BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10) 17:53:50 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)={0x0, 0x0, 0x20}, 0x10) [ 3093.153244][T24325] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3093.245068][T24329] device bridge_slave_1 left promiscuous mode [ 3093.283133][T24329] bridge2360: port 1(bridge_slave_1) entered disabled state [ 3093.411878][T24330] device bridge_slave_1 left promiscuous mode [ 3093.425053][T24330] bridge789: port 1(bridge_slave_1) entered disabled state [ 3093.494573][T24330] bridge790: port 1(bridge_slave_1) entered blocking state [ 3093.604625][T24330] bridge790: port 1(bridge_slave_1) entered disabled state [ 3093.635176][T24330] device bridge_slave_1 entered promiscuous mode [ 3093.789842][T24328] bond0: (slave bridge2361): Enslaving as an active interface with an up link [ 3093.832709][T24331] bridge790: port 1(bridge_slave_1) entered blocking state [ 3093.840069][T24331] bridge790: port 1(bridge_slave_1) entered forwarding state [ 3093.904161][T24331] bond0: (slave bridge790): Enslaving as an active interface with an up link [ 3093.955239][T24343] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:53:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth0_to_team\x00', @remote}) 17:53:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x4, 0x2}, 0x48) 17:53:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5421, 0x0) 17:53:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:53:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffffc30008000a000f"], 0x28}}, 0x0) [ 3094.306493][T24362] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3094.333479][T24349] device bridge_slave_1 left promiscuous mode [ 3094.340688][T24349] bridge2230: port 1(bridge_slave_1) entered disabled state [ 3094.467456][T24349] bridge2231: port 1(bridge_slave_1) entered blocking state [ 3094.474936][T24349] bridge2231: port 1(bridge_slave_1) entered disabled state [ 3094.483534][T24349] device bridge_slave_1 entered promiscuous mode [ 3094.704316][T24350] bridge2231: port 1(bridge_slave_1) entered blocking state [ 3094.711777][T24350] bridge2231: port 1(bridge_slave_1) entered forwarding state [ 3094.839412][T24350] bond0: (slave bridge2231): Enslaving as an active interface with an up link 17:53:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000090008000a000f"], 0x28}}, 0x0) 17:53:52 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000200)={0x23, 0x0, 0x1}, 0x10) 17:53:52 executing program 2: r0 = socket(0x1, 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 17:53:52 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) [ 3095.123936][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2123: link becomes ready 17:53:52 executing program 2: r0 = socket(0x1e, 0x5, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x240040d1) 17:53:52 executing program 2: r0 = socket(0x1e, 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 17:53:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1005}, 0x14}}, 0x0) [ 3095.569522][T24378] device bridge_slave_1 left promiscuous mode [ 3095.593722][T24378] bridge2231: port 1(bridge_slave_1) entered disabled state [ 3095.743151][T24359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x10f, 0x0, 0x0, 0x0) 17:53:53 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/225, 0x1a, 0xe1, 0x1}, 0x20) 17:53:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 3096.024224][T24360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3096.073229][T24362] device bridge_slave_1 left promiscuous mode [ 3096.080107][T24362] bridge790: port 1(bridge_slave_1) entered disabled state [ 3096.193842][T24362] bridge791: port 1(bridge_slave_1) entered blocking state [ 3096.210722][T24362] bridge791: port 1(bridge_slave_1) entered disabled state [ 3096.224143][T24362] device bridge_slave_1 entered promiscuous mode [ 3096.271610][T24366] bridge2362: port 1(bridge_slave_1) entered blocking state [ 3096.285272][T24366] bridge2362: port 1(bridge_slave_1) entered disabled state [ 3096.315631][T24366] device bridge_slave_1 entered promiscuous mode [ 3096.483633][T24365] bridge791: port 1(bridge_slave_1) entered blocking state [ 3096.490987][T24365] bridge791: port 1(bridge_slave_1) entered forwarding state [ 3096.574737][T24365] bond0: (slave bridge791): Enslaving as an active interface with an up link [ 3096.635454][T24367] bridge2362: port 1(bridge_slave_1) entered blocking state [ 3096.642916][T24367] bridge2362: port 1(bridge_slave_1) entered forwarding state 17:53:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3096.777172][T24367] bond0: (slave bridge2362): Enslaving as an active interface with an up link [ 3096.855895][T24393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:53:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffffe40008000a000f"], 0x28}}, 0x0) [ 3096.955482][T24379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3097.105819][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2197: link becomes ready [ 3097.195214][T24394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3097.205042][T24393] device bridge_slave_1 left promiscuous mode 17:53:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000000a0008000a000f"], 0x28}}, 0x0) 17:53:54 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 17:53:54 executing program 2: r0 = socket(0x1e, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xfffffffffffffd82}}, 0x0) 17:53:54 executing program 1: r0 = socket(0x1e, 0x4, 0x0) bind$phonet(r0, 0x0, 0x0) [ 3097.262481][T24393] bridge791: port 1(bridge_slave_1) entered disabled state [ 3097.515494][T24393] bridge792: port 1(bridge_slave_1) entered blocking state 17:53:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001e00)={&(0x7f0000001d40), 0xc, &(0x7f0000001dc0)={0x0}}, 0x0) 17:53:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5421, &(0x7f00000000c0)) 17:53:55 executing program 1: r0 = socket(0x1e, 0x4, 0x0) bind$phonet(r0, &(0x7f00000001c0), 0x10) [ 3097.644320][T24393] bridge792: port 1(bridge_slave_1) entered disabled state [ 3097.675649][T24393] device bridge_slave_1 entered promiscuous mode 17:53:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002080)={'wlan0\x00'}) 17:53:55 executing program 2: r0 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @remote}}}}) 17:53:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1005}, 0x14}}, 0x0) [ 3097.773577][T24396] bridge792: port 1(bridge_slave_1) entered blocking state [ 3097.781439][T24396] bridge792: port 1(bridge_slave_1) entered forwarding state [ 3098.093866][T24396] bond0: (slave bridge792): Enslaving as an active interface with an up link [ 3098.123159][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:53:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3098.237682][T24429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3098.556726][T24431] bond0: (slave bridge793): Enslaving as an active interface with an up link [ 3098.565773][T24406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3098.723295][T24407] device bridge_slave_1 left promiscuous mode [ 3098.824842][T24407] bridge2362: port 1(bridge_slave_1) entered disabled state [ 3098.895294][T24407] bridge2363: port 1(bridge_slave_1) entered blocking state [ 3098.923068][T24407] bridge2363: port 1(bridge_slave_1) entered disabled state [ 3098.950696][T24407] device bridge_slave_1 entered promiscuous mode [ 3099.103796][T24412] bridge2363: port 1(bridge_slave_1) entered blocking state [ 3099.111273][T24412] bridge2363: port 1(bridge_slave_1) entered forwarding state [ 3099.235696][T24412] bond0: (slave bridge2363): Enslaving as an active interface with an up link [ 3099.304626][T24429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3099.337700][T24430] device bridge_slave_1 left promiscuous mode [ 3099.343987][T24430] bridge792: port 1(bridge_slave_1) entered disabled state 17:53:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffff00008000a000f"], 0x28}}, 0x0) 17:53:57 executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xf2, &(0x7f00000005c0)=""/242, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) 17:53:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x0) 17:53:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000000c0008000a000f"], 0x28}}, 0x0) 17:53:57 executing program 2: r0 = socket(0x1e, 0x4, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x140}}, 0x4044844) 17:53:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x6}]}}, &(0x7f00000000c0)=""/225, 0x26, 0xe1, 0x1}, 0x20) 17:53:57 executing program 2: socket(0x29, 0x5, 0xfffffe01) 17:53:57 executing program 2: r0 = socket(0x1e, 0x5, 0x0) accept4$phonet_pipe(r0, 0x0, 0x0, 0x40800) [ 3099.858916][T24430] bridge793: port 1(bridge_slave_1) entered blocking state [ 3099.866795][T24430] bridge793: port 1(bridge_slave_1) entered disabled state [ 3099.875289][T24430] device bridge_slave_1 entered promiscuous mode 17:53:57 executing program 0: r0 = socket(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)) [ 3099.903311][T24430] bridge793: port 1(bridge_slave_1) entered blocking state [ 3099.910661][T24430] bridge793: port 1(bridge_slave_1) entered forwarding state 17:53:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:53:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f00000000c0)=""/225, 0x26, 0xe1, 0x1}, 0x20) [ 3100.094350][T26046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2198: link becomes ready 17:53:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'macvlan1\x00', @link_local}) [ 3100.295882][T24443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3100.454023][T24445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3100.637705][T24453] bridge2232: port 1(bridge_slave_1) entered blocking state [ 3100.645108][T24453] bridge2232: port 1(bridge_slave_1) entered disabled state [ 3100.654720][T24453] device bridge_slave_1 entered promiscuous mode [ 3100.670112][T24452] device bridge_slave_1 left promiscuous mode [ 3100.676889][T24452] bridge2363: port 1(bridge_slave_1) entered disabled state [ 3100.812631][T24452] bridge2364: port 1(bridge_slave_1) entered blocking state [ 3100.820345][T24452] bridge2364: port 1(bridge_slave_1) entered disabled state [ 3100.831409][T24452] device bridge_slave_1 entered promiscuous mode [ 3100.864859][T24456] bridge2232: port 1(bridge_slave_1) entered blocking state [ 3100.872321][T24456] bridge2232: port 1(bridge_slave_1) entered forwarding state [ 3101.019844][T24456] bond0: (slave bridge2232): Enslaving as an active interface with an up link [ 3101.062947][T24457] bridge2364: port 1(bridge_slave_1) entered blocking state [ 3101.070385][T24457] bridge2364: port 1(bridge_slave_1) entered forwarding state [ 3101.215790][T24457] bond0: (slave bridge2364): Enslaving as an active interface with an up link [ 3101.265694][T24464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:53:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffff50008000a000f"], 0x28}}, 0x0) 17:53:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "a8"}]}}, &(0x7f00000000c0)=""/225, 0x2a, 0xe1, 0x1}, 0x20) 17:53:58 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:53:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000000e0008000a000f"], 0x28}}, 0x0) 17:53:58 executing program 0: r0 = socket(0x1e, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 17:53:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan3\x00'}) 17:53:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f00000000c0)) 17:53:58 executing program 1: syz_genetlink_get_family_id$ethtool(0xfffffffffffffffe, 0xffffffffffffffff) [ 3101.421893][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3101.469327][T24466] device bridge_slave_1 left promiscuous mode [ 3101.580416][T24466] bridge793: port 1(bridge_slave_1) entered disabled state 17:53:59 executing program 2: sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x0) [ 3101.751677][T24466] bridge794: port 1(bridge_slave_1) entered blocking state [ 3101.777092][T24466] bridge794: port 1(bridge_slave_1) entered disabled state [ 3101.796420][T24466] device bridge_slave_1 entered promiscuous mode [ 3101.813102][T24467] bridge794: port 1(bridge_slave_1) entered blocking state [ 3101.820449][T24467] bridge794: port 1(bridge_slave_1) entered forwarding state [ 3101.943103][T24467] bond0: (slave bridge794): Enslaving as an active interface with an up link [ 3101.993551][T32379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2124: link becomes ready 17:53:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:53:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter, 0x48) 17:53:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x101, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) [ 3102.045092][T32379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2199: link becomes ready [ 3102.314531][T24486] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3102.410074][T24489] device bridge_slave_1 left promiscuous mode [ 3102.455560][T24489] bridge2232: port 1(bridge_slave_1) entered disabled state [ 3102.791443][T24489] bridge2233: port 1(bridge_slave_1) entered blocking state [ 3102.904982][T24489] bridge2233: port 1(bridge_slave_1) entered disabled state [ 3102.945316][T24489] device bridge_slave_1 entered promiscuous mode [ 3102.983034][T24488] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3103.123259][T24490] bridge2233: port 1(bridge_slave_1) entered blocking state [ 3103.130699][T24490] bridge2233: port 1(bridge_slave_1) entered forwarding state [ 3103.258888][T24490] bond0: (slave bridge2233): Enslaving as an active interface with an up link [ 3103.297735][T24493] device bridge_slave_1 left promiscuous mode [ 3103.304050][T24493] bridge2364: port 1(bridge_slave_1) entered disabled state [ 3103.497476][T24493] bridge2365: port 1(bridge_slave_1) entered blocking state [ 3103.504975][T24493] bridge2365: port 1(bridge_slave_1) entered disabled state [ 3103.825172][T24493] device bridge_slave_1 entered promiscuous mode [ 3103.854918][T24499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3104.041423][T24500] bridge2365: port 1(bridge_slave_1) entered blocking state [ 3104.048888][T24500] bridge2365: port 1(bridge_slave_1) entered forwarding state [ 3104.113815][T24500] bond0: (slave bridge2365): Enslaving as an active interface with an up link [ 3104.163667][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3104.193209][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffffe0008000a000f"], 0x28}}, 0x0) 17:54:01 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x0, 'rose0\x00'}) 17:54:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x0, 0x2, 0x0, 0x1}, 0x48) 17:54:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001380)={'ip6_vti0\x00'}) 17:54:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000100008000a000f"], 0x28}}, 0x0) [ 3104.228767][T26046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2125: link becomes ready 17:54:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x11, 0x0, 0x0, 0x0}, 0x20) 17:54:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f00000000c0)={'veth0\x00', 0x2832}) 17:54:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'macvlan0\x00'}) [ 3104.540240][T26046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2200: link becomes ready [ 3104.915474][T24502] device bridge_slave_1 left promiscuous mode [ 3104.922257][T24502] bridge794: port 1(bridge_slave_1) entered disabled state [ 3105.005264][T24502] bridge795: port 1(bridge_slave_1) entered blocking state [ 3105.070448][T24502] bridge795: port 1(bridge_slave_1) entered disabled state [ 3105.113021][T24502] device bridge_slave_1 entered promiscuous mode [ 3105.175802][T24503] bridge795: port 1(bridge_slave_1) entered blocking state [ 3105.183170][T24503] bridge795: port 1(bridge_slave_1) entered forwarding state 17:54:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x2832}) [ 3105.243782][T24503] bond0: (slave bridge795): Enslaving as an active interface with an up link [ 3105.305075][T24516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3105.450220][T24521] device bridge_slave_1 left promiscuous mode [ 3105.457192][T24521] bridge2233: port 1(bridge_slave_1) entered disabled state 17:54:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3105.636105][T24521] bridge2234: port 1(bridge_slave_1) entered blocking state [ 3105.663544][T24521] bridge2234: port 1(bridge_slave_1) entered disabled state [ 3105.674510][T24521] device bridge_slave_1 entered promiscuous mode [ 3105.716676][T24520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:54:03 executing program 2: bpf$BPF_PROG_QUERY(0x21, &(0x7f00000000c0)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) [ 3105.802986][T24525] bridge2234: port 1(bridge_slave_1) entered blocking state [ 3105.810472][T24525] bridge2234: port 1(bridge_slave_1) entered forwarding state 17:54:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) close(r1) [ 3105.934701][T24525] bond0: (slave bridge2234): Enslaving as an active interface with an up link [ 3106.020695][T24527] device bridge_slave_1 left promiscuous mode [ 3106.039348][T24527] bridge2365: port 1(bridge_slave_1) entered disabled state [ 3106.213564][T24526] bond0: (slave bridge2366): Enslaving as an active interface with an up link 17:54:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002388a8ffff0008000a000f"], 0x28}}, 0x0) 17:54:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000001f0008000a000f"], 0x28}}, 0x0) 17:54:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7d}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3106.308812][T26055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2126: link becomes ready 17:54:04 executing program 2: socketpair(0xa, 0x0, 0xd3000000, &(0x7f0000000040)) 17:54:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) 17:54:04 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg(r1, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x10002) [ 3106.974147][T24532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 3107.064681][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3107.094245][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:04 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg(r1, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) [ 3107.153649][T24534] device bridge_slave_1 left promiscuous mode [ 3107.196057][T24534] bridge795: port 1(bridge_slave_1) entered disabled state [ 3107.247939][T24534] bridge796: port 1(bridge_slave_1) entered blocking state [ 3107.255436][T24534] bridge796: port 1(bridge_slave_1) entered disabled state 17:54:04 executing program 2: socketpair(0x11, 0x3, 0x7, &(0x7f00000001c0)) [ 3107.310164][T24534] device bridge_slave_1 entered promiscuous mode [ 3107.437257][T24535] bridge796: port 1(bridge_slave_1) entered blocking state [ 3107.444614][T24535] bridge796: port 1(bridge_slave_1) entered forwarding state [ 3107.550875][T24535] bond0: (slave bridge796): Enslaving as an active interface with an up link 17:54:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x101}, 0x14}}, 0x0) 17:54:05 executing program 1: socketpair(0x11, 0x0, 0x0, &(0x7f0000001a40)) [ 3107.656450][T24548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3107.697443][T24547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3108.046660][T24552] device bridge_slave_1 left promiscuous