepage_vma_check+0x24e/0x830 [ 2704.315227][ T2952] ? _raw_spin_unlock+0x28/0x40 [ 2704.320112][ T2952] ? __pmd_alloc+0x30c/0x5d0 [ 2704.324766][ T2952] __handle_mm_fault+0x38cf/0x3c90 [ 2704.329924][ T2952] ? vm_iomap_memory+0x190/0x190 [ 2704.334920][ T2952] handle_mm_fault+0x1b6/0x850 [ 2704.339724][ T2952] do_user_addr_fault+0x475/0x1210 [ 2704.344860][ T2952] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2704.350456][ T2952] exc_page_fault+0x98/0x170 [ 2704.355069][ T2952] asm_exc_page_fault+0x26/0x30 [ 2704.359944][ T2952] RIP: 0033:0x7fe5bee2bd49 [ 2704.364370][ T2952] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2704.383984][ T2952] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2704.390070][ T2952] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2704.398046][ T2952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2704.406020][ T2952] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2704.413990][ T2952] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 0000000000294294 [ 2704.421965][ T2952] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2704.429957][ T2952] 08:46:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x30000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2704.476410][ T2966] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:46:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfd03]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2704.523024][ T2970] Cannot find add_set index 0 as target [ 2704.580883][ T2972] Cannot find add_set index 0 as target 08:46:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x40000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2704.672110][ T2952] memory: usage 307200kB, limit 307200kB, failcnt 6915 [ 2704.685088][ T2952] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2704.722352][ T2974] Cannot find add_set index 0 as target [ 2704.729397][ T2952] Memory cgroup stats for /syz4: [ 2704.729623][ T2952] anon 139264 [ 2704.729623][ T2952] file 253952 [ 2704.729623][ T2952] kernel 314179584 [ 2704.729623][ T2952] kernel_stack 65536 [ 2704.729623][ T2952] pagetables 73728 [ 2704.729623][ T2952] sec_pagetables 0 [ 2704.729623][ T2952] percpu 4849792 [ 2704.729623][ T2952] sock 0 [ 2704.729623][ T2952] vmalloc 0 [ 2704.729623][ T2952] shmem 253952 [ 2704.729623][ T2952] zswap 0 [ 2704.729623][ T2952] zswapped 0 [ 2704.729623][ T2952] file_mapped 253952 [ 2704.729623][ T2952] file_dirty 0 [ 2704.729623][ T2952] file_writeback 0 [ 2704.729623][ T2952] swapcached 0 [ 2704.729623][ T2952] anon_thp 0 [ 2704.729623][ T2952] file_thp 0 [ 2704.729623][ T2952] shmem_thp 0 [ 2704.729623][ T2952] inactive_anon 208896 [ 2704.729623][ T2952] active_anon 184320 [ 2704.729623][ T2952] inactive_file 0 [ 2704.729623][ T2952] active_file 0 [ 2704.729623][ T2952] unevictable 0 [ 2704.729623][ T2952] slab_reclaimable 55648 [ 2704.729623][ T2952] slab_unreclaimable 309100048 [ 2704.794058][ T2968] bond1205: (slave vlan1066): making interface the new active one 08:46:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3203], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2704.918136][ T2976] Cannot find add_set index 0 as target [ 2704.972915][ T2968] bond1205: (slave vlan1066): Enslaving as an active interface with an up link [ 2704.988374][ T2980] Cannot find add_set index 0 as target 08:46:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2705.024005][ T2952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2952,uid=0 [ 2705.102446][ T2952] Memory cgroup out of memory: Killed process 2952 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2705.147187][ T2961] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2705.213286][ T2961] CPU: 0 PID: 2961 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2705.221943][ T2961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2705.232025][ T2961] Call Trace: [ 2705.235326][ T2961] [ 2705.238283][ T2961] dump_stack_lvl+0xd1/0x138 [ 2705.242916][ T2961] dump_header+0x10b/0x85f [ 2705.247378][ T2961] oom_kill_process.cold+0x10/0x15 [ 2705.252550][ T2961] out_of_memory+0x35c/0x14a0 [ 2705.257289][ T2961] ? oom_killer_disable+0x280/0x280 [ 2705.262550][ T2961] ? find_held_lock+0x2d/0x110 [ 2705.267368][ T2961] mem_cgroup_out_of_memory+0x206/0x270 [ 2705.272965][ T2961] ? mem_cgroup_margin+0x130/0x130 [ 2705.278123][ T2961] ? lock_downgrade+0x6e0/0x6e0 [ 2705.283025][ T2961] try_charge_memcg+0xefb/0x12f0 [ 2705.288024][ T2961] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2705.294040][ T2961] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2705.299801][ T2961] ? lock_downgrade+0x6e0/0x6e0 [ 2705.304682][ T2961] ? lock_downgrade+0x6e0/0x6e0 [ 2705.309562][ T2961] ? rcu_read_unlock+0x9/0x60 [ 2705.314290][ T2961] obj_cgroup_charge+0x2af/0x5e0 [ 2705.319266][ T2961] ? copy_process+0x3aa/0x7520 [ 2705.324058][ T2961] kmem_cache_alloc_node+0xb7/0x460 [ 2705.329289][ T2961] copy_process+0x3aa/0x7520 [ 2705.333913][ T2961] ? __lock_acquire+0xbc3/0x56d0 [ 2705.338899][ T2961] ? __cleanup_sighand+0xb0/0xb0 [ 2705.343874][ T2961] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2705.349886][ T2961] ? psi_memstall_leave+0x174/0x250 [ 2705.355118][ T2961] kernel_clone+0xeb/0x990 [ 2705.359548][ T2961] ? create_io_thread+0xf0/0xf0 [ 2705.364420][ T2961] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2705.370679][ T2961] ? lock_downgrade+0x6e0/0x6e0 [ 2705.375544][ T2961] __do_sys_clone+0xba/0x100 [ 2705.380141][ T2961] ? kernel_clone+0x990/0x990 [ 2705.384838][ T2961] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2705.390743][ T2961] do_syscall_64+0x39/0xb0 [ 2705.395170][ T2961] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2705.401069][ T2961] RIP: 0033:0x7f5b1fc8d4f1 [ 2705.405488][ T2961] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2705.425104][ T2961] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2705.433527][ T2961] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2705.441507][ T2961] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2705.449481][ T2961] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2705.457478][ T2961] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2705.465628][ T2961] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2705.473619][ T2961] [ 2705.595874][ T2961] memory: usage 307200kB, limit 307200kB, failcnt 35403 [ 2705.602998][ T2961] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2705.630004][ T2961] Memory cgroup stats for /syz5: [ 2705.630227][ T2961] anon 143360 [ 2705.630227][ T2961] file 483328 [ 2705.630227][ T2961] kernel 313946112 [ 2705.630227][ T2961] kernel_stack 65536 [ 2705.630227][ T2961] pagetables 77824 [ 2705.630227][ T2961] sec_pagetables 0 [ 2705.630227][ T2961] percpu 4839136 [ 2705.630227][ T2961] sock 0 [ 2705.630227][ T2961] vmalloc 0 [ 2705.630227][ T2961] shmem 483328 [ 2705.630227][ T2961] zswap 0 [ 2705.630227][ T2961] zswapped 0 [ 2705.630227][ T2961] file_mapped 471040 [ 2705.630227][ T2961] file_dirty 0 [ 2705.630227][ T2961] file_writeback 0 [ 2705.630227][ T2961] swapcached 0 [ 2705.630227][ T2961] anon_thp 0 [ 2705.630227][ T2961] file_thp 0 [ 2705.630227][ T2961] shmem_thp 0 [ 2705.630227][ T2961] inactive_anon 245760 [ 2705.630227][ T2961] active_anon 380928 [ 2705.630227][ T2961] inactive_file 0 [ 2705.630227][ T2961] active_file 0 [ 2705.630227][ T2961] unevictable 0 [ 2705.630227][ T2961] slab_reclaimable 16560 [ 2705.630227][ T2961] slab_unreclaimable 308906376 [ 2705.813895][ T2961] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2961,uid=0 [ 2705.841434][ T2961] Memory cgroup out of memory: Killed process 2961 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf4020000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xe0ffff]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:54 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffff]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e4d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x70370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3f00], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2705.969418][ T2990] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2705.989367][ T2995] Cannot find add_set index 0 as target [ 2706.011729][ T2993] Cannot find add_set index 0 as target 08:46:54 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x1000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2706.169646][ T2991] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2706.201232][ T3005] Cannot find add_set index 0 as target [ 2706.228910][ T2991] CPU: 0 PID: 2991 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2706.237560][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2706.247637][ T2991] Call Trace: [ 2706.250937][ T2991] [ 2706.253893][ T2991] dump_stack_lvl+0xd1/0x138 [ 2706.258532][ T2991] dump_header+0x10b/0x85f [ 2706.262992][ T2991] oom_kill_process.cold+0x10/0x15 [ 2706.268156][ T2991] out_of_memory+0x35c/0x14a0 [ 2706.272884][ T2991] ? find_held_lock+0x2d/0x110 [ 2706.277695][ T2991] ? oom_killer_disable+0x280/0x280 [ 2706.282946][ T2991] ? find_held_lock+0x2d/0x110 [ 2706.287754][ T2991] mem_cgroup_out_of_memory+0x206/0x270 [ 2706.293343][ T2991] ? mem_cgroup_margin+0x130/0x130 [ 2706.298493][ T2991] ? lock_downgrade+0x6e0/0x6e0 [ 2706.303394][ T2991] try_charge_memcg+0xefb/0x12f0 [ 2706.308374][ T2991] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2706.314389][ T2991] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2706.320153][ T2991] ? lock_downgrade+0x6e0/0x6e0 [ 2706.325037][ T2991] ? lock_downgrade+0x6e0/0x6e0 [ 2706.329933][ T2991] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2706.335520][ T2991] __alloc_pages+0x1f3/0x5b0 [ 2706.340139][ T2991] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2706.346944][ T2991] ? find_held_lock+0x2d/0x110 [ 2706.351750][ T2991] alloc_pages+0x1aa/0x270 [ 2706.356188][ T2991] pte_alloc_one+0x1a/0x230 [ 2706.360720][ T2991] __pte_alloc+0x6d/0x260 [ 2706.366702][ T2991] ? pmd_install+0x160/0x160 [ 2706.371312][ T2991] ? hugepage_vma_check+0x24e/0x830 [ 2706.376526][ T2991] ? _raw_spin_unlock+0x28/0x40 [ 2706.381400][ T2991] ? __pmd_alloc+0x30c/0x5d0 [ 2706.386016][ T2991] __handle_mm_fault+0x38cf/0x3c90 [ 2706.391167][ T2991] ? vm_iomap_memory+0x190/0x190 [ 2706.396286][ T2991] handle_mm_fault+0x1b6/0x850 [ 2706.401088][ T2991] do_user_addr_fault+0x475/0x1210 [ 2706.406236][ T2991] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2706.411818][ T2991] exc_page_fault+0x98/0x170 [ 2706.416428][ T2991] asm_exc_page_fault+0x26/0x30 [ 2706.421308][ T2991] RIP: 0033:0x7fe5bee2bd49 [ 2706.425731][ T2991] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2706.445341][ T2991] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2706.451414][ T2991] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2706.459398][ T2991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2706.467372][ T2991] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2706.475348][ T2991] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 0000000000294aa8 [ 2706.483342][ T2991] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2706.491332][ T2991] 08:46:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:55 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2010000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x4000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2706.759457][ T2991] memory: usage 307200kB, limit 307200kB, failcnt 7014 [ 2706.780692][ T2991] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2706.812897][ T2991] Memory cgroup stats for /syz4: [ 2706.813124][ T2991] anon 139264 [ 2706.813124][ T2991] file 253952 [ 2706.813124][ T2991] kernel 314179584 [ 2706.813124][ T2991] kernel_stack 65536 [ 2706.813124][ T2991] pagetables 73728 [ 2706.813124][ T2991] sec_pagetables 0 [ 2706.813124][ T2991] percpu 4849792 [ 2706.813124][ T2991] sock 0 [ 2706.813124][ T2991] vmalloc 0 [ 2706.813124][ T2991] shmem 253952 [ 2706.813124][ T2991] zswap 0 [ 2706.813124][ T2991] zswapped 0 [ 2706.813124][ T2991] file_mapped 253952 [ 2706.813124][ T2991] file_dirty 0 [ 2706.813124][ T2991] file_writeback 0 [ 2706.813124][ T2991] swapcached 0 [ 2706.813124][ T2991] anon_thp 0 [ 2706.813124][ T2991] file_thp 0 [ 2706.813124][ T2991] shmem_thp 0 [ 2706.813124][ T2991] inactive_anon 208896 [ 2706.813124][ T2991] active_anon 184320 [ 2706.813124][ T2991] inactive_file 0 [ 2706.813124][ T2991] active_file 0 [ 2706.813124][ T2991] unevictable 0 [ 2706.813124][ T2991] slab_reclaimable 55648 [ 2706.813124][ T2991] slab_unreclaimable 309100048 [ 2706.829732][ T2999] device bridge1392 entered promiscuous mode [ 2707.003889][ T2991] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=2991,uid=0 [ 2707.031218][ T2991] Memory cgroup out of memory: Killed process 2991 (syz-executor.4) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2707.087083][ T3003] bond1206: (slave vlan1067): making interface the new active one [ 2707.110100][ T3003] bond1206: (slave vlan1067): Enslaving as an active interface with an up link [ 2707.170331][ T3000] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2707.202943][ T3000] CPU: 0 PID: 3000 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2707.211605][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2707.221693][ T3000] Call Trace: [ 2707.224992][ T3000] [ 2707.227943][ T3000] dump_stack_lvl+0xd1/0x138 [ 2707.232573][ T3000] dump_header+0x10b/0x85f [ 2707.237039][ T3000] oom_kill_process.cold+0x10/0x15 [ 2707.242197][ T3000] out_of_memory+0x35c/0x14a0 [ 2707.246920][ T3000] ? find_held_lock+0x2d/0x110 [ 2707.249343][ T3009] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2707.251704][ T3000] ? oom_killer_disable+0x280/0x280 [ 2707.251746][ T3000] ? find_held_lock+0x2d/0x110 [ 2707.251782][ T3000] mem_cgroup_out_of_memory+0x206/0x270 [ 2707.251819][ T3000] ? mem_cgroup_margin+0x130/0x130 [ 2707.251851][ T3000] ? lock_downgrade+0x6e0/0x6e0 [ 2707.251897][ T3000] try_charge_memcg+0xefb/0x12f0 [ 2707.251930][ T3000] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2707.251957][ T3000] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2707.251995][ T3000] ? lock_downgrade+0x6e0/0x6e0 [ 2707.252020][ T3000] ? lock_downgrade+0x6e0/0x6e0 [ 2707.252043][ T3000] ? rcu_read_unlock+0x9/0x60 [ 2707.252090][ T3000] obj_cgroup_charge+0x2af/0x5e0 [ 2707.252121][ T3000] ? copy_process+0x3aa/0x7520 [ 2707.252145][ T3000] kmem_cache_alloc_node+0xb7/0x460 [ 2707.252176][ T3000] copy_process+0x3aa/0x7520 [ 2707.252204][ T3000] ? __lock_acquire+0xbc3/0x56d0 [ 2707.252242][ T3000] ? __cleanup_sighand+0xb0/0xb0 [ 2707.252268][ T3000] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2707.252298][ T3000] ? psi_memstall_leave+0x174/0x250 [ 2707.252338][ T3000] kernel_clone+0xeb/0x990 [ 2707.252367][ T3000] ? create_io_thread+0xf0/0xf0 [ 2707.252397][ T3000] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2707.252433][ T3000] ? lock_downgrade+0x6e0/0x6e0 [ 2707.252470][ T3000] __do_sys_clone+0xba/0x100 [ 2707.252496][ T3000] ? kernel_clone+0x990/0x990 [ 2707.252541][ T3000] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2707.252578][ T3000] do_syscall_64+0x39/0xb0 [ 2707.252612][ T3000] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2707.252638][ T3000] RIP: 0033:0x7f5b1fc8d4f1 [ 2707.252659][ T3000] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2707.252682][ T3000] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2707.252706][ T3000] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2707.252722][ T3000] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2707.252737][ T3000] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2707.252753][ T3000] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2707.252769][ T3000] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2707.252806][ T3000] [ 2707.338928][ T3000] memory: usage 307200kB, limit 307200kB, failcnt 35512 [ 2707.567536][ T3000] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2707.578592][ T3000] Memory cgroup stats for /syz5: [ 2707.578806][ T3000] anon 143360 [ 2707.578806][ T3000] file 483328 [ 2707.578806][ T3000] kernel 313946112 [ 2707.578806][ T3000] kernel_stack 65536 [ 2707.578806][ T3000] pagetables 77824 [ 2707.578806][ T3000] sec_pagetables 0 [ 2707.578806][ T3000] percpu 4839136 [ 2707.578806][ T3000] sock 0 [ 2707.578806][ T3000] vmalloc 0 [ 2707.578806][ T3000] shmem 483328 [ 2707.578806][ T3000] zswap 0 [ 2707.578806][ T3000] zswapped 0 [ 2707.578806][ T3000] file_mapped 471040 [ 2707.578806][ T3000] file_dirty 0 [ 2707.578806][ T3000] file_writeback 0 [ 2707.578806][ T3000] swapcached 0 [ 2707.578806][ T3000] anon_thp 0 [ 2707.578806][ T3000] file_thp 0 [ 2707.578806][ T3000] shmem_thp 0 [ 2707.578806][ T3000] inactive_anon 245760 [ 2707.578806][ T3000] active_anon 380928 [ 2707.578806][ T3000] inactive_file 0 [ 2707.578806][ T3000] active_file 0 [ 2707.578806][ T3000] unevictable 0 [ 2707.578806][ T3000] slab_reclaimable 16560 [ 2707.578806][ T3000] slab_unreclaimable 308906376 [ 2707.737638][ T3000] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3000,uid=0 [ 2707.770085][ T3000] Memory cgroup out of memory: Killed process 3000 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf8000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:56 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:56 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0xa803], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e4e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:56 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2707.902813][ T3033] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:46:56 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2708.091924][ T3027] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:46:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:57 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x40e0000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2708.301467][ T3027] CPU: 0 PID: 3027 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2708.310115][ T3027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2708.320182][ T3027] Call Trace: [ 2708.323476][ T3027] [ 2708.326427][ T3027] dump_stack_lvl+0xd1/0x138 [ 2708.331055][ T3027] dump_header+0x10b/0x85f [ 2708.335517][ T3027] oom_kill_process.cold+0x10/0x15 [ 2708.340676][ T3027] out_of_memory+0x35c/0x14a0 [ 2708.345402][ T3027] ? find_held_lock+0x2d/0x110 [ 2708.350240][ T3027] ? oom_killer_disable+0x280/0x280 [ 2708.355480][ T3027] ? find_held_lock+0x2d/0x110 [ 2708.360287][ T3027] mem_cgroup_out_of_memory+0x206/0x270 [ 2708.365876][ T3027] ? mem_cgroup_margin+0x130/0x130 [ 2708.371032][ T3027] ? lock_downgrade+0x6e0/0x6e0 [ 2708.374019][ T3038] device bridge1393 entered promiscuous mode [ 2708.375905][ T3027] try_charge_memcg+0xefb/0x12f0 [ 2708.375947][ T3027] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2708.375987][ T3027] ? lock_downgrade+0x6e0/0x6e0 [ 2708.376031][ T3027] charge_memcg+0x90/0x3b0 [ 2708.376062][ T3027] __mem_cgroup_charge+0x2b/0x90 [ 2708.376094][ T3027] do_wp_page+0x7ec/0x3370 [ 2708.376137][ T3027] ? lock_release+0x810/0x810 [ 2708.376162][ T3027] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2708.376198][ T3027] ? do_raw_spin_lock+0x124/0x2b0 [ 2708.376226][ T3027] ? rwlock_bug.part.0+0x90/0x90 [ 2708.376254][ T3027] ? lock_chain_count+0x20/0x20 [ 2708.376286][ T3027] __handle_mm_fault+0x1f58/0x3c90 [ 2708.376329][ T3027] ? vm_iomap_memory+0x190/0x190 [ 2708.376393][ T3027] handle_mm_fault+0x1b6/0x850 [ 2708.376435][ T3027] do_user_addr_fault+0x475/0x1210 [ 2708.376471][ T3027] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2708.376514][ T3027] exc_page_fault+0x98/0x170 [ 2708.376543][ T3027] asm_exc_page_fault+0x26/0x30 [ 2708.376570][ T3027] RIP: 0033:0x7fe5bee39570 [ 2708.376591][ T3027] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 08:46:57 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x5000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2708.376616][ T3027] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 [ 2708.376639][ T3027] RAX: 00000000f6afa43a RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2708.376657][ T3027] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000d79f723 [ 2708.376674][ T3027] RBP: 00000000f6afa43a R08: 000000000000043a R09: 00000000f6afa43e [ 2708.376691][ T3027] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 [ 2708.376709][ T3027] R13: 0000000000000001 R14: 000000000000002f R15: ffffffff89bcf1ac [ 2708.376726][ T3027] ? xas_load+0x4c/0x140 08:46:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0xb802], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2708.376783][ T3027] [ 2708.480446][ T3027] memory: usage 307188kB, limit 307200kB, failcnt 7077 [ 2708.644506][ T3027] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2708.663346][ T3027] Memory cgroup stats for /syz4: [ 2708.663524][ T3027] anon 135168 [ 2708.663524][ T3027] file 253952 [ 2708.663524][ T3027] kernel 314171392 [ 2708.663524][ T3027] kernel_stack 65536 [ 2708.663524][ T3027] pagetables 69632 [ 2708.663524][ T3027] sec_pagetables 0 [ 2708.663524][ T3027] percpu 4849792 [ 2708.663524][ T3027] sock 0 [ 2708.663524][ T3027] vmalloc 0 [ 2708.663524][ T3027] shmem 253952 [ 2708.663524][ T3027] zswap 0 [ 2708.663524][ T3027] zswapped 0 [ 2708.663524][ T3027] file_mapped 253952 [ 2708.663524][ T3027] file_dirty 0 [ 2708.663524][ T3027] file_writeback 0 [ 2708.663524][ T3027] swapcached 0 [ 2708.663524][ T3027] anon_thp 0 [ 2708.663524][ T3027] file_thp 0 [ 2708.663524][ T3027] shmem_thp 0 [ 2708.663524][ T3027] inactive_anon 204800 [ 2708.663524][ T3027] active_anon 184320 [ 2708.663524][ T3027] inactive_file 0 [ 2708.663524][ T3027] active_file 0 [ 2708.663524][ T3027] unevictable 0 [ 2708.663524][ T3027] slab_reclaimable 53720 [ 2708.663524][ T3027] slab_unreclaimable 309099400 [ 2708.933751][ T3027] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3027,uid=0 [ 2708.933891][ T3044] bond1207: (slave vlan1068): making interface the new active one [ 2708.971461][ T3027] Memory cgroup out of memory: Killed process 3027 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2709.010164][ T3040] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2709.029267][ T3040] CPU: 1 PID: 3040 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2709.037911][ T3040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2709.047994][ T3040] Call Trace: [ 2709.051295][ T3040] [ 2709.054244][ T3040] dump_stack_lvl+0xd1/0x138 [ 2709.058903][ T3040] dump_header+0x10b/0x85f [ 2709.063365][ T3040] oom_kill_process.cold+0x10/0x15 [ 2709.068520][ T3040] out_of_memory+0x35c/0x14a0 [ 2709.073246][ T3040] ? oom_killer_disable+0x280/0x280 [ 2709.078491][ T3040] ? find_held_lock+0x2d/0x110 [ 2709.083302][ T3040] mem_cgroup_out_of_memory+0x206/0x270 [ 2709.088885][ T3040] ? mem_cgroup_margin+0x130/0x130 [ 2709.094016][ T3040] ? lock_downgrade+0x6e0/0x6e0 [ 2709.095115][ T3044] bond1207: (slave vlan1068): Enslaving as an active interface with an up link [ 2709.098890][ T3040] try_charge_memcg+0xefb/0x12f0 [ 2709.098933][ T3040] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2709.109778][ T3043] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2709.112774][ T3040] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2709.132576][ T3040] ? lock_downgrade+0x6e0/0x6e0 [ 2709.137466][ T3040] ? lock_downgrade+0x6e0/0x6e0 [ 2709.142349][ T3040] ? rcu_read_unlock+0x9/0x60 [ 2709.147081][ T3040] obj_cgroup_charge+0x2af/0x5e0 [ 2709.152067][ T3040] ? copy_process+0x3aa/0x7520 [ 2709.156863][ T3040] kmem_cache_alloc_node+0xb7/0x460 [ 2709.162094][ T3040] copy_process+0x3aa/0x7520 [ 2709.166718][ T3040] ? __lock_acquire+0xbc3/0x56d0 [ 2709.171701][ T3040] ? __cleanup_sighand+0xb0/0xb0 [ 2709.176669][ T3040] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2709.182672][ T3040] ? psi_memstall_leave+0x174/0x250 [ 2709.187893][ T3040] kernel_clone+0xeb/0x990 [ 2709.192320][ T3040] ? create_io_thread+0xf0/0xf0 [ 2709.197180][ T3040] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2709.203439][ T3040] ? lock_downgrade+0x6e0/0x6e0 [ 2709.208311][ T3040] __do_sys_clone+0xba/0x100 [ 2709.212907][ T3040] ? kernel_clone+0x990/0x990 [ 2709.217605][ T3040] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2709.223516][ T3040] do_syscall_64+0x39/0xb0 [ 2709.227945][ T3040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2709.233845][ T3040] RIP: 0033:0x7f5b1fc8d4f1 [ 2709.238264][ T3040] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2709.257873][ T3040] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2709.266295][ T3040] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2709.274265][ T3040] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2709.282238][ T3040] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2709.290216][ T3040] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2709.298188][ T3040] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2709.306193][ T3040] [ 2709.381293][ T3040] memory: usage 307200kB, limit 307200kB, failcnt 35754 [ 2709.392135][ T3040] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2709.402704][ T3040] Memory cgroup stats for /syz5: [ 2709.402874][ T3040] anon 143360 [ 2709.402874][ T3040] file 483328 [ 2709.402874][ T3040] kernel 313946112 [ 2709.402874][ T3040] kernel_stack 65536 [ 2709.402874][ T3040] pagetables 77824 [ 2709.402874][ T3040] sec_pagetables 0 [ 2709.402874][ T3040] percpu 4839136 [ 2709.402874][ T3040] sock 0 [ 2709.402874][ T3040] vmalloc 0 [ 2709.402874][ T3040] shmem 483328 [ 2709.402874][ T3040] zswap 0 [ 2709.402874][ T3040] zswapped 0 [ 2709.402874][ T3040] file_mapped 471040 [ 2709.402874][ T3040] file_dirty 0 [ 2709.402874][ T3040] file_writeback 0 [ 2709.402874][ T3040] swapcached 0 [ 2709.402874][ T3040] anon_thp 0 [ 2709.402874][ T3040] file_thp 0 [ 2709.402874][ T3040] shmem_thp 0 [ 2709.402874][ T3040] inactive_anon 241664 [ 2709.402874][ T3040] active_anon 380928 [ 2709.402874][ T3040] inactive_file 0 [ 2709.402874][ T3040] active_file 0 [ 2709.402874][ T3040] unevictable 0 [ 2709.402874][ T3040] slab_reclaimable 16560 [ 2709.402874][ T3040] slab_unreclaimable 308906376 [ 2709.569247][ T3040] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3040,uid=0 [ 2709.589901][ T3040] Memory cgroup out of memory: Killed process 3040 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:46:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfa030000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:46:58 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x6000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:46:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0xcaef], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e4f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:46:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x72370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2709.700980][ T3066] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2709.731497][ T3067] set_target_v0_checkentry: 11 callbacks suppressed [ 2709.731516][ T3067] Cannot find add_set index 0 as target [ 2709.761051][ T3068] Cannot find add_set index 0 as target [ 2709.801684][ T3065] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 08:46:58 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2709.900355][ T3066] device bridge1394 entered promiscuous mode 08:46:58 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x7000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2710.039208][ T3065] CPU: 0 PID: 3065 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2710.047855][ T3065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2710.057935][ T3065] Call Trace: [ 2710.061238][ T3065] [ 2710.064191][ T3065] dump_stack_lvl+0xd1/0x138 [ 2710.068819][ T3065] dump_header+0x10b/0x85f [ 2710.073279][ T3065] oom_kill_process.cold+0x10/0x15 [ 2710.078437][ T3065] out_of_memory+0x35c/0x14a0 [ 2710.083166][ T3065] ? find_held_lock+0x2d/0x110 [ 2710.087971][ T3065] ? oom_killer_disable+0x280/0x280 [ 2710.093217][ T3065] ? find_held_lock+0x2d/0x110 [ 2710.098024][ T3065] mem_cgroup_out_of_memory+0x206/0x270 [ 2710.103618][ T3065] ? mem_cgroup_margin+0x130/0x130 [ 2710.108749][ T3065] ? lock_downgrade+0x6e0/0x6e0 [ 2710.113624][ T3065] try_charge_memcg+0xefb/0x12f0 [ 2710.118590][ T3065] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2710.124600][ T3065] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2710.130373][ T3065] ? lock_downgrade+0x6e0/0x6e0 [ 2710.135511][ T3065] ? lock_downgrade+0x6e0/0x6e0 [ 2710.140405][ T3065] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2710.145980][ T3065] __alloc_pages+0x1f3/0x5b0 [ 2710.150604][ T3065] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2710.157417][ T3065] alloc_pages+0x1aa/0x270 [ 2710.161857][ T3065] __pmd_alloc+0x3f/0x5d0 [ 2710.166216][ T3065] __handle_mm_fault+0x932/0x3c90 [ 2710.171279][ T3065] ? vm_iomap_memory+0x190/0x190 [ 2710.176267][ T3065] handle_mm_fault+0x1b6/0x850 [ 2710.181065][ T3065] do_user_addr_fault+0x475/0x1210 [ 2710.186205][ T3065] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2710.191792][ T3065] exc_page_fault+0x98/0x170 [ 2710.196403][ T3065] asm_exc_page_fault+0x26/0x30 [ 2710.201273][ T3065] RIP: 0033:0x7fe5bee2bd49 [ 2710.205699][ T3065] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2710.225324][ T3065] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2710.231397][ T3065] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2710.239369][ T3065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2710.247341][ T3065] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2710.255313][ T3065] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 00000000002958f8 [ 2710.263288][ T3065] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2710.271286][ T3065] 08:46:59 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2710.343224][ T3080] Cannot find add_set index 0 as target [ 2710.376573][ T3082] Cannot find add_set index 0 as target 08:46:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0xd203], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:46:59 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xa000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2710.520440][ T3065] memory: usage 307196kB, limit 307200kB, failcnt 7139 [ 2710.535890][ T3065] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2710.550144][ T3085] Cannot find add_set index 0 as target [ 2710.553366][ T3065] Memory cgroup stats for /syz4: [ 2710.556107][ T3065] anon 139264 [ 2710.556107][ T3065] file 253952 [ 2710.556107][ T3065] kernel 314175488 [ 2710.556107][ T3065] kernel_stack 65536 [ 2710.556107][ T3065] pagetables 69632 [ 2710.556107][ T3065] sec_pagetables 0 [ 2710.556107][ T3065] percpu 4849792 [ 2710.556107][ T3065] sock 0 [ 2710.556107][ T3065] vmalloc 0 [ 2710.556107][ T3065] shmem 253952 [ 2710.556107][ T3065] zswap 0 [ 2710.556107][ T3065] zswapped 0 [ 2710.556107][ T3065] file_mapped 253952 [ 2710.556107][ T3065] file_dirty 0 [ 2710.556107][ T3065] file_writeback 0 [ 2710.556107][ T3065] swapcached 0 [ 2710.556107][ T3065] anon_thp 0 [ 2710.556107][ T3065] file_thp 0 [ 2710.556107][ T3065] shmem_thp 0 [ 2710.556107][ T3065] inactive_anon 208896 [ 2710.556107][ T3065] active_anon 184320 [ 2710.556107][ T3065] inactive_file 0 [ 2710.556107][ T3065] active_file 0 [ 2710.556107][ T3065] unevictable 0 [ 2710.556107][ T3065] slab_reclaimable 55648 [ 2710.556107][ T3065] slab_unreclaimable 309100048 [ 2710.562313][ T3076] bond1208: (slave vlan1069): making interface the new active one [ 2710.693393][ T3089] Cannot find add_set index 0 as target 08:46:59 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0xc000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2710.741866][ T3065] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3065,uid=0 [ 2710.792207][ T3065] Memory cgroup out of memory: Killed process 3065 (syz-executor.4) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2710.829342][ T3093] Cannot find add_set index 0 as target [ 2710.841317][ T3071] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2710.841491][ T3076] bond1208: (slave vlan1069): Enslaving as an active interface with an up link [ 2710.908396][ T3071] CPU: 1 PID: 3071 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2710.917051][ T3071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2710.927137][ T3071] Call Trace: [ 2710.930443][ T3071] [ 2710.933403][ T3071] dump_stack_lvl+0xd1/0x138 [ 2710.938046][ T3071] dump_header+0x10b/0x85f [ 2710.942555][ T3071] oom_kill_process.cold+0x10/0x15 [ 2710.947747][ T3071] out_of_memory+0x35c/0x14a0 [ 2710.952485][ T3071] ? oom_killer_disable+0x280/0x280 [ 2710.957747][ T3071] ? find_held_lock+0x2d/0x110 [ 2710.962571][ T3071] mem_cgroup_out_of_memory+0x206/0x270 [ 2710.968169][ T3071] ? mem_cgroup_margin+0x130/0x130 [ 2710.973321][ T3071] ? lock_downgrade+0x6e0/0x6e0 [ 2710.978228][ T3071] try_charge_memcg+0xefb/0x12f0 [ 2710.983213][ T3071] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2710.989230][ T3071] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2710.994998][ T3071] ? lock_downgrade+0x6e0/0x6e0 [ 2710.999887][ T3071] ? lock_downgrade+0x6e0/0x6e0 [ 2711.001841][ T3077] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2711.004748][ T3071] ? rcu_read_unlock+0x9/0x60 [ 2711.004798][ T3071] obj_cgroup_charge+0x2af/0x5e0 [ 2711.004832][ T3071] ? copy_process+0x3aa/0x7520 [ 2711.027277][ T3071] kmem_cache_alloc_node+0xb7/0x460 [ 2711.032529][ T3071] copy_process+0x3aa/0x7520 [ 2711.037157][ T3071] ? find_held_lock+0x2d/0x110 [ 2711.041979][ T3071] ? __cleanup_sighand+0xb0/0xb0 [ 2711.046960][ T3071] ? lock_downgrade+0x6e0/0x6e0 [ 2711.051839][ T3071] ? folio_flags.constprop.0+0x53/0x150 [ 2711.057426][ T3071] ? folio_add_lru+0x37b/0x680 [ 2711.062230][ T3071] kernel_clone+0xeb/0x990 [ 2711.066690][ T3071] ? create_io_thread+0xf0/0xf0 [ 2711.071587][ T3071] ? find_held_lock+0x2d/0x110 [ 2711.076409][ T3071] __do_sys_clone+0xba/0x100 [ 2711.081381][ T3071] ? kernel_clone+0x990/0x990 [ 2711.086105][ T3071] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2711.092076][ T3071] do_syscall_64+0x39/0xb0 [ 2711.096559][ T3071] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2711.102492][ T3071] RIP: 0033:0x7f5b1fc8d4f1 [ 2711.106942][ T3071] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2711.126672][ T3071] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2711.135121][ T3071] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2711.143124][ T3071] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2711.151123][ T3071] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2711.159112][ T3071] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2711.167094][ T3071] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2711.175115][ T3071] [ 2711.193854][ T3071] memory: usage 307200kB, limit 307200kB, failcnt 35909 [ 2711.210668][ T3071] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2711.223968][ T3071] Memory cgroup stats for /syz5: [ 2711.224188][ T3071] anon 143360 [ 2711.224188][ T3071] file 483328 [ 2711.224188][ T3071] kernel 313946112 [ 2711.224188][ T3071] kernel_stack 65536 [ 2711.224188][ T3071] pagetables 77824 [ 2711.224188][ T3071] sec_pagetables 0 [ 2711.224188][ T3071] percpu 4839136 [ 2711.224188][ T3071] sock 0 [ 