mode [ 3108.060303][T24552] bridge2234: port 1(bridge_slave_1) entered disabled state [ 3108.141456][T24552] bridge2235: port 1(bridge_slave_1) entered blocking state [ 3108.157015][T24552] bridge2235: port 1(bridge_slave_1) entered disabled state [ 3108.176160][T24552] device bridge_slave_1 entered promiscuous mode [ 3108.311670][T24554] bridge2235: port 1(bridge_slave_1) entered blocking state [ 3108.319134][T24554] bridge2235: port 1(bridge_slave_1) entered forwarding state [ 3108.381283][T24554] bond0: (slave bridge2235): Enslaving as an active interface with an up link [ 3108.504977][T24556] bridge2367: port 1(bridge_slave_1) entered blocking state [ 3108.536113][T24556] bridge2367: port 1(bridge_slave_1) entered disabled state [ 3108.552206][T24556] device bridge_slave_1 entered promiscuous mode [ 3108.618295][T32379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2127: link becomes ready 17:54:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300e0ffff0008000a000f"], 0x28}}, 0x0) 17:54:06 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x430900, 0x0) 17:54:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x4, 0x0, 0x0, 0x0}, 0x20) 17:54:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc01047d0, &(0x7f00000000c0)={'veth0\x00'}) 17:54:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000200008000a000f"], 0x28}}, 0x0) 17:54:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f00000000c0)={'veth0\x00'}) 17:54:06 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=';', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)=""/163, 0xa3}], 0x1}, 0x0) 17:54:06 executing program 2: r0 = socket(0x1e, 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x10f, 0x0, 0x0, 0x0) [ 3109.029014][T24573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3109.090926][T24574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3109.100971][T24574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3109.207166][T24575] device bridge_slave_1 left promiscuous mode [ 3109.213462][T24575] bridge796: port 1(bridge_slave_1) entered disabled state 17:54:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) [ 3109.302453][T24575] bridge797: port 1(bridge_slave_1) entered blocking state [ 3109.340909][T24575] bridge797: port 1(bridge_slave_1) entered disabled state [ 3109.383982][T24575] device bridge_slave_1 entered promiscuous mode [ 3109.438126][T24576] bridge797: port 1(bridge_slave_1) entered blocking state [ 3109.445528][T24576] bridge797: port 1(bridge_slave_1) entered forwarding state [ 3109.535620][T24576] bond0: (slave bridge797): Enslaving as an active interface with an up link [ 3109.568629][T24589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x70, &(0x7f00000001c0)=""/112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3109.774882][T24606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}}}}) [ 3110.216847][T24588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3110.483198][T24597] device bridge_slave_1 left promiscuous mode [ 3110.490213][T24597] bridge2235: port 1(bridge_slave_1) entered disabled state [ 3110.591939][T24597] bridge2236: port 1(bridge_slave_1) entered blocking state [ 3110.605584][T24597] bridge2236: port 1(bridge_slave_1) entered disabled state [ 3110.634329][T24597] device bridge_slave_1 entered promiscuous mode [ 3110.693745][T24598] device bridge_slave_1 left promiscuous mode [ 3110.705765][T24598] bridge2367: port 1(bridge_slave_1) entered disabled state [ 3111.133049][T24598] bridge2368: port 1(bridge_slave_1) entered blocking state [ 3111.152693][T24598] bridge2368: port 1(bridge_slave_1) entered disabled state [ 3111.175462][T24598] device bridge_slave_1 entered promiscuous mode [ 3111.346050][T24599] bridge2236: port 1(bridge_slave_1) entered blocking state [ 3111.353473][T24599] bridge2236: port 1(bridge_slave_1) entered forwarding state [ 3111.432682][T24599] bond0: (slave bridge2236): Enslaving as an active interface with an up link [ 3111.489844][T24600] bridge2368: port 1(bridge_slave_1) entered blocking state [ 3111.497506][T24600] bridge2368: port 1(bridge_slave_1) entered forwarding state [ 3111.632236][T24600] bond0: (slave bridge2368): Enslaving as an active interface with an up link [ 3111.674788][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300f0ffff0008000a000f"], 0x28}}, 0x0) 17:54:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40049409, &(0x7f0000000340)) 17:54:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000240008000a000f"], 0x28}}, 0x0) 17:54:09 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x5411, 0x0) [ 3112.012411][T24610] device bridge_slave_1 left promiscuous mode [ 3112.026241][T24610] bridge797: port 1(bridge_slave_1) entered disabled state 17:54:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x64}}, 0x0) 17:54:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 17:54:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a28000000090a030000000000000000000f00000808000f4000000008090001"], 0x1bc}}, 0x0) [ 3112.202936][T24610] bridge798: port 1(bridge_slave_1) entered blocking state [ 3112.237540][T24610] bridge798: port 1(bridge_slave_1) entered disabled state [ 3112.252242][T24613] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3112.281907][T24610] device bridge_slave_1 entered promiscuous mode 17:54:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0x1}], 0x1, &(0x7f0000000600)=[{0x2}, {0x10}], 0x20}}], 0x1, 0x0) [ 3112.296526][T24613] CPU: 0 PID: 24613 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3112.307085][T24613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3112.317156][T24613] Call Trace: [ 3112.320449][T24613] [ 3112.323399][T24613] dump_stack_lvl+0xcd/0x134 [ 3112.328017][T24613] dump_header+0x10b/0x7f9 [ 3112.332501][T24613] oom_kill_process.cold+0x10/0x15 [ 3112.333898][T24611] bridge798: port 1(bridge_slave_1) entered blocking state [ 3112.337622][T24613] out_of_memory+0x358/0x14a0 [ 3112.345233][T24611] bridge798: port 1(bridge_slave_1) entered forwarding state [ 3112.349811][T24613] ? find_held_lock+0x2d/0x110 [ 3112.349838][T24613] ? oom_killer_disable+0x270/0x270 [ 3112.349869][T24613] ? find_held_lock+0x2d/0x110 [ 3112.371959][T24613] mem_cgroup_out_of_memory+0x206/0x270 [ 3112.377540][T24613] ? mem_cgroup_margin+0x130/0x130 [ 3112.382680][T24613] ? lock_downgrade+0x6e0/0x6e0 [ 3112.387586][T24613] try_charge_memcg+0xf67/0x13f0 [ 3112.392556][T24613] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3112.398569][T24613] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3112.404322][T24613] ? lock_downgrade+0x6e0/0x6e0 [ 3112.409211][T24613] ? lock_downgrade+0x6e0/0x6e0 [ 3112.414110][T24613] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3112.419687][T24613] __alloc_pages+0x1ef/0x510 [ 3112.424315][T24613] ? __alloc_pages_slowpath.constprop.0+0x2300/0x2300 [ 3112.431112][T24613] ? __lock_acquire+0x166e/0x56d0 [ 3112.436168][T24613] ? mark_lock.part.0+0xee/0x1910 [ 3112.441082][T24611] bond0: (slave bridge798): Enslaving as an active interface with an up link [ 3112.441214][T24613] alloc_pages+0x1a6/0x270 [ 3112.454486][T24613] pte_alloc_one+0x16/0x230 [ 3112.459017][T24613] __pte_alloc+0x69/0x250 [ 3112.463370][T24613] ? pmd_install+0x150/0x150 [ 3112.467989][T24613] ? down_read_trylock+0xc2/0x3a0 [ 3112.473085][T24613] ? down_write_trylock+0x2f0/0x2f0 [ 3112.478346][T24613] ? find_held_lock+0x2d/0x110 [ 3112.483135][T24613] ? walk_to_pmd+0x1a2/0x2a0 [ 3112.487756][T24613] __get_locked_pte+0x177/0x270 [ 3112.492637][T24613] vm_insert_page+0x3f3/0x520 [ 3112.497345][T24613] ? __get_locked_pte+0x270/0x270 [ 3112.502394][T24613] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 3112.508241][T24613] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 3112.514085][T24613] kcov_mmap+0x95/0xe0 [ 3112.518192][T24613] mmap_region+0xbff/0x1460 [ 3112.522747][T24613] ? vm_munmap+0x20/0x20 [ 3112.527026][T24613] ? cap_mmap_addr+0x50/0x300 [ 3112.531797][T24613] ? bpf_lsm_mmap_addr+0x5/0x10 [ 3112.536680][T24613] ? get_unmapped_area+0x1e4/0x3c0 [ 3112.541828][T24613] do_mmap+0x863/0xfa0 [ 3112.545942][T24613] vm_mmap_pgoff+0x1ab/0x270 17:54:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) [ 3112.550573][T24613] ? randomize_page+0xb0/0xb0 [ 3112.555298][T24613] ksys_mmap_pgoff+0x41b/0x5a0 [ 3112.560099][T24613] ? lockdep_hardirqs_on+0x79/0x100 [ 3112.565339][T24613] do_syscall_64+0x35/0xb0 [ 3112.569799][T24613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3112.575733][T24613] RIP: 0033:0x7f072048a5f2 [ 3112.580173][T24613] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64 [ 3112.599804][T24613] RSP: 002b:00007ffc7a569558 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3112.608255][T24613] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f072048a5f2 [ 3112.616260][T24613] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 3112.624267][T24613] RBP: 0000000000000000 R08: 00000000000000db R09: 0000000000000000 [ 3112.632261][T24613] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f07205ac1fc [ 3112.640274][T24613] R13: 0000000000000003 R14: 00007f07205ac1f0 R15: 0000000000000032 [ 3112.648313][T24613] 17:54:10 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 17:54:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x10, 0x0, 0x0, 0x80000001}, 0x48) [ 3112.919324][T24613] memory: usage 307176kB, limit 307200kB, failcnt 228 [ 3112.926624][T24613] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3112.943379][T24613] Memory cgroup stats for /syz4: [ 3112.947068][T24613] anon 155648 [ 3112.947068][T24613] file 368640 [ 3112.947068][T24613] kernel 314023936 [ 3112.947068][T24613] kernel_stack 131072 [ 3112.947068][T24613] pagetables 81920 [ 3112.947068][T24613] percpu 5428640 [ 3112.947068][T24613] sock 0 [ 3112.947068][T24613] vmalloc 0 [ 3112.947068][T24613] shmem 368640 [ 3112.947068][T24613] zswap 0 [ 3112.947068][T24613] zswapped 0 [ 3112.947068][T24613] file_mapped 368640 [ 3112.947068][T24613] file_dirty 0 [ 3112.947068][T24613] file_writeback 0 [ 3112.947068][T24613] swapcached 0 [ 3112.947068][T24613] anon_thp 0 [ 3112.947068][T24613] file_thp 0 [ 3112.947068][T24613] shmem_thp 0 [ 3112.947068][T24613] inactive_anon 188416 [ 3112.947068][T24613] active_anon 335872 [ 3112.947068][T24613] inactive_file 0 [ 3112.947068][T24613] active_file 0 [ 3112.947068][T24613] unevictable 0 [ 3112.947068][T24613] slab_reclaimable 58160 [ 3112.947068][T24613] slab_unreclaimable 308294960 [ 3112.947068][T24613] slab 308353120 [ 3113.034567][T24645] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3113.058115][T24645] device bridge_slave_1 left promiscuous mode [ 3113.064505][T24645] bridge798: port 1(bridge_slave_1) entered disabled state [ 3113.184246][T24613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24613,uid=0 [ 3113.249355][T24613] Memory cgroup out of memory: Killed process 24613 (syz-executor.4) total-vm:54856kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3113.372344][T24621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3113.460687][T24620] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3113.654848][T24627] device bridge_slave_1 left promiscuous mode [ 3113.703418][T24627] bridge2236: port 1(bridge_slave_1) entered disabled state 17:54:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000237fffffff0008000a000f"], 0x28}}, 0x0) 17:54:11 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8}) [ 3113.874373][T24627] bridge2237: port 1(bridge_slave_1) entered blocking state [ 3113.971287][T24650] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3113.984776][T24627] bridge2237: port 1(bridge_slave_1) entered disabled state [ 3114.004650][T24650] CPU: 1 PID: 24650 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3114.015289][T24650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3114.025368][T24650] Call Trace: [ 3114.028662][T24650] [ 3114.031608][T24650] dump_stack_lvl+0xcd/0x134 [ 3114.035766][T24627] device bridge_slave_1 entered promiscuous mode [ 3114.036214][T24650] dump_header+0x10b/0x7f9 [ 3114.046999][T24650] oom_kill_process.cold+0x10/0x15 [ 3114.052145][T24650] out_of_memory+0x358/0x14a0 [ 3114.056857][T24650] ? find_held_lock+0x2d/0x110 [ 3114.061646][T24650] ? oom_killer_disable+0x270/0x270 [ 3114.066877][T24650] ? find_held_lock+0x2d/0x110 [ 3114.071669][T24650] mem_cgroup_out_of_memory+0x206/0x270 [ 3114.077240][T24650] ? mem_cgroup_margin+0x130/0x130 [ 3114.082371][T24650] ? lock_downgrade+0x6e0/0x6e0 [ 3114.087269][T24650] try_charge_memcg+0xf67/0x13f0 [ 3114.091878][T24630] bridge2237: port 1(bridge_slave_1) entered blocking state [ 3114.092223][T24650] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3114.092262][T24650] ? lock_downgrade+0x6e0/0x6e0 [ 3114.099618][T24630] bridge2237: port 1(bridge_slave_1) entered forwarding state [ 3114.105583][T24650] charge_memcg+0x31/0x320 [ 3114.122324][T24650] __mem_cgroup_charge+0x27/0x90 [ 3114.127296][T24650] ? _compound_head+0x5d/0x150 [ 3114.132098][T24650] __handle_mm_fault+0x17df/0x39b0 [ 3114.137251][T24650] ? vm_iomap_memory+0x190/0x190 [ 3114.142255][T24650] handle_mm_fault+0x1c8/0x780 [ 3114.147049][T24650] do_user_addr_fault+0x475/0x1210 [ 3114.152191][T24650] exc_page_fault+0x94/0x170 [ 3114.156806][T24650] asm_exc_page_fault+0x22/0x30 [ 3114.161772][T24650] RIP: 0033:0x7f072043c4d1 [ 3114.168124][T24650] Code: 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 44 24 20 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 89 4c 24 28 fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 [ 3114.187766][T24650] RSP: 002b:00007f071f3fd000 EFLAGS: 00010206 [ 3114.192339][T24630] bond0: (slave bridge2237): Enslaving as an active interface with an up link [ 3114.194013][T24650] RAX: 0000000000000001 RBX: 00007f071f3fd0f0 RCX: 0000000000000000 [ 3114.194032][T24650] RDX: 0000000000000020 RSI: 00007f071f3fd140 RDI: 0000000000000004 [ 3114.194047][T24650] RBP: 0000000000000000 R08: 00007f071f3fd054 R09: 000000000000000c [ 3114.194064][T24650] R10: 0000000000000000 R11: 00000000200005cf R12: 00007f071f3fd0a8 [ 3114.216190][T24644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3114.218823][T24650] R13: 00007f071f3fd140 R14: 0000000000000004 R15: 0000000000000000 [ 3114.218865][T24650] 17:54:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000003e0008000a000f"], 0x28}}, 0x0) 17:54:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000002000)=ANY=[@ANYBLOB="14000000a000010000000000000000000000000a588900000c0a01"], 0x89b4}}, 0x0) 17:54:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 17:54:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) [ 3114.359644][T24650] memory: usage 307188kB, limit 307200kB, failcnt 301 [ 3114.367992][T24650] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3114.375251][T24650] Memory cgroup stats for /syz4: [ 3114.375937][T24650] anon 143360 [ 3114.375937][T24650] file 368640 [ 3114.375937][T24650] kernel 314048512 [ 3114.375937][T24650] kernel_stack 65536 [ 3114.375937][T24650] pagetables 81920 [ 3114.375937][T24650] percpu 5431008 [ 3114.375937][T24650] sock 0 [ 3114.375937][T24650] vmalloc 0 [ 3114.375937][T24650] shmem 368640 [ 3114.375937][T24650] zswap 0 [ 3114.375937][T24650] zswapped 0 [ 3114.375937][T24650] file_mapped 368640 [ 3114.375937][T24650] file_dirty 0 [ 3114.375937][T24650] file_writeback 0 [ 3114.375937][T24650] swapcached 0 [ 3114.375937][T24650] anon_thp 0 [ 3114.375937][T24650] file_thp 0 [ 3114.375937][T24650] shmem_thp 0 [ 3114.375937][T24650] inactive_anon 143360 [ 3114.375937][T24650] active_anon 335872 [ 3114.375937][T24650] inactive_file 0 [ 3114.375937][T24650] active_file 0 17:54:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000016c0)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev}}}]}]}, 0x44}}, 0x0) [ 3114.375937][T24650] unevictable 0 [ 3114.375937][T24650] slab_reclaimable 20720 [ 3114.375937][T24650] slab_unreclaimable 308412552 [ 3114.375937][T24650] slab 308433272 [ 3114.473680][T24653] netlink: 35140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3114.485820][T26055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2129: link becomes ready [ 3114.587465][T24650] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24648,uid=0 [ 3114.623866][T24650] Memory cgroup out of memory: Killed process 24648 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3114.657914][T24660] nbd: must specify a size in bytes for the device 17:54:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="160000001000010000000000000000ebff0954"], 0xa0}}, 0x0) [ 3114.711808][T24665] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3114.756928][T24646] bond0: (slave bridge799): Enslaving as an active interface with an up link [ 3114.795573][T24667] device bridge_slave_1 left promiscuous mode 17:54:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101}], {0x14, 0x2}}, 0x5c}}, 0x0) 17:54:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x8}]}, @NFT_MSG_DELRULE={0x260, 0x8, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS, @NFTA_FIB_DREG]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS, @NFTA_COUNTER_PACKETS, @NFTA_COUNTER_BYTES, @NFTA_COUNTER_PACKETS, @NFTA_COUNTER_PACKETS, @NFTA_COUNTER_PACKETS]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_ID, @NFTA_RULE_USERDATA={0xdc, 0x7, 0x1, 0x0, "4ed0ac5354e397d5a87fd7e52cbf3b10c4f669e499dcc25029e1cc2d886fa64ace490f52b56035395fa8dc2452b8efca05733f91739d462bf7bcbb3983fa95ea2fd7596eb10d944a545cb00244cd344710ad8006d03369bbfb534303fec605ffcae8b61f3ad6cfef029cab172ccb93802b34e6b0cc0d3cf32017abe3e80dfa9663003fc869f575b5b5b0675935f95976f96d75d12f10ea339ef29a650f8d24b0d8cd1fa2c521fd63e7048eaf8e8aa3afda82032669fdb8aa8814eb4a28c4e92c2c000c00ce4a2aa68fb20ebaf7ce973358153f9b81eca7e5"}, @NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xffffffffffffffc4}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MIN]}}}, {0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_TYPE={0x8}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc}]}, @NFT_MSG_DELRULE={0x48, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x2ec}}, 0x0) 17:54:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000239effffff0008000a000f"], 0x28}}, 0x0) 17:54:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}}, 0x0) [ 3114.823321][T24667] bridge2237: port 1(bridge_slave_1) entered disabled state [ 3114.873383][T24669] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3114.924857][T24669] CPU: 1 PID: 24669 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3114.935341][T24669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3114.945516][T24669] Call Trace: [ 3114.948819][T24669] [ 3114.951773][T24669] dump_stack_lvl+0xcd/0x134 [ 3114.956401][T24669] dump_header+0x10b/0x7f9 [ 3114.960863][T24669] oom_kill_process.cold+0x10/0x15 [ 3114.966017][T24669] out_of_memory+0x358/0x14a0 [ 3114.970734][T24669] ? find_held_lock+0x2d/0x110 [ 3114.975532][T24669] ? oom_killer_disable+0x270/0x270 [ 3114.980768][T24669] ? find_held_lock+0x2d/0x110 [ 3114.985565][T24669] mem_cgroup_out_of_memory+0x206/0x270 [ 3114.991142][T24669] ? mem_cgroup_margin+0x130/0x130 [ 3114.996287][T24669] ? lock_downgrade+0x6e0/0x6e0 [ 3115.001188][T24669] try_charge_memcg+0xf67/0x13f0 [ 3115.006166][T24669] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3115.012189][T24669] ? lock_downgrade+0x6e0/0x6e0 [ 3115.017090][T24669] charge_memcg+0x31/0x320 [ 3115.021551][T24669] __mem_cgroup_charge+0x27/0x90 [ 3115.026517][T24669] ? _compound_head+0x5d/0x150 [ 3115.031321][T24669] wp_page_copy+0x27c/0x1b60 [ 3115.035951][T24669] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3115.041439][T24669] ? lock_downgrade+0x6e0/0x6e0 [ 3115.046318][T24669] ? vm_normal_page+0x146/0x2a0 [ 3115.051222][T24669] do_wp_page+0x1d1/0x1910 [ 3115.055676][T24669] __handle_mm_fault+0x1813/0x39b0 [ 3115.060823][T24669] ? vm_iomap_memory+0x190/0x190 [ 3115.065808][T24669] handle_mm_fault+0x1c8/0x780 [ 3115.070605][T24669] do_user_addr_fault+0x475/0x1210 [ 3115.075752][T24669] exc_page_fault+0x94/0x170 [ 3115.080366][T24669] asm_exc_page_fault+0x22/0x30 [ 3115.085225][T24669] RIP: 0033:0x7f0720437970 [ 3115.089644][T24669] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3115.109344][T24669] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3115.115416][T24669] RAX: 00000000410a6c2c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3115.123389][T24669] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000000000022 [ 3115.131387][T24669] RBP: 00000000410a6c2c R08: 0000000000000c2c R09: 00000000410a6c30 [ 3115.139361][T24669] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3115.147333][T24669] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a32546 [ 3115.155308][T24669] ? trace_user_exit.constprop.0+0x6/0x210 [ 3115.161140][T24669] 17:54:12 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000080)=@raw=[@initr0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3115.295327][T24669] memory: usage 307200kB, limit 307200kB, failcnt 322 [ 3115.315176][T24678] netlink: 496 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3115.336175][T24669] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3115.426954][T24669] Memory cgroup stats for /syz4: [ 3115.427188][T24669] anon 102400 [ 3115.427188][T24669] file 368640 [ 3115.427188][T24669] kernel 314089472 [ 3115.427188][T24669] kernel_stack 65536 [ 3115.427188][T24669] pagetables 73728 [ 3115.427188][T24669] percpu 5431008 [ 3115.427188][T24669] sock 0 [ 3115.427188][T24669] vmalloc 0 [ 3115.427188][T24669] shmem 368640 [ 3115.427188][T24669] zswap 0 [ 3115.427188][T24669] zswapped 0 [ 3115.427188][T24669] file_mapped 368640 [ 3115.427188][T24669] file_dirty 0 [ 3115.427188][T24669] file_writeback 0 [ 3115.427188][T24669] swapcached 0 [ 3115.427188][T24669] anon_thp 0 [ 3115.427188][T24669] file_thp 0 [ 3115.427188][T24669] shmem_thp 0 [ 3115.427188][T24669] inactive_anon 135168 [ 3115.427188][T24669] active_anon 335872 [ 3115.427188][T24669] inactive_file 0 [ 3115.427188][T24669] active_file 0 [ 3115.427188][T24669] unevictable 0 [ 3115.427188][T24669] slab_reclaimable 56160 [ 3115.427188][T24669] slab_unreclaimable 308425712 [ 3115.427188][T24669] slab 308481872 [ 3115.614650][T24657] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3115.634808][T24669] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24669,uid=0 [ 3115.651386][T24669] Memory cgroup out of memory: Killed process 24669 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3115.912642][T24666] bond0: (slave bridge2238): Enslaving as an active interface with an up link 17:54:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000003f0008000a000f"], 0x28}}, 0x0) 17:54:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d00), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) 17:54:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x20, 0xd, 0x6, 0x301, 0x0, 0x0, {}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) 17:54:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0) 17:54:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023a1ffffff0008000a000f"], 0x28}}, 0x0) 17:54:13 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom(r0, 0x0, 0x0, 0x10001, 0x0, 0x0) [ 3116.140001][T24679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3116.171078][T24692] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 3116.231788][T24689] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3116.276383][T24689] CPU: 0 PID: 24689 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3116.286854][T24689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3116.296936][T24689] Call Trace: [ 3116.300239][T24689] [ 3116.303197][T24689] dump_stack_lvl+0xcd/0x134 [ 3116.307826][T24689] dump_header+0x10b/0x7f9 [ 3116.312288][T24689] oom_kill_process.cold+0x10/0x15 [ 3116.317470][T24689] out_of_memory+0x358/0x14a0 [ 3116.321369][T24680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3116.322165][T24689] ? find_held_lock+0x2d/0x110 [ 3116.322197][T24689] ? oom_killer_disable+0x270/0x270 [ 3116.331632][T24680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3116.336144][T24689] ? find_held_lock+0x2d/0x110 [ 3116.336179][T24689] mem_cgroup_out_of_memory+0x206/0x270 [ 3116.336205][T24689] ? mem_cgroup_margin+0x130/0x130 [ 3116.336226][T24689] ? lock_downgrade+0x6e0/0x6e0 [ 3116.336265][T24689] try_charge_memcg+0xf67/0x13f0 [ 3116.336298][T24689] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3116.336333][T24689] ? lock_downgrade+0x6e0/0x6e0 [ 3116.336375][T24689] charge_memcg+0x31/0x320 [ 3116.336411][T24689] __mem_cgroup_charge+0x27/0x90 [ 3116.336435][T24689] ? _compound_head+0x5d/0x150 [ 3116.336464][T24689] wp_page_copy+0x27c/0x1b60 [ 3116.336497][T24689] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3116.336520][T24689] ? lock_downgrade+0x6e0/0x6e0 [ 3116.336543][T24689] ? vm_normal_page+0x146/0x2a0 [ 3116.336582][T24689] do_wp_page+0x1d1/0x1910 [ 3116.336612][T24689] __handle_mm_fault+0x1813/0x39b0 [ 3116.336644][T24689] ? vm_iomap_memory+0x190/0x190 [ 3116.336697][T24689] handle_mm_fault+0x1c8/0x780 [ 3116.336727][T24689] do_user_addr_fault+0x475/0x1210 [ 3116.336768][T24689] exc_page_fault+0x94/0x170 [ 3116.336800][T24689] asm_exc_page_fault+0x22/0x30 [ 3116.336823][T24689] RIP: 0033:0x7f0720437970 [ 3116.336843][T24689] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3116.336866][T24689] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3116.336887][T24689] RAX: 00000000a2f2bdf7 RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3116.336904][T24689] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0cc7 [ 3116.336920][T24689] RBP: 00000000a2f2bdf7 R08: 0000000000001df7 R09: 00000000a2f2bdfb [ 3116.336936][T24689] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3116.336952][T24689] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff81a3267f [ 3116.336967][T24689] ? trace_user_exit.constprop.0+0x13f/0x210 [ 3116.337014][T24689] [ 3116.350292][T24689] memory: usage 307200kB, limit 307200kB, failcnt 346 [ 3116.350316][T24689] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3116.350337][T24689] Memory cgroup stats for /syz4: [ 3116.350672][T24689] anon 114688 [ 3116.350672][T24689] file 368640 [ 3116.350672][T24689] kernel 314089472 [ 3116.350672][T24689] kernel_stack 65536 [ 3116.350672][T24689] pagetables 73728 [ 3116.350672][T24689] percpu 5431008 [ 3116.350672][T24689] sock 0 [ 3116.350672][T24689] vmalloc 0 [ 3116.350672][T24689] shmem 368640 [ 3116.350672][T24689] zswap 0 [ 3116.350672][T24689] zswapped 0 [ 3116.350672][T24689] file_mapped 368640 [ 3116.350672][T24689] file_dirty 0 [ 3116.350672][T24689] file_writeback 0 [ 3116.350672][T24689] swapcached 0 [ 3116.350672][T24689] anon_thp 0 [ 3116.350672][T24689] file_thp 0 [ 3116.350672][T24689] shmem_thp 0 [ 3116.350672][T24689] inactive_anon 147456 [ 3116.350672][T24689] active_anon 335872 [ 3116.350672][T24689] inactive_file 0 [ 3116.350672][T24689] active_file 0 [ 3116.350672][T24689] unevictable 0 [ 3116.350672][T24689] slab_reclaimable 53072 [ 3116.350672][T24689] slab_unreclaimable 308425824 [ 3116.350672][T24689] slab 308478896 [ 3116.350735][T24689] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24689,uid=0 [ 3116.351897][T24689] Memory cgroup out of memory: Killed process 24689 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3117.157085][T24681] bridge800: port 1(bridge_slave_1) entered blocking state [ 3117.165174][T24681] bridge800: port 1(bridge_slave_1) entered disabled state [ 3117.203580][T24681] device bridge_slave_1 entered promiscuous mode [ 3117.265783][T24683] bridge800: port 1(bridge_slave_1) entered blocking state [ 3117.273142][T24683] bridge800: port 1(bridge_slave_1) entered forwarding state [ 3117.364026][T24683] bond0: (slave bridge800): Enslaving as an active interface with an up link [ 3117.384307][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x0) 17:54:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) 17:54:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @mcast1}}) 17:54:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023c3ffffff0008000a000f"], 0x28}}, 0x0) 17:54:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x2, 0x2}, 0xe) [ 3117.772969][T24699] bridge2239: port 1(bridge_slave_1) entered blocking state [ 3117.815570][T24699] bridge2239: port 1(bridge_slave_1) entered disabled state [ 3117.840940][T24699] device bridge_slave_1 entered promiscuous mode [ 3117.850530][T24706] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3117.865907][T24706] CPU: 0 PID: 24706 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3117.876362][T24706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3117.885585][T24700] bridge2239: port 1(bridge_slave_1) entered blocking state [ 3117.886504][T24706] Call Trace: [ 3117.893870][T24700] bridge2239: port 1(bridge_slave_1) entered forwarding state [ 3117.897092][T24706] [ 3117.897105][T24706] dump_stack_lvl+0xcd/0x134 [ 3117.897140][T24706] dump_header+0x10b/0x7f9 [ 3117.916553][T24706] oom_kill_process.cold+0x10/0x15 [ 3117.921710][T24706] out_of_memory+0x358/0x14a0 [ 3117.926424][T24706] ? find_held_lock+0x2d/0x110 [ 3117.931220][T24706] ? oom_killer_disable+0x270/0x270 [ 3117.936452][T24706] ? find_held_lock+0x2d/0x110 [ 3117.941250][T24706] mem_cgroup_out_of_memory+0x206/0x270 [ 3117.946834][T24706] ? mem_cgroup_margin+0x130/0x130 [ 3117.951973][T24706] ? lock_downgrade+0x6e0/0x6e0 [ 3117.956993][T24706] try_charge_memcg+0xf67/0x13f0 [ 3117.961971][T24706] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3117.967979][T24706] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3117.973712][T24706] ? lock_downgrade+0x6e0/0x6e0 [ 3117.978582][T24706] ? lock_downgrade+0x6e0/0x6e0 [ 3117.983468][T24706] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3117.989047][T24706] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3117.990887][T24700] bond0: (slave bridge2239): Enslaving as an active interface with an up link [ 3117.995221][T24706] copy_process+0x73e/0x7090 [ 3117.995260][T24706] ? find_held_lock+0x2d/0x110 [ 3117.995296][T24706] ? __cleanup_sighand+0xb0/0xb0 [ 3118.018443][T24706] kernel_clone+0xe7/0xab0 [ 3118.022893][T24706] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3118.028911][T24706] ? create_io_thread+0xe0/0xe0 [ 3118.033805][T24706] ? find_held_lock+0x2d/0x110 [ 3118.038610][T24706] ? __ct_user_exit+0xff/0x150 [ 3118.043414][T24706] __do_sys_clone+0xba/0x100 [ 3118.048037][T24706] ? kernel_clone+0xab0/0xab0 [ 3118.052760][T24706] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3118.058694][T24706] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3118.064630][T24706] do_syscall_64+0x35/0xb0 [ 3118.069081][T24706] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3118.075004][T24706] RIP: 0033:0x7f072048b9d1 [ 3118.079444][T24706] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3118.099082][T24706] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3118.107528][T24706] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3118.115533][T24706] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3118.123615][T24706] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3118.131625][T24706] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3118.139621][T24706] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3118.147636][T24706] 17:54:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000480008000a000f"], 0x28}}, 0x0) 17:54:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "f3d2d8a6b3e7743cd9379f72ce1458b62d4ec6b2eb717528f35c8d8ae0b5d5cf5432d4892bda5a51f67d554b75ec74547f5668938a6cea726718895f349725501b9ef16b92"}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc}}, @NFT_MSG_DELSETELEM={0xd98, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd70, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "a7dd69bfddbf2bde2c179696578a869ffc90b03ae1e5061fbac2a2c52564d9a06f2d25ca6bfb8c780922c28f760ef9ce483479a78086dc9dce60eb22df715f154c8ec909fe25d1886d4844e0e1"}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "d30f050a2fce5c78acf7aeef841a5f595b9debfb221d95e73d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "1e8ed20fa887199c37c239599b30801e5a31c5967afa446a1112371b1591da2741e680f71ee042b98a96ee4359aeb9d7a5ac2e28d80a8bf941c0479ed7ca2413e71ef811c453f9444627d11caee269db9b25985b2bb4a6e42ad5238d4b31fe9d47757b04c86e38f75a9ecaaae64d34952e24e4200c168a162f63aa3e0d6a506e11e60ebf553e879037e9d36c5baa86804dca9a84c025f23996363547bced7727b2a4e0de906588dcd3ccc3dc8b28450a7c43d72fb9419edf83"}, @NFTA_SET_ELEM_EXPRESSIONS={0x174, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xa08, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "87319091a5082ee650df0cce444c1275ff0c4c8905b400dc4a05d7b75e2ffe8205b5d08141ee203a9f3e0ba8174090e4d6d7a7b11f31b6fe759b16c70224297670707127eaa730de6c5f243936ecd88d3a445e0ee68d9e996aa2e2ec52e8463902a6eba6aeb7a981a1cafe47d9a98428e2c2cc46ec926892d8b3010e0137384661ec3efe549b0b9a71"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "8f9dd29490cbb9d6711aac11b6aa1f201d829664659892304362758b7763081cd5ee48d5dc26fda5d9f516a0e6f216badfd5957e29f9f168d97f0b4e840875177a73cb668b1c59a2cfcdfcc56864a69395db9f8b19795e7203f0826bc6826c6893b0afe38e11b6620002a71a79f5e50f65d4b2011f11b9992b774ade7d1ae28f1c52677345477607d6e4f8584d8cbabb9269826be77066f1599737a3ce"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x8b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "061dbb42509f12af5fd1ba2425ebcea72995345df16b6b6c3676d8fbaff8e6145d4a4029d720e3a8565da604546cb4dd58c25481c662edd88c42ea6551c5ce1c910ed2a0cac19756fb9248049cda63e7dc56be5ac9687e6492ee71bd907209258574bc741ff068644d7912b1920ee30ca955066fd03e64235cca2dbd6c2506dfe0248242387003be3c60dba13c815a46164e6f6f0c2b20015628a50b8981e8d323d64e435e3fd85d27ae1deeaf84936f70c22002f958d4236d48aa33d33e8dbe3981915505a1ebe281fc2ec0cfc11ca5cd89a0b71f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x785, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 17:54:15 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x8}, 0x0, &(0x7f0000000200), 0x0) [ 3118.472907][T24706] memory: usage 307184kB, limit 307200kB, failcnt 392 [ 3118.484108][T24706] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3118.484575][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2131: link becomes ready 17:54:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 17:54:16 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000240)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null}) [ 3118.532067][T24706] Memory cgroup stats for /syz4: [ 3118.532724][T24706] anon 151552 [ 3118.532724][T24706] file 368640 [ 3118.532724][T24706] kernel 314036224 [ 3118.532724][T24706] kernel_stack 65536 [ 3118.532724][T24706] pagetables 81920 [ 3118.532724][T24706] percpu 5431008 [ 3118.532724][T24706] sock 0 [ 3118.532724][T24706] vmalloc 0 [ 3118.532724][T24706] shmem 368640 [ 3118.532724][T24706] zswap 0 [ 3118.532724][T24706] zswapped 0 [ 3118.532724][T24706] file_mapped 368640 17:54:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) [ 3118.532724][T24706] file_dirty 0 [ 3118.532724][T24706] file_writeback 0 [ 3118.532724][T24706] swapcached 0 [ 3118.532724][T24706] anon_thp 0 [ 3118.532724][T24706] file_thp 0 [ 3118.532724][T24706] shmem_thp 0 [ 3118.532724][T24706] inactive_anon 184320 [ 3118.532724][T24706] active_anon 335872 [ 3118.532724][T24706] inactive_file 0 [ 3118.532724][T24706] active_file 0 [ 3118.532724][T24706] unevictable 0 [ 3118.532724][T24706] slab_reclaimable 15320 [ 3118.532724][T24706] slab_unreclaimable 308408016 [ 3118.532724][T24706] slab 308423336 [ 3118.643468][T24733] device bridge_slave_1 left promiscuous mode [ 3118.643661][T24733] bridge2239: port 1(bridge_slave_1) entered disabled state [ 3118.946457][T24706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24706,uid=0 [ 3119.015928][T24706] Memory cgroup out of memory: Killed process 24706 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3119.030877][T24714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3119.137237][T24717] device bridge_slave_1 left promiscuous mode [ 3119.143516][T24717] bridge800: port 1(bridge_slave_1) entered disabled state [ 3119.253683][T24718] bond0: (slave bridge801): Enslaving as an active interface with an up link 17:54:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000340)) 17:54:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0) 17:54:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 17:54:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023e4ffffff0008000a000f"], 0x28}}, 0x0) [ 3119.527652][T24727] __nla_validate_parse: 2 callbacks suppressed [ 3119.527674][T24727] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb}, 0x48) [ 3119.999155][T24740] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 3120.048174][T24740] CPU: 1 PID: 24740 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3120.058651][T24740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3120.068734][T24740] Call Trace: [ 3120.072035][T24740] [ 3120.074981][T24740] dump_stack_lvl+0xcd/0x134 [ 3120.079610][T24740] dump_header+0x10b/0x7f9 [ 3120.084063][T24740] oom_kill_process.cold+0x10/0x15 [ 3120.089210][T24740] out_of_memory+0x358/0x14a0 [ 3120.093914][T24740] ? find_held_lock+0x2d/0x110 [ 3120.098708][T24740] ? oom_killer_disable+0x270/0x270 [ 3120.103938][T24740] ? find_held_lock+0x2d/0x110 [ 3120.108733][T24740] mem_cgroup_out_of_memory+0x206/0x270 [ 3120.114308][T24740] ? mem_cgroup_margin+0x130/0x130 [ 3120.119452][T24740] ? lock_downgrade+0x6e0/0x6e0 [ 3120.124346][T24740] try_charge_memcg+0xf67/0x13f0 [ 3120.129313][T24740] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3120.135316][T24740] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3120.141057][T24740] ? lock_downgrade+0x6e0/0x6e0 [ 3120.145925][T24740] ? lock_downgrade+0x6e0/0x6e0 [ 3120.150789][T24740] ? rcu_read_unlock+0x9/0x60 [ 3120.155501][T24740] obj_cgroup_charge+0x2ab/0x5e0 [ 3120.160461][T24740] ? copy_process+0x5c2/0x7090 [ 3120.165252][T24740] kmem_cache_alloc_node+0x92/0x3f0 [ 3120.170468][T24740] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3120.175697][T24740] copy_process+0x5c2/0x7090 [ 3120.180317][T24740] ? __lock_acquire+0xbc3/0x56d0 [ 3120.185287][T24740] ? __cleanup_sighand+0xb0/0xb0 [ 3120.190265][T24740] kernel_clone+0xe7/0xab0 [ 3120.194703][T24740] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3120.200703][T24740] ? create_io_thread+0xe0/0xe0 [ 3120.205580][T24740] ? find_held_lock+0x2d/0x110 [ 3120.210367][T24740] ? __ct_user_exit+0xff/0x150 [ 3120.215158][T24740] __do_sys_clone+0xba/0x100 [ 3120.219772][T24740] ? kernel_clone+0xab0/0xab0 [ 