2711.224188][ T3071] vmalloc 0 [ 2711.224188][ T3071] shmem 483328 [ 2711.224188][ T3071] zswap 0 [ 2711.224188][ T3071] zswapped 0 [ 2711.224188][ T3071] file_mapped 471040 [ 2711.224188][ T3071] file_dirty 0 [ 2711.224188][ T3071] file_writeback 0 [ 2711.224188][ T3071] swapcached 0 [ 2711.224188][ T3071] anon_thp 0 [ 2711.224188][ T3071] file_thp 0 [ 2711.224188][ T3071] shmem_thp 0 [ 2711.224188][ T3071] inactive_anon 245760 [ 2711.224188][ T3071] active_anon 380928 [ 2711.224188][ T3071] inactive_file 0 [ 2711.224188][ T3071] active_file 0 [ 2711.224188][ T3071] unevictable 0 [ 2711.224188][ T3071] slab_reclaimable 16560 [ 2711.224188][ T3071] slab_unreclaimable 308906376 [ 2711.388756][ T3071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3071,uid=0 [ 2711.419284][ T3071] Memory cgroup out of memory: Killed process 3071 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:47:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x73370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe0f0000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:00 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e50}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:00 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x12010000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0xe003], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2711.548526][ T3100] Cannot find add_set index 0 as target 08:47:00 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc010000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2711.600441][ T3104] Cannot find add_set index 0 as target [ 2711.623564][ T3097] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2711.644577][ T3109] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2711.699161][ T3097] CPU: 0 PID: 3097 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2711.707819][ T3097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2711.717928][ T3097] Call Trace: [ 2711.721238][ T3097] [ 2711.724189][ T3097] dump_stack_lvl+0xd1/0x138 [ 2711.728825][ T3097] dump_header+0x10b/0x85f [ 2711.733290][ T3097] oom_kill_process.cold+0x10/0x15 [ 2711.738449][ T3097] out_of_memory+0x35c/0x14a0 [ 2711.743178][ T3097] ? find_held_lock+0x2d/0x110 [ 2711.747981][ T3097] ? oom_killer_disable+0x280/0x280 [ 2711.753225][ T3097] ? find_held_lock+0x2d/0x110 [ 2711.758037][ T3097] mem_cgroup_out_of_memory+0x206/0x270 [ 2711.763626][ T3097] ? mem_cgroup_margin+0x130/0x130 [ 2711.768782][ T3097] ? lock_downgrade+0x6e0/0x6e0 [ 2711.773681][ T3097] try_charge_memcg+0xefb/0x12f0 [ 2711.778670][ T3097] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2711.784695][ T3097] ? lock_downgrade+0x6e0/0x6e0 [ 2711.789590][ T3097] charge_memcg+0x90/0x3b0 [ 2711.794044][ T3097] __mem_cgroup_charge+0x2b/0x90 [ 2711.799015][ T3097] do_wp_page+0x7ec/0x3370 [ 2711.803489][ T3097] ? lock_release+0x810/0x810 [ 2711.808279][ T3097] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2711.813689][ T3097] ? do_raw_spin_lock+0x124/0x2b0 [ 2711.818752][ T3097] ? rwlock_bug.part.0+0x90/0x90 [ 2711.823725][ T3097] ? lock_chain_count+0x20/0x20 [ 2711.828613][ T3097] __handle_mm_fault+0x1f58/0x3c90 [ 2711.833758][ T3097] ? vm_iomap_memory+0x190/0x190 [ 2711.838748][ T3097] handle_mm_fault+0x1b6/0x850 [ 2711.843557][ T3097] do_user_addr_fault+0x475/0x1210 [ 2711.848711][ T3097] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2711.854301][ T3097] exc_page_fault+0x98/0x170 [ 2711.858938][ T3097] asm_exc_page_fault+0x26/0x30 [ 2711.863813][ T3097] RIP: 0033:0x7fe5bee39570 [ 2711.868243][ T3097] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2711.887885][ T3097] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 [ 2711.893986][ T3097] RAX: 000000002d5c6283 RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2711.901976][ T3097] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000a2539a9 [ 2711.909976][ T3097] RBP: 000000002d5c6283 R08: 0000000000000283 R09: 000000002d5c6287 [ 2711.913799][ T3116] Cannot find add_set index 0 as target [ 2711.917953][ T3097] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 08:47:00 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x15010000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2711.917975][ T3097] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d0e5c7 [ 2711.917990][ T3097] ? apparmor_socket_create+0x137/0x660 [ 2711.918039][ T3097] [ 2711.991743][ T3097] memory: usage 307200kB, limit 307200kB, failcnt 7196 [ 2712.003384][ T3097] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2712.028428][ T3097] Memory cgroup stats for /syz4: [ 2712.028646][ T3097] anon 131072 [ 2712.028646][ T3097] file 253952 [ 2712.028646][ T3097] kernel 314175488 [ 2712.028646][ T3097] kernel_stack 65536 [ 2712.028646][ T3097] pagetables 69632 [ 2712.028646][ T3097] sec_pagetables 0 [ 2712.028646][ T3097] percpu 4849792 [ 2712.028646][ T3097] sock 0 [ 2712.028646][ T3097] vmalloc 0 [ 2712.028646][ T3097] shmem 253952 [ 2712.028646][ T3097] zswap 0 [ 2712.028646][ T3097] zswapped 0 [ 2712.028646][ T3097] file_mapped 253952 [ 2712.028646][ T3097] file_dirty 0 [ 2712.028646][ T3097] file_writeback 0 [ 2712.028646][ T3097] swapcached 0 [ 2712.028646][ T3097] anon_thp 0 [ 2712.028646][ T3097] file_thp 0 [ 2712.028646][ T3097] shmem_thp 0 [ 2712.028646][ T3097] inactive_anon 200704 [ 2712.028646][ T3097] active_anon 184320 [ 2712.028646][ T3097] inactive_file 0 [ 2712.028646][ T3097] active_file 0 [ 2712.028646][ T3097] unevictable 0 [ 2712.028646][ T3097] slab_reclaimable 54488 [ 2712.028646][ T3097] slab_unreclaimable 309099400 08:47:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0xefca], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:00 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1d010000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:00 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x1c000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:00 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x1f000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2712.134640][ T3109] device bridge1395 entered promiscuous mode [ 2712.191943][ T3097] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3097,uid=0 [ 2712.258257][ T3097] Memory cgroup out of memory: Killed process 3097 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2712.353177][ T3113] bond1209: (slave vlan1070): making interface the new active one [ 2712.374864][ T3113] bond1209: (slave vlan1070): Enslaving as an active interface with an up link 08:47:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2712.521985][ T3112] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2712.690750][ T3133] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2712.721501][ T3133] CPU: 0 PID: 3133 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2712.730132][ T3133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2712.740212][ T3133] Call Trace: [ 2712.743511][ T3133] [ 2712.746465][ T3133] dump_stack_lvl+0xd1/0x138 [ 2712.751099][ T3133] dump_header+0x10b/0x85f [ 2712.755568][ T3133] oom_kill_process.cold+0x10/0x15 [ 2712.760728][ T3133] out_of_memory+0x35c/0x14a0 [ 2712.765455][ T3133] ? find_held_lock+0x2d/0x110 [ 2712.770267][ T3133] ? oom_killer_disable+0x280/0x280 [ 2712.775513][ T3133] ? find_held_lock+0x2d/0x110 [ 2712.780328][ T3133] mem_cgroup_out_of_memory+0x206/0x270 [ 2712.785930][ T3133] ? mem_cgroup_margin+0x130/0x130 [ 2712.791086][ T3133] ? lock_downgrade+0x6e0/0x6e0 [ 2712.795988][ T3133] try_charge_memcg+0xefb/0x12f0 [ 2712.800968][ T3133] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2712.806998][ T3133] ? lock_downgrade+0x6e0/0x6e0 [ 2712.811902][ T3133] charge_memcg+0x90/0x3b0 [ 2712.816365][ T3133] __mem_cgroup_charge+0x2b/0x90 [ 2712.821346][ T3133] do_wp_page+0x7ec/0x3370 [ 2712.825821][ T3133] ? lock_release+0x810/0x810 [ 2712.830530][ T3133] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2712.835942][ T3133] ? do_raw_spin_lock+0x124/0x2b0 [ 2712.841005][ T3133] ? rwlock_bug.part.0+0x90/0x90 [ 2712.845976][ T3133] ? lock_chain_count+0x20/0x20 [ 2712.850868][ T3133] __handle_mm_fault+0x1f58/0x3c90 [ 2712.856032][ T3133] ? vm_iomap_memory+0x190/0x190 [ 2712.861050][ T3133] handle_mm_fault+0x1b6/0x850 [ 2712.866034][ T3133] do_user_addr_fault+0x475/0x1210 [ 2712.871185][ T3133] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2712.876776][ T3133] exc_page_fault+0x98/0x170 [ 2712.881399][ T3133] asm_exc_page_fault+0x26/0x30 [ 2712.886284][ T3133] RIP: 0033:0x7fe5bee39570 [ 2712.890726][ T3133] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2712.910362][ T3133] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 [ 2712.916464][ T3133] RAX: 00000000960d28b7 RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2712.924457][ T3133] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000a20cebc [ 2712.932453][ T3133] RBP: 00000000960d28b7 R08: 00000000000008b7 R09: 00000000960d28bb [ 2712.940448][ T3133] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 [ 2712.948443][ T3133] R13: 0000000000000001 R14: 0000000000000009 R15: ffffffff83d0e4b2 [ 2712.956434][ T3133] ? apparmor_socket_create+0x22/0x660 [ 2712.961949][ T3133] [ 2713.031023][ T3133] memory: usage 307200kB, limit 307200kB, failcnt 7305 [ 2713.040990][ T3133] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2713.057611][ T3133] Memory cgroup stats for /syz4: [ 2713.057818][ T3133] anon 126976 [ 2713.057818][ T3133] file 253952 [ 2713.057818][ T3133] kernel 314171392 [ 2713.057818][ T3133] kernel_stack 65536 [ 2713.057818][ T3133] pagetables 69632 [ 2713.057818][ T3133] sec_pagetables 0 [ 2713.057818][ T3133] percpu 4849792 [ 2713.057818][ T3133] sock 0 [ 2713.057818][ T3133] vmalloc 0 [ 2713.057818][ T3133] shmem 253952 [ 2713.057818][ T3133] zswap 0 [ 2713.057818][ T3133] zswapped 0 [ 2713.057818][ T3133] file_mapped 253952 [ 2713.057818][ T3133] file_dirty 0 [ 2713.057818][ T3133] file_writeback 0 [ 2713.057818][ T3133] swapcached 0 [ 2713.057818][ T3133] anon_thp 0 [ 2713.057818][ T3133] file_thp 0 [ 2713.057818][ T3133] shmem_thp 0 [ 2713.057818][ T3133] inactive_anon 163840 [ 2713.057818][ T3133] active_anon 184320 [ 2713.057818][ T3133] inactive_file 0 [ 2713.057818][ T3133] active_file 0 [ 2713.057818][ T3133] unevictable 0 [ 2713.057818][ T3133] slab_reclaimable 53720 [ 2713.057818][ T3133] slab_unreclaimable 309099704 [ 2713.221298][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.221352][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.239324][ T3133] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3133,uid=0 [ 2713.262074][ T3133] Memory cgroup out of memory: Killed process 3133 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2713.299681][ T3103] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2713.319207][ T3103] CPU: 1 PID: 3103 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2713.327837][ T3103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2713.337908][ T3103] Call Trace: [ 2713.341175][ T3103] [ 2713.344094][ T3103] dump_stack_lvl+0xd1/0x138 [ 2713.348784][ T3103] dump_header+0x10b/0x85f [ 2713.353199][ T3103] oom_kill_process.cold+0x10/0x15 [ 2713.358309][ T3103] out_of_memory+0x35c/0x14a0 [ 2713.362986][ T3103] ? oom_killer_disable+0x280/0x280 [ 2713.368199][ T3103] ? find_held_lock+0x2d/0x110 [ 2713.372988][ T3103] mem_cgroup_out_of_memory+0x206/0x270 [ 2713.378549][ T3103] ? mem_cgroup_margin+0x130/0x130 [ 2713.383699][ T3103] ? lock_downgrade+0x6e0/0x6e0 [ 2713.388607][ T3103] try_charge_memcg+0xefb/0x12f0 [ 2713.393583][ T3103] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2713.399621][ T3103] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2713.405383][ T3103] ? lock_downgrade+0x6e0/0x6e0 [ 2713.410265][ T3103] ? lock_downgrade+0x6e0/0x6e0 [ 2713.415124][ T3103] ? rcu_read_unlock+0x9/0x60 [ 2713.419922][ T3103] obj_cgroup_charge+0x2af/0x5e0 [ 2713.424870][ T3103] ? copy_process+0x3aa/0x7520 [ 2713.429842][ T3103] kmem_cache_alloc_node+0xb7/0x460 [ 2713.435077][ T3103] copy_process+0x3aa/0x7520 [ 2713.439701][ T3103] ? find_held_lock+0x2d/0x110 [ 2713.444513][ T3103] ? __cleanup_sighand+0xb0/0xb0 [ 2713.449461][ T3103] ? lock_downgrade+0x6e0/0x6e0 [ 2713.454326][ T3103] ? folio_flags.constprop.0+0x53/0x150 [ 2713.459890][ T3103] ? folio_add_lru+0x37b/0x680 [ 2713.464668][ T3103] kernel_clone+0xeb/0x990 [ 2713.469099][ T3103] ? create_io_thread+0xf0/0xf0 [ 2713.473963][ T3103] ? find_held_lock+0x2d/0x110 [ 2713.478768][ T3103] __do_sys_clone+0xba/0x100 [ 2713.483395][ T3103] ? kernel_clone+0x990/0x990 [ 2713.488119][ T3103] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2713.494052][ T3103] do_syscall_64+0x39/0xb0 [ 2713.498502][ T3103] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2713.504407][ T3103] RIP: 0033:0x7f5b1fc8d4f1 [ 2713.508832][ T3103] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2713.528460][ T3103] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2713.536880][ T3103] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2713.544859][ T3103] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2713.552831][ T3103] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2713.560803][ T3103] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2713.568775][ T3103] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2713.576767][ T3103] [ 2713.651113][ T3103] memory: usage 307200kB, limit 307200kB, failcnt 36105 [ 2713.658185][ T3103] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2713.669677][ T3103] Memory cgroup stats for /syz5: [ 2713.669856][ T3103] anon 143360 [ 2713.669856][ T3103] file 483328 [ 2713.669856][ T3103] kernel 313929728 [ 2713.669856][ T3103] kernel_stack 65536 [ 2713.669856][ T3103] pagetables 77824 [ 2713.669856][ T3103] sec_pagetables 0 [ 2713.669856][ T3103] percpu 4839072 [ 2713.669856][ T3103] sock 0 [ 2713.669856][ T3103] vmalloc 0 [ 2713.669856][ T3103] shmem 483328 [ 2713.669856][ T3103] zswap 0 [ 2713.669856][ T3103] zswapped 0 [ 2713.669856][ T3103] file_mapped 471040 [ 2713.669856][ T3103] file_dirty 0 [ 2713.669856][ T3103] file_writeback 0 [ 2713.669856][ T3103] swapcached 0 [ 2713.669856][ T3103] anon_thp 0 [ 2713.669856][ T3103] file_thp 0 [ 2713.669856][ T3103] shmem_thp 0 [ 2713.669856][ T3103] inactive_anon 241664 [ 2713.669856][ T3103] active_anon 380928 [ 2713.669856][ T3103] inactive_file 0 [ 2713.669856][ T3103] active_file 0 [ 2713.669856][ T3103] unevictable 0 [ 2713.669856][ T3103] slab_reclaimable 16560 [ 2713.669856][ T3103] slab_unreclaimable 308894896 08:47:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff0000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:02 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x20000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e51}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0xff00], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2713.825038][ T3103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3103,uid=0 [ 2713.852955][ T3103] Memory cgroup out of memory: Killed process 3103 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2713.931534][ T3141] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:47:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x20020000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:02 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2714.122385][ T3140] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:47:02 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x20030000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2714.219137][ T3140] CPU: 0 PID: 3140 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2714.227795][ T3140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2714.237881][ T3140] Call Trace: [ 2714.241181][ T3140] [ 2714.244120][ T3140] dump_stack_lvl+0xd1/0x138 [ 2714.248736][ T3140] dump_header+0x10b/0x85f [ 2714.253191][ T3140] oom_kill_process.cold+0x10/0x15 [ 2714.258356][ T3140] out_of_memory+0x35c/0x14a0 [ 2714.263081][ T3140] ? find_held_lock+0x2d/0x110 [ 2714.267887][ T3140] ? oom_killer_disable+0x280/0x280 [ 2714.273132][ T3140] ? find_held_lock+0x2d/0x110 [ 2714.277938][ T3140] mem_cgroup_out_of_memory+0x206/0x270 [ 2714.283524][ T3140] ? mem_cgroup_margin+0x130/0x130 [ 2714.288682][ T3140] ? lock_downgrade+0x6e0/0x6e0 [ 2714.293586][ T3140] try_charge_memcg+0xefb/0x12f0 [ 2714.298563][ T3140] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2714.304592][ T3140] ? lock_downgrade+0x6e0/0x6e0 [ 2714.309489][ T3140] charge_memcg+0x90/0x3b0 [ 2714.313939][ T3140] __mem_cgroup_charge+0x2b/0x90 [ 2714.318909][ T3140] do_wp_page+0x7ec/0x3370 [ 2714.323373][ T3140] ? lock_release+0x810/0x810 [ 2714.328078][ T3140] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2714.333486][ T3140] ? do_raw_spin_lock+0x124/0x2b0 [ 2714.338544][ T3140] ? rwlock_bug.part.0+0x90/0x90 [ 2714.343511][ T3140] ? lock_chain_count+0x20/0x20 [ 2714.348397][ T3140] __handle_mm_fault+0x1f58/0x3c90 [ 2714.353558][ T3140] ? vm_iomap_memory+0x190/0x190 [ 2714.358562][ T3140] handle_mm_fault+0x1b6/0x850 [ 2714.363369][ T3140] do_user_addr_fault+0x475/0x1210 [ 2714.368524][ T3140] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2714.374117][ T3140] exc_page_fault+0x98/0x170 [ 2714.378738][ T3140] asm_exc_page_fault+0x26/0x30 [ 2714.383615][ T3140] RIP: 0033:0x7fe5bee39570 [ 2714.388056][ T3140] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2714.407787][ T3140] RSP: 002b:00007fffbb0afec0 EFLAGS: 00010246 [ 2714.413888][ T3140] RAX: 00000000960d28b7 RBX: 00007fe5befac018 RCX: 0000001b31b20000 [ 2714.421886][ T3140] RDX: 0000000000000000 RSI: 0000001b31b20018 RDI: 000000000a20cebc [ 2714.429887][ T3140] RBP: 00000000960d28b7 R08: 00000000000008b7 R09: 00000000960d28bb [ 2714.437884][ T3140] R10: 00007fffbb0b0080 R11: 0000000000000246 R12: 00007fe5befa0000 [ 2714.445883][ T3140] R13: 0000000000000001 R14: 0000000000000009 R15: ffffffff83d0e4b2 [ 2714.453883][ T3140] ? apparmor_socket_create+0x22/0x660 [ 2714.459395][ T3140] [ 2714.481939][ T3153] device bridge1396 entered promiscuous mode 08:47:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x22020000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:03 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x22020000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x20000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2714.770144][ T3166] set_target_v0_checkentry: 9 callbacks suppressed [ 2714.770165][ T3166] Cannot find add_set index 0 as target [ 2714.789426][ T3168] Cannot find add_set index 0 as target [ 2714.833898][ T3141] bond1210: (slave vlan1071): making interface the new active one [ 2714.880886][ T3141] bond1210: (slave vlan1071): Enslaving as an active interface with an up link [ 2714.961127][ T3140] memory: usage 307180kB, limit 307200kB, failcnt 7373 [ 2715.003477][ T3140] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2715.019298][ T3140] Memory cgroup stats for /syz4: [ 2715.019526][ T3140] anon 126976 [ 2715.019526][ T3140] file 253952 [ 2715.019526][ T3140] kernel 314171392 [ 2715.019526][ T3140] kernel_stack 65536 [ 2715.019526][ T3140] pagetables 69632 [ 2715.019526][ T3140] sec_pagetables 0 [ 2715.019526][ T3140] percpu 4849792 [ 2715.019526][ T3140] sock 0 [ 2715.019526][ T3140] vmalloc 0 [ 2715.019526][ T3140] shmem 253952 [ 2715.019526][ T3140] zswap 0 [ 2715.019526][ T3140] zswapped 0 [ 2715.019526][ T3140] file_mapped 253952 [ 2715.019526][ T3140] file_dirty 0 [ 2715.019526][ T3140] file_writeback 0 [ 2715.019526][ T3140] swapcached 0 [ 2715.019526][ T3140] anon_thp 0 [ 2715.019526][ T3140] file_thp 0 [ 2715.019526][ T3140] shmem_thp 0 [ 2715.019526][ T3140] inactive_anon 196608 [ 2715.019526][ T3140] active_anon 184320 [ 2715.019526][ T3140] inactive_file 0 [ 2715.019526][ T3140] active_file 0 [ 2715.019526][ T3140] unevictable 0 [ 2715.019526][ T3140] slab_reclaimable 53720 [ 2715.019526][ T3140] slab_unreclaimable 309099400 [ 2715.233302][ T3140] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3140,uid=0 [ 2715.263177][ T3140] Memory cgroup out of memory: Killed process 3140 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2715.309981][ T3155] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2715.436733][ T3150] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2715.464197][ T3150] CPU: 0 PID: 3150 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2715.472852][ T3150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2715.482935][ T3150] Call Trace: [ 2715.486233][ T3150] [ 2715.489205][ T3150] dump_stack_lvl+0xd1/0x138 [ 2715.493856][ T3150] dump_header+0x10b/0x85f [ 2715.498307][ T3150] oom_kill_process.cold+0x10/0x15 [ 2715.503456][ T3150] out_of_memory+0x35c/0x14a0 [ 2715.508180][ T3150] ? find_held_lock+0x2d/0x110 [ 2715.512974][ T3150] ? oom_killer_disable+0x280/0x280 [ 2715.518207][ T3150] ? find_held_lock+0x2d/0x110 [ 2715.523011][ T3150] mem_cgroup_out_of_memory+0x206/0x270 [ 2715.528580][ T3150] ? mem_cgroup_margin+0x130/0x130 [ 2715.533707][ T3150] ? lock_downgrade+0x6e0/0x6e0 [ 2715.538580][ T3150] try_charge_memcg+0xefb/0x12f0 [ 2715.543538][ T3150] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2715.549526][ T3150] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2715.555262][ T3150] ? lock_downgrade+0x6e0/0x6e0 [ 2715.560135][ T3150] obj_cgroup_charge+0x2af/0x5e0 [ 2715.565084][ T3150] ? vm_area_dup+0x7d/0x380 [ 2715.569594][ T3150] kmem_cache_alloc+0xb5/0x430 [ 2715.574367][ T3150] vm_area_dup+0x7d/0x380 [ 2715.578707][ T3150] ? mt_slot+0xa1/0x170 [ 2715.582877][ T3150] ? mas_next_nentry+0x610/0xab0 [ 2715.587826][ T3150] ? mas_next_node+0x547/0xa00 [ 2715.592605][ T3150] ? mas_find+0x211/0xd10 [ 2715.596950][ T3150] ? vm_area_alloc+0x100/0x100 [ 2715.601735][ T3150] ? validate_mm_mt+0x149/0x1b0 [ 2715.606601][ T3150] ? remove_vma+0x130/0x130 [ 2715.611114][ T3150] ? can_vma_merge_before+0x390/0x390 [ 2715.616501][ T3150] __split_vma+0xae/0x5e0 [ 2715.620835][ T3150] ? vma_merge+0x2cf/0x870 [ 2715.625261][ T3150] split_vma+0xa3/0xe0 [ 2715.629339][ T3150] mprotect_fixup+0x686/0x960 [ 2715.634033][ T3150] ? mas_find+0x211/0xd10 [ 2715.638369][ T3150] ? change_protection+0x3b30/0x3b30 [ 2715.643678][ T3150] do_mprotect_pkey+0x6fd/0xa70 [ 2715.648549][ T3150] ? mprotect_fixup+0x960/0x960 [ 2715.653412][ T3150] ? up_write+0x1b0/0x520 [ 2715.657786][ T3150] __x64_sys_mprotect+0x78/0xb0 [ 2715.662645][ T3150] do_syscall_64+0x39/0xb0 [ 2715.667079][ T3150] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2715.672980][ T3150] RIP: 0033:0x7f5b1fc8c1d7 [ 2715.677397][ T3150] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2715.697094][ T3150] RSP: 002b:00007fff16a81fe8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2715.705515][ T3150] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5b1fc8c1d7 [ 2715.713489][ T3150] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5b20999000 [ 2715.721462][ T3150] RBP: 00007fff16a820c0 R08: 00000000ffffffff R09: 00007f5b209b8700 [ 2715.729438][ T3150] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff16a821e0 [ 2715.737412][ T3150] R13: 00007f5b209b8700 R14: 0000000000000000 R15: 0000000000022000 [ 2715.745405][ T3150] [ 2715.851416][ T3150] memory: usage 307196kB, limit 307200kB, failcnt 36243 [ 2715.861985][ T3150] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2715.873528][ T3150] Memory cgroup stats for /syz5: [ 2715.873741][ T3150] anon 139264 [ 2715.873741][ T3150] file 483328 [ 2715.873741][ T3150] kernel 313946112 [ 2715.873741][ T3150] kernel_stack 65536 [ 2715.873741][ T3150] pagetables 77824 [ 2715.873741][ T3150] sec_pagetables 0 [ 2715.873741][ T3150] percpu 4839136 [ 2715.873741][ T3150] sock 0 [ 2715.873741][ T3150] vmalloc 0 [ 2715.873741][ T3150] shmem 483328 [ 2715.873741][ T3150] zswap 0 [ 2715.873741][ T3150] zswapped 0 [ 2715.873741][ T3150] file_mapped 471040 [ 2715.873741][ T3150] file_dirty 0 [ 2715.873741][ T3150] file_writeback 0 [ 2715.873741][ T3150] swapcached 0 [ 2715.873741][ T3150] anon_thp 0 [ 2715.873741][ T3150] file_thp 0 [ 2715.873741][ T3150] shmem_thp 0 [ 2715.873741][ T3150] inactive_anon 237568 [ 2715.873741][ T3150] active_anon 380928 [ 2715.873741][ T3150] inactive_file 0 [ 2715.873741][ T3150] active_file 0 [ 2715.873741][ T3150] unevictable 0 [ 2715.873741][ T3150] slab_reclaimable 16560 [ 2715.873741][ T3150] slab_unreclaimable 308905512 08:47:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2716.040147][ T3150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3150,uid=0 [ 2716.063147][ T3150] Memory cgroup out of memory: Killed process 3150 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:47:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x22030000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:04 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x38020000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e52}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3ffff], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x75370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2716.191335][ T3177] Cannot find add_set index 0 as target [ 2716.203714][ T3179] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2716.262780][ T3186] Cannot find add_set index 0 as target [ 2716.299148][ T3173] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 08:47:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3a020000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:05 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x24020000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2716.420428][ T3193] Cannot find add_set index 0 as target [ 2716.452513][ T3173] CPU: 1 PID: 3173 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2716.461165][ T3173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2716.467451][ T3183] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2716.471227][ T3173] Call Trace: [ 2716.471241][ T3173] [ 2716.471251][ T3173] dump_stack_lvl+0xd1/0x138 [ 2716.471288][ T3173] dump_header+0x10b/0x85f [ 2716.494612][ T3173] oom_kill_process.cold+0x10/0x15 [ 2716.499778][ T3173] out_of_memory+0x35c/0x14a0 [ 2716.504502][ T3173] ? find_held_lock+0x2d/0x110 [ 2716.509308][ T3173] ? oom_killer_disable+0x280/0x280 [ 2716.514554][ T3173] ? find_held_lock+0x2d/0x110 [ 2716.519361][ T3173] mem_cgroup_out_of_memory+0x206/0x270 [ 2716.524956][ T3173] ? mem_cgroup_margin+0x130/0x130 [ 2716.530118][ T3173] ? lock_downgrade+0x6e0/0x6e0 [ 2716.535023][ T3173] try_charge_memcg+0xefb/0x12f0 [ 2716.539999][ T3173] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2716.546004][ T3173] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2716.551766][ T3173] ? lock_downgrade+0x6e0/0x6e0 [ 2716.556650][ T3173] ? lock_downgrade+0x6e0/0x6e0 [ 2716.561545][ T3173] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2716.567126][ T3173] __alloc_pages+0x1f3/0x5b0 [ 2716.571754][ T3173] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2716.578568][ T3173] ? find_held_lock+0x2d/0x110 [ 2716.583382][ T3173] alloc_pages+0x1aa/0x270 [ 2716.587830][ T3173] pte_alloc_one+0x1a/0x230 [ 2716.592369][ T3173] __pte_alloc+0x6d/0x260 [ 2716.596737][ T3173] ? pmd_install+0x160/0x160 [ 2716.601356][ T3173] ? hugepage_vma_check+0x24e/0x830 [ 2716.606591][ T3173] ? _raw_spin_unlock+0x28/0x40 [ 2716.611514][ T3173] ? __pmd_alloc+0x30c/0x5d0 [ 2716.616145][ T3173] __handle_mm_fault+0x38cf/0x3c90 [ 2716.621307][ T3173] ? vm_iomap_memory+0x190/0x190 [ 2716.626323][ T3173] handle_mm_fault+0x1b6/0x850 [ 2716.631141][ T3173] do_user_addr_fault+0x475/0x1210 [ 2716.636307][ T3173] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2716.641900][ T3173] exc_page_fault+0x98/0x170 [ 2716.646528][ T3173] asm_exc_page_fault+0x26/0x30 [ 2716.651414][ T3173] RIP: 0033:0x7fe5bee2bd49 [ 2716.655867][ T3173] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2716.675512][ T3173] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2716.681606][ T3173] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2716.689607][ T3173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2716.697648][ T3173] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2716.705653][ T3173] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 0000000000297226 [ 2716.713798][ T3173] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2716.721836][ T3173] 08:47:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:05 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2716.823874][ T3199] Cannot find add_set index 0 as target [ 2716.842183][ T3187] device bridge1397 entered promiscuous mode [ 2716.852760][ T3198] Cannot find add_set index 0 as target 08:47:05 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2a000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x40000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2716.993085][ T3173] memory: usage 307200kB, limit 307200kB, failcnt 7436 [ 2717.020577][ T3173] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2717.032950][ T3201] Cannot find add_set index 0 as target [ 2717.039816][ T3203] Cannot find add_set index 0 as target [ 2717.062171][ T3173] Memory cgroup stats for /syz4: [ 2717.062403][ T3173] anon 139264 [ 2717.062403][ T3173] file 253952 [ 2717.062403][ T3173] kernel 314179584 [ 2717.062403][ T3173] kernel_stack 65536 [ 2717.062403][ T3173] pagetables 73728 [ 2717.062403][ T3173] sec_pagetables 0 [ 2717.062403][ T3173] percpu 4849792 [ 2717.062403][ T3173] sock 0 [ 2717.062403][ T3173] vmalloc 0 [ 2717.062403][ T3173] shmem 253952 [ 2717.062403][ T3173] zswap 0 [ 2717.062403][ T3173] zswapped 0 [ 2717.062403][ T3173] file_mapped 253952 [ 2717.062403][ T3173] file_dirty 0 [ 2717.062403][ T3173] file_writeback 0 [ 2717.062403][ T3173] swapcached 0 [ 2717.062403][ T3173] anon_thp 0 [ 2717.062403][ T3173] file_thp 0 [ 2717.062403][ T3173] shmem_thp 0 [ 2717.062403][ T3173] inactive_anon 208896 [ 2717.062403][ T3173] active_anon 184320 [ 2717.062403][ T3173] inactive_file 0 [ 2717.062403][ T3173] active_file 0 [ 2717.062403][ T3173] unevictable 0 [ 2717.062403][ T3173] slab_reclaimable 55648 [ 2717.062403][ T3173] slab_unreclaimable 309100048 [ 2717.221382][ T3173] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3173,uid=0 [ 2717.324175][ T3173] Memory cgroup out of memory: Killed process 3173 (syz-executor.4) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2717.370310][ T3181] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2717.396973][ T3181] CPU: 0 PID: 3181 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2717.405638][ T3181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2717.415723][ T3181] Call Trace: [ 2717.419024][ T3181] [ 2717.421990][ T3181] dump_stack_lvl+0xd1/0x138 [ 2717.426620][ T3181] dump_header+0x10b/0x85f [ 2717.431092][ T3181] oom_kill_process.cold+0x10/0x15 [ 2717.436253][ T3181] out_of_memory+0x35c/0x14a0 [ 2717.440983][ T3181] ? oom_killer_disable+0x280/0x280 [ 2717.446235][ T3181] ? find_held_lock+0x2d/0x110 [ 2717.451047][ T3181] mem_cgroup_out_of_memory+0x206/0x270 [ 2717.456633][ T3181] ? mem_cgroup_margin+0x130/0x130 [ 2717.461785][ T3181] ? lock_downgrade+0x6e0/0x6e0 [ 2717.466682][ T3181] try_charge_memcg+0xefb/0x12f0 [ 2717.471664][ T3181] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2717.477679][ T3181] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2717.483441][ T3181] ? lock_downgrade+0x6e0/0x6e0 [ 2717.488325][ T3181] ? lock_downgrade+0x6e0/0x6e0 [ 2717.493229][ T3181] ? rcu_read_unlock+0x9/0x60 [ 2717.497950][ T3181] obj_cgroup_charge+0x2af/0x5e0 [ 2717.502917][ T3181] ? copy_process+0x3aa/0x7520 [ 2717.507697][ T3181] kmem_cache_alloc_node+0xb7/0x460 [ 2717.512923][ T3181] copy_process+0x3aa/0x7520 [ 2717.517549][ T3181] ? __lock_acquire+0xbc3/0x56d0 [ 2717.522517][ T3181] ? __cleanup_sighand+0xb0/0xb0 [ 2717.527476][ T3181] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2717.533483][ T3181] ? psi_memstall_leave+0x174/0x250 [ 2717.538720][ T3181] kernel_clone+0xeb/0x990 [ 2717.543161][ T3181] ? create_io_thread+0xf0/0xf0 [ 2717.548036][ T3181] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2717.554310][ T3181] ? lock_downgrade+0x6e0/0x6e0 [ 2717.559186][ T3181] __do_sys_clone+0xba/0x100 [ 2717.563789][ T3181] ? kernel_clone+0x990/0x990 [ 2717.568675][ T3181] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2717.574613][ T3181] do_syscall_64+0x39/0xb0 [ 2717.579047][ T3181] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2717.584947][ T3181] RIP: 0033:0x7f5b1fc8d4f1 [ 2717.589365][ T3181] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2717.608981][ T3181] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2717.617400][ T3181] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2717.625376][ T3181] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2717.633348][ T3181] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2717.641351][ T3181] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2717.649325][ T3181] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2717.657316][ T3181] [ 2717.741658][ T3181] memory: usage 307200kB, limit 307200kB, failcnt 36363 [ 2717.762719][ T3181] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2717.780758][ T3181] Memory cgroup stats for /syz5: [ 2717.780992][ T3181] anon 143360 [ 2717.780992][ T3181] file 483328 [ 2717.780992][ T3181] kernel 313946112 [ 2717.780992][ T3181] kernel_stack 65536 [ 2717.780992][ T3181] pagetables 77824 [ 2717.780992][ T3181] sec_pagetables 0 [ 2717.780992][ T3181] percpu 4839136 [ 2717.780992][ T3181] sock 0 [ 2717.780992][ T3181] vmalloc 0 [ 2717.780992][ T3181] shmem 483328 [ 2717.780992][ T3181] zswap 0 [ 2717.780992][ T3181] zswapped 0 [ 2717.780992][ T3181] file_mapped 471040 [ 2717.780992][ T3181] file_dirty 0 [ 2717.780992][ T3181] file_writeback 0 [ 2717.780992][ T3181] swapcached 0 [ 2717.780992][ T3181] anon_thp 0 [ 2717.780992][ T3181] file_thp 0 [ 2717.780992][ T3181] shmem_thp 0 [ 2717.780992][ T3181] inactive_anon 245760 [ 2717.780992][ T3181] active_anon 380928 [ 2717.780992][ T3181] inactive_file 0 [ 2717.780992][ T3181] active_file 0 [ 2717.780992][ T3181] unevictable 0 [ 2717.780992][ T3181] slab_reclaimable 16560 [ 2717.780992][ T3181] slab_unreclaimable 308906376 [ 2717.938399][ T3181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3181,uid=0 [ 2717.961165][ T3181] Memory cgroup out of memory: Killed process 3181 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:47:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f0000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e53}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2a030000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:06 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x76370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x1000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2718.120433][ T3215] Cannot find add_set index 0 as target [ 2718.140324][ T3212] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:47:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:07 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x30000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2718.397130][ T3214] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2718.458858][ T3214] CPU: 0 PID: 3214 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2718.467512][ T3214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2718.477596][ T3214] Call Trace: [ 2718.480892][ T3214] [ 2718.483828][ T3214] dump_stack_lvl+0xd1/0x138 [ 2718.488449][ T3214] dump_header+0x10b/0x85f [ 2718.492901][ T3214] oom_kill_process.cold+0x10/0x15 [ 2718.498074][ T3214] out_of_memory+0x35c/0x14a0 [ 2718.502776][ T3214] ? find_held_lock+0x2d/0x110 [ 2718.507574][ T3214] ? oom_killer_disable+0x280/0x280 [ 2718.512794][ T3214] ? find_held_lock+0x2d/0x110 [ 2718.517578][ T3214] mem_cgroup_out_of_memory+0x206/0x270 [ 2718.523150][ T3214] ? mem_cgroup_margin+0x130/0x130 [ 2718.528534][ T3214] ? lock_downgrade+0x6e0/0x6e0 [ 2718.533415][ T3214] try_charge_memcg+0xefb/0x12f0 [ 2718.538378][ T3214] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2718.544368][ T3214] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2718.550114][ T3214] ? lock_downgrade+0x6e0/0x6e0 [ 2718.554973][ T3214] ? lock_downgrade+0x6e0/0x6e0 [ 2718.559841][ T3214] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2718.565402][ T3214] __alloc_pages+0x1f3/0x5b0 [ 2718.570035][ T3214] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2718.576819][ T3214] ? find_held_lock+0x2d/0x110 [ 2718.581608][ T3214] alloc_pages+0x1aa/0x270 [ 2718.586040][ T3214] pte_alloc_one+0x1a/0x230 [ 2718.590557][ T3214] __pte_alloc+0x6d/0x260 [ 2718.594898][ T3214] ? pmd_install+0x160/0x160 [ 2718.599500][ T3214] ? hugepage_vma_check+0x24e/0x830 [ 2718.604731][ T3214] ? _raw_spin_unlock+0x28/0x40 [ 2718.609595][ T3214] ? __pmd_alloc+0x30c/0x5d0 [ 2718.614202][ T3214] __handle_mm_fault+0x38cf/0x3c90 [ 2718.619361][ T3214] ? vm_iomap_memory+0x190/0x190 [ 2718.624347][ T3214] handle_mm_fault+0x1b6/0x850 [ 2718.629310][ T3214] do_user_addr_fault+0x475/0x1210 [ 2718.634438][ T3214] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2718.640023][ T3214] exc_page_fault+0x98/0x170 [ 2718.644624][ T3214] asm_exc_page_fault+0x26/0x30 [ 2718.649492][ T3214] RIP: 0033:0x7fe5bee2bd49 [ 2718.653914][ T3214] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2718.673526][ T3214] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2718.679600][ T3214] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2718.687592][ T3214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2718.695569][ T3214] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2718.703541][ T3214] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 00000000002979b0 [ 2718.711513][ T3214] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2718.719504][ T3214] 08:47:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x54030000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:07 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x32030000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x2000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:07 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x56020000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2718.871465][ T3214] memory: usage 307200kB, limit 307200kB, failcnt 7475 [ 2718.900535][ T3214] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2718.917059][ T3214] Memory cgroup stats for /syz4: [ 2718.917294][ T3214] anon 139264 [ 2718.917294][ T3214] file 253952 [ 2718.917294][ T3214] kernel 314179584 [ 2718.917294][ T3214] kernel_stack 65536 [ 2718.917294][ T3214] pagetables 73728 [ 2718.917294][ T3214] sec_pagetables 0 [ 2718.917294][ T3214] percpu 4849792 [ 2718.917294][ T3214] sock 0 [ 2718.917294][ T3214] vmalloc 0 [ 2718.917294][ T3214] shmem 253952 [ 2718.917294][ T3214] zswap 0 [ 2718.917294][ T3214] zswapped 0 [ 2718.917294][ T3214] file_mapped 253952 [ 2718.917294][ T3214] file_dirty 0 [ 2718.917294][ T3214] file_writeback 0 [ 2718.917294][ T3214] swapcached 0 [ 2718.917294][ T3214] anon_thp 0 [ 2718.917294][ T3214] file_thp 0 [ 2718.917294][ T3214] shmem_thp 0 [ 2718.917294][ T3214] inactive_anon 208896 [ 2718.917294][ T3214] active_anon 184320 [ 2718.917294][ T3214] inactive_file 0 [ 2718.917294][ T3214] active_file 0 [ 2718.917294][ T3214] unevictable 0 [ 2718.917294][ T3214] slab_reclaimable 55648 [ 2718.917294][ T3214] slab_unreclaimable 309100048 [ 2718.958098][ T3221] device bridge1398 entered promiscuous mode [ 2719.350804][ T3229] bond1212: (slave vlan1072): making interface the new active one [ 2719.381049][ T3229] bond1212: (slave vlan1072): Enslaving as an active interface with an up link [ 2719.491934][ T3214] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3214,uid=0 [ 2719.540697][ T3214] Memory cgroup out of memory: Killed process 3214 (syz-executor.4) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2719.600379][ T3230] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2719.702074][ T3227] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2719.796430][ T3227] CPU: 0 PID: 3227 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2719.805086][ T3227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2719.815170][ T3227] Call Trace: [ 2719.818455][ T3227] [ 2719.821666][ T3227] dump_stack_lvl+0xd1/0x138 [ 2719.826275][ T3227] dump_header+0x10b/0x85f [ 2719.830713][ T3227] oom_kill_process.cold+0x10/0x15 [ 2719.835858][ T3227] out_of_memory+0x35c/0x14a0 [ 2719.840573][ T3227] ? find_held_lock+0x2d/0x110 [ 2719.845356][ T3227] ? oom_killer_disable+0x280/0x280 [ 2719.850581][ T3227] ? find_held_lock+0x2d/0x110 [ 2719.855364][ T3227] mem_cgroup_out_of_memory+0x206/0x270 [ 2719.860933][ T3227] ? mem_cgroup_margin+0x130/0x130 [ 2719.866062][ T3227] ? lock_downgrade+0x6e0/0x6e0 [ 2719.870933][ T3227] try_charge_memcg+0xefb/0x12f0 [ 2719.875887][ T3227] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2719.881877][ T3227] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2719.887614][ T3227] ? lock_downgrade+0x6e0/0x6e0 [ 2719.892492][ T3227] obj_cgroup_charge+0x2af/0x5e0 [ 2719.897439][ T3227] ? vm_area_dup+0x7d/0x380 [ 2719.901951][ T3227] kmem_cache_alloc+0xb5/0x430 [ 2719.906743][ T3227] vm_area_dup+0x7d/0x380 [ 2719.911083][ T3227] ? mt_slot+0xa1/0x170 [ 2719.915266][ T3227] ? mas_next_nentry+0x610/0xab0 [ 2719.920234][ T3227] ? mas_next_node+0x547/0xa00 [ 2719.925024][ T3227] ? mas_find+0x211/0xd10 [ 2719.929376][ T3227] ? vm_area_alloc+0x100/0x100 [ 2719.934175][ T3227] ? validate_mm_mt+0x149/0x1b0 [ 2719.939043][ T3227] ? remove_vma+0x130/0x130 [ 2719.943580][ T3227] ? can_vma_merge_before+0x390/0x390 [ 2719.948977][ T3227] __split_vma+0xae/0x5e0 [ 2719.953321][ T3227] ? vma_merge+0x2cf/0x870 [ 2719.957777][ T3227] split_vma+0xa3/0xe0 [ 2719.961864][ T3227] mprotect_fixup+0x686/0x960 [ 2719.966574][ T3227] ? mas_find+0x211/0xd10 [ 2719.970922][ T3227] ? change_protection+0x3b30/0x3b30 [ 2719.976235][ T3227] do_mprotect_pkey+0x6fd/0xa70 [ 2719.981124][ T3227] ? mprotect_fixup+0x960/0x960 [ 2719.985988][ T3227] ? up_write+0x1b0/0x520 [ 2719.990365][ T3227] __x64_sys_mprotect+0x78/0xb0 [ 2719.995228][ T3227] do_syscall_64+0x39/0xb0 [ 2719.999662][ T3227] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2720.005564][ T3227] RIP: 0033:0x7f5b1fc8c1d7 [ 2720.009986][ T3227] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2720.029601][ T3227] RSP: 002b:00007fff16a81fe8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2720.038021][ T3227] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f5b1fc8c1d7 [ 2720.045996][ T3227] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f5b20999000 [ 2720.053989][ T3227] RBP: 00007fff16a820c0 R08: 00000000ffffffff R09: 00007f5b209b8700 [ 2720.061962][ T3227] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff16a821e0 [ 2720.069935][ T3227] R13: 00007f5b209b8700 R14: 0000000000000000 R15: 0000000000022000 [ 2720.077926][ T3227] [ 2720.222678][ T3227] memory: usage 307188kB, limit 307200kB, failcnt 36564 [ 2720.239029][ T3227] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2720.280225][ T3227] Memory cgroup stats for /syz5: [ 2720.280436][ T3227] anon 139264 [ 2720.280436][ T3227] file 483328 [ 2720.280436][ T3227] kernel 313929728 [ 2720.280436][ T3227] kernel_stack 65536 [ 2720.280436][ T3227] pagetables 77824 [ 2720.280436][ T3227] sec_pagetables 0 [ 2720.280436][ T3227] percpu 4839072 [ 2720.280436][ T3227] sock 0 [ 2720.280436][ T3227] vmalloc 0 [ 2720.280436][ T3227] shmem 483328 [ 2720.280436][ T3227] zswap 0 [ 2720.280436][ T3227] zswapped 0 [ 2720.280436][ T3227] file_mapped 471040 [ 2720.280436][ T3227] file_dirty 0 [ 2720.280436][ T3227] file_writeback 0 [ 2720.280436][ T3227] swapcached 0 [ 2720.280436][ T3227] anon_thp 0 [ 2720.280436][ T3227] file_thp 0 [ 2720.280436][ T3227] shmem_thp 0 [ 2720.280436][ T3227] inactive_anon 237568 [ 2720.280436][ T3227] active_anon 380928 [ 2720.280436][ T3227] inactive_file 0 [ 2720.280436][ T3227] active_file 0 [ 2720.280436][ T3227] unevictable 0 [ 2720.280436][ T3227] slab_reclaimable 16560 [ 2720.280436][ T3227] slab_unreclaimable 308894032 08:47:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f0000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:09 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x36020000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x570d0000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e54}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x77370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2720.433820][ T3227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3227,uid=0 [ 2720.458090][ T3227] Memory cgroup out of memory: Killed process 3227 (syz-executor.5) total-vm:54672kB, anon-rss:376kB, file-rss:8800kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2720.529906][ T3247] set_target_v0_checkentry: 6 callbacks suppressed [ 2720.529926][ T3247] Cannot find add_set index 0 as target [ 2720.569229][ T3255] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:47:09 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x3e030000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2720.592447][ T3256] Cannot find add_set index 0 as target 08:47:09 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2720.747623][ T3248] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2720.823175][ T3269] Cannot find add_set index 0 as target [ 2720.869432][ T3248] CPU: 1 PID: 3248 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2720.878095][ T3248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2720.888271][ T3248] Call Trace: [ 2720.891583][ T3248] [ 2720.894556][ T3248] dump_stack_lvl+0xd1/0x138 [ 2720.899196][ T3248] dump_header+0x10b/0x85f [ 2720.901461][ T3271] Cannot find add_set index 0 as target [ 2720.903654][ T3248] oom_kill_process.cold+0x10/0x15 [ 2720.903703][ T3248] out_of_memory+0x35c/0x14a0 [ 2720.919169][ T3248] ? find_held_lock+0x2d/0x110 [ 2720.923983][ T3248] ? oom_killer_disable+0x280/0x280 [ 2720.929243][ T3248] ? find_held_lock+0x2d/0x110 [ 2720.934069][ T3248] mem_cgroup_out_of_memory+0x206/0x270 [ 2720.939672][ T3248] ? mem_cgroup_margin+0x130/0x130 [ 2720.944828][ T3248] ? lock_downgrade+0x6e0/0x6e0 [ 2720.949729][ T3248] try_charge_memcg+0xefb/0x12f0 [ 2720.954688][ T3248] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2720.960679][ T3248] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2720.966415][ T3248] ? lock_downgrade+0x6e0/0x6e0 [ 2720.971290][ T3248] ? lock_downgrade+0x6e0/0x6e0 [ 2720.976164][ T3248] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2720.981725][ T3248] __alloc_pages+0x1f3/0x5b0 [ 2720.986329][ T3248] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2720.993116][ T3248] ? find_held_lock+0x2d/0x110 [ 2720.997902][ T3248] alloc_pages+0x1aa/0x270 [ 2721.002329][ T3248] pte_alloc_one+0x1a/0x230 [ 2721.006866][ T3248] __pte_alloc+0x6d/0x260 [ 2721.011224][ T3248] ? pmd_install+0x160/0x160 [ 2721.015826][ T3248] ? hugepage_vma_check+0x24e/0x830 [ 2721.021032][ T3248] ? _raw_spin_unlock+0x28/0x40 [ 2721.025901][ T3248] ? __pmd_alloc+0x30c/0x5d0 [ 2721.030509][ T3248] __handle_mm_fault+0x38cf/0x3c90 [ 2721.035668][ T3248] ? vm_iomap_memory+0x190/0x190 [ 2721.040646][ T3248] handle_mm_fault+0x1b6/0x850 [ 2721.045537][ T3248] do_user_addr_fault+0x475/0x1210 [ 2721.050679][ T3248] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2721.056248][ T3248] exc_page_fault+0x98/0x170 [ 2721.060864][ T3248] asm_exc_page_fault+0x26/0x30 [ 2721.065723][ T3248] RIP: 0033:0x7fe5bee2bd49 [ 2721.070173][ T3248] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2721.089806][ T3248] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2721.095884][ T3248] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2721.103858][ T3248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2721.111833][ T3248] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 [ 2721.119811][ T3248] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 000000000029833c [ 2721.127805][ T3248] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2721.135819][ T3248] 08:47:10 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60030000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:10 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x44010000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x4000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2721.308292][ T3273] Cannot find add_set index 0 as target [ 2721.331531][ T3262] device bridge1399 entered promiscuous mode [ 2721.347289][ T3275] Cannot find add_set index 0 as target 08:47:10 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2721.488121][ T3282] Cannot find add_set index 0 as target [ 2721.663574][ T3266] bond1213: (slave vlan1073): making interface the new active one [ 2721.673242][ T3248] memory: usage 307184kB, limit 307200kB, failcnt 7536 [ 2721.673267][ T3248] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2721.673283][ T3248] Memory cgroup stats for /syz4: [ 2721.673500][ T3248] anon 139264 [ 2721.673500][ T3248] file 253952 [ 2721.673500][ T3248] kernel 314163200 [ 2721.673500][ T3248] kernel_stack 65536 [ 2721.673500][ T3248] pagetables 73728 [ 2721.673500][ T3248] sec_pagetables 0 [ 2721.673500][ T3248] percpu 4849728 [ 2721.673500][ T3248] sock 0 [ 2721.673500][ T3248] vmalloc 0 [ 2721.673500][ T3248] shmem 253952 [ 2721.673500][ T3248] zswap 0 [ 2721.673500][ T3248] zswapped 0 [ 2721.673500][ T3248] file_mapped 253952 [ 2721.673500][ T3248] file_dirty 0 [ 2721.673500][ T3248] file_writeback 0 [ 2721.673500][ T3248] swapcached 0 [ 2721.673500][ T3248] anon_thp 0 [ 2721.673500][ T3248] file_thp 0 [ 2721.673500][ T3248] shmem_thp 0 [ 2721.673500][ T3248] inactive_anon 208896 [ 2721.673500][ T3248] active_anon 184320 [ 2721.673500][ T3248] inactive_file 0 [ 2721.673500][ T3248] active_file 0 [ 2721.673500][ T3248] unevictable 0 [ 2721.673500][ T3248] slab_reclaimable 55648 [ 2721.673500][ T3248] slab_unreclaimable 309088568 [ 2721.673561][ T3248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3248,uid=0 [ 2721.673730][ T3248] Memory cgroup out of memory: Killed process 3248 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2721.744910][ T3260] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2721.877920][ T3266] bond1213: (slave vlan1073): Enslaving as an active interface with an up link [ 2721.893870][ T3260] CPU: 0 PID: 3260 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2721.893900][ T3260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2721.893914][ T3260] Call Trace: [ 2721.893922][ T3260] [ 2721.893933][ T3260] dump_stack_lvl+0xd1/0x138 [ 2721.893967][ T3260] dump_header+0x10b/0x85f [ 2721.894008][ T3260] oom_kill_process.cold+0x10/0x15 [ 2721.894047][ T3260] out_of_memory+0x35c/0x14a0 [ 2721.894094][ T3260] ? oom_killer_disable+0x280/0x280 [ 2721.894134][ T3260] ? find_held_lock+0x2d/0x110 [ 2721.894173][ T3260] mem_cgroup_out_of_memory+0x206/0x270 [ 2721.894210][ T3260] ? mem_cgroup_margin+0x130/0x130 [ 2721.894243][ T3260] ? lock_downgrade+0x6e0/0x6e0 [ 2721.894285][ T3260] try_charge_memcg+0xefb/0x12f0 [ 2721.894320][ T3260] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2721.894347][ T3260] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2721.894387][ T3260] ? lock_downgrade+0x6e0/0x6e0 [ 2721.894412][ T3260] ? lock_downgrade+0x6e0/0x6e0 [ 2721.894434][ T3260] ? rcu_read_unlock+0x9/0x60 [ 2721.894487][ T3260] obj_cgroup_charge+0x2af/0x5e0 [ 2721.894520][ T3260] ? copy_process+0x3aa/0x7520 [ 2721.894550][ T3260] kmem_cache_alloc_node+0xb7/0x460 [ 2721.894581][ T3260] copy_process+0x3aa/0x7520 [ 2721.894612][ T3260] ? __lock_acquire+0xbc3/0x56d0 [ 2721.894650][ T3260] ? __cleanup_sighand+0xb0/0xb0 [ 2721.894677][ T3260] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2721.894706][ T3260] ? psi_memstall_leave+0x174/0x250 [ 2721.894748][ T3260] kernel_clone+0xeb/0x990 [ 2721.894779][ T3260] ? create_io_thread+0xf0/0xf0 [ 2721.894809][ T3260] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2721.894848][ T3260] ? lock_downgrade+0x6e0/0x6e0 [ 2721.894886][ T3260] __do_sys_clone+0xba/0x100 [ 2721.894914][ T3260] ? kernel_clone+0x990/0x990 [ 2721.894959][ T3260] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2721.894994][ T3260] do_syscall_64+0x39/0xb0 [ 2721.895027][ T3260] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2721.895053][ T3260] RIP: 0033:0x7f5b1fc8d4f1 [ 2721.895074][ T3260] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2721.895096][ T3260] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2721.895119][ T3260] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2721.895137][ T3260] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2721.895153][ T3260] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2721.895169][ T3260] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2721.895185][ T3260] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2721.895223][ T3260] [ 2721.908206][ T3260] memory: usage 307200kB, limit 307200kB, failcnt 36618 [ 2721.973879][ T3263] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2722.036993][ T3260] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2722.310659][ T3260] Memory cgroup stats for /syz5: [ 2722.310867][ T3260] anon 143360 [ 2722.310867][ T3260] file 483328 [ 2722.310867][ T3260] kernel 313946112 [ 2722.310867][ T3260] kernel_stack 65536 [ 2722.310867][ T3260] pagetables 77824 [ 2722.310867][ T3260] sec_pagetables 0 [ 2722.310867][ T3260] percpu 4839136 [ 2722.310867][ T3260] sock 0 [ 2722.310867][ T3260] vmalloc 0 [ 2722.310867][ T3260] shmem 483328 [ 2722.310867][ T3260] zswap 0 [ 2722.310867][ T3260] zswapped 0 [ 2722.310867][ T3260] file_mapped 471040 [ 2722.310867][ T3260] file_dirty 0 [ 2722.310867][ T3260] file_writeback 0 [ 2722.310867][ T3260] swapcached 0 [ 2722.310867][ T3260] anon_thp 0 [ 2722.310867][ T3260] file_thp 0 [ 2722.310867][ T3260] shmem_thp 0 [ 2722.310867][ T3260] inactive_anon 245760 [ 2722.310867][ T3260] active_anon 380928 [ 2722.310867][ T3260] inactive_file 0 [ 2722.310867][ T3260] active_file 0 [ 2722.310867][ T3260] unevictable 0 [ 2722.310867][ T3260] slab_reclaimable 16560 [ 2722.310867][ T3260] slab_unreclaimable 308906376 [ 2722.501326][ T3260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3260,uid=0 [ 2722.531353][ T3260] Memory cgroup out of memory: Killed process 3260 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:47:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff0300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:11 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x46010000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:11 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x5000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x78370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e55}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2722.659681][ T3290] Cannot find add_set index 0 as target [ 2722.668100][ T3291] Cannot find add_set index 0 as target 08:47:11 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x46030000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2722.704030][ T3292] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2722.781763][ T3289] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2722.880803][ T3289] CPU: 0 PID: 3289 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2722.889471][ T3289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2722.899555][ T3289] Call Trace: [ 2722.902855][ T3289] [ 2722.905814][ T3289] dump_stack_lvl+0xd1/0x138 [ 2722.910488][ T3289] dump_header+0x10b/0x85f [ 2722.914953][ T3289] oom_kill_process.cold+0x10/0x15 [ 2722.920115][ T3289] out_of_memory+0x35c/0x14a0 [ 2722.924842][ T3289] ? find_held_lock+0x2d/0x110 [ 2722.929651][ T3289] ? oom_killer_disable+0x280/0x280 [ 2722.934893][ T3289] ? find_held_lock+0x2d/0x110 [ 2722.939705][ T3289] mem_cgroup_out_of_memory+0x206/0x270 [ 2722.945291][ T3289] ? mem_cgroup_margin+0x130/0x130 [ 2722.950454][ T3289] ? lock_downgrade+0x6e0/0x6e0 [ 2722.955364][ T3289] try_charge_memcg+0xefb/0x12f0 [ 2722.960348][ T3289] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2722.966363][ T3289] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2722.972127][ T3289] ? lock_downgrade+0x6e0/0x6e0 [ 2722.977018][ T3289] ? lock_downgrade+0x6e0/0x6e0 [ 2722.981915][ T3289] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2722.987502][ T3289] __alloc_pages+0x1f3/0x5b0 [ 2722.992158][ T3289] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2722.998966][ T3289] ? find_held_lock+0x2d/0x110 [ 2723.003785][ T3289] alloc_pages+0x1aa/0x270 [ 2723.008239][ T3289] pte_alloc_one+0x1a/0x230 [ 2723.012781][ T3289] __pte_alloc+0x6d/0x260 [ 2723.017148][ T3289] ? pmd_install+0x160/0x160 [ 2723.021765][ T3289] ? hugepage_vma_check+0x24e/0x830 [ 2723.026986][ T3289] ? _raw_spin_unlock+0x28/0x40 [ 2723.031871][ T3289] ? __pmd_alloc+0x30c/0x5d0 [ 2723.036507][ T3289] __handle_mm_fault+0x38cf/0x3c90 [ 2723.041668][ T3289] ? vm_iomap_memory+0x190/0x190 [ 2723.046677][ T3289] handle_mm_fault+0x1b6/0x850 [ 2723.051492][ T3289] do_user_addr_fault+0x475/0x1210 [ 2723.056649][ T3289] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2723.062246][ T3289] exc_page_fault+0x98/0x170 [ 2723.066878][ T3289] asm_exc_page_fault+0x26/0x30 [ 2723.071761][ T3289] RIP: 0033:0x7fe5bee2bd49 [ 2723.076204][ T3289] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2723.095848][ T3289] RSP: 002b:00007fffbb0aff60 EFLAGS: 00010246 [ 2723.101942][ T3289] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2723.109931][ T3289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555558192e8 [ 2723.117976][ T3289] RBP: 00007fffbb0b0058 R08: 0000000000000000 R09: 0000000000000000 08:47:11 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2723.125974][ T3289] R10: 00007fe5bea000c8 R11: 0000000000000246 R12: 0000000000298b9e [ 2723.130379][ T3304] Cannot find add_set index 0 as target [ 2723.133949][ T3289] R13: 00007fffbb0b0080 R14: 00007fe5befabf80 R15: 0000000000000032 [ 2723.133992][ T3289] [ 2723.149329][ T3302] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:47:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x6000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x48000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:12 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x78020000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2723.417453][ T3289] memory: usage 307200kB, limit 307200kB, failcnt 7608 [ 2723.438900][ T3289] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 08:47:12 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4a020000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2723.578818][ T3289] Memory cgroup stats for /syz4: [ 2723.579045][ T3289] anon 139264 [ 2723.579045][ T3289] file 253952 [ 2723.579045][ T3289] kernel 314179584 [ 2723.579045][ T3289] kernel_stack 65536 [ 2723.579045][ T3289] pagetables 73728 [ 2723.579045][ T3289] sec_pagetables 0 [ 2723.579045][ T3289] percpu 4849792 [ 2723.579045][ T3289] sock 0 [ 2723.579045][ T3289] vmalloc 0 [ 2723.579045][ T3289] shmem 253952 [ 2723.579045][ T3289] zswap 0 [ 2723.579045][ T3289] zswapped 0 [ 2723.579045][ T3289] file_mapped 253952 [ 2723.579045][ T3289] file_dirty 0 [ 2723.579045][ T3289] file_writeback 0 [ 2723.579045][ T3289] swapcached 0 [ 2723.579045][ T3289] anon_thp 0 [ 2723.579045][ T3289] file_thp 0 [ 2723.579045][ T3289] shmem_thp 0 [ 2723.579045][ T3289] inactive_anon 208896 [ 2723.579045][ T3289] active_anon 184320 [ 2723.579045][ T3289] inactive_file 0 [ 2723.579045][ T3289] active_file 0 [ 2723.579045][ T3289] unevictable 0 [ 2723.579045][ T3289] slab_reclaimable 55648 [ 2723.579045][ T3289] slab_unreclaimable 309100048 [ 2723.754054][ T3289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3289,uid=0 [ 2723.859016][ T3289] Memory cgroup out of memory: Killed process 3289 (syz-executor.4) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2723.903943][ T3297] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2723.931454][ T3297] CPU: 0 PID: 3297 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2723.940112][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2723.950249][ T3297] Call Trace: [ 2723.953568][ T3297] [ 2723.956529][ T3297] dump_stack_lvl+0xd1/0x138 [ 2723.961168][ T3297] dump_header+0x10b/0x85f [ 2723.965636][ T3297] oom_kill_process.cold+0x10/0x15 [ 2723.970791][ T3297] out_of_memory+0x35c/0x14a0 [ 2723.975524][ T3297] ? oom_killer_disable+0x280/0x280 [ 2723.980774][ T3297] ? find_held_lock+0x2d/0x110 [ 2723.985584][ T3297] mem_cgroup_out_of_memory+0x206/0x270 [ 2723.991178][ T3297] ? mem_cgroup_margin+0x130/0x130 [ 2723.996330][ T3297] ? lock_downgrade+0x6e0/0x6e0 [ 2724.001235][ T3297] try_charge_memcg+0xefb/0x12f0 [ 2724.006224][ T3297] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2724.012241][ T3297] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2724.018009][ T3297] ? lock_downgrade+0x6e0/0x6e0 [ 2724.022900][ T3297] ? lock_downgrade+0x6e0/0x6e0 [ 2724.027783][ T3297] ? rcu_read_unlock+0x9/0x60 [ 2724.032517][ T3297] obj_cgroup_charge+0x2af/0x5e0 [ 2724.037533][ T3297] ? copy_process+0x3aa/0x7520 [ 2724.042325][ T3297] kmem_cache_alloc_node+0xb7/0x460 [ 2724.047561][ T3297] copy_process+0x3aa/0x7520 [ 2724.052187][ T3297] ? __lock_acquire+0xbc3/0x56d0 [ 2724.057166][ T3297] ? __cleanup_sighand+0xb0/0xb0 [ 2724.062132][ T3297] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2724.068145][ T3297] ? psi_memstall_leave+0x174/0x250 [ 2724.073397][ T3297] kernel_clone+0xeb/0x990 [ 2724.077863][ T3297] ? create_io_thread+0xf0/0xf0 [ 2724.082759][ T3297] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2724.089056][ T3297] ? lock_downgrade+0x6e0/0x6e0 [ 2724.093953][ T3297] __do_sys_clone+0xba/0x100 [ 2724.098575][ T3297] ? kernel_clone+0x990/0x990 [ 2724.103297][ T3297] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2724.109232][ T3297] do_syscall_64+0x39/0xb0 [ 2724.113702][ T3297] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2724.119632][ T3297] RIP: 0033:0x7f5b1fc8d4f1 [ 2724.124076][ T3297] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2724.143717][ T3297] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2724.152177][ T3297] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2724.160186][ T3297] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2724.168188][ T3297] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2724.176188][ T3297] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2724.184275][ T3297] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2724.192315][ T3297] [ 2724.254294][ T3297] memory: usage 307200kB, limit 307200kB, failcnt 36835 [ 2724.270940][ T3297] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2724.281766][ T3297] Memory cgroup stats for /syz5: [ 2724.281950][ T3297] anon 143360 [ 2724.281950][ T3297] file 483328 [ 2724.281950][ T3297] kernel 313946112 [ 2724.281950][ T3297] kernel_stack 65536 [ 2724.281950][ T3297] pagetables 77824 [ 2724.281950][ T3297] sec_pagetables 0 [ 2724.281950][ T3297] percpu 4839136 [ 2724.281950][ T3297] sock 0 [ 2724.281950][ T3297] vmalloc 0 [ 2724.281950][ T3297] shmem 483328 [ 2724.281950][ T3297] zswap 0 [ 2724.281950][ T3297] zswapped 0 [ 2724.281950][ T3297] file_mapped 471040 [ 2724.281950][ T3297] file_dirty 0 [ 2724.281950][ T3297] file_writeback 0 [ 2724.281950][ T3297] swapcached 0 [ 2724.281950][ T3297] anon_thp 0 [ 2724.281950][ T3297] file_thp 0 [ 2724.281950][ T3297] shmem_thp 0 [ 2724.281950][ T3297] inactive_anon 245760 [ 2724.281950][ T3297] active_anon 380928 [ 2724.281950][ T3297] inactive_file 0 [ 2724.281950][ T3297] active_file 0 [ 2724.281950][ T3297] unevictable 0 [ 2724.281950][ T3297] slab_reclaimable 16560 [ 2724.281950][ T3297] slab_unreclaimable 308906376 [ 2724.457686][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3297,uid=0 [ 2724.480934][ T3297] Memory cgroup out of memory: Killed process 3297 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:47:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e56}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:13 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4c000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x7000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x79370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:13 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x4c020000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2724.610632][ T3326] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2724.618521][ T3327] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:47:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80030000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2724.719062][ T3326] CPU: 1 PID: 3326 Comm: syz-executor.4 Not tainted 6.2.0-rc4-syzkaller #0 [ 2724.727718][ T3326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2724.737805][ T3326] Call Trace: [ 2724.741143][ T3326] [ 2724.744104][ T3326] dump_stack_lvl+0xd1/0x138 [ 2724.748830][ T3326] dump_header+0x10b/0x85f [ 2724.753307][ T3326] oom_kill_process.cold+0x10/0x15 [ 2724.758502][ T3326] out_of_memory+0x35c/0x14a0 [ 2724.763223][ T3326] ? find_held_lock+0x2d/0x110 [ 2724.768036][ T3326] ? oom_killer_disable+0x280/0x280 [ 2724.773292][ T3326] ? find_held_lock+0x2d/0x110 [ 2724.778105][ T3326] mem_cgroup_out_of_memory+0x206/0x270 [ 2724.783708][ T3326] ? mem_cgroup_margin+0x130/0x130 [ 2724.788866][ T3326] ? lock_downgrade+0x6e0/0x6e0 [ 2724.793769][ T3326] try_charge_memcg+0xefb/0x12f0 [ 2724.798838][ T3326] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2724.804865][ T3326] ? lock_downgrade+0x6e0/0x6e0 [ 2724.809767][ T3326] charge_memcg+0x90/0x3b0 [ 2724.814226][ T3326] __mem_cgroup_charge+0x2b/0x90 [ 2724.819203][ T3326] ? copy_mc_to_kernel+0x3e/0x90 [ 2724.824177][ T3326] do_wp_page+0x7ec/0x3370 [ 2724.828643][ T3326] ? lock_release+0x810/0x810 [ 2724.833350][ T3326] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2724.838764][ T3326] ? do_raw_spin_lock+0x124/0x2b0 [ 2724.843816][ T3326] ? rwlock_bug.part.0+0x90/0x90 [ 2724.848952][ T3326] ? lock_chain_count+0x20/0x20 [ 2724.853846][ T3326] __handle_mm_fault+0x1f58/0x3c90 [ 2724.859009][ T3326] ? vm_iomap_memory+0x190/0x190 [ 2724.864015][ T3326] handle_mm_fault+0x1b6/0x850 [ 2724.868826][ T3326] do_user_addr_fault+0x475/0x1210 [ 2724.873975][ T3326] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2724.879573][ T3326] exc_page_fault+0x98/0x170 [ 2724.884198][ T3326] asm_exc_page_fault+0x26/0x30 [ 2724.889078][ T3326] RIP: 0033:0x7fe5bee50ead [ 2724.893523][ T3326] Code: 89 cf 41 56 49 89 d6 41 55 41 54 55 53 44 89 c3 48 81 ec 58 01 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 48 01 00 00 31 c0 <48> c7 84 24 98 00 00 00 00 00 00 00 48 85 f6 0f 84 9e 00 00 00 48 [ 2724.913170][ T3326] RSP: 002b:00007fffbb0aff10 EFLAGS: 00010246 08:47:13 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x50020000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2724.919284][ T3326] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fffbb0b00a0 [ 2724.927292][ T3326] RDX: 00007fe5beee7a0b RSI: 0000000000000040 RDI: 00007fffbb0b0240 [ 2724.935294][ T3326] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fe5bef87ef0 [ 2724.943294][ T3326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2724.951288][ T3326] R13: 0000000000000000 R14: 00007fe5beee7a0b R15: 00007fffbb0b00a0 [ 2724.959311][ T3326] 08:47:13 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84020000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:13 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x50030000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2725.146437][ T3326] memory: usage 307076kB, limit 307200kB, failcnt 7645 [ 2725.188467][ T3326] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2725.222620][ T3326] Memory cgroup stats for /syz4: [ 2725.222851][ T3326] anon 77824 [ 2725.222851][ T3326] file 253952 08:47:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x8030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2725.222851][ T3326] kernel 314114048 [ 2725.222851][ T3326] kernel_stack 32768 [ 2725.222851][ T3326] pagetables 57344 [ 2725.222851][ T3326] sec_pagetables 0 [ 2725.222851][ T3326] percpu 4849792 [ 2725.222851][ T3326] sock 0 [ 2725.222851][ T3326] vmalloc 0 [ 2725.222851][ T3326] shmem 253952 [ 2725.222851][ T3326] zswap 0 [ 2725.222851][ T3326] zswapped 0 [ 2725.222851][ T3326] file_mapped 253952 [ 2725.222851][ T3326] file_dirty 0 [ 2725.222851][ T3326] file_writeback 0 [ 2725.222851][ T3326] swapcached 0 [ 2725.222851][ T3326] anon_thp 0 [ 2725.222851][ T3326] file_thp 0 [ 2725.222851][ T3326] shmem_thp 0 [ 2725.222851][ T3326] inactive_anon 147456 [ 2725.222851][ T3326] active_anon 184320 [ 2725.222851][ T3326] inactive_file 0 [ 2725.222851][ T3326] active_file 0 [ 2725.222851][ T3326] unevictable 0 [ 2725.222851][ T3326] slab_reclaimable 48272 [ 2725.222851][ T3326] slab_unreclaimable 309089928 [ 2725.407878][ T3326] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13418,uid=0 [ 2725.411868][ T3333] device bridge1400 entered promiscuous mode [ 2725.430800][ T3326] Memory cgroup out of memory: Killed process 13418 (syz-executor.4) total-vm:50568kB, anon-rss:364kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2725.590750][ T3352] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2725.692538][ T3352] CPU: 1 PID: 3352 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2725.701193][ T3352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2725.711296][ T3352] Call Trace: [ 2725.714596][ T3352] [ 2725.717541][ T3352] dump_stack_lvl+0xd1/0x138 [ 2725.722164][ T3352] dump_header+0x10b/0x85f [ 2725.726656][ T3352] oom_kill_process.cold+0x10/0x15 [ 2725.731817][ T3352] out_of_memory+0x35c/0x14a0 [ 2725.736548][ T3352] ? find_held_lock+0x2d/0x110 [ 2725.737308][ T3336] bond1215: (slave vlan1074): making interface the new active one [ 2725.741338][ T3352] ? oom_killer_disable+0x280/0x280 [ 2725.741384][ T3352] ? find_held_lock+0x2d/0x110 [ 2725.759224][ T3352] mem_cgroup_out_of_memory+0x206/0x270 [ 2725.764840][ T3352] ? mem_cgroup_margin+0x130/0x130 [ 2725.767913][ T3336] bond1215: (slave vlan1074): Enslaving as an active interface with an up link [ 2725.770309][ T3352] ? lock_downgrade+0x6e0/0x6e0 [ 2725.770357][ T3352] try_charge_memcg+0xefb/0x12f0 [ 2725.789126][ T3352] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2725.795142][ T3352] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2725.800914][ T3352] ? lock_downgrade+0x6e0/0x6e0 [ 2725.805852][ T3352] obj_cgroup_charge+0x2af/0x5e0 [ 2725.810825][ T3352] ? __anon_vma_prepare+0x64/0x580 [ 2725.815976][ T3352] kmem_cache_alloc+0xb5/0x430 [ 2725.820776][ T3352] __anon_vma_prepare+0x64/0x580 [ 2725.825748][ T3352] ? __pmd_alloc+0x30c/0x5d0 [ 2725.830388][ T3352] __handle_mm_fault+0x392f/0x3c90 [ 2725.835553][ T3352] ? vm_iomap_memory+0x190/0x190 [ 2725.840567][ T3352] handle_mm_fault+0x1b6/0x850 [ 2725.845381][ T3352] do_user_addr_fault+0x475/0x1210 [ 2725.850543][ T3352] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2725.856132][ T3352] exc_page_fault+0x98/0x170 [ 2725.860756][ T3352] asm_exc_page_fault+0x26/0x30 [ 2725.865635][ T3352] RIP: 0033:0x7f5b1fc2bd49 [ 2725.870067][ T3352] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2725.889690][ T3352] RSP: 002b:00007fff16a82090 EFLAGS: 00010246 [ 2725.895786][ T3352] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2725.903783][ T3352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555592f2e8 [ 2725.911806][ T3352] RBP: 00007fff16a82188 R08: 0000000000000000 R09: 0000000000000000 [ 2725.919803][ T3352] R10: 00007f5b1f8000c8 R11: 0000000000000246 R12: 0000000000299685 [ 2725.927830][ T3352] R13: 00007fff16a821b0 R14: 00007f5b1fdabf80 R15: 0000000000000032 [ 2725.935871][ T3352] [ 2726.057945][ T3352] memory: usage 307188kB, limit 307200kB, failcnt 36940 [ 2726.090500][ T3352] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2726.108023][ T3352] Memory cgroup stats for /syz5: [ 2726.108254][ T3352] anon 135168 [ 2726.108254][ T3352] file 483328 [ 2726.108254][ T3352] kernel 313942016 [ 2726.108254][ T3352] kernel_stack 65536 [ 2726.108254][ T3352] pagetables 77824 [ 2726.108254][ T3352] sec_pagetables 0 [ 2726.108254][ T3352] percpu 4839136 [ 2726.108254][ T3352] sock 0 [ 2726.108254][ T3352] vmalloc 0 [ 2726.108254][ T3352] shmem 483328 [ 2726.108254][ T3352] zswap 0 [ 2726.108254][ T3352] zswapped 0 [ 2726.108254][ T3352] file_mapped 471040 [ 2726.108254][ T3352] file_dirty 0 [ 2726.108254][ T3352] file_writeback 0 [ 2726.108254][ T3352] swapcached 0 [ 2726.108254][ T3352] anon_thp 0 [ 2726.108254][ T3352] file_thp 0 [ 2726.108254][ T3352] shmem_thp 0 [ 2726.108254][ T3352] inactive_anon 237568 [ 2726.108254][ T3352] active_anon 380928 [ 2726.108254][ T3352] inactive_file 0 [ 2726.108254][ T3352] active_file 0 [ 2726.108254][ T3352] unevictable 0 [ 2726.108254][ T3352] slab_reclaimable 16560 [ 2726.108254][ T3352] slab_unreclaimable 308905112 [ 2726.267545][ T3352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3352,uid=0 [ 2726.300416][ T3352] Memory cgroup out of memory: Killed process 3352 (syz-executor.5) total-vm:54540kB, anon-rss:356kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:47:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:15 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x84030000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:15 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x60000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x13000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2726.423561][ T3367] set_target_v0_checkentry: 11 callbacks suppressed [ 2726.423580][ T3367] Cannot find add_set index 0 as target [ 2726.454369][ T3369] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2726.480666][ T3363] Cannot find add_set index 0 as target 08:47:15 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x64020000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2726.622656][ T3369] bond1216 (uninitialized): Released all slaves 08:47:15 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x86030000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2726.740815][ T3372] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2726.828984][ T3381] Cannot find add_set index 0 as target [ 2726.848841][ T3380] Cannot find add_set index 0 as target [ 2726.861749][ T3372] CPU: 1 PID: 3372 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2726.861779][ T3372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2726.861793][ T3372] Call Trace: [ 2726.861801][ T3372] [ 2726.861811][ T3372] dump_stack_lvl+0xd1/0x138 [ 2726.861849][ T3372] dump_header+0x10b/0x85f [ 2726.861889][ T3372] oom_kill_process.cold+0x10/0x15 [ 2726.861928][ T3372] out_of_memory+0x35c/0x14a0 [ 2726.861971][ T3372] ? find_held_lock+0x2d/0x110 [ 2726.862006][ T3372] ? oom_killer_disable+0x280/0x280 [ 2726.862047][ T3372] ? find_held_lock+0x2d/0x110 [ 2726.862091][ T3372] mem_cgroup_out_of_memory+0x206/0x270 [ 2726.862129][ T3372] ? mem_cgroup_margin+0x130/0x130 [ 2726.862161][ T3372] ? lock_downgrade+0x6e0/0x6e0 [ 2726.862202][ T3372] try_charge_memcg+0xefb/0x12f0 [ 2726.862237][ T3372] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2726.862263][ T3372] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2726.862299][ T3372] ? lock_downgrade+0x6e0/0x6e0 [ 2726.862326][ T3372] ? lock_downgrade+0x6e0/0x6e0 [ 2726.862348][ T3372] ? rcu_read_unlock+0x9/0x60 08:47:15 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x68000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2726.862393][ T3372] obj_cgroup_charge+0x2af/0x5e0 [ 2726.862426][ T3372] ? copy_process+0x3aa/0x7520 [ 2726.862451][ T3372] kmem_cache_alloc_node+0xb7/0x460 [ 2726.862484][ T3372] copy_process+0x3aa/0x7520 [ 2726.862515][ T3372] ? __lock_acquire+0xbc3/0x56d0 [ 2726.862552][ T3372] ? __cleanup_sighand+0xb0/0xb0 [ 2726.862578][ T3372] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2726.862608][ T3372] ? psi_memstall_leave+0x174/0x250 [ 2726.862649][ T3372] kernel_clone+0xeb/0x990 [ 2726.862679][ T3372] ? create_io_thread+0xf0/0xf0 [ 2726.862710][ T3372] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2726.862748][ T3372] ? lock_downgrade+0x6e0/0x6e0 [ 2726.862785][ T3372] __do_sys_clone+0xba/0x100 [ 2726.862812][ T3372] ? kernel_clone+0x990/0x990 [ 2726.862856][ T3372] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2726.862891][ T3372] do_syscall_64+0x39/0xb0 [ 2726.862922][ T3372] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2726.862948][ T3372] RIP: 0033:0x7f5b1fc8d4f1 [ 2726.862968][ T3372] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2726.862989][ T3372] RSP: 002b:00007fff16a81f98 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2726.863015][ T3372] RAX: ffffffffffffffda RBX: 00007f5b209b8700 RCX: 00007f5b1fc8d4f1 [ 2726.863031][ T3372] RDX: 00007f5b209b89d0 RSI: 00007f5b209b82f0 RDI: 00000000003d0f00 [ 2726.863048][ T3372] RBP: 00007fff16a821e0 R08: 00007f5b209b8700 R09: 00007f5b209b8700 [ 2726.863065][ T3372] R10: 00007f5b209b89d0 R11: 0000000000000206 R12: 00007fff16a8204e [ 2726.863086][ T3372] R13: 00007fff16a8204f R14: 00007f5b209b8300 R15: 0000000000022000 [ 2726.863124][ T3372] [ 2726.863182][ T3372] memory: usage 307200kB, limit 307200kB, failcnt 36997 [ 2726.863198][ T3372] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2726.863214][ T3372] Memory cgroup stats for /syz5: [ 2726.863412][ T3372] anon 143360 [ 2726.863412][ T3372] file 483328 [ 2726.863412][ T3372] kernel 313946112 [ 2726.863412][ T3372] kernel_stack 65536 [ 2726.863412][ T3372] pagetables 77824 [ 2726.863412][ T3372] sec_pagetables 0 [ 2726.863412][ T3372] percpu 4839136 [ 2726.863412][ T3372] sock 0 [ 2726.863412][ T3372] vmalloc 0 [ 2726.863412][ T3372] shmem 483328 [ 2726.863412][ T3372] zswap 0 [ 2726.863412][ T3372] zswapped 0 [ 2726.863412][ T3372] file_mapped 471040 [ 2726.863412][ T3372] file_dirty 0 [ 2726.863412][ T3372] file_writeback 0 [ 2726.863412][ T3372] swapcached 0 [ 2726.863412][ T3372] anon_thp 0 [ 2726.863412][ T3372] file_thp 0 [ 2726.863412][ T3372] shmem_thp 0 [ 2726.863412][ T3372] inactive_anon 245760 [ 2726.863412][ T3372] active_anon 380928 [ 2726.863412][ T3372] inactive_file 0 [ 2726.863412][ T3372] active_file 0 [ 2726.863412][ T3372] unevictable 0 [ 2726.863412][ T3372] slab_reclaimable 16560 [ 2726.863412][ T3372] slab_unreclaimable 308906376 [ 2726.863475][ T3372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2727.086547][ T3383] Cannot find add_set index 0 as target 08:47:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x1f000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) [ 2727.430457][ T3372] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3372,uid=0 [ 2727.457520][T27436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2727.464638][ T3386] Cannot find add_set index 0 as target [ 2727.483808][ T3372] Memory cgroup out of memory: Killed process 3372 (syz-executor.5) total-vm:54672kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:47:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a370f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2727.596654][ T3365] device bridge1401 entered promiscuous mode [ 2727.833854][ T3375] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 08:47:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 08:47:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88020000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:16 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x6c000000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x32030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000006400001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000200", @ANYRES32=r7, @ANYBLOB="45070200000000001c0012800b00010062726964676500000c0002800500070002"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x401, 0xb30b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x108e58}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) [ 2727.933947][ T3394] Cannot find add_set index 0 as target [ 2727.955978][ T3396] Cannot find add_set index 0 as target 08:47:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x89000000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:16 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x6c010000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) [ 2728.067992][ T3403] Cannot find add_set index 0 as target [ 2728.196575][ T3406] Cannot find add_set index 0 as target [ 2728.197285][ T3407] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 08:47:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9e020000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 08:47:17 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x70020000]}}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 08:47:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2b8, 0x9403, 0x0, 0x2b8, 0x2c0, 0x3a8, 0x3d8, 0x3d8, 0x3a8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0xb201, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0x2}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3f000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x288) 08:47:17 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x122}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'macsec0\x00', 'lo\x00'}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa6020000]}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'ipvlan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 2728.481518][ T3401] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2728.549762][ T3409] device bridge1402 entered promiscuous mode [ 2728.614007][ T3401] CPU: 0 PID: 3401 Comm: syz-executor.5 Not tainted 6.2.0-rc4-syzkaller #0 [ 2728.622656][ T3401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2728.632740][ T3401] Call Trace: [ 2728.636042][ T3401] [ 2728.639004][ T3401] dump_stack_lvl+0xd1/0x138 [ 2728.643631][ T3401] dump_header+0x10b/0x85f [ 2728.648087][ T3401] oom_kill_process.cold+0x10/0x15 [ 2728.653276][ T3401] out_of_memory+0x35c/0x14a0 [ 2728.657993][ T3401] ? find_held_lock+0x2d/0x110 [ 2728.662803][ T3401] ? oom_killer_disable+0x280/0x280 [ 2728.668049][ T3401] ? find_held_lock+0x2d/0x110 [ 2728.672858][ T3401] mem_cgroup_out_of_memory+0x206/0x270 [ 2728.678442][ T3401] ? mem_cgroup_margin+0x130/0x130 [ 2728.683591][ T3401] ? lock_downgrade+0x6e0/0x6e0 [ 2728.688483][ T3401] try_charge_memcg+0xefb/0x12f0 [ 2728.693463][ T3401] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2728.699476][ T3401] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2728.705239][ T3401] ? lock_downgrade+0x6e0/0x6e0 [ 2728.710117][ T3401] ? lock_downgrade+0x6e0/0x6e0 [ 2728.715130][ T3401] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2728.720720][ T3401] __alloc_pages+0x1f3/0x5b0 [ 2728.725354][ T3401] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2728.732167][ T3401] ? find_held_lock+0x2d/0x110 [ 2728.736994][ T3401] alloc_pages+0x1aa/0x270 [ 2728.741445][ T3401] pte_alloc_one+0x1a/0x230 [ 2728.746074][ T3401] __pte_alloc+0x6d/0x260 [ 2728.750448][ T3401] ? pmd_install+0x160/0x160 [ 2728.755072][ T3401] ? hugepage_vma_check+0x24e/0x830 [ 2728.760304][ T3401] ? _raw_spin_unlock+0x28/0x40 [ 2728.765201][ T3401] ? __pmd_alloc+0x30c/0x5d0 [ 2728.769840][ T3401] __handle_mm_fault+0x38cf/0x3c90 [ 2728.775005][ T3401] ? vm_iomap_memory+0x190/0x190 [ 2728.780012][ T3401] handle_mm_fault+0x1b6/0x850 [ 2728.784822][ T3401] do_user_addr_fault+0x475/0x1210 [ 2728.789982][ T3401] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2728.795576][ T3401] exc_page_fault+0x98/0x170 [ 2728.800198][ T3401] asm_exc_page_fault+0x26/0x30 [ 2728.805073][ T3401] RIP: 0033:0x7f5b1fc2bd49 [ 2728.809511][ T3401] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2728.829153][ T3401] RSP: 002b:00007fff16a82090 EFLAGS: 00010246 [ 2728.835256][ T3401] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 2728.843257][ T3401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555592f2e8 [ 2728.851262][ T3401] RBP: 00007fff16a82188 R08: 0000000000000000 R09: 0000000000000000 [ 2728.859259][ T3401] R10: 00007f5b1f8000c8 R11: 0000000000000246 R12: 000000000029a1c7 [ 2728.867256][ T3401] R13: 00007fff16a821b0 R14: 00007f5b1fdabf80 R15: 0000000000000032 [ 2728.875277][ T3401] [ 2729.105915][ T3401] memory: usage 307184kB, limit 307200kB, failcnt 37100 [ 2729.134501][ T3401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2729.154485][ T3401] Memory cgroup stats for /syz5: [ 2729.154717][ T3401] anon 135168 [ 2729.154717][ T3401] file 483328 [ 2729.154717][ T3401] kernel 313937920 [ 2729.154717][ T3401] kernel_stack 65536 [ 2729.154717][ T3401] pagetables 73728 [ 2729.154717][ T3401] sec_pagetables 0 [ 2729.154717][ T3401] percpu 4839136 [ 2729.154717][ T3401] sock 0 [ 2729.154717][ T3401] vmalloc 0 [ 2729.154717][ T3401] shmem 483328 [ 2729.154717][ T3401] zswap 0 [ 2729.154717][ T3401] zswapped 0 [ 2729.154717][ T3401] file_mapped 471040 [ 2729.154717][ T3401] file_dirty 0 [ 2729.154717][ T3401] file_writeback 0 [ 2729.154717][ T3401] swapcached 0 [ 2729.154717][ T3401] anon_thp 0 [ 2729.154717][ T3401] file_thp 0 [ 2729.154717][ T3401] shmem_thp 0 [ 2729.154717][ T3401] inactive_anon 237568 [ 2729.154717][ T3401] active_anon 380928 [ 2729.154717][ T3401] inactive_file 0 [ 2729.154717][ T3401] active_file 0 [ 2729.154717][ T3401] unevictable 0 [ 2729.154717][ T3401] slab_reclaimable 16560 [ 2729.154717][ T3401] slab_unreclaimable 308905112 [ 2729.206322][ T3414] bond1216: (slave vlan1076): making interface the new active one [ 2729.407178][ T3414] bond1216: (slave vlan1076): Enslaving as an active interface with an up link [ 2729.475823][ T3401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3401,uid=0 [ 2729.509887][ T3401] Memory cgroup out of memory: Killed process 3401 (syz-executor.5) total-vm:54540kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2729.543046][T27436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.125221][T27436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2730.660141][T27436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2731.509303][ T4388] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2731.521270][ T4388] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2731.550130][ T4388] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2731.560047][ T4388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2731.581812][ T4388] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2731.593045][ T3433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2733.070239][ T3429] chnl_net:caif_netlink_parms(): no params data found [ 2733.692186][ T5115] Bluetooth: hci5: command 0x0409 tx timeout [ 2733.842594][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 2733.879470][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 2733.903999][ T3429] device bridge_slave_0 entered promiscuous mode [ 2733.951830][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 2733.980029][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 2734.003145][ T3429] device bridge_slave_1 entered promiscuous mode [ 2735.773896][ T3433] Bluetooth: hci5: command 0x041b tx timeout [ 2737.855004][ T3433] Bluetooth: hci5: command 0x040f tx timeout [ 2739.931503][ T3433] Bluetooth: hci5: command 0x0419 tx timeout [ 2740.873910][T27436] device hsr_slave_0 left promiscuous mode [ 2740.883253][T27436] device hsr_slave_1 left promiscuous mode [ 2740.898795][T27436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2740.911488][T27436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2740.929245][T27436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2740.941550][T27436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2740.960968][T27436] device bridge_slave_1 left promiscuous mode [ 2740.971708][T27436] bridge0: port 2(bridge_slave_1) entered disabled state [ 2740.983298][T27436] device bridge_slave_0 left promiscuous mode [ 2740.998130][T27436] bridge0: port 1(bridge_slave_0) entered disabled state [ 2744.079355][T27436] device veth1_macvtap left promiscuous mode [ 2744.118358][T27436] device veth0_macvtap left promiscuous mode [ 2744.128463][T27436] device veth1_vlan left promiscuous mode [ 2744.169896][T27436] device veth0_vlan left promiscuous mode [ 2767.922124][T27436] bond1383 (unregistering): (slave vlan1127): Releasing active interface [ 2768.020837][T27436] bond1383 (unregistering): Released all slaves [ 2768.045268][T27436] bond1382 (unregistering): (slave vlan1126): Releasing active interface [ 2768.132720][T27436] bond1382 (unregistering): Released all slaves [ 2768.161353][T27436] bond1381 (unregistering): (slave vlan1125): Releasing active interface [ 2768.271531][T27436] bond1381 (unregistering): Released all slaves [ 2768.487964][T27436] bond1380 (unregistering): Released all slaves [ 2768.532672][T27436] bond1379 (unregistering): (slave vlan1124): Releasing active interface [ 2768.642113][T27436] bond1379 (unregistering): Released all slaves [ 2768.671233][T27436] bond1378 (unregistering): (slave vlan1123): Releasing active interface [ 2768.762972][T27436] bond1378 (unregistering): Released all slaves [ 2768.850469][T27436] bond1377 (unregistering): (slave vlan1122): Releasing active interface [ 2768.960120][T27436] bond1377 (unregistering): Released all slaves [ 2768.989326][T27436] bond1376 (unregistering): (slave vlan1121): Releasing active interface [ 2769.082363][T27436] bond1376 (unregistering): Released all slaves [ 2769.107165][T27436] bond1375 (unregistering): (slave vlan1120): Releasing active interface [ 2769.204891][T27436] bond1375 (unregistering): Released all slaves [ 2769.230886][T27436] bond1374 (unregistering): (slave vlan1119): Releasing active interface [ 2769.349360][T27436] bond1374 (unregistering): Released all slaves [ 2769.386627][T27436] bond1373 (unregistering): (slave vlan1118): Releasing active interface [ 2769.478032][T27436] bond1373 (unregistering): Released all slaves [ 2769.569019][T27436] bond1372 (unregistering): Released all slaves [ 2769.592004][T27436] bond1371 (unregistering): (slave vlan1117): Releasing active interface [ 2769.683693][T27436] bond1371 (unregistering): Released all slaves [ 2769.712366][T27436] bond1370 (unregistering): (slave vlan1116): Releasing active interface [ 2769.810126][T27436] bond1370 (unregistering): Released all slaves [ 2769.833960][T27436] bond1369 (unregistering): (slave vlan1115): Releasing active interface [ 2769.921530][T27436] bond1369 (unregistering): Released all slaves [ 2769.962581][T27436] bond1368 (unregistering): (slave vlan1114): Releasing active interface [ 2770.053046][T27436] bond1368 (unregistering): Released all slaves [ 2770.150086][T27436] bond1367 (unregistering): Released all slaves [ 2770.179142][T27436] bond1366 (unregistering): (slave vlan1113): Releasing active interface [ 2770.267671][T27436] bond1366 (unregistering): Released all slaves [ 2770.292690][T27436] bond1365 (unregistering): (slave vlan1112): Releasing active interface [ 2770.393125][T27436] bond1365 (unregistering): Released all slaves [ 2770.628576][T27436] bond1364 (unregistering): (slave vlan1110): Releasing active interface [ 2770.724981][T27436] bond1364 (unregistering): Released all slaves [ 2770.752956][T27436] bond1363 (unregistering): (slave vlan1109): Releasing active interface [ 2770.901083][T27436] bond1363 (unregistering): Released all slaves [ 2771.052091][T27436] bond1362 (unregistering): (slave vlan1108): Releasing active interface [ 2771.143923][T27436] bond1362 (unregistering): Released all slaves [ 2771.639536][T27436] bond1361 (unregistering): (slave vlan1107): Releasing active interface [ 2771.731219][T27436] bond1361 (unregistering): Released all slaves [ 2771.803443][T27436] bond1360 (unregistering): (slave vlan1106): Releasing active interface [ 2771.900843][T27436] bond1360 (unregistering): Released all slaves [ 2771.936648][T27436] bond1359 (unregistering): (slave vlan1105): Releasing active interface [ 2772.033309][T27436] bond1359 (unregistering): Released all slaves [ 2772.073163][T27436] bond1358 (unregistering): (slave vlan1104): Releasing active interface [ 2772.181679][T27436] bond1358 (unregistering): Released all slaves [ 2772.264076][T27436] bond1357 (unregistering): (slave vlan1103): Releasing active interface [ 2772.354248][T27436] bond1357 (unregistering): Released all slaves [ 2772.381572][T27436] bond1356 (unregistering): (slave vlan1102): Releasing active interface [ 2772.477484][T27436] bond1356 (unregistering): Released all slaves [ 2772.501819][T27436] bond1355 (unregistering): (slave vlan1101): Releasing active interface [ 2772.601973][T27436] bond1355 (unregistering): Released all slaves [ 2772.639303][T27436] bond1354 (unregistering): (slave vlan1100): Releasing active interface [ 2772.751331][T27436] bond1354 (unregistering): Released all slaves [ 2772.782761][T27436] bond1353 (unregistering): (slave vlan1099): Releasing active interface [ 2772.879231][T27436] bond1353 (unregistering): Released all slaves [ 2772.954067][T27436] bond1352 (unregistering): (slave vlan1098): Releasing active interface [ 2773.076856][T27436] bond1352 (unregistering): Released all slaves [ 2773.157312][T27436] bond1351 (unregistering): (slave vlan1097): Releasing active interface [ 2773.242213][T27436] bond1351 (unregistering): Released all slaves [ 2773.314871][T27436] bond1350 (unregistering): (slave vlan1096): Releasing active interface [ 2773.439925][T27436] bond1350 (unregistering): Released all slaves [ 2773.470027][T27436] bond1349 (unregistering): (slave vlan1095): Releasing active interface [ 2773.554480][T27436] bond1349 (unregistering): Released all slaves [ 2773.588190][T27436] bond1348 (unregistering): (slave vlan1094): Releasing active interface [ 2773.717401][T27436] bond1348 (unregistering): Released all slaves [ 2773.741853][T27436] bond1347 (unregistering): (slave vlan1093): Releasing active interface [ 2773.831227][T27436] bond1347 (unregistering): Released all slaves [ 2773.858815][T27436] bond1346 (unregistering): (slave vlan1092): Releasing active interface [ 2773.952164][T27436] bond1346 (unregistering): Released all slaves [ 2773.973039][T27436] bond1345 (unregistering): (slave vlan1091): Releasing active interface [ 2774.076829][T27436] bond1345 (unregistering): Released all slaves [ 2774.102029][T27436] bond1344 (unregistering): (slave vlan1090): Releasing active interface [ 2774.199603][T27436] bond1344 (unregistering): Released all slaves [ 2774.272668][T27436] bond1343 (unregistering): (slave vlan1089): Releasing active interface [ 2774.396645][T27436] bond1343 (unregistering): Released all slaves [ 2774.423079][T27436] bond1342 (unregistering): (slave vlan1088): Releasing active interface [ 2774.514208][T27436] bond1342 (unregistering): Released all slaves [ 2774.595291][T27436] bond1341 (unregistering): (slave vlan1087): Releasing active interface [ 2774.653832][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.663134][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.691464][T27436] bond1341 (unregistering): Released all slaves [ 2774.763190][T27436] bond1340 (unregistering): (slave vlan1086): Releasing active interface [ 2774.842801][T27436] bond1340 (unregistering): Released all slaves [ 2774.921149][T27436] bond1339 (unregistering): (slave vlan1085): Releasing active interface [ 2774.962771][T27436] bond1339 (unregistering): Released all slaves [ 2775.078456][T27436] bond1338 (unregistering): (slave vlan1084): Releasing active interface [ 2775.170192][T27436] bond1338 (unregistering): Released all slaves [ 2775.286645][T27436] bond1337 (unregistering): (slave vlan1083): Releasing active interface [ 2775.391592][T27436] bond1337 (unregistering): Released all slaves [ 2775.467691][T27436] bond1336 (unregistering): (slave vlan1082): Releasing active interface [ 2775.569825][T27436] bond1336 (unregistering): Released all slaves [ 2775.597973][T27436] bond1335 (unregistering): (slave vlan1081): Releasing active interface [ 2775.710368][T27436] bond1335 (unregistering): Released all slaves [ 2775.732825][T27436] bond1334 (unregistering): (slave vlan1080): Releasing active interface [ 2775.827939][T27436] bond1334 (unregistering): Released all slaves [ 2775.853120][T27436] bond1333 (unregistering): (slave vlan1079): Releasing active interface [ 2775.940618][T27436] bond1333 (unregistering): Released all slaves [ 2775.972850][T27436] bond1332 (unregistering): (slave vlan1078): Releasing active interface [ 2776.059310][T27436] bond1332 (unregistering): Released all slaves [ 2776.083477][T27436] bond1331 (unregistering): (slave vlan1077): Releasing active interface [ 2776.167876][T27436] bond1331 (unregistering): Released all slaves [ 2776.192841][T27436] bond1330 (unregistering): (slave vlan1076): Releasing active interface [ 2776.283729][T27436] bond1330 (unregistering): Released all slaves [ 2776.311340][T27436] bond1329 (unregistering): (slave vlan1075): Releasing active interface [ 2776.422628][T27436] bond1329 (unregistering): Released all slaves [ 2776.444072][T27436] bond1328 (unregistering): (slave vlan1074): Releasing active interface [ 2776.539804][T27436] bond1328 (unregistering): Released all slaves [ 2776.562620][T27436] bond1327 (unregistering): (slave vlan1073): Releasing active interface [ 2776.670613][T27436] bond1327 (unregistering): Released all slaves [ 2776.703982][T27436] bond1326 (unregistering): (slave vlan1072): Releasing active interface [ 2776.830149][T27436] bond1326 (unregistering): Released all slaves [ 2776.860293][T27436] bond1325 (unregistering): (slave vlan1071): Releasing active interface [ 2776.962528][T27436] bond1325 (unregistering): Released all slaves [ 2776.991423][T27436] bond1324 (unregistering): (slave vlan1070): Releasing active interface [ 2777.094066][T27436] bond1324 (unregistering): Released all slaves [ 2777.124123][T27436] bond1323 (unregistering): (slave vlan1069): Releasing active interface [ 2777.253284][T27436] bond1323 (unregistering): Released all slaves [ 2777.335756][T27436] bond1322 (unregistering): (slave vlan1068): Releasing active interface [ 2777.467813][T27436] bond1322 (unregistering): Released all slaves [ 2777.508985][T27436] bond1321 (unregistering): (slave vlan1067): Releasing active interface [ 2777.596867][T27436] bond1321 (unregistering): Released all slaves [ 2777.672950][T27436] bond1320 (unregistering): (slave vlan1066): Releasing active interface [ 2777.781174][T27436] bond1320 (unregistering): Released all slaves [ 2778.144057][T27436] bond1319 (unregistering): Released all slaves [ 2778.343317][T27436] bond1318 (unregistering): (slave vlan1064): Releasing active interface [ 2778.442188][T27436] bond1318 (unregistering): Released all slaves [ 2778.468989][T27436] bond1317 (unregistering): (slave vlan1063): Releasing active interface [ 2778.580031][T27436] bond1317 (unregistering): Released all slaves [ 2778.650979][T27436] bond1316 (unregistering): Released all slaves [ 2778.737531][T27436] bond1315 (unregistering): (slave vlan1062): Releasing active interface [ 2778.823622][T27436] bond1315 (unregistering): Released all slaves [ 2778.978004][T27436] bond1314 (unregistering): (slave vlan1061): Releasing active interface [ 2779.097379][T27436] bond1314 (unregistering): Released all slaves [ 2779.123621][T27436] bond1313 (unregistering): (slave vlan1060): Releasing active interface [ 2779.241512][T27436] bond1313 (unregistering): Released all slaves [ 2779.269521][T27436] bond1312 (unregistering): (slave vlan1059): Releasing active interface [ 2779.379976][T27436] bond1312 (unregistering): Released all slaves [ 2779.402031][T27436] bond1311 (unregistering): (slave vlan1058): Releasing active interface [ 2779.498471][T27436] bond1311 (unregistering): Released all slaves [ 2779.526909][T27436] bond1310 (unregistering): Released all slaves [ 2779.624199][T27436] bond1309 (unregistering): (slave vlan1056): Releasing active interface [ 2779.713409][T27436] bond1309 (unregistering): Released all slaves [ 2779.749157][T27436] bond1308 (unregistering): (slave vlan1055): Releasing active interface [ 2779.879522][T27436] bond1308 (unregistering): Released all slaves [ 2779.922771][T27436] bond1307 (unregistering): (slave vlan1054): Releasing active interface [ 2780.131368][T27436] bond1307 (unregistering): Released all slaves [ 2780.172701][T27436] bond1306 (unregistering): (slave vlan1053): Releasing active interface [ 2780.475021][T27436] bond1306 (unregistering): Released all slaves [ 2780.521907][T27436] bond1305 (unregistering): (slave vlan1052): Releasing active interface [ 2780.650212][T27436] bond1305 (unregistering): Released all slaves [ 2780.710419][T27436] bond1304 (unregistering): (slave vlan1051): Releasing active interface [ 2780.830213][T27436] bond1304 (unregistering): Released all slaves [ 2780.856810][T27436] bond1303 (unregistering): (slave vlan1050): Releasing active interface [ 2780.963051][T27436] bond1303 (unregistering): Released all slaves [ 2781.008932][T27436] bond1302 (unregistering): (slave vlan1049): Releasing active interface [ 2781.042059][T27436] bond1302 (unregistering): Released all slaves [ 2781.132240][T27436] bond1301 (unregistering): (slave vlan1048): Releasing active interface [ 2781.232935][T27436] bond1301 (unregistering): Released all slaves [ 2781.452422][T27436] bond1300 (unregistering): (slave vlan1047): Releasing active interface [ 2781.548047][T27436] bond1300 (unregistering): Released all slaves [ 2781.621996][T27436] bond1299 (unregistering): (slave vlan1046): Releasing active interface [ 2781.718079][T27436] bond1299 (unregistering): Released all slaves [ 2781.901522][T27436] bond1298 (unregistering): (slave vlan1045): Releasing active interface [ 2782.000228][T27436] bond1298 (unregistering): Released all slaves [ 2782.052619][T27436] bond1297 (unregistering): (slave vlan1044): Releasing active interface [ 2782.159504][T27436] bond1297 (unregistering): Released all slaves [ 2782.188494][T27436] bond1296 (unregistering): (slave vlan1043): Releasing active interface [ 2782.253375][T27436] bond1296 (unregistering): Released all slaves [ 2782.281947][T27436] bond1295 (unregistering): (slave vlan1042): Releasing active interface [ 2782.373100][T27436] bond1295 (unregistering): Released all slaves [ 2782.413803][T27436] bond1294 (unregistering): (slave vlan1041): Releasing active interface [ 2782.503357][T27436] bond1294 (unregistering): Released all slaves [ 2782.530107][T27436] bond1293 (unregistering): (slave vlan1040): Releasing active interface [ 2782.622030][T27436] bond1293 (unregistering): Released all slaves [ 2782.786946][T27436] bond1292 (unregistering): Released all slaves [ 2782.869550][T27436] bond1291 (unregistering): Released all slaves [ 2782.901889][T27436] bond1290 (unregistering): (slave vlan1039): Releasing active interface [ 2782.993611][T27436] bond1290 (unregistering): Released all slaves [ 2783.081803][T27436] bond1289 (unregistering): Released all slaves [ 2783.112594][T27436] bond1288 (unregistering): (slave vlan1038): Releasing active interface [ 2783.205483][T27436] bond1288 (unregistering): Released all slaves [ 2783.397740][T27436] bond1287 (unregistering): (slave vlan1037): Releasing active interface [ 2783.475342][T27436] bond1287 (unregistering): Released all slaves [ 2783.500836][T27436] bond1286 (unregistering): (slave vlan1036): Releasing active interface [ 2783.600532][T27436] bond1286 (unregistering): Released all slaves [ 2783.634663][T27436] bond1285 (unregistering): (slave vlan1035): Releasing active interface [ 2783.740732][T27436] bond1285 (unregistering): Released all slaves [ 2783.819019][T27436] bond1284 (unregistering): (slave vlan1034): Releasing active interface [ 2783.941376][T27436] bond1284 (unregistering): Released all slaves [ 2784.028199][T27436] bond1283 (unregistering): (slave vlan1033): Releasing active interface [ 2784.112343][T27436] bond1283 (unregistering): Released all slaves [ 2784.191627][T27436] bond1282 (unregistering): (slave vlan1032): Releasing active interface [ 2784.260868][T27436] bond1282 (unregistering): Released all slaves [ 2784.380163][T27436] bond1281 (unregistering): (slave vlan1031): Releasing active interface [ 2784.465900][T27436] bond1281 (unregistering): Released all slaves [ 2784.545117][T27436] bond1280 (unregistering): (slave vlan1030): Releasing active interface [ 2784.640941][T27436] bond1280 (unregistering): Released all slaves [ 2784.713371][T27436] bond1279 (unregistering): (slave vlan1029): Releasing active interface [ 2784.803758][T27436] bond1279 (unregistering): Released all slaves [ 2784.831852][T27436] bond1278 (unregistering): (slave vlan1028): Releasing active interface [ 2784.951076][T27436] bond1278 (unregistering): Released all slaves [ 2784.982512][T27436] bond1277 (unregistering): (slave vlan1027): Releasing active interface [ 2785.073086][T27436] bond1277 (unregistering): Released all slaves [ 2785.270579][T27436] bond1276 (unregistering): Released all slaves [ 2785.393962][T27436] bond1275 (unregistering): (slave vlan1026): Releasing active interface [ 2785.502785][T27436] bond1275 (unregistering): Released all slaves [ 2785.532517][T27436] bond1274 (unregistering): (slave vlan1025): Releasing active interface [ 2785.624745][T27436] bond1274 (unregistering): Released all slaves [ 2785.644279][T27436] bond1273 (unregistering): (slave vlan1024): Releasing active interface [ 2785.732829][T27436] bond1273 (unregistering): Released all slaves [ 2785.762918][T27436] bond1272 (unregistering): Released all slaves [ 2785.796302][T27436] bond1271 (unregistering): (slave vlan1023): Releasing active interface [ 2785.917095][T27436] bond1271 (unregistering): Released all slaves [ 2785.998039][T27436] bond1270 (unregistering): (slave vlan1022): Releasing active interface [ 2786.103833][T27436] bond1270 (unregistering): Released all slaves [ 2786.265895][T27436] bond1269 (unregistering): (slave vlan1021): Releasing active interface [ 2786.350757][T27436] bond1269 (unregistering): Released all slaves [ 2786.440721][T27436] bond1268 (unregistering): Released all slaves [ 2786.518001][T27436] bond1267 (unregistering): (slave vlan1020): Releasing active interface [ 2786.609125][T27436] bond1267 (unregistering): Released all slaves [ 2786.742543][T27436] bond1266 (unregistering): Released all slaves [ 2786.772265][T27436] bond1265 (unregistering): (slave vlan1019): Releasing active interface [ 2786.854234][T27436] bond1265 (unregistering): Released all slaves [ 2786.940985][T27436] bond1264 (unregistering): Released all slaves [ 2787.012854][T27436] bond1263 (unregistering): (slave vlan1018): Releasing active interface [ 2787.121416][T27436] bond1263 (unregistering): Released all slaves [ 2787.209539][T27436] bond1262 (unregistering): (slave vlan1017): Releasing active interface [ 2787.311483][T27436] bond1262 (unregistering): Released all slaves [ 2787.433829][T27436] bond1261 (unregistering): Released all slaves [ 2787.463743][T27436] bond1260 (unregistering): (slave vlan1016): Releasing active interface [ 2787.562683][T27436] bond1260 (unregistering): Released all slaves [ 2787.723853][T27436] bond1259 (unregistering): Released all slaves [ 2787.751862][T27436] bond1258 (unregistering): (slave vlan1015): Releasing active interface [ 2787.842835][T27436] bond1258 (unregistering): Released all slaves [ 2787.872463][T27436] bond1257 (unregistering): (slave vlan1014): Releasing active interface [ 2787.980478][T27436] bond1257 (unregistering): Released all slaves [ 2788.402259][T27436] bond1256 (unregistering): Released all slaves [ 2788.432063][T27436] bond1255 (unregistering): (slave vlan1013): Releasing active interface [ 2788.532303][T27436] bond1255 (unregistering): Released all slaves [ 2788.553191][T27436] bond1254 (unregistering): (slave vlan1012): Releasing active interface [ 2788.643117][T27436] bond1254 (unregistering): Released all slaves [ 2788.671342][T27436] bond1253 (unregistering): (slave vlan1011): Releasing active interface [ 2788.783068][T27436] bond1253 (unregistering): Released all slaves [ 2788.933669][T27436] bond1252 (unregistering): (slave vlan1010): Releasing active interface [ 2789.042086][T27436] bond1252 (unregistering): Released all slaves [ 2789.072824][T27436] bond1251 (unregistering): (slave vlan1009): Releasing active interface [ 2789.161914][T27436] bond1251 (unregistering): Released all slaves [ 2789.193653][T27436] bond1250 (unregistering): (slave vlan1008): Releasing active interface [ 2789.274263][T27436] bond1250 (unregistering): Released all slaves [ 2789.322806][T27436] bond1249 (unregistering): (slave vlan1007): Releasing active interface [ 2789.412914][T27436] bond1249 (unregistering): Released all slaves [ 2789.443586][T27436] bond1248 (unregistering): (slave vlan1006): Releasing active interface [ 2789.549818][T27436] bond1248 (unregistering): Released all slaves [ 2789.573138][T27436] bond1247 (unregistering): (slave vlan1005): Releasing active interface [ 2789.668329][T27436] bond1247 (unregistering): Released all slaves [ 2789.701614][T27436] bond1246 (unregistering): (slave vlan1004): Releasing active interface [ 2789.810011][T27436] bond1246 (unregistering): Released all slaves [ 2789.833784][T27436] bond1245 (unregistering): (slave vlan1003): Releasing active interface [ 2789.941188][T27436] bond1245 (unregistering): Released all slaves [ 2789.972899][T27436] bond1244 (unregistering): (slave vlan1002): Releasing active interface [ 2790.100367][T27436] bond1244 (unregistering): Released all slaves [ 2790.181474][T27436] bond1243 (unregistering): Released all slaves [ 2790.302779][T27436] bond1242 (unregistering): (slave vlan1001): Releasing active interface [ 2790.403323][T27436] bond1242 (unregistering): Released all slaves [ 2790.432676][T27436] bond1241 (unregistering): (slave vlan1000): Releasing active interface [ 2790.514375][T27436] bond1241 (unregistering): Released all slaves [ 2790.542199][T27436] bond1240 (unregistering): (slave vlan999): Releasing active interface [ 2790.632929][T27436] bond1240 (unregistering): Released all slaves [ 2790.664124][T27436] bond1239 (unregistering): (slave vlan998): Releasing active interface [ 2790.758317][T27436] bond1239 (unregistering): Released all slaves [ 2790.783993][T27436] bond1238 (unregistering): (slave vlan997): Releasing active interface [ 2790.871937][T27436] bond1238 (unregistering): Released all slaves [ 2790.900291][T27436] bond1237 (unregistering): (slave vlan996): Releasing active interface [ 2791.002940][T27436] bond1237 (unregistering): Released all slaves [ 2791.081945][T27436] bond1236 (unregistering): Released all slaves [ 2791.108754][T27436] bond1235 (unregistering): (slave vlan995): Releasing active interface [ 2791.201101][T27436] bond1235 (unregistering): Released all slaves [ 2791.309961][T27436] bond1234 (unregistering): Released all slaves [ 2791.331139][T27436] bond1233 (unregistering): (slave vlan994): Releasing active interface [ 2791.440942][T27436] bond1233 (unregistering): Released all slaves [ 2791.469788][T27436] bond1232 (unregistering): (slave vlan993): Releasing active interface [ 2791.559811][T27436] bond1232 (unregistering): Released all slaves [ 2791.579291][T27436] bond1231 (unregistering): (slave vlan992): Releasing active interface [ 2791.694264][T27436] bond1231 (unregistering): Released all slaves [ 2791.722112][T27436] bond1230 (unregistering): (slave vlan991): Releasing active interface [ 2791.810577][T27436] bond1230 (unregistering): Released all slaves [ 2791.834285][T27436] bond1229 (unregistering): (slave vlan990): Releasing active interface [ 2791.928339][T27436] bond1229 (unregistering): Released all slaves [ 2791.948386][T27436] bond1228 (unregistering): (slave vlan989): Releasing active interface [ 2792.040968][T27436] bond1228 (unregistering): Released all slaves [ 2792.072766][T27436] bond1227 (unregistering): (slave vlan988): Releasing active interface [ 2792.177540][T27436] bond1227 (unregistering): Released all slaves [ 2792.202477][T27436] bond1226 (unregistering): (slave vlan987): Releasing active interface [ 2792.321766][T27436] bond1226 (unregistering): Released all slaves [ 2792.403969][T27436] bond1225 (unregistering): Released all slaves [ 2792.500708][T27436] bond1224 (unregistering): (slave vlan986): Releasing active interface [ 2792.540869][T27436] bond1224 (unregistering): Released all slaves [ 2792.621830][T27436] bond1223 (unregistering): (slave vlan985): Releasing active interface [ 2792.731118][T27436] bond1223 (unregistering): Released all slaves [ 2792.753495][T27436] bond1222 (unregistering): (slave vlan984): Releasing active interface [ 2792.836732][T27436] bond1222 (unregistering): Released all slaves [ 2792.861538][T27436] bond1221 (unregistering): (slave vlan983): Releasing active interface [ 2792.952375][T27436] bond1221 (unregistering): Released all slaves [ 2792.981833][T27436] bond1220 (unregistering): (slave vlan982): Releasing active interface [ 2793.056530][T27436] bond1220 (unregistering): Released all slaves [ 2793.240519][T27436] bond1219 (unregistering): Released all slaves [ 2793.263860][T27436] bond1218 (unregistering): (slave vlan981): Releasing active interface [ 2793.373989][T27436] bond1218 (unregistering): Released all slaves [ 2793.469652][T27436] bond1217 (unregistering): (slave vlan980): Releasing active interface [ 2793.552836][T27436] bond1217 (unregistering): Released all slaves [ 2793.989007][T27436] bond1216 (unregistering): (slave vlan979): Releasing active interface [ 2794.079548][T27436] bond1216 (unregistering): Released all slaves [ 2794.366674][T27436] bond1215 (unregistering): (slave vlan978): Releasing active interface [ 2794.460379][T27436] bond1215 (unregistering): Released all slaves [ 2794.601741][T27436] bond1214 (unregistering): (slave vlan977): Releasing active interface [ 2794.683871][T27436] bond1214 (unregistering): Released all slaves [ 2794.713601][T27436] bond1213 (unregistering): (slave vlan976): Releasing active interface [ 2794.803816][T27436] bond1213 (unregistering): Released all slaves [ 2794.832536][T27436] bond1212 (unregistering): (slave vlan975): Releasing active interface [ 2794.929655][T27436] bond1212 (unregistering): Released all slaves [ 2794.949621][T27436] bond1211 (unregistering): (slave vlan974): Releasing active interface [ 2795.039710][T27436] bond1211 (unregistering): Released all slaves [ 2795.064099][T27436] bond1210 (unregistering): (slave vlan973): Releasing active interface [ 2795.153260][T27436] bond1210 (unregistering): Released all slaves [ 2795.181799][T27436] bond1209 (unregistering): (slave vlan972): Releasing active interface [ 2795.270183][T27436] bond1209 (unregistering): Released all slaves [ 2795.294103][T27436] bond1208 (unregistering): (slave vlan971): Releasing active interface [ 2795.389247][T27436] bond1208 (unregistering): Released all slaves [ 2795.410003][T27436] bond1207 (unregistering): (slave vlan970): Releasing active interface [ 2795.509696][T27436] bond1207 (unregistering): Released all slaves [ 2795.531021][T27436] bond1206 (unregistering): (slave vlan969): Releasing active interface [ 2795.631465][T27436] bond1206 (unregistering): Released all slaves [ 2795.654120][T27436] bond1205 (unregistering): (slave vlan968): Releasing active interface [ 2795.744624][T27436] bond1205 (unregistering): Released all slaves [ 2795.827875][T27436] bond1204 (unregistering): (slave vlan967): Releasing active interface [ 2795.983450][T27436] bond1204 (unregistering): Released all slaves [ 2796.064941][T27436] bond1203 (unregistering): (slave vlan966): Releasing active interface [ 2796.121173][T27436] bond1203 (unregistering): Released all slaves [ 2796.242979][T27436] bond1202 (unregistering): (slave vlan965): Releasing active interface [ 2796.390989][T27436] bond1202 (unregistering): Released all slaves [ 2796.432250][T27436] bond1201 (unregistering): (slave vlan964): Releasing active interface [ 2796.539853][T27436] bond1201 (unregistering): Released all slaves [ 2796.562811][T27436] bond1200 (unregistering): (slave vlan963): Releasing active interface [ 2796.687237][T27436] bond1200 (unregistering): Released all slaves [ 2796.711815][T27436] bond1199 (unregistering): (slave vlan962): Releasing active interface [ 2796.801126][T27436] bond1199 (unregistering): Released all slaves [ 2796.830369][T27436] bond1198 (unregistering): (slave vlan961): Releasing active interface [ 2796.950476][T27436] bond1198 (unregistering): Released all slaves [ 2796.994049][T27436] bond1197 (unregistering): (slave vlan960): Releasing active interface [ 2797.105354][T27436] bond1197 (unregistering): Released all slaves [ 2797.131778][T27436] bond1196 (unregistering): (slave vlan959): Releasing active interface [ 2797.202944][T27436] bond1196 (unregistering): Released all slaves [ 2797.231020][T27436] bond1195 (unregistering): (slave vlan958): Releasing active interface [ 2797.319140][T27436] bond1195 (unregistering): Released all slaves [ 2797.344240][T27436] bond1194 (unregistering): (slave vlan957): Releasing active interface [ 2797.462747][T27436] bond1194 (unregistering): Released all slaves [ 2797.492056][T27436] bond1193 (unregistering): (slave vlan956): Releasing active interface [ 2797.597559][T27436] bond1193 (unregistering): Released all slaves [ 2797.634344][T27436] bond1192 (unregistering): (slave vlan955): Releasing active interface [ 2797.811805][T27436] bond1192 (unregistering): Released all slaves [ 2797.843840][ T3433] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2797.869768][ T3433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2797.893580][ T3433] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2797.909887][ T3433] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2797.930833][ T3433] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2797.948221][ T3433] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2798.000270][T27436] bond1191 (unregistering): Released all slaves [ 2798.036338][T27436] bond1190 (unregistering): (slave vlan954): Releasing active interface [ 2798.152171][T27436] bond1190 (unregistering): Released all slaves [ 2798.298547][T27436] bond1189 (unregistering): (slave vlan953): Releasing active interface [ 2798.330895][T27436] bond1189 (unregistering): Released all slaves [ 2798.422855][T27436] bond1188 (unregistering): (slave vlan952): Releasing active interface [ 2798.518707][T27436] bond1188 (unregistering): Released all slaves [ 2798.540757][T27436] bond1187 (unregistering): (slave vlan951): Releasing active interface [ 2798.642845][T27436] bond1187 (unregistering): Released all slaves [ 2798.691736][T27436] bond1186 (unregistering): (slave vlan950): Releasing active interface [ 2798.791184][T27436] bond1186 (unregistering): Released all slaves [ 2798.830973][T27436] bond1185 (unregistering): (slave vlan949): Releasing active interface [ 2798.921690][T27436] bond1185 (unregistering): Released all slaves [ 2798.958164][T27436] bond1184 (unregistering): (slave vlan948): Releasing active interface [ 2799.060327][T27436] bond1184 (unregistering): Released all slaves [ 2799.090466][T27436] bond1183 (unregistering): (slave vlan947): Releasing active interface [ 2799.191067][T27436] bond1183 (unregistering): Released all slaves [ 2799.212406][T27436] bond1182 (unregistering): (slave vlan946): Releasing active interface [ 2799.307437][T27436] bond1182 (unregistering): Released all slaves [ 2799.331334][T27436] bond1181 (unregistering): (slave vlan945): Releasing active interface [ 2799.440054][T27436] bond1181 (unregistering): Released all slaves [ 2799.572494][T27436] bond1180 (unregistering): Released all slaves [ 2799.605630][T27436] bond1179 (unregistering): (slave vlan943): Releasing active interface [ 2799.724161][T27436] bond1179 (unregistering): Released all slaves [ 2799.752895][T27436] bond1178 (unregistering): (slave vlan942): Releasing active interface [ 2799.870688][T27436] bond1178 (unregistering): Released all slaves [ 2799.957154][T27436] bond1177 (unregistering): (slave vlan941): Releasing active interface [ 2800.007972][ T3433] Bluetooth: hci6: command 0x0409 tx timeout [ 2800.044261][T27436] bond1177 (unregistering): Released all slaves [ 2800.072139][T27436] bond1176 (unregistering): (slave vlan940): Releasing active interface [ 2800.201066][T27436] bond1176 (unregistering): Released all slaves [ 2800.228885][T27436] bond1175 (unregistering): (slave vlan939): Releasing active interface [ 2800.347504][T27436] bond1175 (unregistering): Released all slaves [ 2800.371522][T27436] bond1174 (unregistering): (slave vlan938): Releasing active interface [ 2800.471038][T27436] bond1174 (unregistering): Released all slaves [ 2800.502562][T27436] bond1173 (unregistering): (slave vlan937): Releasing active interface [ 2800.592416][T27436] bond1173 (unregistering): Released all slaves [ 2800.621689][T27436] bond1172 (unregistering): (slave vlan936): Releasing active interface [ 2800.718927][T27436] bond1172 (unregistering): Released all slaves [ 2800.760818][T27436] bond1171 (unregistering): (slave vlan935): Releasing active interface [ 2800.870533][T27436] bond1171 (unregistering): Released all slaves [ 2800.900869][T27436] bond1170 (unregistering): (slave vlan934): Releasing active interface [ 2800.991430][T27436] bond1170 (unregistering): Released all slaves [ 2801.042479][T27436] bond1169 (unregistering): (slave vlan933): Releasing active interface [ 2801.151762][T27436] bond1169 (unregistering): Released all slaves [ 2801.173583][T27436] bond1168 (unregistering): (slave vlan932): Releasing active interface [ 2801.259349][T27436] bond1168 (unregistering): Released all slaves [ 2801.297654][T27436] bond1167 (unregistering): (slave vlan931): Releasing active interface [ 2801.389091][T27436] bond1167 (unregistering): Released all slaves [ 2801.469568][T27436] bond1166 (unregistering): (slave vlan930): Releasing active interface [ 2801.562703][T27436] bond1166 (unregistering): Released all slaves [ 2801.635667][T27436] bond1165 (unregistering): (slave vlan929): Releasing active interface [ 2801.735817][T27436] bond1165 (unregistering): Released all slaves [ 2801.761155][T27436] bond1164 (unregistering): (slave vlan928): Releasing active interface [ 2801.846464][T27436] bond1164 (unregistering): Released all slaves [ 2801.948689][T27436] bond1163 (unregistering): Released all slaves [ 2801.971212][T27436] bond1162 (unregistering): (slave vlan927): Releasing active interface [ 2802.042253][T27436] bond1162 (unregistering): Released all slaves [ 2802.086493][ T3433] Bluetooth: hci6: command 0x041b tx timeout [ 2802.118617][T27436] bond1161 (unregistering): Released all slaves [ 2802.249491][T27436] bond1160 (unregistering): Released all slaves [ 2802.361285][T27436] bond1159 (unregistering): Released all slaves [ 2802.391705][T27436] bond1158 (unregistering): (slave vlan926): Releasing active interface [ 2802.474344][T27436] bond1158 (unregistering): Released all slaves [ 2802.571602][T27436] bond1157 (unregistering): Released all slaves [ 2802.601038][T27436] bond1156 (unregistering): (slave vlan925): Releasing active interface [ 2802.696033][T27436] bond1156 (unregistering): Released all slaves [ 2802.777864][T27436] bond1155 (unregistering): (slave vlan924): Releasing active interface [ 2802.853024][T27436] bond1155 (unregistering): Released all slaves [ 2802.933282][T27436] bond1154 (unregistering): Released all slaves [ 2802.960961][T27436] bond1153 (unregistering): (slave vlan923): Releasing active interface [ 2803.053192][T27436] bond1153 (unregistering): Released all slaves [ 2803.139366][T27436] bond1152 (unregistering): Released all slaves [ 2803.159109][T27436] bond1151 (unregistering): (slave vlan922): Releasing active interface [ 2803.252533][T27436] bond1151 (unregistering): Released all slaves [ 2803.342080][T27436] bond1150 (unregistering): Released all slaves [ 2803.361397][T27436] bond1149 (unregistering): (slave vlan921): Releasing active interface [ 2803.451555][T27436] bond1149 (unregistering): Released all slaves [ 2803.528714][T27436] bond1148 (unregistering): Released all slaves [ 2803.553725][T27436] bond1147 (unregistering): (slave vlan920): Releasing active interface [ 2803.650129][T27436] bond1147 (unregistering): Released all slaves [ 2803.743091][T27436] bond1146 (unregistering): Released all slaves [ 2803.779860][T27436] bond1145 (unregistering): (slave vlan919): Releasing active interface [ 2803.872678][T27436] bond1145 (unregistering): Released all slaves [ 2803.969881][T27436] bond1144 (unregistering): Released all slaves [ 2803.999749][T27436] bond1143 (unregistering): (slave vlan918): Releasing active interface [ 2804.083585][T27436] bond1143 (unregistering): Released all slaves [ 2804.164511][ T5115] Bluetooth: hci6: command 0x040f tx timeout [ 2804.173499][T27436] bond1142 (unregistering): Released all slaves [ 2804.216765][T27436] bond1141 (unregistering): (slave vlan917): Releasing active interface [ 2804.321115][T27436] bond1141 (unregistering): Released all slaves [ 2804.399391][T27436] bond1140 (unregistering): Released all slaves [ 2804.430138][T27436] bond1139 (unregistering): (slave vlan916): Releasing active interface [ 2804.530351][T27436] bond1139 (unregistering): Released all slaves [ 2804.612217][T27436] bond1138 (unregistering): Released all slaves [ 2804.641524][T27436] bond1137 (unregistering): (slave vlan915): Releasing active interface [ 2804.748538][T27436] bond1137 (unregistering): Released all slaves [ 2804.927995][T27436] bond1136 (unregistering): Released all slaves [ 2804.950722][T27436] bond1135 (unregistering): (slave vlan914): Releasing active interface [ 2805.052621][T27436] bond1135 (unregistering): Released all slaves [ 2805.136961][T27436] bond1134 (unregistering): Released all slaves [ 2805.169458][T27436] bond1133 (unregistering): (slave vlan913): Releasing active interface [ 2805.241553][T27436] bond1133 (unregistering): Released all slaves [ 2805.338232][T27436] bond1132 (unregistering): Released all slaves [ 2805.359075][T27436] bond1131 (unregistering): (slave vlan912): Releasing active interface [ 2805.464271][T27436] bond1131 (unregistering): Released all slaves [ 2805.550465][T27436] bond1130 (unregistering): Released all slaves [ 2805.572376][T27436] bond1129 (unregistering): (slave vlan911): Releasing active interface [ 2805.681342][T27436] bond1129 (unregistering): Released all slaves [ 2805.750070][T27436] bond1128 (unregistering): Released all slaves [ 2805.933928][T27436] bond1127 (unregistering): (slave vlan910): Releasing active interface [ 2806.024284][T27436] bond1127 (unregistering): Released all slaves [ 2806.108373][T27436] bond1126 (unregistering): Released all slaves [ 2806.251859][T27436] bond1125 (unregistering): Released all slaves [ 2806.269703][ T5115] Bluetooth: hci6: command 0x0419 tx timeout [ 2806.506838][T27436] bond1124 (unregistering): Released all slaves [ 2806.531954][T27436] bond1123 (unregistering): (slave vlan909): Releasing active interface [ 2806.623223][T27436] bond1123 (unregistering): Released all slaves [ 2806.790694][T27436] bond1122 (unregistering): Released all slaves [ 2806.824363][T27436] bond1121 (unregistering): (slave vlan908): Releasing active interface [ 2806.912784][T27436] bond1121 (unregistering): Released all slaves [ 2807.000798][T27436] bond1120 (unregistering): Released all slaves [ 2807.030353][T27436] bond1119 (unregistering): (slave vlan907): Releasing active interface [ 2807.140933][T27436] bond1119 (unregistering): Released all slaves [ 2807.227831][T27436] bond1118 (unregistering): Released all slaves [ 2807.261027][T27436] bond1117 (unregistering): (slave vlan906): Releasing active interface [ 2807.343013][T27436] bond1117 (unregistering): Released all slaves [ 2807.449602][T27436] bond1116 (unregistering): Released all slaves [ 2807.468780][T27436] bond1115 (unregistering): (slave vlan905): Releasing active interface [ 2807.549543][T27436] bond1115 (unregistering): Released all slaves [ 2807.731561][T27436] bond1114 (unregistering): (slave vlan904): Releasing active interface [ 2807.822513][T27436] bond1114 (unregistering): Released all slaves [ 2807.909226][T27436] bond1113 (unregistering): Released all slaves [ 2807.951811][T27436] bond1112 (unregistering): (slave vlan903): Releasing active interface [ 2807.986587][T27436] bond1112 (unregistering): Released all slaves [ 2808.131603][T27436] bond1111 (unregistering): (slave vlan902): Releasing active interface [ 2808.209724][T27436] bond1111 (unregistering): Released all slaves [ 2808.283709][T27436] bond1110 (unregistering): Released all slaves [ 2808.429468][T27436] bond1109 (unregistering): Released all slaves [ 2808.452267][T27436] bond1108 (unregistering): (slave vlan901): Releasing active interface [ 2808.543218][T27436] bond1108 (unregistering): Released all slaves [ 2808.740911][T27436] bond1107 (unregistering): (slave vlan900): Releasing active interface [ 2808.814325][T27436] bond1107 (unregistering): Released all slaves [ 2808.928645][T27436] bond1106 (unregistering): Released all slaves [ 2808.959206][T27436] bond1105 (unregistering): (slave vlan899): Releasing active interface [ 2809.051702][T27436] bond1105 (unregistering): Released all slaves [ 2809.143745][T27436] bond1104 (unregistering): (slave vlan898): Releasing active interface [ 2809.212356][T27436] bond1104 (unregistering): Released all slaves [ 2809.292113][T27436] bond1103 (unregistering): Released all slaves [ 2809.317538][T27436] bond1102 (unregistering): (slave vlan897): Releasing active interface [ 2809.402881][T27436] bond1102 (unregistering): Released all slaves [ 2809.478779][T27436] bond1101 (unregistering): (slave vlan896): Releasing active interface [ 2809.568722][T27436] bond1101 (unregistering): Released all slaves [ 2809.589441][T27436] bond1100 (unregistering): (slave vlan895): Releasing active interface [ 2809.691433][T27436] bond1100 (unregistering): Released all slaves [ 2809.778146][T27436] bond1099 (unregistering): Released all slaves [ 2809.840157][T27436] bond1098 (unregistering): (slave vlan894): Releasing active interface [ 2809.977067][T27436] bond1098 (unregistering): Released all slaves [ 2810.074242][T27436] bond1097 (unregistering): Released all slaves [ 2810.195751][T27436] bond1096 (unregistering): Released all slaves [ 2810.259173][T27436] bond1095 (unregistering): Released all slaves [ 2810.436574][T27436] bond1094 (unregistering): Released all slaves [ 2810.566812][T27436] bond1093 (unregistering): Released all slaves [ 2810.665450][T27436] bond1092 (unregistering): Released all slaves [ 2810.733775][T27436] bond1091 (unregistering): Released all slaves [ 2810.762321][T27436] bond1090 (unregistering): (slave vlan893): Releasing active interface [ 2810.838860][T27436] bond1090 (unregistering): Released all slaves [ 2811.016753][T27436] bond1089 (unregistering): (slave vlan892): Releasing active interface [ 2811.124109][T27436] bond1089 (unregistering): Released all slaves [ 2811.170558][T27436] bond1088 (unregistering): (slave vlan891): Releasing active interface [ 2811.240986][T27436] bond1088 (unregistering): Released all slaves [ 2811.381771][T27436] bond1087 (unregistering): Released all slaves [ 2811.400585][T27436] bond1086 (unregistering): (slave vlan890): Releasing active interface [ 2811.490190][T27436] bond1086 (unregistering): Released all slaves [ 2811.562027][T27436] bond1085 (unregistering): Released all slaves [ 2811.718225][T27436] bond1084 (unregistering): Released all slaves [ 2811.743512][T27436] bond1083 (unregistering): (slave vlan889): Releasing active interface [ 2811.838829][T27436] bond1083 (unregistering): Released all slaves [ 2812.069470][T27436] bond1082 (unregistering): (slave vlan888): Releasing active interface [ 2812.170803][T27436] bond1082 (unregistering): Released all slaves [ 2812.199541][T27436] bond1081 (unregistering): (slave vlan887): Releasing active interface [ 2812.280124][T27436] bond1081 (unregistering): Released all slaves [ 2812.373932][T27436] bond1080 (unregistering): (slave vlan886): Releasing active interface [ 2812.462756][T27436] bond1080 (unregistering): Released all slaves [ 2812.557157][T27436] bond1079 (unregistering): (slave vlan885): Releasing active interface [ 2812.640741][T27436] bond1079 (unregistering): Released all slaves [ 2812.660880][T27436] bond1078 (unregistering): (slave vlan884): Releasing active interface [ 2812.749475][T27436] bond1078 (unregistering): Released all slaves [ 2812.830192][T27436] bond1077 (unregistering): Released all slaves [ 2812.967037][T27436] bond1076 (unregistering): (slave vlan883): Releasing active interface [ 2813.068010][T27436] bond1076 (unregistering): Released all slaves [ 2813.091752][T27436] bond1075 (unregistering): (slave vlan882): Releasing active interface [ 2813.181283][T27436] bond1075 (unregistering): Released all slaves [ 2813.338190][T27436] bond1074 (unregistering): Released all slaves [ 2813.401142][T27436] bond1073 (unregistering): (slave vlan881): Releasing active interface [ 2813.482123][T27436] bond1073 (unregistering): Released all slaves [ 2813.501413][T27436] bond1072 (unregistering): (slave vlan880): Releasing active interface [ 2813.586095][T27436] bond1072 (unregistering): Released all slaves [ 2813.701328][T27436] bond1071 (unregistering): (slave vlan879): Releasing active interface [ 2813.789443][T27436] bond1071 (unregistering): Released all slaves [ 2813.813773][T27436] bond1070 (unregistering): (slave vlan878): Releasing active interface [ 2813.909600][T27436] bond1070 (unregistering): Released all slaves [ 2813.933122][T27436] bond1069 (unregistering): (slave vlan877): Releasing active interface [ 2814.023996][T27436] bond1069 (unregistering): Released all slaves [ 2814.052656][T27436] bond1068 (unregistering): (slave vlan876): Releasing active interface [ 2814.136524][T27436] bond1068 (unregistering): Released all slaves [ 2814.161224][T27436] bond1067 (unregistering): (slave vlan875): Releasing active interface [ 2814.251399][T27436] bond1067 (unregistering): Released all slaves [ 2814.280523][T27436] bond1066 (unregistering): (slave vlan874): Releasing active interface [ 2814.368238][T27436] bond1066 (unregistering): Released all slaves [ 2814.390854][T27436] bond1065 (unregistering): (slave vlan873): Releasing active interface [ 2814.463594][T27436] bond1065 (unregistering): Released all slaves [ 2814.491836][T27436] bond1064 (unregistering): (slave vlan872): Releasing active interface [ 2814.590748][T27436] bond1064 (unregistering): Released all slaves [ 2814.614242][T27436] bond1063 (unregistering): (slave vlan871): Releasing active interface [ 2814.711880][T27436] bond1063 (unregistering): Released all slaves [ 2814.741436][T27436] bond1062 (unregistering): (slave vlan870): Releasing active interface [ 2814.813632][T27436] bond1062 (unregistering): Released all slaves [ 2814.841388][T27436] bond1061 (unregistering): (slave vlan869): Releasing active interface [ 2814.930755][T27436] bond1061 (unregistering): Released all slaves [ 2814.959845][T27436] bond1060 (unregistering): (slave vlan868): Releasing active interface [ 2815.053141][T27436] bond1060 (unregistering): Released all slaves [ 2815.177308][T27436] bond1059 (unregistering): (slave vlan867): Releasing active interface [ 2815.262831][T27436] bond1059 (unregistering): Released all slaves [ 2815.293379][T27436] bond1058 (unregistering): (slave vlan866): Releasing active interface [ 2815.400062][T27436] bond1058 (unregistering): Released all slaves [ 2815.421483][T27436] bond1057 (unregistering): (slave vlan865): Releasing active interface [ 2815.491107][T27436] bond1057 (unregistering): Released all slaves [ 2815.513212][T27436] bond1056 (unregistering): (slave vlan864): Releasing active interface [ 2815.602591][T27436] bond1056 (unregistering): Released all slaves [ 2815.643848][T27436] bond1055 (unregistering): (slave vlan863): Releasing active interface [ 2815.739573][T27436] bond1055 (unregistering): Released all slaves [ 2815.762313][T27436] bond1054 (unregistering): (slave vlan862): Releasing active interface [ 2815.854329][T27436] bond1054 (unregistering): Released all slaves [ 2815.884113][T27436] bond1053 (unregistering): (slave vlan861): Releasing active interface [ 2815.994594][T27436] bond1053 (unregistering): Released all slaves [ 2816.076662][T27436] bond1052 (unregistering): (slave vlan860): Releasing active interface [ 2816.191657][T27436] bond1052 (unregistering): Released all slaves [ 2816.217612][T27436] bond1051 (unregistering): (slave vlan859): Releasing active interface [ 2816.305303][T27436] bond1051 (unregistering): Released all slaves [ 2816.331619][T27436] bond1050 (unregistering): (slave vlan858): Releasing active interface [ 2816.440866][T27436] bond1050 (unregistering): Released all slaves [ 2816.518190][T27436] bond1049 (unregistering): Released all slaves [ 2816.633732][T27436] bond1048 (unregistering): Released all slaves [ 2816.700334][T27436] bond1047 (unregistering): Released all slaves [ 2816.781188][T27436] bond1046 (unregistering): Released all slaves [ 2816.926543][T27436] bond1045 (unregistering): Released all slaves [ 2817.053312][T27436] bond1044 (unregistering): (slave vlan857): Releasing active interface [ 2817.139269][T27436] bond1044 (unregistering): Released all slaves [ 2817.162373][T27436] bond1043 (unregistering): (slave vlan856): Releasing active interface [ 2817.257256][T27436] bond1043 (unregistering): Released all slaves [ 2817.280758][T27436] bond1042 (unregistering): (slave vlan855): Releasing active interface [ 2817.394322][T27436] bond1042 (unregistering): Released all slaves [ 2817.470986][T27436] bond1041 (unregistering): (slave vlan854): Releasing active interface [ 2817.552397][T27436] bond1041 (unregistering): Released all slaves [ 2817.578182][T27436] bond1040 (unregistering): (slave vlan853): Releasing active interface [ 2817.641090][T27436] bond1040 (unregistering): Released all slaves [ 2817.663244][T27436] bond1039 (unregistering): (slave vlan852): Releasing active interface [ 2817.794220][T27436] bond1039 (unregistering): Released all slaves [ 2817.814342][T27436] bond1038 (unregistering): (slave vlan851): Releasing active interface [ 2817.893991][T27436] bond1038 (unregistering): Released all slaves [ 2817.928870][T27436] bond1037 (unregistering): (slave vlan850): Releasing active interface [ 2818.000045][T27436] bond1037 (unregistering): Released all slaves [ 2818.033907][T27436] bond1036 (unregistering): (slave vlan849): Releasing active interface [ 2818.103420][T27436] bond1036 (unregistering): Released all slaves [ 2818.133020][T27436] bond1035 (unregistering): (slave vlan848): Releasing active interface [ 2818.236250][T27436] bond1035 (unregistering): Released all slaves [ 2818.440779][T27436] bond1034 (unregistering): Released all slaves [ 2818.470855][T27436] bond1033 (unregistering): (slave vlan847): Releasing active interface [ 2818.551073][T27436] bond1033 (unregistering): Released all slaves [ 2818.576630][T27436] bond1032 (unregistering): (slave vlan846): Releasing active interface [ 2818.671829][T27436] bond1032 (unregistering): Released all slaves [ 2818.698642][T27436] bond1031 (unregistering): (slave vlan845): Releasing active interface [ 2818.734043][T27436] bond1031 (unregistering): Released all slaves [ 2818.829676][T27436] bond1030 (unregistering): (slave vlan844): Releasing active interface [ 2818.916340][T27436] bond1030 (unregistering): Released all slaves [ 2819.110942][T27436] bond1029 (unregistering): Released all slaves [ 2819.180717][T27436] bond1028 (unregistering): (slave vlan843): Releasing active interface [ 2819.223705][T27436] bond1028 (unregistering): Released all slaves [ 2819.284557][T27436] bond1027 (unregistering): (slave vlan842): Releasing active interface [ 2819.393957][T27436] bond1027 (unregistering): Released all slaves [ 2819.488136][T27436] bond1026 (unregistering): (slave vlan841): Releasing active interface [ 2819.523080][T27436] bond1026 (unregistering): Released all slaves [ 2819.600132][T27436] bond1025 (unregistering): (slave vlan840): Releasing active interface [ 2819.673893][T27436] bond1025 (unregistering): Released all slaves [ 2819.700292][T27436] bond1024 (unregistering): (slave vlan839): Releasing active interface [ 2819.794671][T27436] bond1024 (unregistering): Released all slaves [ 2819.819805][T27436] bond1023 (unregistering): (slave vlan838): Releasing active interface [ 2819.941688][T27436] bond1023 (unregistering): Released all slaves [ 2820.011658][T27436] bond1022 (unregistering): (slave vlan837): Releasing active interface [ 2820.044010][T27436] bond1022 (unregistering): Released all slaves [ 2820.161507][T27436] bond1021 (unregistering): (slave vlan836): Releasing active interface [ 2820.252535][T27436] bond1021 (unregistering): Released all slaves [ 2820.281189][T27436] bond1020 (unregistering): (slave vlan835): Releasing active interface [ 2820.374610][T27436] bond1020 (unregistering): Released all slaves [ 2820.401094][T27436] bond1019 (unregistering): (slave vlan834): Releasing active interface [ 2820.507151][T27436] bond1019 (unregistering): Released all slaves [ 2820.532972][T27436] bond1018 (unregistering): (slave vlan833): Releasing active interface [ 2820.608741][T27436] bond1018 (unregistering): Released all slaves [ 2820.629887][T27436] bond1017 (unregistering): (slave vlan832): Releasing active interface [ 2820.732245][T27436] bond1017 (unregistering): Released all slaves [ 2820.752860][T27436] bond1016 (unregistering): (slave vlan831): Releasing active interface [ 2820.851383][T27436] bond1016 (unregistering): Released all slaves [ 2820.879204][T27436] bond1015 (unregistering): (slave vlan830): Releasing active interface [ 2820.979907][T27436] bond1015 (unregistering): Released all slaves [ 2821.010603][T27436] bond1014 (unregistering): (slave vlan829): Releasing active interface [ 2821.081602][T27436] bond1014 (unregistering): Released all slaves [ 2821.241540][T27436] bond1013 (unregistering): (slave vlan828): Releasing active interface [ 2821.325152][T27436] bond1013 (unregistering): Released all slaves [ 2821.350376][T27436] bond1012 (unregistering): (slave vlan827): Releasing active interface [ 2821.451884][T27436] bond1012 (unregistering): Released all slaves [ 2821.473434][T27436] bond1011 (unregistering): (slave vlan826): Releasing active interface [ 2821.553057][T27436] bond1011 (unregistering): Released all slaves [ 2821.580104][T27436] bond1010 (unregistering): (slave vlan825): Releasing active interface [ 2821.670226][T27436] bond1010 (unregistering): Released all slaves [ 2821.763360][T27436] bond1009 (unregistering): (slave vlan824): Releasing active interface [ 2821.853241][T27436] bond1009 (unregistering): Released all slaves [ 2821.944122][T27436] bond1008 (unregistering): (slave vlan823): Releasing active interface [ 2822.012909][T27436] bond1008 (unregistering): Released all slaves [ 2822.100303][T27436] bond1007 (unregistering): (slave vlan822): Releasing active interface [ 2822.193768][T27436] bond1007 (unregistering): Released all slaves [ 2822.224758][T27436] bond1006 (unregistering): (slave vlan821): Releasing active interface [ 2822.311647][T27436] bond1006 (unregistering): Released all slaves [ 2822.341693][T27436] bond1005 (unregistering): (slave vlan820): Releasing active interface [ 2822.431968][T27436] bond1005 (unregistering): Released all slaves [ 2822.460380][T27436] bond1004 (unregistering): (slave vlan819): Releasing active interface [ 2822.554078][T27436] bond1004 (unregistering): Released all slaves [ 2822.601355][T27436] bond1003 (unregistering): (slave vlan818): Releasing active interface [ 2822.711757][T27436] bond1003 (unregistering): Released all slaves [ 2822.734198][T27436] bond1002 (unregistering): (slave vlan817): Releasing active interface [ 2822.850302][T27436] bond1002 (unregistering): Released all slaves [ 2822.869369][T27436] bond1001 (unregistering): (slave vlan816): Releasing active interface [ 2822.963448][T27436] bond1001 (unregistering): Released all slaves [ 2823.041687][T27436] bond1000 (unregistering): (slave vlan815): Releasing active interface [ 2823.111014][T27436] bond1000 (unregistering): Released all slaves [ 2823.130929][T27436] bond999 (unregistering): (slave vlan814): Releasing active interface [ 2823.216822][T27436] bond999 (unregistering): Released all slaves [ 2823.240795][T27436] bond998 (unregistering): (slave vlan813): Releasing active interface [ 2823.348771][T27436] bond998 (unregistering): Released all slaves [ 2823.391339][T27436] bond997 (unregistering): (slave vlan812): Releasing active interface [ 2823.520765][T27436] bond997 (unregistering): Released all slaves [ 2823.553496][T27436] bond996 (unregistering): (slave vlan811): Releasing active interface [ 2823.641722][T27436] bond996 (unregistering): Released all slaves [ 2823.662510][T27436] bond995 (unregistering): (slave vlan810): Releasing active interface [ 2823.740719][T27436] bond995 (unregistering): Released all slaves [ 2823.821883][T27436] bond994 (unregistering): (slave vlan809): Releasing active interface [ 2823.908412][T27436] bond994 (unregistering): Released all slaves [ 2823.927600][T27436] bond993 (unregistering): (slave vlan808): Releasing active interface [ 2824.032912][T27436] bond993 (unregistering): Released all slaves [ 2824.053415][T27436] bond992 (unregistering): (slave vlan807): Releasing active interface [ 2824.141699][T27436] bond992 (unregistering): Released all slaves [ 2824.161341][T27436] bond991 (unregistering): (slave vlan806): Releasing active interface [ 2824.253123][T27436] bond991 (unregistering): Released all slaves [ 2824.281962][T27436] bond990 (unregistering): (slave vlan805): Releasing active interface [ 2824.379815][T27436] bond990 (unregistering): Released all slaves [ 2824.410022][T27436] bond989 (unregistering): (slave vlan804): Releasing active interface [ 2824.511168][T27436] bond989 (unregistering): Released all slaves [ 2824.533945][T27436] bond988 (unregistering): (slave vlan803): Releasing active interface [ 2824.641507][T27436] bond988 (unregistering): Released all slaves [ 2824.737509][T27436] bond987 (unregistering): Released all slaves [ 2824.760530][T27436] bond986 (unregistering): (slave vlan802): Releasing active interface [ 2824.872759][T27436] bond986 (unregistering): Released all slaves [ 2824.901871][T27436] bond985 (unregistering): (slave vlan801): Releasing active interface [ 2825.009330][T27436] bond985 (unregistering): Released all slaves [ 2825.032574][T27436] bond984 (unregistering): (slave vlan800): Releasing active interface [ 2825.133812][T27436] bond984 (unregistering): Released all slaves [ 2825.161193][T27436] bond983 (unregistering): (slave vlan799): Releasing active interface [ 2825.241310][T27436] bond983 (unregistering): Released all slaves [ 2825.261387][T27436] bond982 (unregistering): (slave vlan798): Releasing active interface [ 2825.352650][T27436] bond982 (unregistering): Released all slaves [ 2825.379639][T27436] bond981 (unregistering): (slave vlan797): Releasing active interface [ 2825.473117][T27436] bond981 (unregistering): Released all slaves [ 2825.503609][T27436] bond980 (unregistering): (slave vlan796): Releasing active interface [ 2825.618942][T27436] bond980 (unregistering): Released all slaves [ 2825.640343][T27436] bond979 (unregistering): (slave vlan795): Releasing active interface [ 2825.728399][T27436] bond979 (unregistering): Released all slaves [ 2825.744206][T27436] bond978 (unregistering): (slave vlan794): Releasing active interface [ 2825.831376][T27436] bond978 (unregistering): Released all slaves [ 2825.852536][T27436] bond977 (unregistering): (slave vlan793): Releasing active interface [ 2825.899820][T27436] bond977 (unregistering): Released all slaves [ 2825.976112][T27436] bond976 (unregistering): (slave vlan792): Releasing active interface [ 2826.062748][T27436] bond976 (unregistering): Released all slaves [ 2826.090154][T27436] bond975 (unregistering): (slave vlan791): Releasing active interface [ 2826.199313][T27436] bond975 (unregistering): Released all slaves [ 2826.223231][T27436] bond974 (unregistering): (slave vlan790): Releasing active interface [ 2826.313077][T27436] bond974 (unregistering): Released all slaves [ 2826.421409][T27436] bond973 (unregistering): Released all slaves [ 2826.441014][T27436] bond972 (unregistering): (slave vlan789): Releasing active interface [ 2826.532911][T27436] bond972 (unregistering): Released all slaves [ 2826.560750][T27436] bond971 (unregistering): (slave vlan788): Releasing active interface [ 2826.665355][T27436] bond971 (unregistering): Released all slaves [ 2826.689733][T27436] bond970 (unregistering): (slave vlan787): Releasing active interface [ 2826.791724][T27436] bond970 (unregistering): Released all slaves [ 2826.814117][T27436] bond969 (unregistering): (slave vlan786): Releasing active interface [ 2826.913722][T27436] bond969 (unregistering): Released all slaves [ 2826.941215][T27436] bond968 (unregistering): (slave vlan785): Releasing active interface [ 2827.032482][T27436] bond968 (unregistering): Released all slaves [ 2827.053314][T27436] bond967 (unregistering): (slave vlan784): Releasing active interface [ 2827.141157][T27436] bond967 (unregistering): Released all slaves [ 2827.169721][T27436] bond966 (unregistering): (slave vlan783): Releasing active interface [ 2827.243830][T27436] bond966 (unregistering): Released all slaves [ 2827.272818][T27436] bond965 (unregistering): (slave vlan782): Releasing active interface [ 2827.402021][T27436] bond965 (unregistering): Released all slaves [ 2827.430799][T27436] bond964 (unregistering): (slave vlan781): Releasing active interface [ 2827.508334][T27436] bond964 (unregistering): Released all slaves [ 2827.531009][T27436] bond963 (unregistering): (slave vlan780): Releasing active interface [ 2827.623448][T27436] bond963 (unregistering): Released all slaves [ 2827.644256][T27436] bond962 (unregistering): (slave vlan779): Releasing active interface [ 2827.733836][T27436] bond962 (unregistering): Released all slaves [ 2827.762917][T27436] bond961 (unregistering): (slave vlan778): Releasing active interface [ 2827.863916][T27436] bond961 (unregistering): Released all slaves [ 2827.890404][T27436] bond960 (unregistering): (slave vlan777): Releasing active interface [ 2827.980895][T27436] bond960 (unregistering): Released all slaves [ 2828.000791][T27436] bond959 (unregistering): (slave vlan776): Releasing active interface [ 2828.073058][T27436] bond959 (unregistering): Released all slaves [ 2828.109733][T27436] bond958 (unregistering): (slave vlan775): Releasing active interface [ 2828.190431][T27436] bond958 (unregistering): Released all slaves [ 2828.212352][T27436] bond957 (unregistering): (slave vlan774): Releasing active interface [ 2828.282606][T27436] bond957 (unregistering): Released all slaves [ 2828.303899][T27436] bond956 (unregistering): (slave vlan773): Releasing active interface [ 2828.386965][T27436] bond956 (unregistering): Released all slaves [ 2828.416877][T27436] bond955 (unregistering): (slave vlan772): Releasing active interface [ 2828.500471][T27436] bond955 (unregistering): Released all slaves [ 2828.589892][T27436] bond954 (unregistering): (slave vlan771): Releasing active interface [ 2828.709887][T27436] bond954 (unregistering): Released all slaves [ 2828.733870][T27436] bond953 (unregistering): (slave vlan770): Releasing active interface [ 2828.843566][T27436] bond953 (unregistering): Released all slaves [ 2828.882475][T27436] bond952 (unregistering): (slave vlan769): Releasing active interface [ 2828.962420][T27436] bond952 (unregistering): Released all slaves [ 2829.000565][T27436] bond951 (unregistering): (slave vlan768): Releasing active interface [ 2829.100743][T27436] bond951 (unregistering): Released all slaves [ 2829.200210][T27436] bond950 (unregistering): Released all slaves [ 2829.240443][T27436] bond949 (unregistering): (slave vlan767): Releasing active interface [ 2829.318641][T27436] bond949 (unregistering): Released all slaves [ 2829.340663][T27436] bond948 (unregistering): (slave vlan766): Releasing active interface [ 2829.432228][T27436] bond948 (unregistering): Released all slaves [ 2829.453664][T27436] bond947 (unregistering): (slave vlan765): Releasing active interface [ 2829.553699][T27436] bond947 (unregistering): Released all slaves [ 2829.582832][T27436] bond946 (unregistering): (slave vlan764): Releasing active interface [ 2829.680149][T27436] bond946 (unregistering): Released all slaves [ 2829.713091][T27436] bond945 (unregistering): (slave vlan763): Releasing active interface [ 2829.794028][T27436] bond945 (unregistering): Released all slaves [ 2829.818723][T27436] bond944 (unregistering): (slave vlan762): Releasing active interface [ 2829.911674][T27436] bond944 (unregistering): Released all slaves [ 2829.933811][T27436] bond943 (unregistering): (slave vlan761): Releasing active interface [ 2830.005193][T27436] bond943 (unregistering): Released all slaves [ 2830.034113][T27436] bond942 (unregistering): (slave vlan760): Releasing active interface [ 2830.112350][T27436] bond942 (unregistering): Released all slaves [ 2830.132984][T27436] bond941 (unregistering): (slave vlan759): Releasing active interface [ 2830.214108][T27436] bond941 (unregistering): Released all slaves [ 2830.240534][T27436] bond940 (unregistering): (slave vlan758): Releasing active interface [ 2830.311402][T27436] bond940 (unregistering): Released all slaves [ 2830.340342][T27436] bond939 (unregistering): (slave vlan757): Releasing active interface [ 2830.443079][T27436] bond939 (unregistering): Released all slaves [ 2830.463401][T27436] bond938 (unregistering): (slave vlan756): Releasing active interface [ 2830.541098][T27436] bond938 (unregistering): Released all slaves [ 2830.563391][T27436] bond937 (unregistering): (slave vlan755): Releasing active interface [ 2830.652813][T27436] bond937 (unregistering): Released all slaves [ 2830.680233][T27436] bond936 (unregistering): (slave vlan754): Releasing active interface [ 2830.771706][T27436] bond936 (unregistering): Released all slaves [ 2830.791975][T27436] bond935 (unregistering): (slave vlan753): Releasing active interface [ 2830.909892][T27436] bond935 (unregistering): Released all slaves [ 2830.940783][T27436] bond934 (unregistering): (slave vlan752): Releasing active interface [ 2831.012427][T27436] bond934 (unregistering): Released all slaves [ 2831.094282][T27436] bond933 (unregistering): Released all slaves [ 2831.120819][T27436] bond932 (unregistering): (slave vlan751): Releasing active interface [ 2831.222837][T27436] bond932 (unregistering): Released all slaves [ 2831.250096][T27436] bond931 (unregistering): (slave vlan750): Releasing active interface [ 2831.330629][T27436] bond931 (unregistering): Released all slaves [ 2831.358501][T27436] bond930 (unregistering): (slave vlan749): Releasing active interface [ 2831.449314][T27436] bond930 (unregistering): Released all slaves [ 2831.472263][T27436] bond929 (unregistering): (slave vlan748): Releasing active interface [ 2831.589805][T27436] bond929 (unregistering): Released all slaves [ 2831.611123][T27436] bond928 (unregistering): (slave vlan747): Releasing active interface [ 2831.703805][T27436] bond928 (unregistering): Released all slaves [ 2831.730534][T27436] bond927 (unregistering): (slave vlan746): Releasing active interface [ 2831.807637][T27436] bond927 (unregistering): Released all slaves [ 2831.830537][T27436] bond926 (unregistering): (slave vlan745): Releasing active interface [ 2831.939884][T27436] bond926 (unregistering): Released all slaves [ 2831.961560][T27436] bond925 (unregistering): (slave vlan744): Releasing active interface [ 2832.061843][T27436] bond925 (unregistering): Released all slaves [ 2832.086792][T27436] bond924 (unregistering): (slave vlan743): Releasing active interface [ 2832.172562][T27436] bond924 (unregistering): Released all slaves [ 2832.205157][T27436] bond923 (unregistering): (slave vlan742): Releasing active interface [ 2832.290721][T27436] bond923 (unregistering): Released all slaves [ 2832.323422][T27436] bond922 (unregistering): (slave vlan741): Releasing active interface [ 2832.418799][T27436] bond922 (unregistering): Released all slaves [ 2832.443559][T27436] bond921 (unregistering): (slave vlan740): Releasing active interface [ 2832.540901][T27436] bond921 (unregistering): Released all slaves [ 2832.561549][T27436] bond920 (unregistering): (slave vlan739): Releasing active interface [ 2832.640816][T27436] bond920 (unregistering): Released all slaves [ 2832.662806][T27436] bond919 (unregistering): (slave vlan738): Releasing active interface [ 2832.754057][T27436] bond919 (unregistering): Released all slaves [ 2832.784112][T27436] bond918 (unregistering): (slave vlan737): Releasing active interface [ 2832.868985][T27436] bond918 (unregistering): Released all slaves [ 2832.902467][T27436] bond917 (unregistering): (slave vlan736): Releasing active interface [ 2832.987082][T27436] bond917 (unregistering): Released all slaves [ 2833.010436][T27436] bond916 (unregistering): (slave vlan735): Releasing active interface [ 2833.100694][T27436] bond916 (unregistering): Released all slaves [ 2833.120868][T27436] bond915 (unregistering): (slave vlan734): Releasing active interface [ 2833.212762][T27436] bond915 (unregistering): Released all slaves [ 2833.242942][T27436] bond914 (unregistering): (slave vlan733): Releasing active interface [ 2833.332857][T27436] bond914 (unregistering): Released all slaves [ 2833.359815][T27436] bond913 (unregistering): (slave vlan732): Releasing active interface [ 2833.456697][T27436] bond913 (unregistering): Released all slaves [ 2833.479613][T27436] bond912 (unregistering): (slave vlan731): Releasing active interface [ 2833.573197][T27436] bond912 (unregistering): Released all slaves [ 2833.594163][T27436] bond911 (unregistering): (slave vlan730): Releasing active interface [ 2833.710039][T27436] bond911 (unregistering): Released all slaves [ 2833.732172][T27436] bond910 (unregistering): (slave vlan729): Releasing active interface [ 2833.812226][T27436] bond910 (unregistering): Released all slaves [ 2833.831443][T27436] bond909 (unregistering): (slave vlan728): Releasing active interface [ 2833.927495][T27436] bond909 (unregistering): Released all slaves [ 2833.959937][T27436] bond908 (unregistering): (slave vlan727): Releasing active interface [ 2834.059284][T27436] bond908 (unregistering): Released all slaves [ 2834.083122][T27436] bond907 (unregistering): (slave vlan726): Releasing active interface [ 2834.198942][T27436] bond907 (unregistering): Released all slaves [ 2834.227919][T27436] bond906 (unregistering): (slave vlan725): Releasing active interface [ 2834.319022][T27436] bond906 (unregistering): Released all slaves [ 2834.341369][T27436] bond905 (unregistering): (slave vlan724): Releasing active interface [ 2834.429254][T27436] bond905 (unregistering): Released all slaves [ 2834.451379][T27436] bond904 (unregistering): (slave vlan723): Releasing active interface [ 2834.482872][T27436] bond904 (unregistering): Released all slaves [ 2834.548720][T27436] bond903 (unregistering): (slave vlan722): Releasing active interface [ 2834.639587][T27436] bond903 (unregistering): Released all slaves [ 2834.661681][T27436] bond902 (unregistering): (slave vlan721): Releasing active interface [ 2834.740970][T27436] bond902 (unregistering): Released all slaves [ 2834.763905][T27436] bond901 (unregistering): (slave vlan720): Releasing active interface [ 2834.858792][T27436] bond901 (unregistering): Released all slaves [ 2834.873247][T27436] bond900 (unregistering): (slave vlan719): Releasing active interface [ 2834.980756][T27436] bond900 (unregistering): Released all slaves [ 2835.002527][T27436] bond899 (unregistering): (slave vlan718): Releasing active interface [ 2835.108739][T27436] bond899 (unregistering): Released all slaves [ 2835.128791][T27436] bond898 (unregistering): (slave vlan717): Releasing active interface [ 2835.220247][T27436] bond898 (unregistering): Released all slaves [ 2835.241588][T27436] bond897 (unregistering): (slave vlan716): Releasing active interface [ 2835.318433][T27436] bond897 (unregistering): Released all slaves [ 2835.380939][T27436] bond896 (unregistering): Released all slaves [ 2835.408347][T27436] bond895 (unregistering): (slave vlan715): Releasing active interface [ 2835.519415][T27436] bond895 (unregistering): Released all slaves [ 2835.543199][T27436] bond894 (unregistering): (slave vlan714): Releasing active interface [ 2835.613181][T27436] bond894 (unregistering): Released all slaves [ 2835.640056][T27436] bond893 (unregistering): (slave vlan713): Releasing active interface [ 2835.715996][T27436] bond893 (unregistering): Released all slaves [ 2835.740235][T27436] bond892 (unregistering): (slave vlan712): Releasing active interface [ 2835.812568][T27436] bond892 (unregistering): Released all slaves [ 2835.841592][T27436] bond891 (unregistering): (slave vlan711): Releasing active interface [ 2835.912587][T27436] bond891 (unregistering): Released all slaves [ 2835.953882][T27436] bond890 (unregistering): (slave vlan710): Releasing active interface [ 2836.038152][T27436] bond890 (unregistering): Released all slaves [ 2836.066478][T27436] bond889 (unregistering): (slave vlan709): Releasing active interface [ 2836.097455][ T1209] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.103834][ T1209] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.204854][T27436] bond889 (unregistering): Released all slaves [ 2836.232282][T27436] bond888 (unregistering): (slave vlan708): Releasing active interface [ 2836.329104][T27436] bond888 (unregistering): Released all slaves [ 2836.352014][T27436] bond887 (unregistering): (slave vlan707): Releasing active interface [ 2836.462039][T27436] bond887 (unregistering): Released all slaves [ 2836.484269][T27436] bond886 (unregistering): (slave vlan706): Releasing active interface [ 2836.580728][T27436] bond886 (unregistering): Released all slaves [ 2836.601568][T27436] bond885 (unregistering): (slave vlan705): Releasing active interface [ 2836.681865][T27436] bond885 (unregistering): Released all slaves [ 2836.703418][T27436] bond884 (unregistering): (slave vlan704): Releasing active interface [ 2836.796282][T27436] bond884 (unregistering): Released all slaves [ 2836.819909][T27436] bond883 (unregistering): (slave vlan703): Releasing active interface [ 2836.909780][T27436] bond883 (unregistering): Released all slaves [ 2836.932087][T27436] bond882 (unregistering): (slave vlan702): Releasing active interface [ 2837.044703][T27436] bond882 (unregistering): Released all slaves [ 2837.077025][T27436] bond881 (unregistering): (slave vlan701): Releasing active interface [ 2837.152039][T27436] bond881 (unregistering): Released all slaves [ 2837.173620][T27436] bond880 (unregistering): (slave vlan700): Releasing active interface [ 2837.259510][T27436] bond880 (unregistering): Released all slaves [ 2837.290425][T27436] bond879 (unregistering): (slave vlan699): Releasing active interface [ 2837.370783][T27436] bond879 (unregistering): Released all slaves [ 2837.399255][T27436] bond878 (unregistering): (slave vlan698): Releasing active interface [ 2837.470893][T27436] bond878 (unregistering): Released all slaves [ 2837.493696][T27436] bond877 (unregistering): (slave vlan697): Releasing active interface [ 2837.580336][T27436] bond877 (unregistering): Released all slaves [ 2837.603960][T27436] bond876 (unregistering): (slave vlan696): Releasing active interface [ 2837.700017][T27436] bond876 (unregistering): Released all slaves [ 2837.722892][T27436] bond875 (unregistering): (slave vlan695): Releasing active interface [ 2837.793448][T27436] bond875 (unregistering): Released all slaves [ 2837.813310][T27436] bond874 (unregistering): (slave vlan694): Releasing active interface [ 2837.910618][T27436] bond874 (unregistering): Released all slaves [ 2837.945705][T27436] bond873 (unregistering): (slave vlan693): Releasing active interface [ 2838.018501][T27436] bond873 (unregistering): Released all slaves [ 2838.043338][T27436] bond872 (unregistering): (slave vlan692): Releasing active interface [ 2838.130856][T27436] bond872 (unregistering): Released all slaves [ 2838.153960][T27436] bond871 (unregistering): (slave vlan691): Releasing active interface [ 2838.250352][T27436] bond871 (unregistering): Released all slaves [ 2838.277590][T27436] bond870 (unregistering): (slave vlan690): Releasing active interface [ 2838.362476][T27436] bond870 (unregistering): Released all slaves [ 2838.390375][T27436] bond869 (unregistering): (slave vlan689): Releasing active interface [ 2838.463048][T27436] bond869 (unregistering): Released all slaves [ 2838.492780][T27436] bond868 (unregistering): (slave vlan688): Releasing active interface [ 2838.589783][T27436] bond868 (unregistering): Released all slaves [ 2838.611958][T27436] bond867 (unregistering): (slave vlan687): Releasing active interface [ 2838.686847][T27436] bond867 (unregistering): Released all slaves [ 2838.713068][T27436] bond866 (unregistering): (slave vlan686): Releasing active interface [ 2838.790863][T27436] bond866 (unregistering): Released all slaves [ 2838.811646][T27436] bond865 (unregistering): (slave vlan685): Releasing active interface [ 2838.907125][T27436] bond865 (unregistering): Released all slaves [ 2838.930226][T27436] bond864 (unregistering): (slave vlan684): Releasing active interface [ 2839.001659][T27436] bond864 (unregistering): Released all slaves [ 2839.029229][T27436] bond863 (unregistering): (slave vlan683): Releasing active interface [ 2839.153959][T27436] bond863 (unregistering): Released all slaves [ 2839.173961][T27436] bond862 (unregistering): (slave vlan682): Releasing active interface [ 2839.252446][T27436] bond862 (unregistering): Released all slaves [ 2839.273618][T27436] bond861 (unregistering): (slave vlan681): Releasing active interface [ 2839.383562][T27436] bond861 (unregistering): Released all slaves [ 2839.409496][T27436] bond860 (unregistering): (slave vlan680): Releasing active interface [ 2839.492493][T27436] bond860 (unregistering): Released all slaves [ 2839.512835][T27436] bond859 (unregistering): (slave vlan679): Releasing active interface [ 2839.591517][T27436] bond859 (unregistering): Released all slaves [ 2839.616360][T27436] bond858 (unregistering): (slave vlan678): Releasing active interface [ 2839.711707][T27436] bond858 (unregistering): Released all slaves [ 2839.740366][T27436] bond857 (unregistering): (slave vlan677): Releasing active interface [ 2839.820783][T27436] bond857 (unregistering): Released all slaves [ 2839.850711][T27436] bond856 (unregistering): (slave vlan676): Releasing active interface [ 2839.959483][T27436] bond856 (unregistering): Released all slaves [ 2839.974356][T27436] bond855 (unregistering): (slave vlan675): Releasing active interface [ 2840.042734][T27436] bond855 (unregistering): Released all slaves [ 2840.072936][T27436] bond854 (unregistering): (slave vlan674): Releasing active interface [ 2840.171955][T27436] bond854 (unregistering): Released all slaves [ 2840.203049][T27436] bond853 (unregistering): (slave vlan673): Releasing active interface [ 2840.309885][T27436] bond853 (unregistering): Released all slaves [ 2840.335944][T27436] bond852 (unregistering): (slave vlan672): Releasing active interface [ 2840.401964][T27436] bond852 (unregistering): Released all slaves [ 2840.430849][T27436] bond851 (unregistering): (slave vlan671): Releasing active interface [ 2840.515860][T27436] bond851 (unregistering): Released all slaves [ 2840.539927][T27436] bond850 (unregistering): (slave vlan670): Releasing active interface [ 2840.611172][T27436] bond850 (unregistering): Released all slaves [ 2840.637772][T27436] bond849 (unregistering): (slave vlan669): Releasing active interface [ 2840.764262][T27436] bond849 (unregistering): Released all slaves [ 2840.789209][T27436] bond848 (unregistering): (slave vlan668): Releasing active interface [ 2840.879300][T27436] bond848 (unregistering): Released all slaves [ 2840.901330][T27436] bond847 (unregistering): (slave vlan667): Releasing active interface [ 2840.996937][T27436] bond847 (unregistering): Released all slaves [ 2841.022807][T27436] bond846 (unregistering): (slave vlan666): Releasing active interface [ 2841.116796][T27436] bond846 (unregistering): Released all slaves [ 2841.143794][T27436] bond845 (unregistering): (slave vlan665): Releasing active interface [ 2841.322526][T27436] bond845 (unregistering): Released all slaves [ 2841.379629][T27436] bond844 (unregistering): (slave vlan664): Releasing active interface [ 2841.500208][T27436] bond844 (unregistering): Released all slaves [ 2841.552145][T27436] bond843 (unregistering): (slave vlan663): Releasing active interface [ 2841.726794][T27436] bond843 (unregistering): Released all slaves [ 2841.783829][T27436] bond842 (unregistering): (slave vlan662): Releasing active interface [ 2841.942486][T27436] bond842 (unregistering): Released all slaves [ 2841.993444][T27436] bond841 (unregistering): (slave vlan661): Releasing active interface [ 2842.178714][T27436] bond841 (unregistering): Released all slaves [ 2842.211879][T27436] bond840 (unregistering): (slave vlan660): Releasing active interface [ 2842.321029][T27436] bond840 (unregistering): Released all slaves [ 2842.350485][T27436] bond839 (unregistering): (slave vlan659): Releasing active interface [ 2842.432215][T27436] bond839 (unregistering): Released all slaves [ 2842.458525][T27436] bond838 (unregistering): (slave vlan658): Releasing active interface [ 2842.548901][T27436] bond838 (unregistering): Released all slaves [ 2842.590570][T27436] bond837 (unregistering): (slave vlan657): Releasing active interface [ 2842.714940][T27436] bond837 (unregistering): Released all slaves [ 2842.740050][T27436] bond836 (unregistering): (slave vlan656): Releasing active interface [ 2842.814321][T27436] bond836 (unregistering): Released all slaves [ 2842.839328][T27436] bond835 (unregistering): (slave vlan655): Releasing active interface [ 2842.919969][T27436] bond835 (unregistering): Released all slaves [ 2842.999864][T27436] bond834 (unregistering): (slave vlan654): Releasing active interface [ 2843.092180][T27436] bond834 (unregistering): Released all slaves [ 2843.122723][T27436] bond833 (unregistering): (slave vlan653): Releasing active interface [ 2843.192187][T27436] bond833 (unregistering): Released all slaves [ 2843.242057][T27436] bond832 (unregistering): (slave vlan652): Releasing active interface [ 2843.343036][T27436] bond832 (unregistering): Released all slaves [ 2843.370903][T27436] bond831 (unregistering): (slave vlan651): Releasing active interface [ 2843.463631][T27436] bond831 (unregistering): Released all slaves [ 2843.489549][T27436] bond830 (unregistering): (slave vlan650): Releasing active interface [ 2843.581674][T27436] bond830 (unregistering): Released all slaves [ 2843.608410][T27436] bond829 (unregistering): (slave vlan649): Releasing active interface [ 2843.690648][T27436] bond829 (unregistering): Released all slaves [ 2843.711977][T27436] bond828 (unregistering): (slave vlan648): Releasing active interface [ 2843.798772][T27436] bond828 (unregistering): Released all slaves [ 2843.819787][T27436] bond827 (unregistering): (slave vlan647): Releasing active interface [ 2843.899579][T27436] bond827 (unregistering): Released all slaves [ 2843.922354][T27436] bond826 (unregistering): (slave vlan646): Releasing active interface [ 2844.009547][T27436] bond826 (unregistering): Released all slaves [ 2844.034332][T27436] bond825 (unregistering): (slave vlan645): Releasing active interface [ 2844.117931][T27436] bond825 (unregistering): Released all slaves [ 2844.141881][T27436] bond824 (unregistering): (slave vlan644): Releasing active interface [ 2844.217256][T27436] bond824 (unregistering): Released all slaves [ 2844.243856][T27436] bond823 (unregistering): (slave vlan643): Releasing active interface [ 2844.338312][T27436] bond823 (unregistering): Released all slaves [ 2844.362773][T27436] bond822 (unregistering): (slave vlan642): Releasing active interface [ 2844.486684][T27436] bond822 (unregistering): Released all slaves [ 2844.519230][T27436] bond821 (unregistering): (slave vlan641): Releasing active interface [ 2844.593209][T27436] bond821 (unregistering): Released all slaves [ 2844.623850][T27436] bond820 (unregistering): (slave vlan640): Releasing active interface [ 2844.709732][T27436] bond820 (unregistering): Released all slaves [ 2844.739282][T27436] bond819 (unregistering): (slave vlan639): Releasing active interface [ 2844.826606][T27436] bond819 (unregistering): Released all slaves [ 2844.853202][T27436] bond818 (unregistering): (slave vlan638): Releasing active interface [ 2844.892404][T27436] bond818 (unregistering): Released all slaves [ 2844.969795][T27436] bond817 (unregistering): (slave vlan637): Releasing active interface [ 2845.061356][T27436] bond817 (unregistering): Released all slaves [ 2845.133945][T27436] bond816 (unregistering): Released all slaves [ 2845.225218][T27436] bond815 (unregistering): Released all slaves [ 2845.243919][T27436] bond814 (unregistering): (slave vlan636): Releasing active interface [ 2845.328880][T27436] bond814 (unregistering): Released all slaves [ 2845.351510][T27436] bond813 (unregistering): (slave vlan635): Releasing active interface [ 2845.475119][T27436] bond813 (unregistering): Released all slaves [ 2845.496687][T27436] bond812 (unregistering): (slave vlan634): Releasing active interface [ 2845.580025][T27436] bond812 (unregistering): Released all slaves [ 2845.603223][T27436] bond811 (unregistering): (slave vlan633): Releasing active interface [ 2845.700530][T27436] bond811 (unregistering): Released all slaves [ 2845.723417][T27436] bond810 (unregistering): (slave vlan632): Releasing active interface [ 2845.794301][T27436] bond810 (unregistering): Released all slaves [ 2845.823899][T27436] bond809 (unregistering): (slave vlan631): Releasing active interface [ 2845.892409][T27436] bond809 (unregistering): Released all slaves [ 2845.920847][T27436] bond808 (unregistering): (slave vlan630): Releasing active interface [ 2846.019553][T27436] bond808 (unregistering): Released all slaves [ 2846.041369][T27436] bond807 (unregistering): (slave vlan629): Releasing active interface [ 2846.137620][T27436] bond807 (unregistering): Released all slaves [ 2846.159796][T27436] bond806 (unregistering): (slave vlan628): Releasing active interface [ 2846.233149][T27436] bond806 (unregistering): Released all slaves [ 2846.259705][T27436] bond805 (unregistering): (slave vlan627): Releasing active interface [ 2846.352921][T27436] bond805 (unregistering): Released all slaves [ 2846.375428][T27436] bond804 (unregistering): (slave vlan626): Releasing active interface [ 2846.479575][T27436] bond804 (unregistering): Released all slaves [ 2846.520084][T27436] bond803 (unregistering): (slave vlan625): Releasing active interface [ 2846.630579][T27436] bond803 (unregistering): Released all slaves [ 2846.650255][T27436] bond802 (unregistering): (slave vlan624): Releasing active interface [ 2846.721015][T27436] bond802 (unregistering): Released all slaves [ 2846.741207][T27436] bond801 (unregistering): (slave vlan623): Releasing active interface [ 2846.812200][T27436] bond801 (unregistering): Released all slaves [ 2846.839227][T27436] bond800 (unregistering): (slave vlan622): Releasing active interface [ 2846.930996][T27436] bond800 (unregistering): Released all slaves [ 2846.950516][T27436] bond799 (unregistering): (slave vlan621): Releasing active interface [ 2847.033107][T27436] bond799 (unregistering): Released all slaves [ 2847.061943][T27436] bond798 (unregistering): (slave vlan620): Releasing active interface [ 2847.144246][T27436] bond798 (unregistering): Released all slaves [ 2847.163873][T27436] bond797 (unregistering): (slave vlan619): Releasing active interface [ 2847.241150][T27436] bond797 (unregistering): Released all slaves [ 2847.339058][T27436] bond796 (unregistering): Released all slaves [ 2847.382484][T27436] bond795 (unregistering): (slave vlan618): Releasing active interface [ 2847.418958][T27436] bond795 (unregistering): Released all slaves [ 2847.473431][T27436] bond794 (unregistering): (slave vlan617): Releasing active interface [ 2847.554175][T27436] bond794 (unregistering): Released all slaves [ 2847.582670][T27436] bond793 (unregistering): (slave vlan616): Releasing active interface [ 2847.678046][T27436] bond793 (unregistering): Released all slaves [ 2847.702275][T27436] bond792 (unregistering): (slave vlan615): Releasing active interface [ 2847.790334][T27436] bond792 (unregistering): Released all slaves [ 2847.811331][T27436] bond791 (unregistering): (slave vlan614): Releasing active interface [ 2847.901779][T27436] bond791 (unregistering): Released all slaves [ 2847.933908][T27436] bond790 (unregistering): (slave vlan613): Releasing active interface [ 2848.040801][T27436] bond790 (unregistering): Released all slaves [ 2848.061155][T27436] bond789 (unregistering): (slave vlan612): Releasing active interface [ 2848.149682][T27436] bond789 (unregistering): Released all slaves [ 2848.172175][T27436] bond788 (unregistering): (slave vlan611): Releasing active interface [ 2848.253906][T27436] bond788 (unregistering): Released all slaves [ 2848.279373][T27436] bond787 (unregistering): (slave vlan610): Releasing active interface [ 2848.358624][T27436] bond787 (unregistering): Released all slaves [ 2848.390170][T27436] bond786 (unregistering): (slave vlan609): Releasing active interface [ 2848.481760][T27436] bond786 (unregistering): Released all slaves [ 2848.519024][T27436] bond785 (unregistering): (slave vlan608): Releasing active interface [ 2848.608875][T27436] bond785 (unregistering): Released all slaves [ 2848.632471][T27436] bond784 (unregistering): (slave vlan607): Releasing active interface [ 2848.729549][T27436] bond784 (unregistering): Released all slaves [ 2848.753356][T27436] bond783 (unregistering): (slave vlan606): Releasing active interface [ 2848.849965][T27436] bond783 (unregistering): Released all slaves [ 2848.869920][T27436] bond782 (unregistering): (slave vlan605): Releasing active interface [ 2848.955016][T27436] bond782 (unregistering): Released all slaves [ 2848.980054][T27436] bond781 (unregistering): (slave vlan604): Releasing active interface [ 2849.082227][T27436] bond781 (unregistering): Released all slaves [ 2849.103698][T27436] bond780 (unregistering): (slave vlan603): Releasing active interface [ 2849.200001][T27436] bond780 (unregistering): Released all slaves [ 2849.221632][T27436] bond779 (unregistering): (slave vlan602): Releasing active interface [ 2849.304325][T27436] bond779 (unregistering): Released all slaves [ 2849.323509][T27436] bond778 (unregistering): (slave vlan601): Releasing active interface [ 2849.403666][T27436] bond778 (unregistering): Released all slaves [ 2849.428952][T27436] bond777 (unregistering): (slave vlan600): Releasing active interface [ 2849.558766][T27436] bond777 (unregistering): Released all slaves [ 2849.584473][T27436] bond776 (unregistering): (slave vlan599): Releasing active interface [ 2849.677176][T27436] bond776 (unregistering): Released all slaves [ 2849.701113][T27436] bond775 (unregistering): (slave vlan598): Releasing active interface [ 2849.792796][T27436] bond775 (unregistering): Released all slaves [ 2849.818982][T27436] bond774 (unregistering): (slave vlan597): Releasing active interface [ 2849.853400][T27436] bond774 (unregistering): Released all slaves [ 2849.950118][T27436] bond773 (unregistering): (slave vlan596): Releasing active interface [ 2850.029864][T27436] bond773 (unregistering): Released all slaves [ 2850.047917][T27436] bond772 (unregistering): (slave vlan595): Releasing active interface [ 2850.126508][T27436] bond772 (unregistering): Released all slaves [ 2850.150962][T27436] bond771 (unregistering): (slave vlan594): Releasing active interface [ 2850.239534][T27436] bond771 (unregistering): Released all slaves [ 2850.262274][T27436] bond770 (unregistering): (slave vlan593): Releasing active interface [ 2850.349380][T27436] bond770 (unregistering): Released all slaves [ 2850.370015][T27436] bond769 (unregistering): (slave vlan592): Releasing active interface [ 2850.451107][T27436] bond769 (unregistering): Released all slaves [ 2850.473191][T27436] bond768 (unregistering): (slave vlan591): Releasing active interface [ 2850.572856][T27436] bond768 (unregistering): Released all slaves [ 2850.599239][T27436] bond767 (unregistering): (slave vlan590): Releasing active interface [ 2850.639971][T27436] bond767 (unregistering): Released all slaves [ 2850.748628][T27436] bond766 (unregistering): (slave vlan589): Releasing active interface [ 2850.819470][T27436] bond766 (unregistering): Released all slaves [ 2850.840862][T27436] bond765 (unregistering): (slave vlan588): Releasing active interface [ 2850.923803][T27436] bond765 (unregistering): Released all slaves [ 2850.942748][T27436] bond764 (unregistering): (slave vlan587): Releasing active interface [ 2851.012156][T27436] bond764 (unregistering): Released all slaves [ 2851.039486][T27436] bond763 (unregistering): (slave vlan586): Releasing active interface [ 2851.151366][T27436] bond763 (unregistering): Released all slaves [ 2851.169516][T27436] bond762 (unregistering): (slave vlan585): Releasing active interface [ 2851.263472][T27436] bond762 (unregistering): Released all slaves [ 2851.289827][T27436] bond761 (unregistering): (slave vlan584): Releasing active interface [ 2851.389515][T27436] bond761 (unregistering): Released all slaves [ 2851.419457][T27436] bond760 (unregistering): (slave vlan583): Releasing active interface [ 2851.512481][T27436] bond760 (unregistering): Released all slaves [ 2851.552933][T27436] bond759 (unregistering): (slave vlan582): Releasing active interface [ 2851.643794][T27436] bond759 (unregistering): Released all slaves [ 2851.663815][T27436] bond758 (unregistering): (slave vlan581): Releasing active interface [ 2851.789829][T27436] bond758 (unregistering): Released all slaves [ 2851.823665][T27436] bond757 (unregistering): (slave vlan580): Releasing active interface [ 2851.899545][T27436] bond757 (unregistering): Released all slaves [ 2851.932416][T27436] bond756 (unregistering): (slave vlan579): Releasing active interface [ 2852.028366][T27436] bond756 (unregistering): Released all slaves [ 2852.050116][T27436] bond755 (unregistering): (slave vlan578): Releasing active interface [ 2852.145104][T27436] bond755 (unregistering): Released all slaves [ 2852.169241][T27436] bond754 (unregistering): (slave vlan577): Releasing active interface [ 2852.254063][T27436] bond754 (unregistering): Released all slaves [ 2852.280767][T27436] bond753 (unregistering): (slave vlan576): Releasing active interface [ 2852.351910][T27436] bond753 (unregistering): Released all slaves [ 2852.373780][T27436] bond752 (unregistering): (slave vlan575): Releasing active interface [ 2852.459277][T27436] bond752 (unregistering): Released all slaves [ 2852.481528][T27436] bond751 (unregistering): (slave vlan574): Releasing active interface [ 2852.553864][T27436] bond751 (unregistering): Released all slaves [ 2852.590702][T27436] bond750 (unregistering): (slave vlan573): Releasing active interface [ 2852.673365][T27436] bond750 (unregistering): Released all slaves [ 2852.704801][T27436] bond749 (unregistering): (slave vlan572): Releasing active interface [ 2852.792696][T27436] bond749 (unregistering): Released all slaves [ 2852.852811][T27436] bond748 (unregistering): Released all slaves [ 2852.878606][T27436] bond747 (unregistering): (slave vlan571): Releasing active interface [ 2852.947996][T27436] bond747 (unregistering): Released all slaves [ 2852.973094][T27436] bond746 (unregistering): (slave vlan570): Releasing active interface [ 2853.059065][T27436] bond746 (unregistering): Released all slaves [ 2853.132563][T27436] bond745 (unregistering): Released all slaves [ 2853.229696][T27436] bond744 (unregistering): (slave vlan569): Releasing active interface [ 2853.313840][T27436] bond744 (unregistering): Released all slaves [ 2853.339528][T27436] bond743 (unregistering): (slave vlan568): Releasing active interface [ 2853.432417][T27436] bond743 (unregistering): Released all slaves [ 2853.459963][T27436] bond742 (unregistering): (slave vlan567): Releasing active interface [ 2853.493705][T27436] bond742 (unregistering): Released all slaves [ 2853.574187][T27436] bond741 (unregistering): (slave vlan566): Releasing active interface [ 2853.679574][T27436] bond741 (unregistering): Released all slaves [ 2853.709039][T27436] bond740 (unregistering): (slave vlan565): Releasing active interface [ 2853.797899][T27436] bond740 (unregistering): Released all slaves [ 2853.819837][T27436] bond739 (unregistering): (slave vlan564): Releasing active interface [ 2853.906898][T27436] bond739 (unregistering): Released all slaves [ 2853.929649][T27436] bond738 (unregistering): (slave vlan563): Releasing active interface [ 2854.027971][T27436] bond738 (unregistering): Released all slaves [ 2854.050233][T27436] bond737 (unregistering): (slave vlan562): Releasing active interface [ 2854.125375][T27436] bond737 (unregistering): Released all slaves [ 2854.149162][T27436] bond736 (unregistering): (slave vlan561): Releasing active interface [ 2854.229927][T27436] bond736 (unregistering): Released all slaves [ 2854.297830][T27436] bond735 (unregistering): (slave vlan560): Releasing active interface [ 2854.383406][T27436] bond735 (unregistering): Released all slaves [ 2854.410759][T27436] bond734 (unregistering): (slave vlan559): Releasing active interface [ 2854.484182][T27436] bond734 (unregistering): Released all slaves [ 2854.510060][T27436] bond733 (unregistering): (slave vlan558): Releasing active interface [ 2854.593316][T27436] bond733 (unregistering): Released all slaves [ 2854.612666][T27436] bond732 (unregistering): (slave vlan557): Releasing active interface [ 2854.691920][T27436] bond732 (unregistering): Released all slaves [ 2854.720338][T27436] bond731 (unregistering): (slave vlan556): Releasing active interface [ 2854.776088][T27436] bond731 (unregistering): Released all slaves [ 2854.861971][T27436] bond730 (unregistering): (slave vlan555): Releasing active interface [ 2854.950351][T27436] bond730 (unregistering): Released all slaves [ 2854.978474][T27436] bond729 (unregistering): (slave vlan554): Releasing active interface [ 2855.060160][T27436] bond729 (unregistering): Released all slaves [ 2855.083828][T27436] bond728 (unregistering): (slave vlan553): Releasing active interface [ 2855.182253][T27436] bond728 (unregistering): Released all slaves [ 2855.213549][T27436] bond727 (unregistering): (slave vlan552): Releasing active interface [ 2855.303185][T27436] bond727 (unregistering): Released all slaves [ 2855.329854][T27436] bond726 (unregistering): (slave vlan551): Releasing active interface [ 2855.439935][T27436] bond726 (unregistering): Released all slaves [ 2855.463489][T27436] bond725 (unregistering): (slave vlan550): Releasing active interface [ 2855.533335][T27436] bond725 (unregistering): Released all slaves [ 2855.556543][T27436] bond724 (unregistering): (slave vlan549): Releasing active interface [ 2855.632576][T27436] bond724 (unregistering): Released all slaves [ 2855.659183][T27436] bond723 (unregistering): (slave vlan548): Releasing active interface [ 2855.750762][T27436] bond723 (unregistering): Released all slaves [ 2855.790928][T27436] bond722 (unregistering): (slave vlan547): Releasing active interface [ 2855.872961][T27436] bond722 (unregistering): Released all slaves [ 2855.892665][T27436] bond721 (unregistering): (slave vlan546): Releasing active interface [ 2855.979905][T27436] bond721 (unregistering): Released all slaves [ 2856.002472][T27436] bond720 (unregistering): (slave vlan545): Releasing active interface [ 2856.111557][T27436] bond720 (unregistering): Released all slaves [ 2856.134982][T27436] bond719 (unregistering): (slave vlan544): Releasing active interface [ 2856.203754][T27436] bond719 (unregistering): Released all slaves [ 2856.228795][T27436] bond718 (unregistering): (slave vlan543): Releasing active interface [ 2856.321524][T27436] bond718 (unregistering): Released all slaves [ 2856.347912][T27436] bond717 (unregistering): (slave vlan542): Releasing active interface [ 2856.446589][T27436] bond717 (unregistering): Released all slaves [ 2856.469468][T27436] bond716 (unregistering): (slave vlan541): Releasing active interface [ 2856.563898][T27436] bond716 (unregistering): Released all slaves [ 2856.591459][T27436] bond715 (unregistering): (slave vlan540): Releasing active interface [ 2856.672674][T27436] bond715 (unregistering): Released all slaves [ 2856.691948][T27436] bond714 (unregistering): (slave vlan539): Releasing active interface [ 2856.776239][T27436] bond714 (unregistering): Released all slaves [ 2856.799339][T27436] bond713 (unregistering): (slave vlan538): Releasing active interface [ 2856.880716][T27436] bond713 (unregistering): Released all slaves [ 2856.918781][T27436] bond712 (unregistering): (slave vlan537): Releasing active interface [ 2856.993496][T27436] bond712 (unregistering): Released all slaves [ 2857.012920][T27436] bond711 (unregistering): (slave vlan536): Releasing active interface [ 2857.119472][T27436] bond711 (unregistering): Released all slaves [ 2857.143587][T27436] bond710 (unregistering): (slave vlan535): Releasing active interface [ 2857.264342][T27436] bond710 (unregistering): Released all slaves [ 2857.283987][T27436] bond709 (unregistering): (slave vlan534): Releasing active interface [ 2857.373742][T27436] bond709 (unregistering): Released all slaves [ 2857.393080][T27436] bond708 (unregistering): (slave vlan533): Releasing active interface [ 2857.483338][T27436] bond708 (unregistering): Released all slaves [ 2857.511006][T27436] bond707 (unregistering): (slave vlan532): Releasing active interface [ 2857.595745][T27436] bond707 (unregistering): Released all slaves [ 2857.618819][T27436] bond706 (unregistering): (slave vlan531): Releasing active interface [ 2857.703088][T27436] bond706 (unregistering): Released all slaves [ 2857.728850][T27436] bond705 (unregistering): (slave vlan530): Releasing active interface [ 2857.800756][T27436] bond705 (unregistering): Released all slaves [ 2857.820605][T27436] bond704 (unregistering): (slave vlan529): Releasing active interface [ 2857.906025][T27436] bond704 (unregistering): Released all slaves [ 2857.958736][T27436] bond703 (unregistering): (slave vlan528): Releasing active interface [ 2858.030322][T27436] bond703 (unregistering): Released all slaves [ 2858.060507][T27436] bond702 (unregistering): (slave vlan527): Releasing active interface [ 2858.148535][T27436] bond702 (unregistering): Released all slaves [ 2858.172950][T27436] bond701 (unregistering): (slave vlan526): Releasing active interface [ 2858.243221][T27436] bond701 (unregistering): Released all slaves [ 2858.271572][T27436] bond700 (unregistering): (slave vlan525): Releasing active interface [ 2858.358138][T27436] bond700 (unregistering): Released all slaves [ 2858.382034][T27436] bond699 (unregistering): (slave vlan524): Releasing active interface [ 2858.469237][T27436] bond699 (unregistering): Released all slaves [ 2858.491219][T27436] bond698 (unregistering): (slave vlan523): Releasing active interface [ 2858.580386][T27436] bond698 (unregistering): Released all slaves [ 2858.602203][T27436] bond697 (unregistering): (slave vlan522): Releasing active interface [ 2858.657480][ T5115] Bluetooth: hci5: command 0x0406 tx timeout [ 2858.671783][T27436] bond697 (unregistering): Released all slaves [ 2858.698399][T27436] bond696 (unregistering): (slave vlan521): Releasing active interface [ 2858.762265][T27436] bond696 (unregistering): Released all slaves [ 2858.794064][T27436] bond695 (unregistering): (slave vlan520): Releasing active interface [ 2858.884362][T27436] bond695 (unregistering): Released all slaves [ 2858.913485][T27436] bond694 (unregistering): (slave vlan519): Releasing active interface [ 2858.994142][T27436] bond694 (unregistering): Released all slaves [ 2859.019251][T27436] bond693 (unregistering): (slave vlan518): Releasing active interface [ 2859.086984][T27436] bond693 (unregistering): Released all slaves [ 2859.109609][T27436] bond692 (unregistering): (slave vlan517): Releasing active interface [ 2859.201878][T27436] bond692 (unregistering): Released all slaves [ 2859.223942][T27436] bond691 (unregistering): (slave vlan516): Releasing active interface [ 2859.308908][T27436] bond691 (unregistering): Released all slaves [ 2859.331055][T27436] bond690 (unregistering): (slave vlan515): Releasing active interface [ 2859.411621][T27436] bond690 (unregistering): Released all slaves [ 2859.431806][T27436] bond689 (unregistering): (slave vlan514): Releasing active interface [ 2859.520501][T27436] bond689 (unregistering): Released all slaves [ 2859.540044][T27436] bond688 (unregistering): (slave vlan513): Releasing active interface [ 2859.630571][T27436] bond688 (unregistering): Released all slaves [ 2859.650219][T27436] bond687 (unregistering): (slave vlan512): Releasing active interface [ 2859.739681][T27436] bond687 (unregistering): Released all slaves [ 2859.761303][T27436] bond686 (unregistering): (slave vlan511): Releasing active interface [ 2859.831471][T27436] bond686 (unregistering): Released all slaves [ 2859.858980][T27436] bond685 (unregistering): (slave vlan510): Releasing active interface [ 2859.890849][T27436] bond685 (unregistering): Released all slaves [ 2860.029459][T27436] bond684 (unregistering): Released all slaves [ 2860.051859][T27436] bond683 (unregistering): (slave vlan509): Releasing active interface [ 2860.152997][T27436] bond683 (unregistering): Released all slaves [ 2860.181853][T27436] bond682 (unregistering): (slave vlan508): Releasing active interface [ 2860.273047][T27436] bond682 (unregistering): Released all slaves [ 2860.295177][T27436] bond681 (unregistering): (slave vlan507): Releasing active interface [ 2860.383659][T27436] bond681 (unregistering): Released all slaves [ 2860.428917][T27436] bond680 (unregistering): (slave vlan506): Releasing active interface [ 2860.502797][T27436] bond680 (unregistering): Released all slaves [ 2860.528471][T27436] bond679 (unregistering): (slave vlan505): Releasing active interface [ 2860.595953][T27436] bond679 (unregistering): Released all slaves [ 2860.620431][T27436] bond678 (unregistering): (slave vlan504): Releasing active interface [ 2860.692194][T27436] bond678 (unregistering): Released all slaves [ 2860.720219][T27436] bond677 (unregistering): (slave vlan503): Releasing active interface [ 2860.831495][T27436] bond677 (unregistering): Released all slaves [ 2860.851769][T27436] bond676 (unregistering): (slave vlan502): Releasing active interface [ 2860.940222][T27436] bond676 (unregistering): Released all slaves [ 2860.962101][T27436] bond675 (unregistering): (slave vlan501): Releasing active interface [ 2861.041283][T27436] bond675 (unregistering): Released all slaves [ 2861.074022][T27436] bond674 (unregistering): (slave vlan500): Releasing active interface [ 2861.149156][T27436] bond674 (unregistering): Released all slaves [ 2861.170958][T27436] bond673 (unregistering): (slave vlan499): Releasing active interface [ 2861.249504][T27436] bond673 (unregistering): Released all slaves [ 2861.270837][T27436] bond672 (unregistering): (slave vlan498): Releasing active interface [ 2861.355362][T27436] bond672 (unregistering): Released all slaves [ 2861.440891][T27436] bond671 (unregistering): Released all slaves [ 2861.479670][T27436] bond670 (unregistering): (slave vlan497): Releasing active interface [ 2861.559197][T27436] bond670 (unregistering): Released all slaves [ 2861.580066][T27436] bond669 (unregistering): (slave vlan496): Releasing active interface [ 2861.669613][T27436] bond669 (unregistering): Released all slaves [ 2861.691139][T27436] bond668 (unregistering): (slave vlan495): Releasing active interface [ 2861.762876][T27436] bond668 (unregistering): Released all slaves [ 2861.789099][T27436] bond667 (unregistering): (slave vlan494): Releasing active interface [ 2861.858955][T27436] bond667 (unregistering): Released all slaves [ 2861.881989][T27436] bond666 (unregistering): (slave vlan493): Releasing active interface [ 2861.990732][T27436] bond666 (unregistering): Released all slaves [ 2862.011844][T27436] bond665 (unregistering): (slave vlan492): Releasing active interface [ 2862.113131][T27436] bond665 (unregistering): Released all slaves [ 2862.140448][T27436] bond664 (unregistering): (slave vlan491): Releasing active interface [ 2862.253029][T27436] bond664 (unregistering): Released all slaves [ 2862.280947][T27436] bond663 (unregistering): (slave vlan490): Releasing active interface [ 2862.368885][T27436] bond663 (unregistering): Released all slaves [ 2862.391241][T27436] bond662 (unregistering): (slave vlan489): Releasing active interface [ 2862.479013][T27436] bond662 (unregistering): Released all slaves [ 2862.569085][T27436] bond661 (unregistering): (slave vlan488): Releasing active interface [ 2862.690028][T27436] bond661 (unregistering): Released all slaves [ 2862.723841][T27436] bond660 (unregistering): (slave vlan487): Releasing active interface [ 2862.873250][T27436] bond660 (unregistering): Released all slaves [ 2862.943622][T27436] bond659 (unregistering): (slave vlan486): Releasing active interface [ 2863.070052][T27436] bond659 (unregistering): Released all slaves [ 2863.103945][T27436] bond658 (unregistering): (slave vlan485): Releasing active interface [ 2863.194955][T27436] bond658 (unregistering): Released all slaves [ 2863.219663][T27436] bond657 (unregistering): (slave vlan484): Releasing active interface [ 2863.302523][T27436] bond657 (unregistering): Released all slaves [ 2863.322805][T27436] bond656 (unregistering): (slave vlan483): Releasing active interface [ 2863.393557][T27436] bond656 (unregistering): Released all slaves [ 2863.421350][T27436] bond655 (unregistering): (slave vlan482): Releasing active interface [ 2863.493875][T27436] bond655 (unregistering): Released all slaves [ 2863.519235][T27436] bond654 (unregistering): (slave vlan481): Releasing active interface [ 2863.609929][T27436] bond654 (unregistering): Released all slaves [ 2863.632872][T27436] bond653 (unregistering): (slave vlan480): Releasing active interface [ 2863.703298][T27436] bond653 (unregistering): Released all slaves [ 2863.729572][T27436] bond652 (unregistering): (slave vlan479): Releasing active interface [ 2863.812035][T27436] bond652 (unregistering): Released all slaves [ 2863.839086][T27436] bond651 (unregistering): (slave vlan478): Releasing active interface [ 2863.918161][T27436] bond651 (unregistering): Released all slaves [ 2863.941430][T27436] bond650 (unregistering): (slave vlan477): Releasing active interface [ 2864.032283][T27436] bond650 (unregistering): Released all slaves [ 2864.069713][T27436] bond649 (unregistering): (slave vlan476): Releasing active interface [ 2864.223421][T27436] bond649 (unregistering): Released all slaves [ 2864.267676][T27436] bond648 (unregistering): (slave vlan475): Releasing active interface [ 2864.342404][T27436] bond648 (unregistering): Released all slaves [ 2864.393320][ T5115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2864.412873][ T5115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2864.437687][T27436] bond647 (unregistering): (slave vlan474): Releasing active interface [ 2864.439182][ T5115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2864.461089][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2864.471765][ T5115] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2864.483640][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2864.591905][T27436] bond647 (unregistering): Released all slaves [ 2864.623590][T27436] bond646 (unregistering): (slave vlan473): Releasing active interface [ 2864.693747][T27436] bond646 (unregistering): Released all slaves [ 2864.716310][T27436] bond645 (unregistering): (slave vlan472): Releasing active interface [ 2864.792910][T27436] bond645 (unregistering): Released all slaves [ 2864.832985][T27436] bond644 (unregistering): (slave vlan471): Releasing active interface [ 2864.904760][T27436] bond644 (unregistering): Released all slaves [ 2864.929595][T27436] bond643 (unregistering): (slave vlan470): Releasing active interface [ 2865.013005][T27436] bond643 (unregistering): Released all slaves [ 2865.039756][T27436] bond642 (unregistering): (slave vlan469): Releasing active interface [ 2865.138469][T27436] bond642 (unregistering): Released all slaves [ 2865.162582][T27436] bond641 (unregistering): (slave vlan468): Releasing active interface [ 2865.243478][T27436] bond641 (unregistering): Released all slaves [ 2865.262962][T27436] bond640 (unregistering): (slave vlan467): Releasing active interface [ 2865.342097][T27436] bond640 (unregistering): Released all slaves [ 2865.367357][T27436] bond639 (unregistering): (slave vlan466): Releasing active interface [ 2865.463428][T27436] bond639 (unregistering): Released all slaves [ 2865.483310][T27436] bond638 (unregistering): (slave vlan465): Releasing active interface [ 2865.561121][T27436] bond638 (unregistering): Released all slaves [ 2865.580865][T27436] bond637 (unregistering): (slave vlan464): Releasing active interface [ 2865.666012][T27436] bond637 (unregistering): Released all slaves [ 2865.689879][T27436] bond636 (unregistering): (slave vlan463): Releasing active interface [ 2865.780739][T27436] bond636 (unregistering): Released all slaves [ 2865.809463][T27436] bond635 (unregistering): (slave vlan462): Releasing active interface [ 2865.841696][T27436] bond635 (unregistering): Released all slaves [ 2865.910614][T27436] bond634 (unregistering): (slave vlan461): Releasing active interface [ 2865.993275][T27436] bond634 (unregistering): Released all slaves [ 2866.021341][T27436] bond633 (unregistering): (slave vlan460): Releasing active interface [ 2866.109182][T27436] bond633 (unregistering): Released all slaves [ 2866.129722][T27436] bond632 (unregistering): (slave vlan459): Releasing active interface [ 2866.200605][T27436] bond632 (unregistering): Released all slaves [ 2866.222767][T27436] bond631 (unregistering): (slave vlan458): Releasing active interface [ 2866.291089][T27436] bond631 (unregistering): Released all slaves [ 2866.310744][T27436] bond630 (unregistering): (slave vlan457): Releasing active interface [ 2866.400433][T27436] bond630 (unregistering): Released all slaves [ 2866.419681][T27436] bond629 (unregistering): (slave vlan456): Releasing active interface [ 2866.509888][T27436] bond629 (unregistering): Released all slaves [ 2866.532473][T27436] bond628 (unregistering): (slave vlan455): Releasing active interface [ 2866.567927][ T3433] Bluetooth: hci7: command 0x0409 tx timeout [ 2866.630550][T27436] bond628 (unregistering): Released all slaves [ 2866.649997][T27436] bond627 (unregistering): (slave vlan454): Releasing active interface [ 2866.729340][T27436] bond627 (unregistering): Released all slaves [ 2866.751527][T27436] bond626 (unregistering): (slave vlan453): Releasing active interface [ 2866.847829][T27436] bond626 (unregistering): Released all slaves [ 2866.864137][T27436] bond625 (unregistering): (slave vlan452): Releasing active interface [ 2866.940464][T27436] bond625 (unregistering): Released all slaves [ 2866.961381][T27436] bond624 (unregistering): (slave vlan451): Releasing active interface [ 2867.049839][T27436] bond624 (unregistering): Released all slaves [ 2867.082369][T27436] bond623 (unregistering): (slave vlan450): Releasing active interface [ 2867.155865][T27436] bond623 (unregistering): Released all slaves [ 2867.179123][T27436] bond622 (unregistering): (slave vlan449): Releasing active interface [ 2867.259368][T27436] bond622 (unregistering): Released all slaves [ 2867.304127][T27436] bond621 (unregistering): (slave vlan448): Releasing active interface [ 2867.390865][T27436] bond621 (unregistering): Released all slaves [ 2867.410585][T27436] bond620 (unregistering): (slave vlan447): Releasing active interface [ 2867.504310][T27436] bond620 (unregistering): Released all slaves [ 2867.529237][T27436] bond619 (unregistering): (slave vlan446): Releasing active interface [ 2867.603471][T27436] bond619 (unregistering): Released all slaves [ 2867.628476][T27436] bond618 (unregistering): (slave vlan445): Releasing active interface [ 2867.714967][T27436] bond618 (unregistering): Released all slaves [ 2867.735684][T27436] bond617 (unregistering): (slave vlan444): Releasing active interface [ 2867.812020][T27436] bond617 (unregistering): Released all slaves [ 2867.839241][T27436] bond616 (unregistering): (slave vlan443): Releasing active interface [ 2867.912506][T27436] bond616 (unregistering): Released all slaves [ 2867.932959][T27436] bond615 (unregistering): (slave vlan442): Releasing active interface [ 2868.018688][T27436] bond615 (unregistering): Released all slaves [ 2868.042077][T27436] bond614 (unregistering): (slave vlan441): Releasing active interface [ 2868.113978][T27436] bond614 (unregistering): Released all slaves [ 2868.140657][T27436] bond613 (unregistering): (slave vlan440): Releasing active interface [ 2868.253086][T27436] bond613 (unregistering): Released all slaves [ 2868.279903][T27436] bond612 (unregistering): (slave vlan439): Releasing active interface [ 2868.371930][T27436] bond612 (unregistering): Released all slaves [ 2868.399907][T27436] bond611 (unregistering): (slave vlan438): Releasing active interface [ 2868.486190][T27436] bond611 (unregistering): Released all slaves [ 2868.509998][T27436] bond610 (unregistering): (slave vlan437): Releasing active interface [ 2868.600649][T27436] bond610 (unregistering): Released all slaves [ 2868.633048][T27436] bond609 (unregistering): (slave vlan436): Releasing active interface [ 2868.647517][ T3433] Bluetooth: hci7: command 0x041b tx timeout [ 2868.713440][T27436] bond609 (unregistering): Released all slaves [ 2868.751427][T27436] bond608 (unregistering): (slave vlan435): Releasing active interface [ 2868.822017][T27436] bond608 (unregistering): Released all slaves [ 2868.891835][T27436] bond607 (unregistering): (slave vlan434): Releasing active interface [ 2868.990925][T27436] bond607 (unregistering): Released all slaves [ 2869.028989][T27436] bond606 (unregistering): (slave vlan433): Releasing active interface [ 2869.112258][T27436] bond606 (unregistering): Released all slaves [ 2869.142644][T27436] bond605 (unregistering): (slave vlan432): Releasing active interface [ 2869.223755][T27436] bond605 (unregistering): Released all slaves [ 2869.315697][T27436] bond604 (unregistering): Released all slaves [ 2869.342514][T27436] bond603 (unregistering): (slave vlan431): Releasing active interface [ 2869.436301][T27436] bond603 (unregistering): Released all slaves [ 2869.459664][T27436] bond602 (unregistering): (slave vlan430): Releasing active interface [ 2869.552939][T27436] bond602 (unregistering): Released all slaves [ 2869.571722][T27436] bond601 (unregistering): (slave vlan429): Releasing active interface [ 2869.667468][T27436] bond601 (unregistering): Released all slaves [ 2869.690535][T27436] bond600 (unregistering): (slave vlan428): Releasing active interface [ 2869.784161][T27436] bond600 (unregistering): Released all slaves [ 2869.809035][T27436] bond599 (unregistering): (slave vlan427): Releasing active interface [ 2869.880076][T27436] bond599 (unregistering): Released all slaves [ 2869.953775][T27436] bond598 (unregistering): (slave vlan426): Releasing active interface [ 2870.053306][T27436] bond598 (unregistering): Released all slaves [ 2870.077519][T27436] bond597 (unregistering): (slave vlan425): Releasing active interface [ 2870.160400][T27436] bond597 (unregistering): Released all slaves [ 2870.233663][T27436] bond596 (unregistering): Released all slaves [ 2870.274095][T27436] bond595 (unregistering): (slave vlan424): Releasing active interface [ 2870.352585][T27436] bond595 (unregistering): Released all slaves [ 2870.442576][T27436] bond594 (unregistering): Released all slaves [ 2870.462379][T27436] bond593 (unregistering): (slave vlan423): Releasing active interface [ 2870.539512][T27436] bond593 (unregistering): Released all slaves [ 2870.612075][T27436] bond592 (unregistering): Released all slaves [ 2870.638803][T27436] bond591 (unregistering): (slave vlan422): Releasing active interface [ 2870.730889][ T5115] Bluetooth: hci7: command 0x040f tx timeout [ 2870.752128][T27436] bond591 (unregistering): Released all slaves [ 2870.829582][T27436] bond590 (unregistering): Released all slaves [ 2870.851022][T27436] bond589 (unregistering): (slave vlan421): Releasing active interface [ 2870.938202][T27436] bond589 (unregistering): Released all slaves [ 2871.018642][T27436] bond588 (unregistering): Released all slaves [ 2871.073331][T27436] bond587 (unregistering): Released all slaves [ 2871.150194][T27436] bond586 (unregistering): Released all slaves [ 2871.224178][T27436] bond585 (unregistering): Released all slaves [ 2871.303717][T27436] bond584 (unregistering): Released all slaves [ 2871.386647][T27436] bond583 (unregistering): Released all slaves [ 2871.473678][T27436] bond582 (unregistering): Released all slaves [ 2871.569657][T27436] bond581 (unregistering): Released all slaves [ 2871.643334][T27436] bond580 (unregistering): Released all slaves [ 2871.723052][T27436] bond579 (unregistering): Released all slaves [ 2871.793249][T27436] bond578 (unregistering): Released all slaves [ 2871.866535][T27436] bond577 (unregistering): Released all slaves [ 2871.960224][T27436] bond576 (unregistering): Released all slaves [ 2872.030053][T27436] bond575 (unregistering): Released all slaves [ 2872.109338][T27436] bond574 (unregistering): Released all slaves [ 2872.183260][T27436] bond573 (unregistering): Released all slaves [ 2872.245081][T27436] bond572 (unregistering): Released all slaves [ 2872.323801][T27436] bond571 (unregistering): Released all slaves [ 2872.450160][T27436] bond570 (unregistering): Released all slaves [ 2872.531601][T27436] bond569 (unregistering): Released all slaves [ 2872.613300][T27436] bond568 (unregistering): Released all slaves [ 2872.680122][T27436] bond567 (unregistering): Released all slaves [ 2872.769661][T27436] bond566 (unregistering): Released all slaves [ 2872.817433][ T3433] Bluetooth: hci7: command 0x0419 tx timeout [ 2872.851185][T27436] bond565 (unregistering): Released all slaves [ 2872.958655][T27436] bond564 (unregistering): Released all slaves [ 2873.054734][T27436] bond563 (unregistering): Released all slaves [ 2873.136196][T27436] bond562 (unregistering): Released all slaves [ 2873.220318][T27436] bond561 (unregistering): Released all slaves [ 2873.292143][T27436] bond560 (unregistering): Released all slaves [ 2873.362738][T27436] bond559 (unregistering): Released all slaves [ 2873.436080][T27436] bond558 (unregistering): Released all slaves [ 2873.511928][T27436] bond557 (unregistering): Released all slaves [ 2873.639959][T27436] bond556 (unregistering): Released all slaves [ 2873.703274][T27436] bond555 (unregistering): Released all slaves [ 2873.769718][T27436] bond554 (unregistering): Released all slaves [ 2873.852021][T27436] bond553 (unregistering): Released all slaves [ 2873.921571][T27436] bond552 (unregistering): Released all slaves [ 2874.009276][T27436] bond551 (unregistering): Released all slaves [ 2874.088930][T27436] bond550 (unregistering): Released all slaves [ 2874.112435][T27436] bond549 (unregistering): (slave vlan420): Releasing active interface [ 2874.206644][T27436] bond549 (unregistering): Released all slaves [ 2874.231686][T27436] bond548 (unregistering): (slave vlan419): Releasing active interface [ 2874.319668][T27436] bond548 (unregistering): Released all slaves [ 2874.351786][T27436] bond547 (unregistering): (slave vlan418): Releasing active interface [ 2874.423204][T27436] bond547 (unregistering): Released all slaves [ 2874.441183][T27436] bond546 (unregistering): (slave vlan417): Releasing active interface [ 2874.483714][T27436] bond546 (unregistering): Released all slaves [ 2874.550810][T27436] bond545 (unregistering): (slave vlan416): Releasing active interface [ 2874.664279][T27436] bond545 (unregistering): Released all slaves [ 2874.682281][T27436] bond544 (unregistering): (slave vlan415): Releasing active interface [ 2874.723892][T27436] bond544 (unregistering): Released all slaves [ 2874.803747][T27436] bond543 (unregistering): (slave vlan414): Releasing active interface [ 2874.890780][T27436] bond543 (unregistering): Released all slaves [ 2874.912479][T27436] bond542 (unregistering): (slave vlan413): Releasing active interface [ 2874.994280][T27436] bond542 (unregistering): Released all slaves [ 2875.019247][T27436] bond541 (unregistering): (slave vlan412): Releasing active interface [ 2875.113132][T27436] bond541 (unregistering): Released all slaves [ 2875.132440][T27436] bond540 (unregistering): (slave vlan411): Releasing active interface [ 2875.223408][T27436] bond540 (unregistering): Released all slaves [ 2875.263301][T27436] bond539 (unregistering): (slave vlan410): Releasing active interface [ 2875.363017][T27436] bond539 (unregistering): Released all slaves [ 2875.389811][T27436] bond538 (unregistering): (slave vlan409): Releasing active interface [ 2875.475559][T27436] bond538 (unregistering): Released all slaves [ 2875.498367][T27436] bond537 (unregistering): (slave vlan408): Releasing active interface [ 2875.596424][T27436] bond537 (unregistering): Released all slaves [ 2875.630841][T27436] bond536 (unregistering): (slave vlan407): Releasing active interface [ 2875.718877][T27436] bond536 (unregistering): Released all slaves [ 2875.738672][T27436] bond535 (unregistering): (slave vlan406): Releasing active interface [ 2875.801467][T27436] bond535 (unregistering): Released all slaves [ 2875.822141][T27436] bond534 (unregistering): (slave vlan405): Releasing active interface [ 2875.892771][T27436] bond534 (unregistering): Released all slaves [ 2875.952443][T27436] bond533 (unregistering): (slave vlan404): Releasing active interface [ 2876.101702][T27436] bond533 (unregistering): Released all slaves [ 2876.123376][T27436] bond532 (unregistering): (slave vlan403): Releasing active interface [ 2876.200498][T27436] bond532 (unregistering): Released all slaves [ 2876.221871][T27436] bond531 (unregistering): (slave vlan402): Releasing active interface [ 2876.309835][T27436] bond531 (unregistering): Released all slaves [ 2876.331627][T27436] bond530 (unregistering): (slave vlan401): Releasing active interface [ 2876.406548][T27436] bond530 (unregistering): Released all slaves [ 2876.432115][T27436] bond529 (unregistering): (slave vlan400): Releasing active interface [ 2876.523551][T27436] bond529 (unregistering): Released all slaves [ 2876.545230][T27436] bond528 (unregistering): (slave vlan399): Releasing active interface [ 2876.642932][T27436] bond528 (unregistering): Released all slaves [ 2876.691037][T27436] bond527 (unregistering): (slave vlan398): Releasing active interface [ 2876.771864][T27436] bond527 (unregistering): Released all slaves [ 2876.802328][T27436] bond526 (unregistering): (slave vlan397): Releasing active interface [ 2876.883336][T27436] bond526 (unregistering): Released all slaves [ 2876.902672][T27436] bond525 (unregistering): (slave vlan396): Releasing active interface [ 2877.013335][T27436] bond525 (unregistering): Released all slaves [ 2877.032501][T27436] bond524 (unregistering): (slave vlan395): Releasing active interface [ 2877.127860][T27436] bond524 (unregistering): Released all slaves [ 2877.152998][T27436] bond523 (unregistering): (slave vlan394): Releasing active interface [ 2877.226568][T27436] bond523 (unregistering): Released all slaves [ 2877.263044][T27436] bond522 (unregistering): (slave vlan393): Releasing active interface [ 2877.323787][T27436] bond522 (unregistering): Released all slaves [ 2877.349050][T27436] bond521 (unregistering): (slave vlan392): Releasing active interface [ 2877.420842][T27436] bond521 (unregistering): Released all slaves [ 2877.442095][T27436] bond520 (unregistering): (slave vlan391): Releasing active interface [ 2877.513692][T27436] bond520 (unregistering): Released all slaves [ 2877.598135][T27436] bond519 (unregistering): Released all slaves [ 2877.624365][T27436] bond518 (unregistering): (slave vlan390): Releasing active interface [ 2877.710863][T27436] bond518 (unregistering): Released all slaves [ 2877.730702][T27436] bond517 (unregistering): (slave vlan389): Releasing active interface [ 2877.811884][T27436] bond517 (unregistering): Released all slaves [ 2877.834288][T27436] bond516 (unregistering): (slave vlan388): Releasing active interface [ 2877.911983][T27436] bond516 (unregistering): Released all slaves [ 2877.938827][T27436] bond515 (unregistering): (slave vlan387): Releasing active interface [ 2878.012749][T27436] bond515 (unregistering): Released all slaves [ 2878.039444][T27436] bond514 (unregistering): (slave vlan386): Releasing active interface [ 2878.069085][T27436] bond514 (unregistering): Released all slaves [ 2878.134683][T27436] bond513 (unregistering): (slave vlan385): Releasing active interface [ 2878.221474][T27436] bond513 (unregistering): Released all slaves [ 2878.248402][T27436] bond512 (unregistering): (slave vlan384): Releasing active interface [ 2878.318803][T27436] bond512 (unregistering): Released all slaves [ 2878.349092][T27436] bond511 (unregistering): (slave vlan383): Releasing active interface [ 2878.419689][T27436] bond511 (unregistering): Released all slaves [ 2878.440709][T27436] bond510 (unregistering): (slave vlan382): Releasing active interface [ 2878.522941][T27436] bond510 (unregistering): Released all slaves [ 2878.542302][T27436] bond509 (unregistering): (slave vlan381): Releasing active interface [ 2878.653541][T27436] bond509 (unregistering): Released all slaves [ 2878.678556][T27436] bond508 (unregistering): (slave vlan380): Releasing active interface [ 2878.760911][T27436] bond508 (unregistering): Released all slaves [ 2878.780107][T27436] bond507 (unregistering): (slave vlan379): Releasing active interface [ 2878.862915][T27436] bond507 (unregistering): Released all slaves [ 2878.883676][T27436] bond506 (unregistering): (slave vlan378): Releasing active interface [ 2878.961703][T27436] bond506 (unregistering): Released all slaves [ 2878.989832][T27436] bond505 (unregistering): (slave vlan377): Releasing active interface [ 2879.054278][T27436] bond505 (unregistering): Released all slaves [ 2879.080481][T27436] bond504 (unregistering): (slave vlan376): Releasing active interface [ 2879.158059][T27436] bond504 (unregistering): Released all slaves [ 2879.178651][T27436] bond503 (unregistering): (slave vlan375): Releasing active interface [ 2879.283762][T27436] bond503 (unregistering): Released all slaves [ 2879.302029][T27436] bond502 (unregistering): (slave vlan374): Releasing active interface [ 2879.391997][T27436] bond502 (unregistering): Released all slaves [ 2879.411892][T27436] bond501 (unregistering): (slave vlan373): Releasing active interface [ 2879.491259][T27436] bond501 (unregistering): Released all slaves [ 2879.511688][T27436] bond500 (unregistering): (slave vlan372): Releasing active interface [ 2879.581565][T27436] bond500 (unregistering): Released all slaves [ 2879.692932][T27436] bond499 (unregistering): Released all slaves [ 2879.713676][T27436] bond498 (unregistering): (slave vlan371): Releasing active interface [ 2879.800291][T27436] bond498 (unregistering): Released all slaves [ 2879.821052][T27436] bond497 (unregistering): (slave vlan370): Releasing active interface [ 2879.853673][T27436] bond497 (unregistering): Released all slaves [ 2879.948596][T27436] bond496 (unregistering): (slave vlan369): Releasing active interface [ 2880.030242][T27436] bond496 (unregistering): Released all slaves [ 2880.049887][T27436] bond495 (unregistering): (slave vlan368): Releasing active interface [ 2880.149922][T27436] bond495 (unregistering): Released all slaves [ 2880.170709][T27436] bond494 (unregistering): (slave vlan367): Releasing active interface [ 2880.242713][T27436] bond494 (unregistering): Released all slaves [ 2880.269535][T27436] bond493 (unregistering): (slave vlan366): Releasing active interface [ 2880.358814][T27436] bond493 (unregistering): Released all slaves [ 2880.380958][T27436] bond492 (unregistering): (slave vlan365): Releasing active interface [ 2880.469120][T27436] bond492 (unregistering): Released all slaves [ 2880.492964][T27436] bond491 (unregistering): (slave vlan364): Releasing active interface [ 2880.601704][T27436] bond491 (unregistering): Released all slaves [ 2880.620270][T27436] bond490 (unregistering): (slave vlan363): Releasing active interface [ 2880.726368][T27436] bond490 (unregistering): Released all slaves [ 2880.758874][T27436] bond489 (unregistering): (slave vlan362): Releasing active interface [ 2880.840219][T27436] bond489 (unregistering): Released all slaves [ 2880.860431][T27436] bond488 (unregistering): (slave vlan361): Releasing active interface [ 2880.948778][T27436] bond488 (unregistering): Released all slaves [ 2880.969305][T27436] bond487 (unregistering): (slave vlan360): Releasing active interface [ 2881.034342][T27436] bond487 (unregistering): Released all slaves [ 2881.063403][T27436] bond486 (unregistering): (slave vlan359): Releasing active interface [ 2881.139109][T27436] bond486 (unregistering): Released all slaves [ 2881.161250][T27436] bond485 (unregistering): (slave vlan358): Releasing active interface [ 2881.232976][T27436] bond485 (unregistering): Released all slaves [ 2881.258959][T27436] bond484 (unregistering): (slave vlan357): Releasing active interface [ 2881.339689][T27436] bond484 (unregistering): Released all slaves [ 2881.361878][T27436] bond483 (unregistering): (slave vlan356): Releasing active interface [ 2881.433416][T27436] bond483 (unregistering): Released all slaves [ 2881.459743][T27436] bond482 (unregistering): (slave vlan355): Releasing active interface [ 2881.536403][T27436] bond482 (unregistering): Released all slaves [ 2881.558247][T27436] bond481 (unregistering): (slave vlan354): Releasing active interface [ 2881.673561][T27436] bond481 (unregistering): Released all slaves [ 2881.706739][T27436] bond480 (unregistering): (slave vlan353): Releasing active interface [ 2881.784272][T27436] bond480 (unregistering): Released all slaves [ 2881.803068][T27436] bond479 (unregistering): (slave vlan352): Releasing active interface [ 2881.899504][T27436] bond479 (unregistering): Released all slaves [ 2881.919428][T27436] bond478 (unregistering): (slave vlan351): Releasing active interface [ 2882.000870][T27436] bond478 (unregistering): Released all slaves [ 2882.024043][T27436] bond477 (unregistering): (slave vlan350): Releasing active interface [ 2882.102404][T27436] bond477 (unregistering): Released all slaves [ 2882.128876][T27436] bond476 (unregistering): (slave vlan349): Releasing active interface [ 2882.230302][T27436] bond476 (unregistering): Released all slaves [ 2882.272866][T27436] bond475 (unregistering): (slave vlan348): Releasing active interface [ 2882.350903][T27436] bond475 (unregistering): Released all slaves [ 2882.369572][T27436] bond474 (unregistering): (slave vlan347): Releasing active interface [ 2882.469718][T27436] bond474 (unregistering): Released all slaves [ 2882.491806][T27436] bond473 (unregistering): (slave vlan346): Releasing active interface [ 2882.561385][T27436] bond473 (unregistering): Released all slaves [ 2882.584134][T27436] bond472 (unregistering): (slave vlan345): Releasing active interface [ 2882.670186][T27436] bond472 (unregistering): Released all slaves [ 2882.693588][T27436] bond471 (unregistering): (slave vlan344): Releasing active interface [ 2882.775127][T27436] bond471 (unregistering): Released all slaves [ 2882.798450][T27436] bond470 (unregistering): (slave vlan343): Releasing active interface [ 2882.880273][T27436] bond470 (unregistering): Released all slaves [ 2882.922064][T27436] bond469 (unregistering): (slave vlan342): Releasing active interface [ 2883.000511][T27436] bond469 (unregistering): Released all slaves [ 2883.021399][T27436] bond468 (unregistering): (slave vlan341): Releasing active interface [ 2883.123460][T27436] bond468 (unregistering): Released all slaves [ 2883.142894][T27436] bond467 (unregistering): (slave vlan340): Releasing active interface [ 2883.212529][T27436] bond467 (unregistering): Released all slaves [ 2883.242383][T27436] bond466 (unregistering): (slave vlan339): Releasing active interface [ 2883.311561][T27436] bond466 (unregistering): Released all slaves [ 2883.338304][T27436] bond465 (unregistering): (slave vlan338): Releasing active interface [ 2883.438020][T27436] bond465 (unregistering): Released all slaves [ 2883.458994][T27436] bond464 (unregistering): (slave vlan337): Releasing active interface [ 2883.569270][T27436] bond464 (unregistering): Released all slaves [ 2883.593241][T27436] bond463 (unregistering): (slave vlan336): Releasing active interface [ 2883.682919][T27436] bond463 (unregistering): Released all slaves [ 2883.708986][T27436] bond462 (unregistering): (slave vlan335): Releasing active interface [ 2883.784116][T27436] bond462 (unregistering): Released all slaves [ 2883.809363][T27436] bond461 (unregistering): (slave vlan334): Releasing active interface [ 2883.890887][T27436] bond461 (unregistering): Released all slaves [ 2883.913689][T27436] bond460 (unregistering): (slave vlan333): Releasing active interface [ 2884.002919][T27436] bond460 (unregistering): Released all slaves [ 2884.028501][T27436] bond459 (unregistering): (slave vlan332): Releasing active interface [ 2884.110237][T27436] bond459 (unregistering): Released all slaves [ 2884.131472][T27436] bond458 (unregistering): (slave vlan331): Releasing active interface [ 2884.215343][T27436] bond458 (unregistering): Released all slaves [ 2884.238278][T27436] bond457 (unregistering): (slave vlan330): Releasing active interface [ 2884.303190][T27436] bond457 (unregistering): Released all slaves [ 2884.344312][T27436] bond456 (unregistering): (slave vlan329): Releasing active interface [ 2884.413237][T27436] bond456 (unregistering): Released all slaves [ 2884.434043][T27436] bond455 (unregistering): (slave vlan328): Releasing active interface [ 2884.503030][T27436] bond455 (unregistering): Released all slaves [ 2884.542256][T27436] bond454 (unregistering): (slave vlan327): Releasing active interface [ 2884.613465][T27436] bond454 (unregistering): Released all slaves [ 2884.642386][T27436] bond453 (unregistering): (slave vlan326): Releasing active interface [ 2884.711839][T27436] bond453 (unregistering): Released all slaves [ 2884.753455][T27436] bond452 (unregistering): (slave vlan325): Releasing active interface [ 2884.838293][T27436] bond452 (unregistering): Released all slaves [ 2884.861334][T27436] bond451 (unregistering): (slave vlan324): Releasing active interface [ 2884.930481][T27436] bond451 (unregistering): Released all slaves [ 2884.952327][T27436] bond450 (unregistering): (slave vlan323): Releasing active interface [ 2885.070530][T27436] bond450 (unregistering): Released all slaves [ 2885.089682][T27436] bond449 (unregistering): (slave vlan322): Releasing active interface [ 2885.166544][T27436] bond449 (unregistering): Released all slaves [ 2885.188211][T27436] bond448 (unregistering): (slave vlan321): Releasing active interface [ 2885.289288][T27436] bond448 (unregistering): Released all slaves [ 2885.311961][T27436] bond447 (unregistering): (slave vlan320): Releasing active interface [ 2885.371136][ T28] INFO: task dhcpcd:4646 blocked for more than 143 seconds. [ 2885.382060][ T28] Not tainted 6.2.0-rc4-syzkaller #0 [ 2885.391312][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2885.404802][ T28] task:dhcpcd state:D stack:22928 pid:4646 ppid:4645 flags:0x00004000 [ 2885.414077][ T28] Call Trace: [ 2885.423552][ T28] [ 2885.430279][ T28] __schedule+0xb8a/0x5450 [ 2885.440752][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2885.449761][ T28] ? arch_stack_walk+0x97/0xf0 [ 2885.458961][ T28] ? static_obj+0x2/0xc0 [ 2885.463272][ T28] ? io_schedule_timeout+0x150/0x150 [ 2885.471992][ T28] ? __mutex_lock+0xa43/0x1360 [ 2885.480080][ T28] schedule+0xde/0x1b0 [ 2885.484214][ T28] schedule_preempt_disabled+0x13/0x20 [ 2885.492835][ T28] __mutex_lock+0xa48/0x1360 [ 2885.501030][ T28] ? netlink_dump+0xbe/0xc50 [ 2885.510162][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2885.519450][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 2885.524445][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2885.530506][ T28] netlink_dump+0xbe/0xc50 [ 2885.541578][ T28] ? netlink_deliver_tap+0xc50/0xc50 [ 2885.553593][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 2885.562102][ T28] ? kfree_skbmem+0xef/0x1b0 [ 2885.571686][ T28] netlink_recvmsg+0xbe1/0xe50 [ 2885.580328][ T28] ? netlink_dump+0xc50/0xc50 [ 2885.588268][ T28] ? aa_af_perm+0x240/0x240 [ 2885.592830][ T28] ? _copy_from_user+0xfd/0x170 [ 2885.601222][ T28] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2885.610862][ T28] ? security_socket_recvmsg+0x93/0xc0 [ 2885.620142][ T28] ? netlink_dump+0xc50/0xc50 [ 2885.628716][ T28] ____sys_recvmsg+0x2c7/0x610 [ 2885.633543][ T28] ? kernel_recvmsg+0x160/0x160 [ 2885.642356][ T28] ? copy_msghdr_from_user+0xfc/0x150 [ 2885.651694][ T28] ? __copy_msghdr+0x4b0/0x4b0 [ 2885.662507][ T28] ___sys_recvmsg+0xf2/0x180 [ 2885.670982][ T28] ? copy_msghdr_from_user+0x150/0x150 [ 2885.680502][ T28] ? __sys_sendto+0x263/0x340 [ 2885.689001][ T28] ? __fget_light+0x20a/0x270 [ 2885.693747][ T28] __sys_recvmsg+0xf4/0x1c0 [ 2885.701945][ T28] ? __sys_recvmsg_sock+0x50/0x50 [ 2885.712007][ T28] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2885.721627][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2885.731573][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 2885.740755][ T28] do_syscall_64+0x39/0xb0 [ 2885.748848][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2885.758258][ T28] RIP: 0033:0x7fa53e358003 [ 2885.762753][ T28] RSP: 002b:00007ffc00ea9b48 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2885.781411][ T28] RAX: ffffffffffffffda RBX: 00007ffc00eaac80 RCX: 00007fa53e358003 [ 2885.794088][ T28] RDX: 0000000000000000 RSI: 00007ffc00eaaba0 RDI: 000000000000000f [ 2885.810351][ T28] RBP: 00007ffc00eaac10 R08: 0000000000000000 R09: 00007fa53e418a60 [ 2885.821659][ T28] R10: 0000000000800000 R11: 0000000000000246 R12: 00007ffc00eaaba0 [ 2885.833377][ T28] R13: 00007ffc00eaab84 R14: 00007ffc00eaab90 R15: 0000000000000ddc [ 2885.848603][ T28] [ 2885.852435][ T28] INFO: task kworker/1:1:27835 blocked for more than 143 seconds. [ 2885.863156][ T28] Not tainted 6.2.0-rc4-syzkaller #0 [ 2885.872477][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2885.891183][ T28] task:kworker/1:1 state:D stack:26224 pid:27835 ppid:2 flags:0x00004000 [ 2885.904970][ T28] Workqueue: ipv6_addrconf addrconf_verify_work [ 2885.911866][ T28] Call Trace: [ 2885.923199][ T28] [ 2885.933296][ T28] __schedule+0xb8a/0x5450 [ 2885.941445][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 2885.950050][ T28] ? io_schedule_timeout+0x150/0x150 [ 2885.959128][ T28] ? mark_held_locks+0x9f/0xe0 [ 2885.963958][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2885.972610][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 2885.981948][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 2885.990646][ T28] schedule+0xde/0x1b0 [ 2886.000497][ T28] schedule_preempt_disabled+0x13/0x20 [ 2886.023368][ T28] __mutex_lock+0xa48/0x1360 [ 2886.031977][ T28] ? addrconf_verify_work+0x12/0x30 [ 2886.043938][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2886.053074][ T28] ? lock_release+0x810/0x810 [ 2886.061340][ T28] addrconf_verify_work+0x12/0x30 [ 2886.069510][ T28] process_one_work+0x9bf/0x1710 [ 2886.077925][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2886.083377][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2886.092768][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 2886.101168][ T28] worker_thread+0x669/0x1090 [ 2886.111634][ T28] ? __kthread_parkme+0x163/0x220 [ 2886.121322][ T28] ? process_one_work+0x1710/0x1710 [ 2886.131024][ T28] kthread+0x2e8/0x3a0 [ 2886.138338][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2886.144040][ T28] ret_from_fork+0x1f/0x30 [ 2886.151642][ T28] [ 2886.158605][ T28] INFO: task kworker/1:3:11010 blocked for more than 144 seconds. [ 2886.160852][T27436] bond447 (unregistering): Released all slaves [ 2886.170069][ T28] Not tainted 6.2.0-rc4-syzkaller #0 [ 2886.182137][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2886.204789][ T28] task:kworker/1:3 state:D stack:26688 pid:11010 ppid:2 flags:0x00004000 [ 2886.214077][ T28] Workqueue: events switchdev_deferred_process_work [ 2886.234321][ T28] Call Trace: [ 2886.241827][ T28] [ 2886.248497][ T28] __schedule+0xb8a/0x5450 [ 2886.253007][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 2886.261788][ T28] ? io_schedule_timeout+0x150/0x150 [ 2886.270591][ T28] ? mark_held_locks+0x9f/0xe0 [ 2886.278869][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2886.283873][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 2886.292205][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 2886.300523][ T28] schedule+0xde/0x1b0 [ 2886.307684][ T28] schedule_preempt_disabled+0x13/0x20 [ 2886.313206][ T28] __mutex_lock+0xa48/0x1360 [ 2886.322243][ T28] ? switchdev_deferred_process_work+0xe/0x20 [ 2886.332068][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2886.343407][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 2886.352399][ T28] switchdev_deferred_process_work+0xe/0x20 [ 2886.361632][ T28] process_one_work+0x9bf/0x1710 [ 2886.370104][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2886.378948][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2886.383929][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 2886.392591][ T28] worker_thread+0x669/0x1090 [ 2886.400789][ T28] ? __kthread_parkme+0x163/0x220 [ 2886.408893][ T28] ? process_one_work+0x1710/0x1710 [ 2886.414150][ T28] kthread+0x2e8/0x3a0 [ 2886.421799][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2886.432063][ T28] ret_from_fork+0x1f/0x30 [ 2886.440142][ T28] [ 2886.444796][T27436] bond446 (unregistering): (slave vlan319): Releasing active interface [ 2886.453648][ T28] INFO: task kworker/1:5:11195 blocked for more than 144 seconds. [ 2886.478458][ T28] Not tainted 6.2.0-rc4-syzkaller #0 [ 2886.484318][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2886.501906][ T28] task:kworker/1:5 state:D stack:26688 pid:11195 ppid:2 flags:0x00004000 [ 2886.514446][ T28] Workqueue: events linkwatch_event [ 2886.519724][ T28] Call Trace: [ 2886.523020][ T28] [ 2886.533079][ T28] __schedule+0xb8a/0x5450 [ 2886.541123][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 2886.549575][ T28] ? io_schedule_timeout+0x150/0x150 [ 2886.558190][ T28] ? mark_held_locks+0x9f/0xe0 [ 2886.563008][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2886.571200][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 2886.582463][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 2886.592431][ T28] schedule+0xde/0x1b0 [ 2886.599868][ T28] schedule_preempt_disabled+0x13/0x20 [ 2886.608807][ T28] __mutex_lock+0xa48/0x1360 [ 2886.613452][ T28] ? linkwatch_event+0xf/0x70 [ 2886.621452][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2886.631456][ T28] ? lock_release+0x810/0x810 [ 2886.639644][ T28] linkwatch_event+0xf/0x70 [ 2886.644204][ T28] process_one_work+0x9bf/0x1710 [ 2886.658166][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2886.663752][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2886.671871][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 2886.680639][ T28] worker_thread+0x669/0x1090 [ 2886.691330][ T28] ? __kthread_parkme+0x163/0x220 [ 2886.700944][ T28] ? process_one_work+0x1710/0x1710 [ 2886.709376][ T28] kthread+0x2e8/0x3a0 [ 2886.713496][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2886.722448][ T28] ret_from_fork+0x1f/0x30 [ 2886.731435][ T28] [ 2886.745961][ T28] INFO: task syz-executor.4:3429 blocked for more than 144 seconds. [ 2886.754000][ T28] Not tainted 6.2.0-rc4-syzkaller #0 [ 2886.770137][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2886.781951][ T28] task:syz-executor.4 state:D stack:23936 pid:3429 ppid:1 flags:0x00004004 [ 2886.794307][ T28] Call Trace: [ 2886.803418][ T28] [ 2886.810668][ T28] __schedule+0xb8a/0x5450 [ 2886.818614][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2886.828420][ T28] ? static_obj+0x2/0xc0 [ 2886.833378][ T28] ? io_schedule_timeout+0x150/0x150 [ 2886.842563][ T28] ? __mutex_lock+0xa43/0x1360 [ 2886.850879][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 2886.859477][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2886.867519][ T28] schedule+0xde/0x1b0 [ 2886.871826][ T28] schedule_preempt_disabled+0x13/0x20 [ 2886.881135][ T28] __mutex_lock+0xa48/0x1360 [ 2886.889122][ T28] ? rtnetlink_rcv_msg+0x3e9/0xca0 [ 2886.894306][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 2886.903676][ T28] ? rtnetlink_rcv_msg+0x3b3/0xca0 [ 2886.914813][ T28] rtnetlink_rcv_msg+0x3e9/0xca0 [ 2886.919834][ T28] ? rtnl_getlink+0xae0/0xae0 [ 2886.932040][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2886.942139][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2886.951640][ T28] ? kasan_save_stack+0x35/0x40 [ 2886.960005][ T28] ? kasan_save_stack+0x22/0x40 [ 2886.972188][ T28] netlink_rcv_skb+0x165/0x440 [ 2886.980313][ T28] ? rtnl_getlink+0xae0/0xae0 [ 2886.988324][ T28] ? netlink_ack+0x1370/0x1370 [ 2886.993174][ T28] ? netlink_deliver_tap+0x1b1/0xc50 [ 2887.001879][ T28] netlink_unicast+0x547/0x7f0 [ 2887.010228][ T28] ? netlink_attachskb+0x890/0x890 [ 2887.020416][ T28] ? __virt_addr_valid+0x61/0x2e0 [ 2887.029656][ T28] ? __phys_addr_symbol+0x30/0x70 [ 2887.039535][ T28] ? __check_object_size+0x2e2/0x5a0 [ 2887.060640][ T28] netlink_sendmsg+0x91b/0xe10 [ 2887.068750][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 2887.073783][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2887.082776][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 2887.091369][ T28] sock_sendmsg+0xd3/0x120 [ 2887.099481][ T28] __sys_sendto+0x23a/0x340 [ 2887.104113][ T28] ? __ia32_sys_getpeername+0xb0/0xb0 [ 2887.120559][ T28] ? kmem_cache_free+0xee/0x5c0 [ 2887.132235][ T28] ? blkcg_maybe_throttle_current+0x31f/0xc80 [ 2887.143780][ T28] ? task_work_run+0x1fe/0x270 [ 2887.153150][ T28] ? __blkcg_punt_bio_submit+0x1d0/0x1d0 [ 2887.163560][ T28] __x64_sys_sendto+0xe1/0x1b0 [ 2887.171967][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2887.181334][ T28] do_syscall_64+0x39/0xb0 [ 2887.189884][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2887.199420][ T28] RIP: 0033:0x7fdcb223e0fc [ 2887.203903][ T28] RSP: 002b:00007ffed1e30eb0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2887.218850][ T28] RAX: ffffffffffffffda RBX: 00007fdcb2ed4620 RCX: 00007fdcb223e0fc [ 2887.230787][ T28] RDX: 0000000000000028 RSI: 00007fdcb2ed4670 RDI: 0000000000000003 [ 2887.248976][ T28] RBP: 0000000000000000 R08: 00007ffed1e30f04 R09: 000000000000000c [ 2887.261737][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2887.273641][ T28] R13: 00007fdcb2ed4670 R14: 0000000000000003 R15: 0000000000000000 [ 2887.290443][ T28] [ 2887.293547][ T28] [ 2887.293547][ T28] Showing all locks held in the system: [ 2887.305274][ T28] 1 lock held by rcu_tasks_kthre/12: [ 2887.313661][ T28] #0: ffffffff8c790fb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 2887.334031][ T28] 1 lock held by rcu_tasks_trace/13: [ 2887.342645][ T28] #0: ffffffff8c790cb0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc70 [ 2887.363688][ T28] 1 lock held by khungtaskd/28: [ 2887.372700][ T28] #0: ffffffff8c791b00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x57/0x264 [ 2887.389368][ T28] 1 lock held by dhcpcd/4646: [ 2887.394116][ T28] #0: ffffffff8e0bdde8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0xbe/0xc50 [ 2887.410134][ T28] 2 locks held by getty/4754: [ 2887.418495][ T28] #0: ffff8880278aa098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 2887.431845][ T28] #1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 2887.449055][ T28] 5 locks held by kworker/u4:14/27436: [ 2887.457810][ T28] #0: ffff8880125df938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 2887.473979][ T28] #1: ffffc90008dd7da8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 2887.491637][ T28] #2: ffffffff8e0aa150 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9f/0xb10 [ 2887.504077][ T28] #3: ffffffff8e0bdde8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x92/0x590 [ 2887.520418][ T28] #4: ffffffff8c79c7b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x5df/0x780 [ 2887.538633][ T28] 2 locks held by kworker/0:4/444: [ 2887.543792][ T28] #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 2887.561922][ T28] #1: ffffc900038efda8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 2887.583226][ T28] 3 locks held by kworker/1:1/27835: [ 2887.591675][ T28] #0: ffff88814a36c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 2887.610737][ T28] #1: ffffc9001b00fda8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 2887.630118][ T28] #2: ffffffff8e0bdde8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 2887.643519][ T28] 3 locks held by kworker/0:5/9866: [ 2887.653356][ T28] #0: ffff88814a36c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 2887.671088][ T28] #1: ffffc9001ef0fda8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 2887.692896][ T28] #2: ffffffff8e0bdde8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 2887.708971][ T28] 3 locks held by kworker/1:3/11010: [ 2887.714291][ T28] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 2887.732126][ T28] #1: ffffc9001dcc7da8 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 2887.750752][ T28] #2: ffffffff8e0bdde8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 2887.768716][ T28] 3 locks held by kworker/1:5/11195: [ 2887.774061][ T28] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1710 [ 2887.791203][ T28] #1: ffffc9001f86fda8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1710 [ 2887.811379][ T28] #2: ffffffff8e0bdde8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xf/0x70 [ 2887.823938][ T28] 1 lock held by syz-executor.4/3429: [ 2887.833130][ T28] #0: ffffffff8e0bdde8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e9/0xca0 [ 2887.849702][ T28] 1 lock held by syz-executor.4/3466: [ 2887.859608][ T28] #0: ffffffff8e0bdde8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e9/0xca0 [ 2887.872812][ T28] 1 lock held by syz-executor.4/3470: [ 2887.881545][ T28] #0: ffffffff8e0bdde8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e9/0xca0 [ 2887.900428][T27436] bond446 (unregistering): Released all slaves [ 2887.904154][ T28] [ 2887.917810][ T28] ============================================= [ 2887.917810][ T28] [ 2887.927189][T27436] bond445 (unregistering): (slave vlan318): Releasing active interface [ 2887.951174][ T28] NMI backtrace for cpu 1 [ 2887.955552][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc4-syzkaller #0 [ 2887.963650][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2887.973723][ T28] Call Trace: [ 2887.976996][ T28] [ 2887.979934][ T28] dump_stack_lvl+0xd1/0x138 [ 2887.984525][ T28] nmi_cpu_backtrace.cold+0x24/0x18a [ 2887.989827][ T28] nmi_trigger_cpumask_backtrace+0x333/0x3c0 [ 2887.995800][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 2888.000993][ T28] watchdog+0xc75/0xfc0 [ 2888.005165][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 2888.011196][ T28] kthread+0x2e8/0x3a0 [ 2888.015306][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2888.020986][ T28] ret_from_fork+0x1f/0x30 [ 2888.025467][ T28] [ 2888.057788][ T28] Sending NMI from CPU 1 to CPUs 0: [ 2888.063635][ C0] NMI backtrace for cpu 0 [ 2888.063646][ C0] CPU: 0 PID: 15660 Comm: kworker/u4:10 Not tainted 6.2.0-rc4-syzkaller #0 [ 2888.063666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2888.063678][ C0] Workqueue: bat_events batadv_nc_worker [ 2888.063788][ C0] RIP: 0010:__rcu_read_lock+0x40/0xf0 [ 2888.063812][ C0] Code: ac 03 00 48 8d bb 3c 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 9e 00 00 00 <65> 48 8b 2c 25 00 ac 03 00 48 8d bd 3c 04 00 00 8b 9b 3c 04 00 00 [ 2888.063830][ C0] RSP: 0018:ffffc90006be7c70 EFLAGS: 00000246 [ 2888.063844][ C0] RAX: 0000000000000007 RBX: ffff888026018000 RCX: ffff888028231440 [ 2888.063857][ C0] RDX: 0000000000000000 RSI: ffffffff8994fa29 RDI: ffff88802601843c [ 2888.063869][ C0] RBP: 0000000000000001 R08: 0000000000000004 R09: 00000000000003ca [ 2888.063880][ C0] R10: 0000000000000400 R11: 1ffffffff18f3821 R12: 0000000000000002 [ 2888.063892][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 00000000000003ca [ 2888.063905][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 2888.063922][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2888.063934][ C0] CR2: 0000562cffc1b520 CR3: 00000000208f1000 CR4: 00000000003506f0 [ 2888.063946][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2888.063956][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2888.063967][ C0] Call Trace: [ 2888.063972][ C0] [ 2888.063980][ C0] batadv_nc_worker+0x10c/0xfa0 [ 2888.064014][ C0] process_one_work+0x9bf/0x1710 [ 2888.064040][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2888.064064][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 2888.064083][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 2888.064115][ C0] worker_thread+0x669/0x1090 [ 2888.064140][ C0] ? __kthread_parkme+0x163/0x220 [ 2888.064158][ C0] ? process_one_work+0x1710/0x1710 [ 2888.064180][ C0] kthread+0x2e8/0x3a0 [ 2888.064197][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 2888.064217][ C0] ret_from_fork+0x1f/0x30 [ 2888.064248][ C0] [ 2888.068456][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2888.068470][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc4-syzkaller #0 [ 2888.068493][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 2888.068505][ T28] Call Trace: [ 2888.068512][ T28] [ 2888.068521][ T28] dump_stack_lvl+0xd1/0x138 [ 2888.068555][ T28] panic+0x2cc/0x626 [ 2888.068591][ T28] ? panic_print_sys_info.part.0+0x110/0x110 [ 2888.068626][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 2888.068663][ T28] ? watchdog.cold+0x130/0x158 [ 2888.068695][ T28] watchdog.cold+0x141/0x158 [ 2888.068722][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 2888.332774][ T28] kthread+0x2e8/0x3a0 [ 2888.336854][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2888.342500][ T28] ret_from_fork+0x1f/0x30 [ 2888.346943][ T28] [ 2888.350037][ T28] Kernel Offset: disabled [ 2888.354384][ T28] Rebooting in 86400 seconds..