3120.224491][T24740] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3120.230409][T24740] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3120.236344][T24740] do_syscall_64+0x35/0xb0 [ 3120.240787][T24740] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3120.246706][T24740] RIP: 0033:0x7f072048b9d1 [ 3120.251145][T24740] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3120.270864][T24740] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3120.279312][T24740] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3120.287301][T24740] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3120.295289][T24740] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3120.303268][T24740] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3120.311254][T24740] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3120.319267][T24740] [ 3120.495766][T24740] memory: usage 307196kB, limit 307200kB, failcnt 425 [ 3120.556483][T24740] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3120.570815][T24740] Memory cgroup stats for /syz4: [ 3120.571046][T24740] anon 151552 [ 3120.571046][T24740] file 368640 [ 3120.571046][T24740] kernel 314040320 [ 3120.571046][T24740] kernel_stack 65536 [ 3120.571046][T24740] pagetables 81920 [ 3120.571046][T24740] percpu 5431008 [ 3120.571046][T24740] sock 0 [ 3120.571046][T24740] vmalloc 0 [ 3120.571046][T24740] shmem 368640 [ 3120.571046][T24740] zswap 0 [ 3120.571046][T24740] zswapped 0 [ 3120.571046][T24740] file_mapped 368640 [ 3120.571046][T24740] file_dirty 0 [ 3120.571046][T24740] file_writeback 0 [ 3120.571046][T24740] swapcached 0 [ 3120.571046][T24740] anon_thp 0 [ 3120.571046][T24740] file_thp 0 [ 3120.571046][T24740] shmem_thp 0 [ 3120.571046][T24740] inactive_anon 184320 [ 3120.571046][T24740] active_anon 335872 [ 3120.571046][T24740] inactive_file 0 [ 3120.571046][T24740] active_file 0 [ 3120.571046][T24740] unevictable 0 [ 3120.571046][T24740] slab_reclaimable 15320 [ 3120.571046][T24740] slab_unreclaimable 308411552 [ 3120.571046][T24740] slab 308426872 [ 3120.611015][T24735] bond0: (slave bridge2240): Enslaving as an active interface with an up link [ 3120.764637][T24740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24740,uid=0 17:54:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000004c0008000a000f"], 0x28}}, 0x0) 17:54:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x3c}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_DELSET={0x14}], {0x14, 0x10}}, 0x50}}, 0x0) 17:54:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 3120.809595][T24750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) [ 3120.863235][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3120.966713][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3120.980652][T24740] Memory cgroup out of memory: Killed process 24740 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 17:54:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023f0ffffff0008000a000f"], 0x28}}, 0x0) 17:54:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14, 0x2}, [], {0x14, 0x2}}, 0x28}}, 0x0) [ 3121.112828][T24754] bond0: (slave bridge802): Enslaving as an active interface with an up link [ 3121.132567][T24761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:18 executing program 2: socket(0x23, 0x0, 0x4) 17:54:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0) [ 3121.232951][T24767] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3121.333742][T24767] CPU: 0 PID: 24767 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3121.344213][T24767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3121.354278][T24767] Call Trace: [ 3121.357563][T24767] [ 3121.360503][T24767] dump_stack_lvl+0xcd/0x134 [ 3121.365113][T24767] dump_header+0x10b/0x7f9 [ 3121.369547][T24767] oom_kill_process.cold+0x10/0x15 [ 3121.374674][T24767] out_of_memory+0x358/0x14a0 [ 3121.379364][T24767] ? find_held_lock+0x2d/0x110 [ 3121.384154][T24767] ? oom_killer_disable+0x270/0x270 [ 3121.389365][T24767] ? find_held_lock+0x2d/0x110 [ 3121.394137][T24767] mem_cgroup_out_of_memory+0x206/0x270 [ 3121.399690][T24767] ? mem_cgroup_margin+0x130/0x130 [ 3121.404822][T24767] ? lock_downgrade+0x6e0/0x6e0 [ 3121.409716][T24767] try_charge_memcg+0xf67/0x13f0 [ 3121.414699][T24767] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3121.420716][T24767] ? lock_downgrade+0x6e0/0x6e0 [ 3121.425596][T24767] charge_memcg+0x31/0x320 [ 3121.430032][T24767] __mem_cgroup_charge+0x27/0x90 [ 3121.434980][T24767] ? _compound_head+0x5d/0x150 [ 3121.439754][T24767] wp_page_copy+0x27c/0x1b60 [ 3121.444364][T24767] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3121.449829][T24767] ? lock_downgrade+0x6e0/0x6e0 [ 3121.454685][T24767] ? vm_normal_page+0x146/0x2a0 [ 3121.459552][T24767] do_wp_page+0x52c/0x1910 [ 3121.463987][T24767] __handle_mm_fault+0x1813/0x39b0 [ 3121.469111][T24767] ? vm_iomap_memory+0x190/0x190 [ 3121.474076][T24767] handle_mm_fault+0x1c8/0x780 [ 3121.478851][T24767] do_user_addr_fault+0x475/0x1210 [ 3121.483983][T24767] exc_page_fault+0x94/0x170 [ 3121.488585][T24767] asm_exc_page_fault+0x22/0x30 [ 3121.493444][T24767] RIP: 0033:0x7f0720434a15 [ 3121.497862][T24767] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 3121.517472][T24767] RSP: 002b:00007ffc7a569540 EFLAGS: 00010206 [ 3121.523542][T24767] RAX: 0000000000000003 RBX: 00007f07205abf80 RCX: 00007f07205a80c0 [ 3121.531515][T24767] RDX: 00007f07205a80c0 RSI: 0000000000000080 RDI: 00007f07205abf80 [ 3121.539503][T24767] RBP: 00007f07205abf80 R08: 00007ffc7a5a5080 R09: 0000000000000000 [ 3121.547476][T24767] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00000000002fa029 [ 3121.555448][T24767] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3121.563442][T24767] [ 3121.881867][T24767] memory: usage 307184kB, limit 307200kB, failcnt 475 [ 3121.903263][T24761] bridge2241: port 1(bridge_slave_1) entered blocking state [ 3121.925614][T24767] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 17:54:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 17:54:19 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) [ 3122.018507][T24761] bridge2241: port 1(bridge_slave_1) entered disabled state [ 3122.031952][T24767] Memory cgroup stats for /syz4: [ 3122.032184][T24767] anon 98304 [ 3122.032184][T24767] file 368640 [ 3122.032184][T24767] kernel 314044416 [ 3122.032184][T24767] kernel_stack 65536 [ 3122.032184][T24767] pagetables 73728 [ 3122.032184][T24767] percpu 5431008 [ 3122.032184][T24767] sock 0 [ 3122.032184][T24767] vmalloc 0 [ 3122.032184][T24767] shmem 368640 [ 3122.032184][T24767] zswap 0 [ 3122.032184][T24767] zswapped 0 [ 3122.032184][T24767] file_mapped 368640 [ 3122.032184][T24767] file_dirty 0 [ 3122.032184][T24767] file_writeback 0 [ 3122.032184][T24767] swapcached 0 [ 3122.032184][T24767] anon_thp 0 [ 3122.032184][T24767] file_thp 0 [ 3122.032184][T24767] shmem_thp 0 [ 3122.032184][T24767] inactive_anon 131072 [ 3122.032184][T24767] active_anon 335872 [ 3122.032184][T24767] inactive_file 0 [ 3122.032184][T24767] active_file 0 [ 3122.032184][T24767] unevictable 0 [ 3122.032184][T24767] slab_reclaimable 27160 [ 3122.032184][T24767] slab_unreclaimable 308411160 [ 3122.032184][T24767] slab 308438320 17:54:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0xfffffdef}], 0x300, &(0x7f0000000600)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) [ 3122.224603][T24767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24767,uid=0 [ 3122.245277][T24761] device bridge_slave_1 entered promiscuous mode [ 3122.311431][T24767] Memory cgroup out of memory: Killed process 24767 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3122.339054][T24779] bridge2241: port 1(bridge_slave_1) entered blocking state [ 3122.346547][T24779] bridge2241: port 1(bridge_slave_1) entered forwarding state [ 3122.418372][T24779] bond0: (slave bridge2241): Enslaving as an active interface with an up link 17:54:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000600008000a000f"], 0x28}}, 0x0) 17:54:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0x4c}}, 0x0) 17:54:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x2}}, 0x5c}}, 0x0) 17:54:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023f5ffffff0008000a000f"], 0x28}}, 0x0) 17:54:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x201}, 0x14}}, 0x0) [ 3122.466147][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2133: link becomes ready [ 3122.526060][T24776] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@pktinfo={{0x24, 0x29, 0x32, {@dev}}}], 0x28}, 0x0) [ 3122.612625][T24790] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3122.634420][T24790] CPU: 1 PID: 24790 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3122.641559][T24777] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3122.644871][T24790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3122.664138][T24790] Call Trace: [ 3122.667440][T24790] [ 3122.670388][T24790] dump_stack_lvl+0xcd/0x134 [ 3122.675012][T24790] dump_header+0x10b/0x7f9 [ 3122.679472][T24790] oom_kill_process.cold+0x10/0x15 [ 3122.684628][T24790] out_of_memory+0x358/0x14a0 [ 3122.689343][T24790] ? find_held_lock+0x2d/0x110 [ 3122.694132][T24790] ? oom_killer_disable+0x270/0x270 [ 3122.699366][T24790] ? find_held_lock+0x2d/0x110 [ 3122.704161][T24790] mem_cgroup_out_of_memory+0x206/0x270 [ 3122.709740][T24790] ? mem_cgroup_margin+0x130/0x130 [ 3122.714875][T24790] ? lock_downgrade+0x6e0/0x6e0 [ 3122.719769][T24790] try_charge_memcg+0xf67/0x13f0 [ 3122.724741][T24790] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3122.730755][T24790] ? lock_downgrade+0x6e0/0x6e0 [ 3122.735647][T24790] charge_memcg+0x31/0x320 [ 3122.740092][T24790] __mem_cgroup_charge+0x27/0x90 [ 3122.745053][T24790] ? _compound_head+0x5d/0x150 [ 3122.749844][T24790] wp_page_copy+0x27c/0x1b60 [ 3122.754466][T24790] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3122.759948][T24790] ? lock_downgrade+0x6e0/0x6e0 [ 3122.764822][T24790] ? vm_normal_page+0x146/0x2a0 [ 3122.769708][T24790] do_wp_page+0x1d1/0x1910 [ 3122.774154][T24790] __handle_mm_fault+0x1813/0x39b0 [ 3122.779307][T24790] ? vm_iomap_memory+0x190/0x190 [ 3122.784295][T24790] handle_mm_fault+0x1c8/0x780 [ 3122.789089][T24790] do_user_addr_fault+0x475/0x1210 [ 3122.794245][T24790] exc_page_fault+0x94/0x170 [ 3122.798867][T24790] asm_exc_page_fault+0x22/0x30 [ 3122.803740][T24790] RIP: 0033:0x7f0720437970 [ 3122.808177][T24790] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3122.827817][T24790] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3122.833912][T24790] RAX: 00000000410a6c2c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3122.841903][T24790] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000000000022 [ 3122.849891][T24790] RBP: 00000000410a6c2c R08: 0000000000000c2c R09: 00000000410a6c30 [ 3122.857882][T24790] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3122.865856][T24790] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a32546 [ 3122.873917][T24790] ? trace_user_exit.constprop.0+0x6/0x210 [ 3122.879748][T24790] [ 3122.886867][T24799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3123.014566][T24790] memory: usage 307196kB, limit 307200kB, failcnt 525 [ 3123.028486][T24790] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3123.035566][T24790] Memory cgroup stats for /syz4: [ 3123.035794][T24790] anon 102400 [ 3123.035794][T24790] file 368640 [ 3123.035794][T24790] kernel 314097664 [ 3123.035794][T24790] kernel_stack 65536 [ 3123.035794][T24790] pagetables 73728 [ 3123.035794][T24790] percpu 5431008 [ 3123.035794][T24790] sock 0 17:54:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x10}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "f3d2d8a6b3e7743cd9379f72ce1458b62d4ec6b2eb717528f35c8d8ae0b5d5cf5432d4892bda5a51f67d554b75ec74547f5668938a6cea726718895f349725501b9ef16b92"}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc}}, @NFT_MSG_DELSETELEM={0xd98, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd70, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "a7dd69bfddbf2bde2c179696578a869ffc90b03ae1e5061fbac2a2c52564d9a06f2d25ca6bfb8c780922c28f760ef9ce483479a78086dc9dce60eb22df715f154c8ec909fe25d1886d4844e0e1"}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "d30f050a2fce5c78acf7aeef841a5f595b9debfb221d95e73d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "1e8ed20fa887199c37c239599b30801e5a31c5967afa446a1112371b1591da2741e680f71ee042b98a96ee4359aeb9d7a5ac2e28d80a8bf941c0479ed7ca2413e71ef811c453f9444627d11caee269db9b25985b2bb4a6e42ad5238d4b31fe9d47757b04c86e38f75a9ecaaae64d34952e24e4200c168a162f63aa3e0d6a506e11e60ebf553e879037e9d36c5baa86804dca9a84c025f23996363547bced7727b2a4e0de906588dcd3ccc3dc8b28450a7c43d72fb9419edf83"}, @NFTA_SET_ELEM_EXPRESSIONS={0x174, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xa08, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "87319091a5082ee650df0cce444c1275ff0c4c8905b400dc4a05d7b75e2ffe8205b5d08141ee203a9f3e0ba8174090e4d6d7a7b11f31b6fe759b16c70224297670707127eaa730de6c5f243936ecd88d3a445e0ee68d9e996aa2e2ec52e8463902a6eba6aeb7a981a1cafe47d9a98428e2c2cc46ec926892d8b3010e0137384661ec3efe549b0b9a71"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "8f9dd29490cbb9d6711aac11b6aa1f201d829664659892304362758b7763081cd5ee48d5dc26fda5d9f516a0e6f216badfd5957e29f9f168d97f0b4e840875177a73cb668b1c59a2cfcdfcc56864a69395db9f8b19795e7203f0826bc6826c6893b0afe38e11b6620002a71a79f5e50f65d4b2011f11b9992b774ade7d1ae28f1c52677345477607d6e4f8584d8cbabb9269826be77066f1599737a3ce"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x8b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "061dbb42509f12af5fd1ba2425ebcea72995345df16b6b6c3676d8fbaff8e6145d4a4029d720e3a8565da604546cb4dd58c25481c662edd88c42ea6551c5ce1c910ed2a0cac19756fb9248049cda63e7dc56be5ac9687e6492ee71bd907209258574bc741ff068644d7912b1920ee30ca955066fd03e64235cca2dbd6c2506dfe0248242387003be3c60dba13c815a46164e6f6f0c2b20015628a50b8981e8d323d64e435e3fd85d27ae1deeaf84936f70c22002f958d4236d48aa33d33e8dbe3981915505a1ebe281fc2ec0cfc11ca5cd89a0b71f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x785, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 17:54:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 17:54:20 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x80108906, 0x0) [ 3123.035794][T24790] vmalloc 0 [ 3123.035794][T24790] shmem 368640 [ 3123.035794][T24790] zswap 0 [ 3123.035794][T24790] zswapped 0 [ 3123.035794][T24790] file_mapped 368640 [ 3123.035794][T24790] file_dirty 0 [ 3123.035794][T24790] file_writeback 0 [ 3123.035794][T24790] swapcached 0 [ 3123.035794][T24790] anon_thp 0 [ 3123.035794][T24790] file_thp 0 [ 3123.035794][T24790] shmem_thp 0 [ 3123.035794][T24790] inactive_anon 135168 [ 3123.035794][T24790] active_anon 335872 [ 3123.035794][T24790] inactive_file 0 [ 3123.035794][T24790] active_file 0 [ 3123.035794][T24790] unevictable 0 [ 3123.035794][T24790] slab_reclaimable 54616 [ 3123.035794][T24790] slab_unreclaimable 308434360 [ 3123.035794][T24790] slab 308488976 17:54:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x810) [ 3123.268598][T24790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24790,uid=0 17:54:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}, 0x2}, 0x0) [ 3123.402945][T24790] Memory cgroup out of memory: Killed process 24790 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3123.544328][T24819] nbd: must specify at least one socket [ 3123.567112][T24810] device bridge_slave_1 left promiscuous mode [ 3123.585158][T24810] bridge2241: port 1(bridge_slave_1) entered disabled state [ 3123.701886][T24811] bond0: (slave bridge2242): Enslaving as an active interface with an up link 17:54:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000058650008000a000f"], 0x28}}, 0x0) 17:54:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x0, 0x0, 0x0, 0x24}, 0x48) 17:54:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023feffffff0008000a000f"], 0x28}}, 0x0) 17:54:21 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000040)=ANY=[], 0x52) 17:54:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f}, 0x48) 17:54:21 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x8907, 0x0) [ 3123.964347][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3124.041266][T24822] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3124.068192][T24822] CPU: 0 PID: 24822 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3124.078651][T24822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3124.088726][T24822] Call Trace: [ 3124.092015][T24822] [ 3124.095128][T24822] dump_stack_lvl+0xcd/0x134 [ 3124.095213][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3124.099733][T24822] dump_header+0x10b/0x7f9 [ 3124.099772][T24822] oom_kill_process.cold+0x10/0x15 [ 3124.099804][T24822] out_of_memory+0x358/0x14a0 [ 3124.123163][T24822] ? find_held_lock+0x2d/0x110 [ 3124.127933][T24822] ? oom_killer_disable+0x270/0x270 [ 3124.133166][T24822] ? find_held_lock+0x2d/0x110 [ 3124.137958][T24822] mem_cgroup_out_of_memory+0x206/0x270 [ 3124.143531][T24822] ? mem_cgroup_margin+0x130/0x130 [ 3124.148669][T24822] ? lock_downgrade+0x6e0/0x6e0 [ 3124.153564][T24822] try_charge_memcg+0xf67/0x13f0 [ 3124.158542][T24822] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3124.164563][T24822] ? lock_downgrade+0x6e0/0x6e0 [ 3124.169485][T24822] charge_memcg+0x31/0x320 [ 3124.173936][T24822] __mem_cgroup_charge+0x27/0x90 [ 3124.178911][T24822] ? _compound_head+0x5d/0x150 [ 3124.183708][T24822] __handle_mm_fault+0x17df/0x39b0 [ 3124.188858][T24822] ? vm_iomap_memory+0x190/0x190 [ 3124.193846][T24822] handle_mm_fault+0x1c8/0x780 [ 3124.198638][T24822] do_user_addr_fault+0x475/0x1210 [ 3124.203786][T24822] exc_page_fault+0x94/0x170 [ 3124.208411][T24822] asm_exc_page_fault+0x22/0x30 [ 3124.213283][T24822] RIP: 0033:0x7f07204850d5 [ 3124.217715][T24822] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 3124.237354][T24822] RSP: 002b:00007ffc7a569578 EFLAGS: 00010202 [ 3124.243450][T24822] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 3124.251525][T24822] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 3124.259513][T24822] RBP: 00007ffc7a569638 R08: 00007f07209b0000 R09: 00007f07205b00c8 [ 3124.267503][T24822] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00000000002fab10 [ 3124.275494][T24822] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3124.283508][T24822] [ 3124.379288][T24822] memory: usage 307200kB, limit 307200kB, failcnt 556 [ 3124.395650][T24822] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3124.425441][T24822] Memory cgroup stats for /syz4: [ 3124.425675][T24822] anon 135168 [ 3124.425675][T24822] file 368640 [ 3124.425675][T24822] kernel 314052608 [ 3124.425675][T24822] kernel_stack 65536 [ 3124.425675][T24822] pagetables 81920 [ 3124.425675][T24822] percpu 5431008 [ 3124.425675][T24822] sock 0 [ 3124.425675][T24822] vmalloc 0 [ 3124.425675][T24822] shmem 368640 [ 3124.425675][T24822] zswap 0 [ 3124.425675][T24822] zswapped 0 [ 3124.425675][T24822] file_mapped 368640 [ 3124.425675][T24822] file_dirty 0 [ 3124.425675][T24822] file_writeback 0 [ 3124.425675][T24822] swapcached 0 [ 3124.425675][T24822] anon_thp 0 [ 3124.425675][T24822] file_thp 0 [ 3124.425675][T24822] shmem_thp 0 [ 3124.425675][T24822] inactive_anon 167936 [ 3124.425675][T24822] active_anon 335872 [ 3124.425675][T24822] inactive_file 0 [ 3124.425675][T24822] active_file 0 [ 3124.425675][T24822] unevictable 0 [ 3124.425675][T24822] slab_reclaimable 27928 [ 3124.425675][T24822] slab_unreclaimable 308413664 [ 3124.425675][T24822] slab 308441592 [ 3124.657142][T24820] bridge804: port 1(bridge_slave_1) entered blocking state [ 3124.664449][T24820] bridge804: port 1(bridge_slave_1) entered disabled state [ 3124.671739][T24822] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24822,uid=0 [ 3124.671901][T24822] Memory cgroup out of memory: Killed process 24822 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3124.774748][T24820] device bridge_slave_1 entered promiscuous mode [ 3124.812004][T24821] bridge804: port 1(bridge_slave_1) entered blocking state [ 3124.819409][T24821] bridge804: port 1(bridge_slave_1) entered forwarding state [ 3125.028335][T24821] bond0: (slave bridge804): Enslaving as an active interface with an up link [ 3125.043018][T24834] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:22 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000040)=ANY=[], 0x52) 17:54:22 executing program 2: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffffffffffff8}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 17:54:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x2500}, 0x0) 17:54:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000200000008000a000f"], 0x28}}, 0x0) 17:54:22 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x5411, 0x0) [ 3125.244680][T24849] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3125.255055][T24849] CPU: 0 PID: 24849 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3125.265507][T24849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3125.275595][T24849] Call Trace: [ 3125.278894][T24849] [ 3125.281841][T24849] dump_stack_lvl+0xcd/0x134 [ 3125.286469][T24849] dump_header+0x10b/0x7f9 [ 3125.290931][T24849] oom_kill_process.cold+0x10/0x15 [ 3125.296127][T24849] out_of_memory+0x358/0x14a0 [ 3125.300842][T24849] ? find_held_lock+0x2d/0x110 [ 3125.305637][T24849] ? oom_killer_disable+0x270/0x270 [ 3125.310877][T24849] ? find_held_lock+0x2d/0x110 [ 3125.315676][T24849] mem_cgroup_out_of_memory+0x206/0x270 [ 3125.321339][T24849] ? mem_cgroup_margin+0x130/0x130 [ 3125.326493][T24849] ? lock_downgrade+0x6e0/0x6e0 [ 3125.331388][T24849] try_charge_memcg+0xf67/0x13f0 [ 3125.336363][T24849] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3125.342371][T24849] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3125.348121][T24849] ? lock_downgrade+0x6e0/0x6e0 [ 3125.353001][T24849] ? lock_downgrade+0x6e0/0x6e0 [ 3125.357893][T24849] obj_cgroup_charge+0x2ab/0x5e0 [ 3125.362864][T24849] kmem_cache_alloc_lru+0x13e/0x720 [ 3125.368087][T24849] ? sock_alloc_inode+0x23/0x1d0 [ 3125.373064][T24849] sock_alloc_inode+0x23/0x1d0 [ 3125.377859][T24849] ? sock_free_inode+0x20/0x20 [ 3125.382650][T24849] alloc_inode+0x61/0x230 [ 3125.387009][T24849] new_inode_pseudo+0x13/0x80 [ 3125.391714][T24849] sock_alloc+0x3c/0x260 [ 3125.395990][T24849] __sock_create+0xb9/0x790 [ 3125.400522][T24849] ? lock_downgrade+0x6e0/0x6e0 [ 3125.405408][T24849] __sys_socket+0x12f/0x240 [ 3125.409935][T24849] ? __sys_socket_file+0x1f0/0x1f0 [ 3125.415082][T24849] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3125.421016][T24849] __x64_sys_socket+0x6f/0xb0 [ 3125.425724][T24849] do_syscall_64+0x35/0xb0 [ 3125.430170][T24849] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3125.436089][T24849] RIP: 0033:0x7f072048a5a9 [ 3125.440527][T24849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3125.460169][T24849] RSP: 002b:00007f071f3fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3125.468615][T24849] RAX: ffffffffffffffda RBX: 00007f07205abf80 RCX: 00007f072048a5a9 [ 3125.476613][T24849] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3125.484609][T24849] RBP: 00007f07204e5580 R08: 0000000000000000 R09: 0000000000000000 [ 3125.492603][T24849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3125.500601][T24849] R13: 00007ffc7a5694ff R14: 00007f071f3fe300 R15: 0000000000022000 [ 3125.508620][T24849] [ 3125.583395][T24849] memory: usage 307184kB, limit 307200kB, failcnt 609 [ 3125.605780][T24849] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3125.633743][T24849] Memory cgroup stats for /syz4: [ 3125.634029][T24849] anon 98304 [ 3125.634029][T24849] file 368640 [ 3125.634029][T24849] kernel 314081280 [ 3125.634029][T24849] kernel_stack 65536 [ 3125.634029][T24849] pagetables 73728 [ 3125.634029][T24849] percpu 5431008 [ 3125.634029][T24849] sock 0 [ 3125.634029][T24849] vmalloc 0 [ 3125.634029][T24849] shmem 368640 [ 3125.634029][T24849] zswap 0 [ 3125.634029][T24849] zswapped 0 [ 3125.634029][T24849] file_mapped 368640 [ 3125.634029][T24849] file_dirty 0 [ 3125.634029][T24849] file_writeback 0 [ 3125.634029][T24849] swapcached 0 [ 3125.634029][T24849] anon_thp 0 [ 3125.634029][T24849] file_thp 0 [ 3125.634029][T24849] shmem_thp 0 [ 3125.634029][T24849] inactive_anon 131072 [ 3125.634029][T24849] active_anon 335872 [ 3125.634029][T24849] inactive_file 0 [ 3125.634029][T24849] active_file 0 [ 3125.634029][T24849] unevictable 0 [ 3125.634029][T24849] slab_reclaimable 54232 [ 3125.634029][T24849] slab_unreclaimable 308423264 [ 3125.634029][T24849] slab 308477496 [ 3125.679400][T24838] bond0: (slave bridge2243): Enslaving as an active interface with an up link 17:54:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000680008000a000f"], 0x28}}, 0x0) 17:54:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x8}]}, @NFT_MSG_DELRULE={0x260, 0xb, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS, @NFTA_FIB_DREG]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS, @NFTA_COUNTER_PACKETS, @NFTA_COUNTER_BYTES, @NFTA_COUNTER_PACKETS, @NFTA_COUNTER_PACKETS, @NFTA_COUNTER_PACKETS]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_ID, @NFTA_RULE_USERDATA={0xdc, 0x7, 0x1, 0x0, "4ed0ac5354e397d5a87fd7e52cbf3b10c4f669e499dcc25029e1cc2d886fa64ace490f52b56035395fa8dc2452b8efca05733f91739d462bf7bcbb3983fa95ea2fd7596eb10d944a545cb00244cd344710ad8006d03369bbfb534303fec605ffcae8b61f3ad6cfef029cab172ccb93802b34e6b0cc0d3cf32017abe3e80dfa9663003fc869f575b5b5b0675935f95976f96d75d12f10ea339ef29a650f8d24b0d8cd1fa2c521fd63e7048eaf8e8aa3afda82032669fdb8aa8814eb4a28c4e92c2c000c00ce4a2aa68fb20ebaf7ce973358153f9b81eca7e5"}, @NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xffffffffffffffc4}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8}, @NFTA_META_SREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_DREG={0x8}, @NFTA_META_SREG={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_REG_PROTO_MIN]}}}, {0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_TYPE={0x8}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc}]}, @NFT_MSG_DELRULE={0x48, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x2ec}}, 0x0) 17:54:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0xfffffffffffffec0}], 0x300, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000000000020200c9dd000000001000"/32], 0x20}}], 0x1, 0x0) 17:54:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x10}, 0x80) [ 3125.826627][T24848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@rthdr={{0x18}}], 0x18}, 0x0) 17:54:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) [ 3126.063430][T24849] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24839,uid=0 [ 3126.070333][T24864] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 3126.079459][T24849] Memory cgroup out of memory: Killed process 24839 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3126.139855][T24859] bond0: (slave bridge805): Enslaving as an active interface with an up link [ 3126.149991][T24864] netlink: 496 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3126.196946][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3126.207721][T24847] device bridge_slave_1 left promiscuous mode [ 3126.215295][T24847] bridge804: port 1(bridge_slave_1) entered disabled state 17:54:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000000600010001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:24 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=ANY=[], 0x12f8}, 0x20080891) 17:54:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}}, 0x0) 17:54:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:54:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000300000008000a000f"], 0x28}}, 0x0) [ 3126.548282][T24863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x4000000) [ 3126.860992][T24879] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 3126.879338][T24879] CPU: 1 PID: 24879 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3126.889801][T24879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3126.899886][T24879] Call Trace: [ 3126.903181][T24879] [ 3126.906129][T24879] dump_stack_lvl+0xcd/0x134 [ 3126.910753][T24879] dump_header+0x10b/0x7f9 [ 3126.915207][T24879] oom_kill_process.cold+0x10/0x15 [ 3126.920353][T24879] out_of_memory+0x358/0x14a0 [ 3126.925076][T24879] ? find_held_lock+0x2d/0x110 [ 3126.929867][T24879] ? oom_killer_disable+0x270/0x270 [ 3126.935106][T24879] ? find_held_lock+0x2d/0x110 [ 3126.939898][T24879] mem_cgroup_out_of_memory+0x206/0x270 [ 3126.945471][T24879] ? mem_cgroup_margin+0x130/0x130 [ 3126.950601][T24879] ? lock_downgrade+0x6e0/0x6e0 [ 3126.955494][T24879] try_charge_memcg+0xf67/0x13f0 [ 3126.960467][T24879] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3126.966470][T24879] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3126.972215][T24879] ? lock_downgrade+0x6e0/0x6e0 [ 3126.977097][T24879] ? lock_downgrade+0x6e0/0x6e0 [ 3126.981974][T24879] ? rcu_read_unlock+0x9/0x60 [ 3126.986694][T24879] obj_cgroup_charge+0x2ab/0x5e0 [ 3126.991666][T24879] ? copy_process+0x5c2/0x7090 [ 3126.996460][T24879] kmem_cache_alloc_node+0x92/0x3f0 [ 3127.001678][T24879] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3127.006908][T24879] copy_process+0x5c2/0x7090 [ 3127.011530][T24879] ? find_held_lock+0x2d/0x110 [ 3127.016324][T24879] ? find_held_lock+0x2d/0x110 [ 3127.021113][T24879] ? __cleanup_sighand+0xb0/0xb0 [ 3127.026096][T24879] kernel_clone+0xe7/0xab0 [ 3127.030543][T24879] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3127.036551][T24879] ? create_io_thread+0xe0/0xe0 [ 3127.041440][T24879] ? find_held_lock+0x2d/0x110 [ 3127.046232][T24879] ? __ct_user_exit+0xff/0x150 [ 3127.051377][T24879] __do_sys_clone+0xba/0x100 [ 3127.055990][T24879] ? kernel_clone+0xab0/0xab0 [ 3127.060704][T24879] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3127.066626][T24879] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3127.072556][T24879] do_syscall_64+0x35/0xb0 [ 3127.076995][T24879] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3127.082912][T24879] RIP: 0033:0x7f072048b9d1 [ 3127.087344][T24879] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3127.106982][T24879] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3127.115436][T24879] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3127.123549][T24879] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3127.131547][T24879] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3127.139544][T24879] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3127.147541][T24879] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3127.155646][T24879] [ 3127.272631][T24866] bridge2244: port 1(bridge_slave_1) entered blocking state [ 3127.282006][T24866] bridge2244: port 1(bridge_slave_1) entered disabled state [ 3127.289536][T24879] memory: usage 307200kB, limit 307200kB, failcnt 648 [ 3127.314959][T24866] device bridge_slave_1 entered promiscuous mode [ 3127.321784][T24879] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3127.333387][T24879] Memory cgroup stats for /syz4: [ 3127.333633][T24879] anon 151552 [ 3127.333633][T24879] file 368640 [ 3127.333633][T24879] kernel 314040320 [ 3127.333633][T24879] kernel_stack 65536 [ 3127.333633][T24879] pagetables 81920 [ 3127.333633][T24879] percpu 5431008 [ 3127.333633][T24879] sock 0 [ 3127.333633][T24879] vmalloc 0 [ 3127.333633][T24879] shmem 368640 [ 3127.333633][T24879] zswap 0 [ 3127.333633][T24879] zswapped 0 [ 3127.333633][T24879] file_mapped 368640 [ 3127.333633][T24879] file_dirty 0 [ 3127.333633][T24879] file_writeback 0 [ 3127.333633][T24879] swapcached 0 [ 3127.333633][T24879] anon_thp 0 [ 3127.333633][T24879] file_thp 0 [ 3127.333633][T24879] shmem_thp 0 [ 3127.333633][T24879] inactive_anon 184320 [ 3127.333633][T24879] active_anon 335872 [ 3127.333633][T24879] inactive_file 0 [ 3127.333633][T24879] active_file 0 [ 3127.333633][T24879] unevictable 0 [ 3127.333633][T24879] slab_reclaimable 15320 [ 3127.333633][T24879] slab_unreclaimable 308411552 [ 3127.333633][T24879] slab 308426872 [ 3127.362929][T24870] bridge2244: port 1(bridge_slave_1) entered blocking state [ 3127.434902][T24870] bridge2244: port 1(bridge_slave_1) entered forwarding state [ 3127.500993][T24879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24879,uid=0 [ 3127.525090][T24879] Memory cgroup out of memory: Killed process 24879 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3127.898088][T24870] bond0: (slave bridge2244): Enslaving as an active interface with an up link [ 3127.935236][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000006c0008000a000f"], 0x28}}, 0x0) 17:54:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0x1}], 0x1, &(0x7f0000000600)=[{0x90, 0x0, 0x0, "d65554b42c305801869066ac463c4baf3e725257d457c14361f891cc6d28279bb53cad593ae4f3509cc36c7c101f22bdd92fd8a0316e4c2f2c6203048015d603e3b4164c5702fd13a9f27295eec61a1645a215bbb6fa7403122981750f306b34a25a99750ff704b17ccb7e0e75ca2639dac34484e7c3f321f6"}, {0x1010, 0x0, 0x0, "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"}, {0x40, 0x0, 0x0, "0188d8d2aab93afec03a798f3a99c23bbc2031da7d429e32fba1fd8015ecd026a4a96fc648cde9987a"}, {0x80, 0x0, 0x0, "92c8f756f9ed4cf78b04f963be7a24df21ca1b3c7a15c447c13651c56dd24409af69d96cff3d2e79b08efebc83d06c88c82b26358eeebe052ad15d894f6fa359e46d1819a36f602203fa0246ca11db3115f26ec9ba44df792594747432b321c9d07891e93da82f06df"}, {0xea8, 0x0, 0x0, "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"}], 0x2008}}], 0x1, 0x0) 17:54:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 17:54:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x0, 0x0, 0x4}, 0x48) [ 3128.204607][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x58}}, 0x0) 17:54:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) [ 3128.364200][T26046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2136: link becomes ready [ 3128.396410][T24885] bridge806: port 1(bridge_slave_1) entered blocking state [ 3128.403715][T24885] bridge806: port 1(bridge_slave_1) entered disabled state [ 3128.416435][T24885] device bridge_slave_1 entered promiscuous mode [ 3128.438368][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3128.597232][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000000600010001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 17:54:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000400000008000a000f"], 0x28}}, 0x0) 17:54:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000000a0a01"], 0x24}, 0x300}, 0x0) 17:54:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0xec4}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "f3d2d8a6b3e7743cd9379f72ce1458b62d4ec6b2eb717528f35c8d8ae0b5d5cf5432d4892bda5a51f67d554b75ec74547f5668938a6cea726718895f349725501b9ef16b92"}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc}}, @NFT_MSG_DELSETELEM={0xd98, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd70, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "a7dd69bfddbf2bde2c179696578a869ffc90b03ae1e5061fbac2a2c52564d9a06f2d25ca6bfb8c780922c28f760ef9ce483479a78086dc9dce60eb22df715f154c8ec909fe25d1886d4844e0e1"}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "d30f050a2fce5c78acf7aeef841a5f595b9debfb221d95e73d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "1e8ed20fa887199c37c239599b30801e5a31c5967afa446a1112371b1591da2741e680f71ee042b98a96ee4359aeb9d7a5ac2e28d80a8bf941c0479ed7ca2413e71ef811c453f9444627d11caee269db9b25985b2bb4a6e42ad5238d4b31fe9d47757b04c86e38f75a9ecaaae64d34952e24e4200c168a162f63aa3e0d6a506e11e60ebf553e879037e9d36c5baa86804dca9a84c025f23996363547bced7727b2a4e0de906588dcd3ccc3dc8b28450a7c43d72fb9419edf83"}, @NFTA_SET_ELEM_EXPRESSIONS={0x174, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xa08, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "87319091a5082ee650df0cce444c1275ff0c4c8905b400dc4a05d7b75e2ffe8205b5d08141ee203a9f3e0ba8174090e4d6d7a7b11f31b6fe759b16c70224297670707127eaa730de6c5f243936ecd88d3a445e0ee68d9e996aa2e2ec52e8463902a6eba6aeb7a981a1cafe47d9a98428e2c2cc46ec926892d8b3010e0137384661ec3efe549b0b9a71"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "8f9dd29490cbb9d6711aac11b6aa1f201d829664659892304362758b7763081cd5ee48d5dc26fda5d9f516a0e6f216badfd5957e29f9f168d97f0b4e840875177a73cb668b1c59a2cfcdfcc56864a69395db9f8b19795e7203f0826bc6826c6893b0afe38e11b6620002a71a79f5e50f65d4b2011f11b9992b774ade7d1ae28f1c52677345477607d6e4f8584d8cbabb9269826be77066f1599737a3ce"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x8b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "061dbb42509f12af5fd1ba2425ebcea72995345df16b6b6c3676d8fbaff8e6145d4a4029d720e3a8565da604546cb4dd58c25481c662edd88c42ea6551c5ce1c910ed2a0cac19756fb9248049cda63e7dc56be5ac9687e6492ee71bd907209258574bc741ff068644d7912b1920ee30ca955066fd03e64235cca2dbd6c2506dfe0248242387003be3c60dba13c815a46164e6f6f0c2b20015628a50b8981e8d323d64e435e3fd85d27ae1deeaf84936f70c22002f958d4236d48aa33d33e8dbe3981915505a1ebe281fc2ec0cfc11ca5cd89a0b71f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x785, 0x1, "ba39eec6e2ab7ef696fe33456077585b176064abc0846ac6016f68ac503225996abece4adb8373f92d8486e5d1df03bf2c94e84992a291ddff9379478e4033f4839e51c2e84946506648bbcf11e6dc055a78875d5c2fd9ed76d9acc0ca43ff6cd7a3011343c1c5a960e8b0eb9762742e567ffd6a4e15de20854bcf91f561d5fad60eae4aaaa1af51c0f2e0cfccd48c8461433af3de3ed613bc22ed810cc9bed8c975097d8d7c6a8baccdee678e8994dea811fe33006d8c2fc383f79d4d31b2665cd328333dd65fab6f663f403527768a6db418b4604abdc28a386381fabc90651a3edc42006ebfa35bee1b68ee21fb5e6a3af276176fecc46684eb4a3657b9bded06614bf5f714778169ddb9cc8c84cc6771af2bf866dd42c3fdecf2a727ca22c05f414eb0aa3cbd53928198cb92d26082ba80bf8a470f5cf10f19aee644424793b4d26d2e65963da079a8a757c63a6fa4d9123e56522c4568a97aa7e3085b27006d74f437bdc803fd725d6dc7dba433f63001073e519acbc61b2b008aaa12d40011a323551dbd07b5baa8c0fd61cd0c71af0a5d4290b50d9c011cb7f0b07de2e208478f60931c2fd510a3b3e4f9a24a1bb4db5a435b99fc9a7f6eb82926df9070f1169a0e6455698682ddc106cc954455ce91b9a547fbe5202bda5f319d8cc4047f65abc34457671790a833bf5fdfed3047fc4968064ea0c8dd3053d9f1df37bf45dc2ff772b50312d5f3f87657580fe69211eacddecb384dd0ac3bf8a5e9ab7a845f5eaf8cd54e04e400e54a7b4a386b6a92158c3d69753fe5e7873ab674535db07a5080a6ecdde691c63910c465e6a386a4b82b16854e23ad458c058313f5a893a0f5e9d449c2439ceeda1f3c64728764193479a183c973661eada0ec740ff1c47add8ab14ac7504d00fcdf8e693e68e95a35c5e7fabc9b2e023701315550abc271f2a789e11b5557d12d9eccb5d85b6965a4be3980930982d16df7e36679ed1cc71f1c0805f9e54a6b051b9e55360f6e5b65b0ec84dab45513d322dcc76c5304183b5a5598bcd700fba734bd22ee073f7244ea9a5713890512b4fd7e38a96339c589c5d292fb6eb644bfdc6ed08849bd78dc9d84a179860a73412929beb5e30ec54fc12c893b9e8d11e2636f3056609239c0a96c4e5f876865fba2dbe1657648ad93844ce1c4645a4ed5a93515df8e502692bf6d6a5361d2dcfd90ca8152ec04d19ab0408e07b80066111889507a6757be985bc7160dbf308e9601e95f24d1c9b3c9deb55fd75cf4feea40724df6c9728405259a0e3cd76afce74021d5fdf33a57899b5b249b3644d659fe3ca0fa2abd01c845d3ce49c4cfffb436faf3b645cf5d9c61873d7e0566ef98489c165ca9ef240670b6d4cc14104af5af2d725647b291b1826df439955d161034f0e8381b5e615bcc106235bdf3b7eb57b1a004f64fced2d806c92d242cb9f6aea0c9535d3e9309e45ecf2d7bdc6e6ee6bcfe40795f588640f2ed27fb64cb790ebf6d138375c86b96bc11a96779ec4280f03435d6c53efc0400d366f02f9c255a82c811ac7291159ad3eda9a195ae27c7886dd4246a7f1e0475717d2955ca5254e9da67e4feee9e787b78dcd7653c5eb70235cbffc6b66e2430151bf1c015d9124c22ca8f64df4006472b9ebd447c39a1b4c6aaa744c205ac1177f4ce9da30daba508788398f2829f21aa47487bd0dbdd1132488dcab2eb9d8f9512e5b3aa1ef19a6c7b1b5e03d73ee551b0e424149085bdab082124cdaeb8bb7d2419150c2a84196cda3fa1e856987c2a906897941841894094fb8c5009e5ae2bb88c8e2156b80d8afb6d5bf48d0c5899d2b0f59ab0da1419b76f255daf11ea58b478e6e1890c3bf20eaed5c40873c4cda27d0e37ee56d52bc1179cb123c02f79e9a963202000a2de3c74480a28965c145d6b02e499a3932b2b4a72fc56e82cce5b5fe6558b969711b6929d461ca3a5eef7889c97f37b129ebd76aa4dafcb02b71669e848a0cee758955e39875fdb73909c8356bcb8b4f4b199123df7638de80c8ff80b19256fb69454faced682721765d9c6aa9b33d72df8f57c5532a2c32e296348ae8de9652d8c99a04c630eb2b49c5542744aab0850bf3e45ce27e28c9dbdada5e30e5402d2b3757aa52af249c6f7548e16fc4d4c59175f14962b84b2bc1860d53ef09254e1846b51fc5596dcb4f7f0878c435850acc4cfcacbf7551449d79f399f8ee34df071c3a6932bce65e6b66dc5c3dc91b77e913ac14087467668fe62ff931f6bde3e0d471f79f77d33226436dd614f78d2a0a6d48c431be32e608a388a24f992396de6896ade7be1b5b7594a37ce543b4794d78a15ea24870e91cdea5c5316a5b3e92622333f15e46cdcab1f90552bc890021c2e5b9c368b60afd980cc1f7c163a7c055e0ca45291377a91ad25a733e1aedc8bb8be79ecdaf8e4958e2e90fdf01db195dcf36bf4aa1e3b0a01c8850d45eb9bf88b5f56bb883ec8cf8d16584d5cf82a1b4fa3240f2e2ab73b7af2211db009c87d5bb93dabd603c0bbc6f23223a8f354d29af70719cba65c0460dca51acea3862a123604e7f22572c6dda431aa34f2bd28df2ecea2353b66fabcc44d2f13a0f9f893e87342e489e30bd082d1ed60aa2358d1dca9971fc3a0f867fa93ab61f51fd209d47082dc2b5fdaf1c5feb808855c9c142f80d0273cc8333a2d25d5d3a6532456ae"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 17:54:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14, 0xa04, 0x1, 0x0, 0x0, {0x0, 0x0, 0x10}}, [], {0x14, 0x10}}, 0x28}}, 0x0) [ 3128.871543][T24914] bond0: (slave bridge807): Enslaving as an active interface with an up link [ 3128.914691][T24902] device bridge_slave_1 left promiscuous mode [ 3128.931291][T24902] bridge2244: port 1(bridge_slave_1) entered disabled state [ 3128.943485][T24907] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3128.965467][T24907] CPU: 0 PID: 24907 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3128.975924][T24907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3128.986004][T24907] Call Trace: [ 3128.989299][T24907] [ 3128.992249][T24907] dump_stack_lvl+0xcd/0x134 [ 3128.996866][T24907] dump_header+0x10b/0x7f9 [ 3128.998486][T24902] bridge2245: port 1(bridge_slave_1) entered blocking state [ 3129.001287][T24907] oom_kill_process.cold+0x10/0x15 [ 3129.013701][T24907] out_of_memory+0x358/0x14a0 [ 3129.018412][T24907] ? find_held_lock+0x2d/0x110 [ 3129.023199][T24907] ? oom_killer_disable+0x270/0x270 [ 3129.028428][T24907] ? find_held_lock+0x2d/0x110 [ 3129.033222][T24907] mem_cgroup_out_of_memory+0x206/0x270 [ 3129.038791][T24907] ? mem_cgroup_margin+0x130/0x130 [ 3129.043920][T24907] ? lock_downgrade+0x6e0/0x6e0 [ 3129.048814][T24907] try_charge_memcg+0xf67/0x13f0 [ 3129.053772][T24907] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3129.055691][T24902] bridge2245: port 1(bridge_slave_1) entered disabled state [ 3129.059746][T24907] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3129.059776][T24907] ? lock_downgrade+0x6e0/0x6e0 [ 3129.059804][T24907] ? lock_downgrade+0x6e0/0x6e0 [ 3129.082513][T24907] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3129.088115][T24907] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3129.094304][T24907] copy_process+0x73e/0x7090 [ 3129.098917][T24907] ? find_held_lock+0x2d/0x110 [ 3129.103705][T24907] ? __cleanup_sighand+0xb0/0xb0 [ 3129.103955][T24902] device bridge_slave_1 entered promiscuous mode [ 3129.108666][T24907] kernel_clone+0xe7/0xab0 [ 3129.108694][T24907] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3129.125512][T24907] ? create_io_thread+0xe0/0xe0 [ 3129.130400][T24907] ? find_held_lock+0x2d/0x110 [ 3129.135188][T24907] ? __ct_user_exit+0xff/0x150 [ 3129.139983][T24907] __do_sys_clone+0xba/0x100 [ 3129.144592][T24907] ? kernel_clone+0xab0/0xab0 [ 3129.149293][T24907] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3129.155209][T24907] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3129.157154][T24909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3129.161120][T24907] do_syscall_64+0x35/0xb0 [ 3129.161151][T24907] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3129.180657][T24907] RIP: 0033:0x7f072048b9d1 [ 3129.185089][T24907] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3129.204725][T24907] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 17:54:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300000c720008000a000f"], 0x28}}, 0x0) 17:54:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a80)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xe68, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe55, 0x5, "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"}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 17:54:26 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x18}, 0x0) 17:54:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0x1000000000000}], 0x300, &(0x7f0000000600)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) [ 3129.209024][T24905] device bridge_slave_1 left promiscuous mode [ 3129.213148][T24907] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3129.213171][T24907] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3129.213187][T24907] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3129.213204][T24907] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3129.251177][T24907] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3129.259198][T24907] [ 3129.359507][T24905] bridge806: port 1(bridge_slave_1) entered disabled state 17:54:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x38}}, 0x0) [ 3129.518882][T24907] memory: usage 307200kB, limit 307200kB, failcnt 751 [ 3129.534322][T24907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3129.678402][T24907] Memory cgroup stats for /syz4: [ 3129.679690][T24907] anon 151552 [ 3129.679690][T24907] file 368640 [ 3129.679690][T24907] kernel 314036224 [ 3129.679690][T24907] kernel_stack 65536 [ 3129.679690][T24907] pagetables 81920 [ 3129.679690][T24907] percpu 5431008 [ 3129.679690][T24907] sock 0 [ 3129.679690][T24907] vmalloc 0 [ 3129.679690][T24907] shmem 368640 [ 3129.679690][T24907] zswap 0 [ 3129.679690][T24907] zswapped 0 [ 3129.679690][T24907] file_mapped 368640 [ 3129.679690][T24907] file_dirty 0 [ 3129.679690][T24907] file_writeback 0 [ 3129.679690][T24907] swapcached 0 [ 3129.679690][T24907] anon_thp 0 [ 3129.679690][T24907] file_thp 0 [ 3129.679690][T24907] shmem_thp 0 [ 3129.679690][T24907] inactive_anon 184320 [ 3129.679690][T24907] active_anon 335872 [ 3129.679690][T24907] inactive_file 0 [ 3129.679690][T24907] active_file 0 [ 3129.679690][T24907] unevictable 0 [ 3129.679690][T24907] slab_reclaimable 15320 [ 3129.679690][T24907] slab_unreclaimable 308408016 [ 3129.679690][T24907] slab 308423336 17:54:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast1}, 0x18, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) [ 3129.861892][T24905] bridge807: port 1(bridge_slave_1) entered blocking state [ 3129.878386][T24905] bridge807: port 1(bridge_slave_1) entered disabled state [ 3129.902561][T24905] device bridge_slave_1 entered promiscuous mode [ 3129.902585][T24907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24907,uid=0 [ 3129.916502][T24905] bridge807: port 1(bridge_slave_1) entered blocking state [ 3129.931893][T24905] bridge807: port 1(bridge_slave_1) entered forwarding state [ 3129.969637][T24907] Memory cgroup out of memory: Killed process 24907 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 17:54:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000000600010001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000003000010000000000000000000000000a588900000c0a01"], 0x89b4}}, 0x0) [ 3130.086457][T24938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3130.121653][T24935] netlink: 35140 bytes leftover after parsing attributes in process `syz-executor.2'. 17:54:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000500000008000a000f"], 0x28}}, 0x0) 17:54:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14, 0xa07, 0x1, 0x0, 0x0, {0x0, 0x0, 0x10}}, [], {0x14, 0x10}}, 0x28}}, 0x0) 17:54:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "f3d2d8a6b3e7743cd9379f72ce1458b62d4ec6b2eb717528f35c8d8ae0b5d5cf5432d4892bda5a51f67d554b75ec74547f5668938a6cea726718895f349725501b9ef16b92"}]}, @NFT_MSG_DELSET={0x10, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc}}, @NFT_MSG_DELSETELEM={0xd98, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd70, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "a7dd69bfddbf2bde2c179696578a869ffc90b03ae1e5061fbac2a2c52564d9a06f2d25ca6bfb8c780922c28f760ef9ce483479a78086dc9dce60eb22df715f154c8ec909fe25d1886d4844e0e1"}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "d30f050a2fce5c78acf7aeef841a5f595b9debfb221d95e73d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "1e8ed20fa887199c37c239599b30801e5a31c5967afa446a1112371b1591da2741e680f71ee042b98a96ee4359aeb9d7a5ac2e28d80a8bf941c0479ed7ca2413e71ef811c453f9444627d11caee269db9b25985b2bb4a6e42ad5238d4b31fe9d47757b04c86e38f75a9ecaaae64d34952e24e4200c168a162f63aa3e0d6a506e11e60ebf553e879037e9d36c5baa86804dca9a84c025f23996363547bced7727b2a4e0de906588dcd3ccc3dc8b28450a7c43d72fb9419edf83"}, @NFTA_SET_ELEM_EXPRESSIONS={0x174, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xa08, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "87319091a5082ee650df0cce444c1275ff0c4c8905b400dc4a05d7b75e2ffe8205b5d08141ee203a9f3e0ba8174090e4d6d7a7b11f31b6fe759b16c70224297670707127eaa730de6c5f243936ecd88d3a445e0ee68d9e996aa2e2ec52e8463902a6eba6aeb7a981a1cafe47d9a98428e2c2cc46ec926892d8b3010e0137384661ec3efe549b0b9a71"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "8f9dd29490cbb9d6711aac11b6aa1f201d829664659892304362758b7763081cd5ee48d5dc26fda5d9f516a0e6f216badfd5957e29f9f168d97f0b4e840875177a73cb668b1c59a2cfcdfcc56864a69395db9f8b19795e7203f0826bc6826c6893b0afe38e11b6620002a71a79f5e50f65d4b2011f11b9992b774ade7d1ae28f1c52677345477607d6e4f8584d8cbabb9269826be77066f1599737a3ce"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x8b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "061dbb42509f12af5fd1ba2425ebcea72995345df16b6b6c3676d8fbaff8e6145d4a4029d720e3a8565da604546cb4dd58c25481c662edd88c42ea6551c5ce1c910ed2a0cac19756fb9248049cda63e7dc56be5ac9687e6492ee71bd907209258574bc741ff068644d7912b1920ee30ca955066fd03e64235cca2dbd6c2506dfe0248242387003be3c60dba13c815a46164e6f6f0c2b20015628a50b8981e8d323d64e435e3fd85d27ae1deeaf84936f70c22002f958d4236d48aa33d33e8dbe3981915505a1ebe281fc2ec0cfc11ca5cd89a0b71f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x785, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 17:54:27 executing program 2: socketpair(0x1e, 0x0, 0x1, &(0x7f00000000c0)) [ 3130.254326][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3130.396725][T24944] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3130.443252][T24944] CPU: 1 PID: 24944 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3130.453723][T24944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3130.463804][T24944] Call Trace: [ 3130.467104][T24944] [ 3130.470052][T24944] dump_stack_lvl+0xcd/0x134 [ 3130.474677][T24944] dump_header+0x10b/0x7f9 [ 3130.479131][T24944] oom_kill_process.cold+0x10/0x15 [ 3130.484295][T24944] out_of_memory+0x358/0x14a0 [ 3130.489009][T24944] ? find_held_lock+0x2d/0x110 [ 3130.493800][T24944] ? oom_killer_disable+0x270/0x270 [ 3130.499043][T24944] ? find_held_lock+0x2d/0x110 [ 3130.503839][T24944] mem_cgroup_out_of_memory+0x206/0x270 [ 3130.509416][T24944] ? mem_cgroup_margin+0x130/0x130 [ 3130.514565][T24944] ? lock_downgrade+0x6e0/0x6e0 [ 3130.519466][T24944] try_charge_memcg+0xf67/0x13f0 [ 3130.524442][T24944] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3130.530480][T24944] ? lock_downgrade+0x6e0/0x6e0 [ 3130.535377][T24944] charge_memcg+0x31/0x320 [ 3130.539828][T24944] __mem_cgroup_charge+0x27/0x90 [ 3130.544818][T24944] ? _compound_head+0x5d/0x150 [ 3130.549619][T24944] wp_page_copy+0x27c/0x1b60 [ 3130.554244][T24944] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3130.559729][T24944] ? lock_downgrade+0x6e0/0x6e0 [ 3130.564615][T24944] ? vm_normal_page+0x146/0x2a0 [ 3130.569502][T24944] do_wp_page+0x1d1/0x1910 [ 3130.573931][T24944] __handle_mm_fault+0x1813/0x39b0 [ 3130.579060][T24944] ? vm_iomap_memory+0x190/0x190 [ 3130.584036][T24944] handle_mm_fault+0x1c8/0x780 [ 3130.588905][T24944] do_user_addr_fault+0x475/0x1210 [ 3130.594043][T24944] exc_page_fault+0x94/0x170 [ 3130.598649][T24944] asm_exc_page_fault+0x22/0x30 [ 3130.603534][T24944] RIP: 0033:0x7f0720437970 [ 3130.607958][T24944] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3130.627590][T24944] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3130.633666][T24944] RAX: 00000000095816ae RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3130.641744][T24944] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 000000000c1b0287 [ 3130.649725][T24944] RBP: 00000000095816ae R08: 00000000000016ae R09: 00000000095816b2 [ 3130.657701][T24944] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3130.665680][T24944] R13: 0000000000000001 R14: 0000000000000009 R15: ffffffff874ccdd8 [ 3130.673655][T24944] ? __sock_create+0x28/0x790 [ 3130.678363][T24944] [ 3131.113741][T24944] memory: usage 307148kB, limit 307200kB, failcnt 836 [ 3131.133939][T24944] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3131.155173][T24944] Memory cgroup stats for /syz4: [ 3131.155226][T24926] device bridge_slave_1 left promiscuous mode [ 3131.155393][T24944] anon 122880 [ 3131.155393][T24944] file 368640 [ 3131.155393][T24944] kernel 314028032 [ 3131.155393][T24944] kernel_stack 65536 [ 3131.155393][T24944] pagetables 73728 [ 3131.155393][T24944] percpu 5431008 [ 3131.155393][T24944] sock 0 [ 3131.155393][T24944] vmalloc 0 [ 3131.155393][T24944] shmem 368640 [ 3131.155393][T24944] zswap 0 [ 3131.155393][T24944] zswapped 0 [ 3131.155393][T24944] file_mapped 368640 [ 3131.155393][T24944] file_dirty 0 [ 3131.155393][T24944] file_writeback 0 [ 3131.155393][T24944] swapcached 0 [ 3131.155393][T24944] anon_thp 0 [ 3131.155393][T24944] file_thp 0 [ 3131.155393][T24944] shmem_thp 0 [ 3131.155393][T24944] inactive_anon 122880 [ 3131.155393][T24944] active_anon 335872 [ 3131.155393][T24944] inactive_file 0 [ 3131.155393][T24944] active_file 0 [ 3131.155393][T24944] unevictable 0 [ 3131.155393][T24944] slab_reclaimable 13392 [ 3131.155393][T24944] slab_unreclaimable 308409560 [ 3131.155393][T24944] slab 308422952 [ 3131.182551][T24926] bridge2245: port 1(bridge_slave_1) entered disabled state [ 3131.332372][T24938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3131.393937][T24944] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24944,uid=0 [ 3131.435636][T24944] Memory cgroup out of memory: Killed process 24944 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3131.559569][T24948] device bridge_slave_1 left promiscuous mode [ 3131.565868][T24948] bridge807: port 1(bridge_slave_1) entered disabled state 17:54:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000740008000a000f"], 0x28}}, 0x0) 17:54:29 executing program 0: r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000002c0)="ff02040000eeff0000000000000000000000000000020205", 0x18) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000140)="a8", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) 17:54:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2, 0x0, 0xfffffffb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x18}, 0x0) 17:54:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '^@+^\xd0\x03#,^^'}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) 17:54:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000600000008000a000f"], 0x28}}, 0x0) 17:54:29 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x8905, 0x0) [ 3131.736660][T24955] nbd: must specify a size in bytes for the device [ 3131.820888][T24957] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3131.860221][T24945] bond0: (slave bridge808): Enslaving as an active interface with an up link 17:54:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0x1}], 0x1, &(0x7f0000000600)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 17:54:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0x2, 0x0, 0x0, @mcast1}, 0x2, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) 17:54:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0x1}], 0x300, &(0x7f0000000600)=[{0x10, 0x6000}, {0x10}], 0x20}}], 0x1, 0x0) 17:54:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 17:54:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x2}}, 0x48}}, 0x0) [ 3132.150612][T24957] CPU: 1 PID: 24957 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3132.161092][T24957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3132.171178][T24957] Call Trace: [ 3132.174482][T24957] [ 3132.177434][T24957] dump_stack_lvl+0xcd/0x134 [ 3132.182060][T24957] dump_header+0x10b/0x7f9 [ 3132.186513][T24957] oom_kill_process.cold+0x10/0x15 [ 3132.191658][T24957] out_of_memory+0x358/0x14a0 [ 3132.196364][T24957] ? find_held_lock+0x2d/0x110 [ 3132.201148][T24957] ? oom_killer_disable+0x270/0x270 [ 3132.206381][T24957] ? find_held_lock+0x2d/0x110 [ 3132.211173][T24957] mem_cgroup_out_of_memory+0x206/0x270 [ 3132.216748][T24957] ? mem_cgroup_margin+0x130/0x130 [ 3132.221887][T24957] ? lock_downgrade+0x6e0/0x6e0 [ 3132.226787][T24957] try_charge_memcg+0xf67/0x13f0 [ 3132.231762][T24957] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3132.237779][T24957] ? lock_downgrade+0x6e0/0x6e0 [ 3132.242674][T24957] charge_memcg+0x31/0x320 [ 3132.247129][T24957] __mem_cgroup_charge+0x27/0x90 [ 3132.252090][T24957] ? _compound_head+0x5d/0x150 [ 3132.256887][T24957] wp_page_copy+0x27c/0x1b60 [ 3132.261510][T24957] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3132.266991][T24957] ? lock_downgrade+0x6e0/0x6e0 [ 3132.271864][T24957] ? vm_normal_page+0x146/0x2a0 [ 3132.276754][T24957] do_wp_page+0x1d1/0x1910 [ 3132.281207][T24957] __handle_mm_fault+0x1813/0x39b0 [ 3132.286365][T24957] ? vm_iomap_memory+0x190/0x190 [ 3132.291364][T24957] handle_mm_fault+0x1c8/0x780 [ 3132.296160][T24957] do_user_addr_fault+0x475/0x1210 [ 3132.301322][T24957] exc_page_fault+0x94/0x170 [ 3132.305935][T24957] asm_exc_page_fault+0x22/0x30 [ 3132.310887][T24957] RIP: 0033:0x7f0720437970 [ 3132.315319][T24957] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3132.334946][T24957] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3132.341020][T24957] RAX: 000000001f5c537c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3132.349018][T24957] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0cb9 [ 3132.357019][T24957] RBP: 000000001f5c537c R08: 000000000000137c R09: 000000001f5c5380 [ 3132.365004][T24957] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3132.372980][T24957] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff81a3254d [ 3132.380976][T24957] ? trace_user_exit.constprop.0+0xd/0x210 [ 3132.386837][T24957] [ 3132.394473][T24959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3132.544433][T24957] memory: usage 307176kB, limit 307200kB, failcnt 886 [ 3132.556022][T24957] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3132.562913][T24957] Memory cgroup stats for /syz4: [ 3132.563136][T24957] anon 106496 [ 3132.563136][T24957] file 368640 [ 3132.563136][T24957] kernel 314073088 [ 3132.563136][T24957] kernel_stack 65536 [ 3132.563136][T24957] pagetables 73728 [ 3132.563136][T24957] percpu 5431008 [ 3132.563136][T24957] sock 0 [ 3132.563136][T24957] vmalloc 0 [ 3132.563136][T24957] shmem 368640 [ 3132.563136][T24957] zswap 0 [ 3132.563136][T24957] zswapped 0 [ 3132.563136][T24957] file_mapped 368640 [ 3132.563136][T24957] file_dirty 0 [ 3132.563136][T24957] file_writeback 0 [ 3132.563136][T24957] swapcached 0 [ 3132.563136][T24957] anon_thp 0 [ 3132.563136][T24957] file_thp 0 [ 3132.563136][T24957] shmem_thp 0 [ 3132.563136][T24957] inactive_anon 139264 [ 3132.563136][T24957] active_anon 335872 [ 3132.563136][T24957] inactive_file 0 [ 3132.563136][T24957] active_file 0 [ 3132.563136][T24957] unevictable 0 [ 3132.563136][T24957] slab_reclaimable 52304 [ 3132.563136][T24957] slab_unreclaimable 308414728 [ 3132.563136][T24957] slab 308467032 [ 3132.684833][T24957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24957,uid=0 [ 3132.723417][T24957] Memory cgroup out of memory: Killed process 24957 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3132.780539][T24974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3132.840560][T24979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3132.873612][T24975] bridge2246: port 1(bridge_slave_1) entered blocking state [ 3132.882334][T24975] bridge2246: port 1(bridge_slave_1) entered disabled state [ 3132.928935][T24975] device bridge_slave_1 entered promiscuous mode [ 3132.945371][T24976] bridge809: port 1(bridge_slave_1) entered blocking state [ 3132.953292][T24976] bridge809: port 1(bridge_slave_1) entered disabled state [ 3132.962021][T24976] device bridge_slave_1 entered promiscuous mode [ 3133.026608][T24981] bridge2246: port 1(bridge_slave_1) entered blocking state [ 3133.034058][T24981] bridge2246: port 1(bridge_slave_1) entered forwarding state [ 3133.064463][T24981] bond0: (slave bridge2246): Enslaving as an active interface with an up link 17:54:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b40750008000a000f"], 0x28}}, 0x0) 17:54:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a80)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xe64, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3a}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe54, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0xec4}}, 0x0) 17:54:30 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f0000009640)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private0, 0x4e1b}, 0x80, 0x0, 0x0, &(0x7f0000000940)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) 17:54:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x24}}, 0x0) 17:54:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000700000008000a000f"], 0x28}}, 0x0) [ 3133.130535][T24977] bridge809: port 1(bridge_slave_1) entered blocking state [ 3133.137906][T24977] bridge809: port 1(bridge_slave_1) entered forwarding state 17:54:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r1, 0xa11, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 3133.247531][T24977] bond0: (slave bridge809): Enslaving as an active interface with an up link [ 3133.271689][T24984] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3133.288968][T26055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2138: link becomes ready 17:54:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x24}}, 0x0) 17:54:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '^@+^\xd0\x03#,^^'}, @NBD_ATTR_SOCKETS={0x4}]}, 0x28}}, 0x0) [ 3133.373809][T24984] CPU: 1 PID: 24984 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3133.384376][T24984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3133.394460][T24984] Call Trace: [ 3133.397760][T24984] [ 3133.400708][T24984] dump_stack_lvl+0xcd/0x134 [ 3133.405326][T24984] dump_header+0x10b/0x7f9 [ 3133.409773][T24984] oom_kill_process.cold+0x10/0x15 [ 3133.414925][T24984] out_of_memory+0x358/0x14a0 [ 3133.419640][T24984] ? find_held_lock+0x2d/0x110 [ 3133.424437][T24984] ? oom_killer_disable+0x270/0x270 [ 3133.429674][T24984] ? find_held_lock+0x2d/0x110 [ 3133.434468][T24984] mem_cgroup_out_of_memory+0x206/0x270 [ 3133.440048][T24984] ? mem_cgroup_margin+0x130/0x130 [ 3133.445198][T24984] ? lock_downgrade+0x6e0/0x6e0 [ 3133.450111][T24984] try_charge_memcg+0xf67/0x13f0 [ 3133.451140][T24997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3133.455073][T24984] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3133.455121][T24984] ? lock_downgrade+0x6e0/0x6e0 [ 3133.475245][T24984] charge_memcg+0x31/0x320 [ 3133.479687][T24984] __mem_cgroup_charge+0x27/0x90 [ 3133.483497][T24997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3133.484634][T24984] ? _compound_head+0x5d/0x150 [ 3133.484671][T24984] wp_page_copy+0x27c/0x1b60 [ 3133.484705][T24984] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3133.495119][T24997] device bridge_slave_1 left promiscuous mode [ 3133.498714][T24984] ? lock_downgrade+0x6e0/0x6e0 [ 3133.498745][T24984] ? vm_normal_page+0x146/0x2a0 [ 3133.498787][T24984] do_wp_page+0x1d1/0x1910 [ 3133.529119][T24984] __handle_mm_fault+0x1813/0x39b0 [ 3133.534278][T24984] ? vm_iomap_memory+0x190/0x190 [ 3133.539271][T24984] handle_mm_fault+0x1c8/0x780 [ 3133.544063][T24984] do_user_addr_fault+0x475/0x1210 [ 3133.549221][T24984] exc_page_fault+0x94/0x170 [ 3133.553842][T24984] asm_exc_page_fault+0x22/0x30 [ 3133.558716][T24984] RIP: 0033:0x7f0720437970 [ 3133.563159][T24984] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3133.582790][T24984] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3133.588884][T24984] RAX: 000000001f5c537c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3133.596878][T24984] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0cb9 [ 3133.604873][T24984] RBP: 000000001f5c537c R08: 000000000000137c R09: 000000001f5c5380 [ 3133.612862][T24984] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3133.620850][T24984] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff81a3254d [ 3133.628937][T24984] ? trace_user_exit.constprop.0+0xd/0x210 [ 3133.634801][T24984] 17:54:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x21, 0x7, 0x1, 0x0, "f3d2d8a6b3e7743cd9379f72ce1458b62d4ec6b2eb717528f35c8d8ae0"}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x9c}}, 0x0) [ 3133.740907][T24984] memory: usage 307132kB, limit 307200kB, failcnt 908 [ 3133.752995][T24984] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3133.769619][T24984] Memory cgroup stats for /syz4: [ 3133.769848][T24984] anon 106496 [ 3133.769848][T24984] file 368640 [ 3133.769848][T24984] kernel 314028032 [ 3133.769848][T24984] kernel_stack 65536 [ 3133.769848][T24984] pagetables 73728 [ 3133.769848][T24984] percpu 5431008 [ 3133.769848][T24984] sock 0 [ 3133.769848][T24984] vmalloc 0 [ 3133.769848][T24984] shmem 368640 [ 3133.769848][T24984] zswap 0 [ 3133.769848][T24984] zswapped 0 [ 3133.769848][T24984] file_mapped 368640 [ 3133.769848][T24984] file_dirty 0 [ 3133.769848][T24984] file_writeback 0 [ 3133.769848][T24984] swapcached 0 [ 3133.769848][T24984] anon_thp 0 [ 3133.769848][T24984] file_thp 0 [ 3133.769848][T24984] shmem_thp 0 [ 3133.769848][T24984] inactive_anon 139264 [ 3133.769848][T24984] active_anon 335872 [ 3133.769848][T24984] inactive_file 0 [ 3133.769848][T24984] active_file 0 [ 3133.769848][T24984] unevictable 0 [ 3133.769848][T24984] slab_reclaimable 13392 [ 3133.769848][T24984] slab_unreclaimable 308410512 [ 3133.769848][T24984] slab 308423904 17:54:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0}, 0x80) 17:54:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x0, 0x4}, 0x48) [ 3133.876047][T24997] bridge809: port 1(bridge_slave_1) entered disabled state [ 3133.974815][T24999] nbd: must specify a size in bytes for the device [ 3134.377877][T24997] bridge810: port 1(bridge_slave_1) entered blocking state [ 3134.386805][T24997] bridge810: port 1(bridge_slave_1) entered disabled state [ 3134.403026][T24984] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24984,uid=0 [ 3134.447712][T24997] device bridge_slave_1 entered promiscuous mode [ 3134.461248][T24994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3134.523606][T24984] Memory cgroup out of memory: Killed process 24984 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3134.679032][T25007] device bridge_slave_1 left promiscuous mode [ 3134.685454][T25007] bridge2246: port 1(bridge_slave_1) entered disabled state [ 3134.903563][T25007] bridge2247: port 1(bridge_slave_1) entered blocking state [ 3134.924317][T25007] bridge2247: port 1(bridge_slave_1) entered disabled state [ 3134.954001][T25007] device bridge_slave_1 entered promiscuous mode 17:54:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b40760008000a000f"], 0x28}}, 0x0) 17:54:33 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0) 17:54:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x3e}]}, 0x28}}, 0x0) 17:54:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)='R', 0x1}], 0x1, &(0x7f0000000200)=[{0x10}], 0x10}}], 0x1, 0x0) 17:54:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000800000008000a000f"], 0x28}}, 0x0) [ 3135.484825][T25002] bridge810: port 1(bridge_slave_1) entered blocking state [ 3135.492225][T25002] bridge810: port 1(bridge_slave_1) entered forwarding state 17:54:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4000810) [ 3135.592029][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3135.652568][T25013] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3135.774992][T25002] bond0: (slave bridge810): Enslaving as an active interface with an up link 17:54:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)='R', 0x1}], 0x1}}], 0x1, 0x0) 17:54:33 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffffffffffff8}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8}) 17:54:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x14}, @NFT_MSG_DELSET={0x14}], {0x14, 0x10}}, 0x50}}, 0x0) [ 3135.915841][T25024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3135.971561][T25013] CPU: 0 PID: 25013 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3135.982037][T25013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3135.992119][T25013] Call Trace: [ 3135.995419][T25013] [ 3135.998365][T25013] dump_stack_lvl+0xcd/0x134 [ 3136.002994][T25013] dump_header+0x10b/0x7f9 [ 3136.007446][T25013] oom_kill_process.cold+0x10/0x15 [ 3136.012599][T25013] out_of_memory+0x358/0x14a0 [ 3136.017316][T25013] ? find_held_lock+0x2d/0x110 17:54:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) [ 3136.022116][T25013] ? oom_killer_disable+0x270/0x270 [ 3136.027353][T25013] ? find_held_lock+0x2d/0x110 [ 3136.032157][T25013] mem_cgroup_out_of_memory+0x206/0x270 [ 3136.037736][T25013] ? mem_cgroup_margin+0x130/0x130 [ 3136.042875][T25013] ? lock_downgrade+0x6e0/0x6e0 [ 3136.047772][T25013] try_charge_memcg+0xf67/0x13f0 [ 3136.052745][T25013] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3136.058755][T25013] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3136.064507][T25013] ? lock_downgrade+0x6e0/0x6e0 sendmmsg(r0, &(0x7f0000007000)=[{{&(0x7f0000000800)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000ac0), 0x10000000000000b6, &(0x7f0000000b00)=[{0xa0, 0x0, 0x0, "a8ac274527d1cada1ef6bfeded19e915919d8e10228e4374a091330ab6197babd935ac45187a40463dfbfc44c1e8dc2113096ba2aa69bfb748a3bea7eb3dc06d9e3408a11423b558c38807e929318157b8c712344bd0486ebb7c5f32e064eeb435d7c4093486473a5ca27ecda1c53f3ec8a5c698073838ccaaf1f4baf43055d56a90c3434cae0a883961"}], 0xa0}}, {{&(0x7f0000000bc0)=@sco, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=[{0x48, 0x0, 0x0, "2b89e9c2f675f3a43b36b566ccf7d78759c34eb432ccebd1fbca4842a89025232e2e2f0e7c260302b9ddbd4c08b0ef4d3013a2a04107"}, {0x110, 0x0, 0x0, "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"}, {0x98, 0x0, 0x0, "e2bde9f8a2fd59ee13bb386892188de32f62c24ce20c726092cd01812d755f5e8beb107060d89c78a3ce6ad2ea4aa8c4652cfc4ee395b36cea9fa377d4b41a0e4dd4d3d81b4ad5f55eb4e686422eda14e09e690fa00d2afbc2913567e29dac868188e58865b90394a7b5057221f98793f64a6135c96238b400b8243f6ea18d7964fcec12a8c3"}, {0x28, 0x0, 0x0, "847990c1a411a510a29bac2b5a58f3ff26c7"}, {0x108, 0x0, 0x0, "e477671a196e69c923b24d081415419920315a14f27ed7d80bb6a5db1efe8a094f9ab63ec50790e29cdb52fd787da68b3d111a1ca954380f592976ee64382c345e44ec8c0fdfc86bf49a86911dc0e6131ec1034765e41a75dac39f7c99235a005aeb4049b9d829e3d8d5b1ae5c3654c399962eba23696636af46ffcd6dff7029a7ce94a1968306caa7b14b91d5ec048681b135ac3e30c5c60f8ae0ab0b3298bcba49188f341b425a387c676d5f817912668007577f75020466f61215eec7c18cdff7fea7b49c00cf09772a1ff1244f9a5eb8de915d8d9faf1250bb0e7e5ef7a25f4ffe4dd30d848b1b4b98bde520f8cc09859916f8b3"}, {0xf8, 0x0, 0x0, "f8ba7c02a91c2fd4ff9bc83b4149f610b02f0309e42f3a194c4ffe393dcaf1369c0aa99c217f9ea9753f9305ce0dae3e5be8c6892ea1d4db7a0302371d73cf28e363e76b687d828277c3f0e1a5b02bafe0842d04206e72b875b000914a7d807422bff62dfda89777dc602095c6ceb59f4fa9824754510993c04cb0673bdebeaa882226b0f98b3eeadd825d783085b88072138e42786881cdf3c2daefaf398365dd83cf88ed7d26cba206b0507334b97b79a341ba8d8d09561571e5f986ec65a97429cce964f2d694d16878408a4d264d78f0685e7f5015a39d7349146a9ae8b4c75a07c22611"}, {0x30, 0x0, 0x0, "97a802e33f01d1dbecc034d96a7295392423ae101a365b5a9d"}, {0x1010, 0x0, 0x0, "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"}], 0x1458}}, {{&(0x7f0000002140)=@nfc, 0x80, &(0x7f0000004740)=[{&(0x7f00000021c0)="f1f2118d15650169365aec5cd8f5fea0c1853622f169126b57104b8ceae9233973b39505d67c275e34c4326b07aaa609dc10f4ef80b83dfc81af04dc806a65359a6953c52b1c298cd09da1c01380f4da3af31b5cfb65d73d9a964389a2beecdbe91e35e5a5183302053b0d88821df2f6ea558d4ce02f1738b97418b89d4290f0858e73a7bd40ee719ab8b6811c2c2589e33040c10ee84307252caf5cefa9eecc463bd756630e182e4788f846d59640acd058", 0xb2}, {&(0x7f0000002280)="c67afd7ebb61b45aad3d1be96f350c3746b85ce6a094989fc72006b3fbfe", 0x1e}, {&(0x7f00000022c0)="998ff191da609a7507bb869f0c454f4f77d5847052529e8bd80bcf7e447a1c284c3abbb227d6ba06ea007fa801a8fb4f23f76a7c004a62bec936cd3152700e4c98346bed556b06afb1270b21e6b13fe7650ee1f3e6a5e602efc65bfb4aba0028ceb5f865f8731afff09b3e9321ce180c97c94e0f4ec487c21892aa85a72d5a73968b589500d98e7c5a8dd771da45c961734967ba2666ba194ef43acfd2e5b07bded296af83a82e9a1b7acdca0e0f209f8e2aaa30f1c756b3509968395b86a946ce88c75d8a9d8d0c80cc0dccdbd7faba25f85585f51da03c3260619000", 0xdd}, {&(0x7f00000023c0)="47f45a255da872577004979247ede8376754648b3cdef7186c4a4ec11973b8b90e00d21cf490018e562e1077c2c203f094fd23c972dc4e084d1430ae8699462a0e6a1df89ec7aff80035f9a68424f5b9b1c647e28f32320a7b04ac1317d5e18ab90a1ce10375cef1141a28852cba6e677016e2d3fa51d01b99df7c04d9ad077a64617932796aa9a1b8732a1b3af9bf33224271e6dd0a7a0de9a4731a3a7bac4998d516247e284263740985bc13bc935bdccde644f1d9cf8d1c1c130e93ccaedccdca5ab2461050dd52c2a8cfd4a961d8d91297c91b8b52d5a4f78ac2ba8fc75d9b0fd9ae0c7232bce9eb02bbfe87a2d3d39f26681e9e1e82", 0xf8}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="1da03bf0d0e377cf4112e25a60e5861d8607e9d5d789d7d2d55598d1ff4c4f3a913f09cdd57938ec23f16c881d2ad9ff8d7a00723905471be8f593b428483a725edd1665da5a2640329607d20a20d8a9fb6e08a82c5918e948d4d0fc8249b65434866e1537b0f4b33a40c296b214ecae7823cbf128ad88e5f47e3d04d2c1863f4ede48777ac37abe1b6126bb17b3860accc10c3e306a2b3d2ed325aaba9c67b0e74b30e6cc93ffc42da7340cdc76366432ef3cbd8200c96bafb267c900328d8b61185d644d4c907ddd0e89eaf7b292a63c", 0xd1}, {&(0x7f00000035c0)="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", 0x1000}, {&(0x7f00000045c0)="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", 0xfb}, {&(0x7f00000046c0)="bbe72d55338725c802c34cdfa7b748deff420273093cd1afe552f886b1a50d7e6aa84379fb9042506930adb7a162dcc3496d64b8fbc27a562422005d3978c170ccc2c3ea34e8589cc26fe04122dca6742e214b", 0x53}], 0x9, &(0x7f0000004800)=[{0xc0, 0x0, 0x0, "6ab409c5e8eba29344ed64a14b695af13618fbd039051e805d7a8168ff8ef960003ac0eab69ddd81ecc194d1fdf80c090bd1f56fa67f083cc25153084c6735f2a65bfd288acff7c716095c4c056224ece81cd6b85200c0b0db2ced64713c5c81a76b6f597476a6a28857e7f79cb48e5db6e80f8d56c2e43e35579b5f2c09189684e5c4fc968a2d33bac55cde1440cee6cc938c03cd597cc04e1d1565012169150ac62444d0bb162478f9d7"}, {0x38, 0x0, 0x0, "299027f3dd47f9deec823d4b48e2357e77c911b03b45d223bee82ac2e79e60aef0d19ef7fb"}], 0xf8}}, {{&(0x7f0000004900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000059c0)=[{&(0x7f0000004980)="78b82212c321799b7e9d736ae0f0bad3b3cdeeeebe5057acae48af2425a808", 0x1f}, {&(0x7f00000049c0)="c6c05226cccf0c79170aafa8cf0c7a48165b3dacc1ac2d87c3f8e47e9695290010517be8b628b81deae21c4371d6d3e38e7c47c5d569e6d835add1dc869349521646239b1094752c7bc220a37e23a6e6548082422583a47e0a68f3676be6d1ce1929efe8d396dfd02f19f8ebafeebead26a0354b44e50a85743645ab717e16ad2d63955fcd73b13ff9a447854017ccbc6e9d814c3249483c0dbb40212a84e3be7213dacec47d844ef5b46bb032462047c417b0268e1804eab9587ac05bc3532050261561d2a02eb69365415d17819e94d372ae4212cde7c95ece0cd2f91c1f5578ad25d7f3ae0fb7e0ae703fde46e3c12587cabfe4f3f2a2c073c819687c44808fb1d8f338b04971b78f654884ae90cad0128a02bf7cb17a6ed38c852431b8e5fd1f212698643f7274289930e8f1865f190c22b4eed4a916976c4b1cd26a37d31d4e67fe63b2ebd299ca7fced4939d54230cb5ca1a18d0377dcfcb6c0ab3164c4252a90d121d4bbb8867b4f8c990d3baeaefe241e99447bafd1c7d6a280b6f661896f9a9c1eb8893dc5b2de26000dbcd953cf1ec21b1b1e7979504738f59ad50a1339918d6607d0201699a5461f96aaf51fe16a827413dd26c0a1a6dd29b5c2a0ee85b81e2a43c7ce391426c9f9a4563e817a63a8a63c72293da5f204a9abfeaddb6a82cb9dcdf9805a4a13090e246e13c160dd3c8c54c07b3c67230a51f6d3245a26d378d84f72d8775d31a19cde53d3fbdfd5459ec7f62d26eef9e08193f000509e8873aa38887008e279b2610012290d8838de5e614402b12a5034f60a9a971dc2e9b4f6d721c81775d06ef853725c2dc9ebfaa12fa9af7be7287ea704164147633829a2692e8422c779a7885fb2ca87ffe6bb93fa40eb36ce64b8df290e30c65d8986aa2b1329d1960ef41fceffee2605bcf12a7c3be40ad38b376a952f213b9d7018196dd2da9b7388397354002d12476bf9c7ade886af4d0053b33c784d841e7ea3e06126dec65f6c95c904982cb43349f67ec29b1b3293db4eab64872c77e7674ad3ca3c1c6db609f3717562e875e02da760118ec5445c5ccb473a0b8f416e4d2514c1342bc1f76a477c6663249f6c9fb4f916eb18501362fdd6ced3663551ed0f487a312c714cc0720a6ae1372b34cfa54226ce7550c6121b7456579cfb5b0763bf59ef4ef9b5284493322cf303c9b128e410f32904a91c5833405c7d79bcfd76ff483b22a5c07f6367a3b11769f78f3fe4ba100bbcfb29ccb316af84cc9a696cff9b219374d9dce3c1452a9f02e19c76c13b9489fe935325978d00c4c4a5fbf82fe7a5c88bf7c0d4613fd76ffc984f11a52ce5afc74234336ad8282557a3288dde73566ef1fed9a960eeeb273bb82d17e86c10f8969cf1fd5ccf76119c5ecf58bef7f050de00b9db4c683deaeb96b97255f233a57cb4feff9e567f8612177d93af3041a56ee9a27c51e23f2b70bbf0c148e1f804cd78d4940d3f1741ba578aba08c0e5242c86ed5ca23d0d64d0a8fa833bba937ed263416a1df918bca1adf05d634ba728bf73cf103fd27a190dd89783b88fd51ba61cbf7a3b66568729e732997866f97a86464aa9269714584d4ef28c4ef5655201afb0f10767a401b5e26b39787d2a18fe36ad9accd53fad1cf568c7de43add2bdc50ec2ee6bdc3861ec96934df303abffcf025b7919e93e8eb090ad17d99711bfa47667e887712ec334c1e18ac3a1087730f9cc831da2a0254e5ecc782f6e9d3d56a7b8d27f2fa184c53ec7430b85e29e958111bc4cadac27594ff9d4eaec0b34594814707b9979885bbec2e028cccf1904ee6253ae8391dd8e11353187b6e0f26f4d55b8da3fc339ff5fe1326fb0be643a0e9da8a56bcb84f44df98c93dc17b807c598c12959855c37e3de4d77d70124ec66c2df80e19eacdf55607ef210eb751c3f165a4b61bb874b0dac54fcab971310642be0ae9af5e3b9ac3bb0637f599df934216809fd59aa2a4e4b067021d6aed211bb6be89edf367597bd5046f28aef004221e114623b0814692811bd929797d61992050b6eeff223058ab4411c08450c17359bd58752eb7c278fe542fc3ce22f17de1b99aedb265274a6abaadf6df3910dacd322a27f4a8eab5e67a9b2e3670a3a78fdfd0e2293213c0002d7857475f1bb289ecd01624213416fd18ab36803053da94447eb8611c77d53efc5d884114d38494a7bd3eb34f60befa897f6a8dfdc18ae3494016b7b6707484d4358574b56375b5d1ec6f82a445d0cf18cf4aa2871d311f10f14451c05ba39c0811d43c623ec05295f0703a61a62f490c0a77fc5279890f89966d267781c469e4d01790fe7a4716b07e0454d6e73a4fc9587abd07b55d65e757eddf294bd89f599ff0449e03c3fb474a5408d36d30b08f76fa20ebe2082045b3d60039fa811b7e6d938b4575045085b8288c724cc8de1adbba24e9fa54ddcb03dd491ee0866754aa50ddc93101f45bfab54cd818bed23c5b3cd94a13bca7202dfbf74a3468992057c70b865dd18e4da25700f29b479f306738533784d344277fb9012d2b06939689c731c796d2630c576aecad3a9082780ce5fc50b19bb66fd2c092983c2841f1735240f8784eb1d54458630aa2e4a43c335f6ecdc67f3a80abaee416a4e21f7dd8839036086539d9a889ca0dad89a629d503648a4864fb3bce0d481b74fa48c57a199ef127d416b285ca0d1c7695eb65efb65b31e755d16c6d375399b67f048d8bd4fb3a614170fb7facb15d6730af1dcab23e0b0b31bb09603421fd29751fd19e2e4ce3dc48acd6616b4bb113bfd1e638dec59187340e39351763263607ce160f7499b82b11d47da09d80ee0290ed6a72143dffe5e8c07d49ed1da554edc24165092dde6c31ceee43de7d3dddb6847249d0446c1f7d22443ba17a314a478bb1f0ec8815abde909d9cad71c4a6295ac35a57ea2245778cfdf909cf13f8a54a2f6fec1e0c2b7ecee096c6697d4e22a2dc1fa9c3e39f082d82b76d8b77cba3111c947bbe8a80506b0b96d0cf192da1facab359b3e4119da9b79109a541e3eb8604b11618370fdd0bb879825da8da6f84c7300816607b0b1e57c93c807e90fa6a21ea646cbea79d26bddbefdb98698597d3d82e5b186c8051613fd16d0d010338c1f106147dcb5dc7ab799b96c72c73812a499b80c56cebd1434488e3cd767ca3a1fec9dc40d99de48d3d89ee4a6186d12791cd7c4e1691f92c6a7fc7cbc6a2ea8d5ab7b341c2e02f0ad251c08ad5047d393c85f40fe68d7781c5441777bef935f106d515b9706f03da6cc814c6f92961676b15d6836988a9947ae6cc514a0e7e051438211c2339d386b346e2e8d1cbe1a66c483732c9d39ffcdc8d119ee5e742faa32a3020b52e55d0dab86027bf6ad37955e7b3425dc477eac498fefb1fc0388492e52149b675a901227eb7e0d2656493e9ae67c9d3c64cdd780b1b99d01b60f71a70018fae2de163af2d47236234379d805832333de11ed26cbf05807b880270566964647da659f9eb09de1a96a82c0dc456915de1c79896b9c1b70bc27538fc43e88ca899839e570d51a55a6261e1935759fbc495ab0a51c49022a4ca65135dfb8c08dd90878c78d81bdd2efc76bfb43f98c2bf737dea903ff34eea00f5d61b678869d0589263d9ed10f62b378fdf6ecfcb679ded7fa938f1cfee4bcdc74071dc05ce01953e064931fad5cfe13878f01a51370604e3b71c74d1eb36d6940c47b09926a46398c1e2db5acaee54695a8ccae896509dd772917254e9ab6e4a1bc366defc5f21ee611498365ca5257a8492dc7c0767c14372a30af191af851d95d37f08bb9347a2a7e2a4e18869bb73f87fa1dd54a197dcaf99d03aa413c67451cb193ee3b283a8ecb4a33cd832227553b6c9094d7602275deb03904bc1051dacde24dc8ea13aec7f1219166a927a463d69045a4807b3b7da68948ed03554cc82ccf7c318a262bc69e541a0298c2a6138ec8b57a5745ee1e9cc4a4528df323437b1bb53158e1d3b29632bd5bb7b5d811f1fb6e84dd5bc29d5a861d1dd6ca8db30dd38ac0b403bd20ce6c2df1a4fd19feed13f5854e4938f6a70c9f9c69c71ccc5d2a8ce93fae633ed896e355bc13a53cd49cca4a90d31db198627f3d289e88a5b6061e0a207c0a0b1de59861ae2d4d0b287d93c6266e8ca82dcfb6587a7b3a47f98cafd982aa194c926eaedda627b67c3011cb73a8566e79f8370b57f6d50fe6d9baad2fd09cfedac89513162637d99eea7b3cc814177fb93b14da137f8f35afae59beb5304ebab298069ba711d276ab0968d8ca6626786caf81d34b03baddb3e57da05eaf734941b8a96dcb2326a8b6a022529f65584808ed5a54620a4152cd28f55f0bc231bb8dbd4d5285fbf885e42fc084cb0f655b6d2e225e3e07df1967d63074390e7595b81e3fa062b40cd8a6e88373371a1eb4523d177e584e4b5e4fcea5e4736e46b2007438ca728c2123180046b6a8d0777d1c42d7dbd1f5cb6106f35d13575019f95b407971d1e0918c7f82b2cc87e8f8669d9a3ae48d1e8aa14418e8ca73ef7a5ee14b4d6d03469df2c959aea02039c0e58b13df7d523b0f787ae739b435b9e1d28c97ade3aa4d4d7ab8a378340229be0417f1edd3adcd0ae995d5585b02ba22fd90f2ce7aa465d7278edd662a35214475e4f3471fb6af73bbc3d309e481fee040f696edaa59d6baea65ae0352ea782d3e42debc53aef78a7bc57834108dc7afe713531117e79421a68e39b99a266be4b79a4de6520ea65dd353d66d996edebe3d5c8ebf990755ac42eff82be504a439f34c41571ca3c800c5056664c4fd5d45d542b6571a171ae46eed1874203bc94c555ec5289b5875af74ae33b5781f9ab42a135f00238397cddd630261d1f0b322b753e16d97589c7e549a531d83809ba62934f9b82c898a38899e680e6e18cd2860f5edeae9d6ca535a5ff3d687efcead0fce21f7253975e04c5d07b1844508d7937aef16db0c38c5f320cec182547e23b9120d8a5f81db0a060213792e716136cb2b50a916f51fa01f210b8d3facef3a9118439214c5ee55efebe5ae7d8ce85d5a493d9245913ee6a1b4105b23237766f7f6d7e1d279e6d1296630a50c2495375912282d349766d9d144d7f87eda7526a74f90e98d63e11cf8dcbcaf27ff85571aecde51fa9cb23360286d988a8477fd7babe5bf123fda70c76537c9042a45954eb2ad1ab924586db187d2678fe27d74da129c17ae9750fb93946eb8808774f6115845bd3e3b62a125b3a3869ad06658eac58381d04b5575253d2dc6449d9f5008664c78007ad4d87848344c71dc5f8f28e53eb86d65f7fd7b6a96aa8f68574bb952960dc92af4e6f73faa2b08e46f0222e3e460f8cbadc54585e38b597b5ce4c1534ce2177e1c8c5e1eeaddfd0dfbb0281678cdbc5d93127968cfbbbd797dc4c5a4f7c0f45fc556d0d725a9e4377ebae9f1e7113c92eea99f553c545d4cd17b7ef9d4bb9f9f84c0670ebe9ba7b65792c84be0a2d19a6e9e58aeab022d902efb0baa86a0903cd7ace0dbe6913116dfd64db1da78bbd1579c990e2bb072f2a1a6304a68495e09ca56363fa94846cbda3cb8a1d3b4f25d560eebeb417c9dfbc7250f17f8fe2654e5244f69f1f8275f35b242a007eeb483d7b5812ddf888b4f1a59953c1ca035a85c2a7a9ba1e2b3a1d364a2bebd668f1b5f33b580cc64784b18b4ddee0dca10d3056cabbf201eca1a1c816f0852b99150e8d249f9a18c1bcc17265604518bb99539f26f9893670be5118619cb0b797b9", 0x1000}], 0x2, &(0x7f0000005a00)}}, {{&(0x7f0000005a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="2e79c2d0a6a3"}, 0x80, &(0x7f0000000980)=[{&(0x7f0000005ac0)="eed0f0235c908c21d7558d1da5e26ceb8db709a9d8c84344d7a998ad27a77dd0d18fd22ce28f4f7a7e14a8dbf643beaaf0ccab0035f4cab767e82c788d68a642e19742a2f7b441019eab80950a9595ed3ea59a9ad083c3ab334daf3bc76e4a57cebf3235ed0df084c69372743c3e3b04703127e64900176521771ee010c0929f7bcb6509f1102027b76b747edeeb65a1d033c96058aeb3ee00019139fb254a", 0x9f}, {&(0x7f0000005b80)="722274fc9768ae78900cb97f84c46f5bff2c77a05bc5161de98f11a67a0a63f003dd9a4c580e4f4021e85fd804c6c821501ebe99621c70f0a6f3f8d6ed7f49b3529ec56330be4406a2eee5ef2af2546495f51f4ce6eb88c742c680917cebfe2c7dfd018e56547ff5127415e03819e5dff31f62a3a018dbb3aae57bde9703a15b031edea6e9ba269f6f7a9bd5864eaf8d9253936e", 0x94}, {&(0x7f0000005c40)="b03b3f68f1fe9542cd18054fb2030fb3bd5539ebe706e9b9cd46e2c168c80a2f894575e8d0db6abb565d89381c3dbca380541f27b028c6bc47ecb7f3f83a0a2baf79fd5fec6114065fe2e18fb4091b339b462b9f", 0x54}, {&(0x7f0000005cc0)="0c782f4026999bdd3d3034046099f394cbeb97cd06dc44938ba565f4338fa9b61e745ffc3faf4cbd3d0e674fc1d0486381e1acf1ab0682c1146962e02f3028f0fdbf142dde1837a14ccb9933c55861b9b76dbaa3e0899cbda133984fad1602279d7ffd7e899ccb22743842fbfaab37aea4e0b273d5fbeef31cdf91fdb8827d1d8dc7426e822d286c620c1ab20e2ea1f4da574453647a5e396c7bd9a46eb24e5655b9bca0", 0xa4}, {&(0x7f0000005d80)="a2d48f001adc7164f2f11558f3b3a897b27f648662135d6ab657aaa5477f1182aab2b3d893c17687f4baaaf0a2724d8aa060bda7eb5754bb6922c5ff3551", 0x3e}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="4694438a01a0c3e324c6003346ba3757fe8de3eec797ded0b9d3ecf61ef3cb4f1f9f206cc350fed28d8f23a626e7100540e08bd403b36205c03fd0fab2904e605127a7a8b1e5eb21b955160b36e9b48f36d9814ccdda8a2cc165098f4da8163685ad11db4481bbf066baf51830eb789a420baebe676b412db853b9502b5555e8544f37db2db8a9c6c6abb58b6d4d97115ea1d174789e139bd1016155da227a50d2c3a8f729ca891be31216e0", 0xac}], 0x7, &(0x7f0000005e40)=[{0xa0, 0x0, 0x0, "74ce474273b91ed38b6f401d9752e1b26018d5596b71036014d49345bcb53c4f1b27f5689a3a89bdc63f9af687313a66856851c98878e13be12c637ee7787650a94d0930331250b082a38dfcd5b995a9c8f6f1c36ca438324a72a1c1d0a3bb63c8063dfe40ee0cc049771e2bf931ec80cd125293789cbe336c9374f776d3bb10a1727b20047a9a0445fb7a7f70a6"}, {0x48, 0x0, 0x0, "8ce10e90a5ddbadb3c77ac84f4798b13f469162b7603ecc796cf2a136ed17b5b329809a7578203ff5483a8767de50a0763b9"}, {0x18, 0x0, 0x0, "f38f4969e2d4a8"}, {0x1010, 0x0, 0x0, "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"}, {0x28, 0x0, 0x0, "b9e268ea1dcbdd42c1b666ffbd211f10953821262694"}, {0x50, 0x0, 0x0, "5eb4dd9e517d3d50f1f14737ed1de5ce736ce9a7ee8e968ba9aa249f9d5e4e4b20f3cf4dc4c2554dbf3e3b175820a44149d5a05577de473d7f"}], 0x1188}}], 0x5, 0x44000) 17:54:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0x1}], 0x1, &(0x7f0000000600)=[{0x6558}, {0x10}], 0x20}}], 0x1, 0x0) [ 3136.069389][T25013] ? lock_downgrade+0x6e0/0x6e0 [ 3136.074280][T25013] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3136.079861][T25013] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3136.086055][T25013] copy_process+0x73e/0x7090 [ 3136.090692][T25013] ? __lock_acquire+0xbc3/0x56d0 [ 3136.095670][T25013] ? __cleanup_sighand+0xb0/0xb0 [ 3136.100661][T25013] kernel_clone+0xe7/0xab0 [ 3136.105110][T25013] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3136.111124][T25013] ? create_io_thread+0xe0/0xe0 [ 3136.116004][T25013] ? find_held_lock+0x2d/0x110 [ 3136.120797][T25013] ? __ct_user_exit+0xff/0x150 [ 3136.125592][T25013] __do_sys_clone+0xba/0x100 [ 3136.130195][T25013] ? kernel_clone+0xab0/0xab0 [ 3136.134892][T25013] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3136.140794][T25013] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3136.146787][T25013] do_syscall_64+0x35/0xb0 [ 3136.151210][T25013] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3136.157110][T25013] RIP: 0033:0x7f072048b9d1 [ 3136.161527][T25013] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3136.181134][T25013] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3136.189813][T25013] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3136.197785][T25013] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3136.205757][T25013] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3136.213727][T25013] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3136.221698][T25013] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3136.229687][T25013] [ 3136.315868][T25013] memory: usage 307188kB, limit 307200kB, failcnt 943 [ 3136.330492][T25022] device bridge_slave_1 left promiscuous mode [ 3136.330683][T25022] bridge2247: port 1(bridge_slave_1) entered disabled state [ 3136.352084][T25013] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3136.359180][T25013] Memory cgroup stats for /syz4: [ 3136.359349][T25013] anon 143360 [ 3136.359349][T25013] file 368640 [ 3136.359349][T25013] kernel 314048512 [ 3136.359349][T25013] kernel_stack 65536 [ 3136.359349][T25013] pagetables 81920 [ 3136.359349][T25013] percpu 5431008 [ 3136.359349][T25013] sock 0 [ 3136.359349][T25013] vmalloc 0 [ 3136.359349][T25013] shmem 368640 [ 3136.359349][T25013] zswap 0 [ 3136.359349][T25013] zswapped 0 [ 3136.359349][T25013] file_mapped 368640 [ 3136.359349][T25013] file_dirty 0 [ 3136.359349][T25013] file_writeback 0 [ 3136.359349][T25013] swapcached 0 [ 3136.359349][T25013] anon_thp 0 [ 3136.359349][T25013] file_thp 0 [ 3136.359349][T25013] shmem_thp 0 [ 3136.359349][T25013] inactive_anon 176128 [ 3136.359349][T25013] active_anon 335872 [ 3136.359349][T25013] inactive_file 0 [ 3136.359349][T25013] active_file 0 [ 3136.359349][T25013] unevictable 0 [ 3136.359349][T25013] slab_reclaimable 15320 [ 3136.359349][T25013] slab_unreclaimable 308419112 [ 3136.359349][T25013] slab 308434432 [ 3136.369807][T25022] bridge2248: port 1(bridge_slave_1) entered blocking state [ 3136.522334][T25013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25013,uid=0 [ 3136.562253][T25013] Memory cgroup out of memory: Killed process 25013 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3136.686640][T25022] bridge2248: port 1(bridge_slave_1) entered disabled state [ 3136.695342][T25022] device bridge_slave_1 entered promiscuous mode [ 3136.733289][T25039] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3136.922598][T25030] bridge2248: port 1(bridge_slave_1) entered blocking state [ 3136.930008][T25030] bridge2248: port 1(bridge_slave_1) entered forwarding state [ 3136.962526][T25030] bond0: (slave bridge2248): Enslaving as an active interface with an up link 17:54:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b40770008000a000f"], 0x28}}, 0x0) 17:54:34 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x80108907, 0x0) 17:54:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 17:54:34 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x541b, 0x0) 17:54:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000900000008000a000f"], 0x28}}, 0x0) [ 3136.985029][T32379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2140: link becomes ready [ 3137.066105][T25036] device bridge_slave_1 left promiscuous mode [ 3137.072394][T25036] bridge810: port 1(bridge_slave_1) entered disabled state 17:54:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x0) [ 3137.161642][T25051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0) 17:54:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "f3d2d8a6b3e7743cd9379f72ce1458b62d4ec6b2eb717528f35c8d8ae0b5d5cf5432d4892bda5a51f67d554b75ec74547f5668938a6cea726718895f349725501b9ef16b92"}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWOBJ={0x10, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc}}, @NFT_MSG_DELSETELEM={0xd98, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd70, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "a7dd69bfddbf2bde2c179696578a869ffc90b03ae1e5061fbac2a2c52564d9a06f2d25ca6bfb8c780922c28f760ef9ce483479a78086dc9dce60eb22df715f154c8ec909fe25d1886d4844e0e1"}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "d30f050a2fce5c78acf7aeef841a5f595b9debfb221d95e73d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "1e8ed20fa887199c37c239599b30801e5a31c5967afa446a1112371b1591da2741e680f71ee042b98a96ee4359aeb9d7a5ac2e28d80a8bf941c0479ed7ca2413e71ef811c453f9444627d11caee269db9b25985b2bb4a6e42ad5238d4b31fe9d47757b04c86e38f75a9ecaaae64d34952e24e4200c168a162f63aa3e0d6a506e11e60ebf553e879037e9d36c5baa86804dca9a84c025f23996363547bced7727b2a4e0de906588dcd3ccc3dc8b28450a7c43d72fb9419edf83"}, @NFTA_SET_ELEM_EXPRESSIONS={0x174, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xa08, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "87319091a5082ee650df0cce444c1275ff0c4c8905b400dc4a05d7b75e2ffe8205b5d08141ee203a9f3e0ba8174090e4d6d7a7b11f31b6fe759b16c70224297670707127eaa730de6c5f243936ecd88d3a445e0ee68d9e996aa2e2ec52e8463902a6eba6aeb7a981a1cafe47d9a98428e2c2cc46ec926892d8b3010e0137384661ec3efe549b0b9a71"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "8f9dd29490cbb9d6711aac11b6aa1f201d829664659892304362758b7763081cd5ee48d5dc26fda5d9f516a0e6f216badfd5957e29f9f168d97f0b4e840875177a73cb668b1c59a2cfcdfcc56864a69395db9f8b19795e7203f0826bc6826c6893b0afe38e11b6620002a71a79f5e50f65d4b2011f11b9992b774ade7d1ae28f1c52677345477607d6e4f8584d8cbabb9269826be77066f1599737a3ce"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x8b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "061dbb42509f12af5fd1ba2425ebcea72995345df16b6b6c3676d8fbaff8e6145d4a4029d720e3a8565da604546cb4dd58c25481c662edd88c42ea6551c5ce1c910ed2a0cac19756fb9248049cda63e7dc56be5ac9687e6492ee71bd907209258574bc741ff068644d7912b1920ee30ca955066fd03e64235cca2dbd6c2506dfe0248242387003be3c60dba13c815a46164e6f6f0c2b20015628a50b8981e8d323d64e435e3fd85d27ae1deeaf84936f70c22002f958d4236d48aa33d33e8dbe3981915505a1ebe281fc2ec0cfc11ca5cd89a0b71f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x785, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 17:54:34 executing program 2: socketpair(0x28, 0x0, 0x3, &(0x7f0000000080)) 17:54:34 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f0000009640)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000940)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) [ 3137.338406][T25046] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 17:54:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@dontfrag={{0x14}}], 0x18}, 0x0) [ 3137.406700][T25046] CPU: 1 PID: 25046 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3137.417261][T25046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3137.427343][T25046] Call Trace: [ 3137.430637][T25046] [ 3137.433597][T25046] dump_stack_lvl+0xcd/0x134 [ 3137.438226][T25046] dump_header+0x10b/0x7f9 [ 3137.442681][T25046] oom_kill_process.cold+0x10/0x15 [ 3137.447825][T25046] out_of_memory+0x358/0x14a0 [ 3137.452530][T25046] ? find_held_lock+0x2d/0x110 [ 3137.457325][T25046] ? oom_killer_disable+0x270/0x270 [ 3137.462560][T25046] ? find_held_lock+0x2d/0x110 [ 3137.467357][T25046] mem_cgroup_out_of_memory+0x206/0x270 [ 3137.472926][T25046] ? mem_cgroup_margin+0x130/0x130 [ 3137.478065][T25046] ? lock_downgrade+0x6e0/0x6e0 [ 3137.479335][T25064] device bridge_slave_1 left promiscuous mode [ 3137.483030][T25046] try_charge_memcg+0xf67/0x13f0 [ 3137.494078][T25046] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3137.495466][T25064] bridge2248: port 1(bridge_slave_1) entered disabled state [ 3137.500080][T25046] ? lock_downgrade+0x6e0/0x6e0 [ 3137.500125][T25046] charge_memcg+0x31/0x320 [ 3137.500156][T25046] __mem_cgroup_charge+0x27/0x90 [ 3137.500181][T25046] ? _compound_head+0x5d/0x150 [ 3137.526449][T25046] __handle_mm_fault+0x17df/0x39b0 [ 3137.531604][T25046] ? vm_iomap_memory+0x190/0x190 [ 3137.536603][T25046] handle_mm_fault+0x1c8/0x780 [ 3137.541401][T25046] do_user_addr_fault+0x475/0x1210 [ 3137.546641][T25046] exc_page_fault+0x94/0x170 [ 3137.551265][T25046] asm_exc_page_fault+0x22/0x30 [ 3137.556142][T25046] RIP: 0033:0x7f07204850d5 [ 3137.560582][T25046] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 3137.580217][T25046] RSP: 002b:00007ffc7a569578 EFLAGS: 00010202 [ 3137.586329][T25046] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 3137.594312][T25046] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 3137.602287][T25046] RBP: 00007ffc7a569638 R08: 00007f07209b0000 R09: 00007f07205b00c8 [ 3137.610264][T25046] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00000000002fdee1 [ 3137.618242][T25046] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3137.626236][T25046] [ 3137.744824][T25046] memory: usage 307184kB, limit 307200kB, failcnt 1018 [ 3137.754267][T25046] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3137.776683][T25046] Memory cgroup stats for /syz4: [ 3137.776925][T25046] anon 135168 [ 3137.776925][T25046] file 368640 [ 3137.776925][T25046] kernel 314052608 [ 3137.776925][T25046] kernel_stack 65536 [ 3137.776925][T25046] pagetables 81920 [ 3137.776925][T25046] percpu 5431008 [ 3137.776925][T25046] sock 0 [ 3137.776925][T25046] vmalloc 0 [ 3137.776925][T25046] shmem 368640 [ 3137.776925][T25046] zswap 0 [ 3137.776925][T25046] zswapped 0 [ 3137.776925][T25046] file_mapped 368640 [ 3137.776925][T25046] file_dirty 0 [ 3137.776925][T25046] file_writeback 0 [ 3137.776925][T25046] swapcached 0 [ 3137.776925][T25046] anon_thp 0 [ 3137.776925][T25046] file_thp 0 [ 3137.776925][T25046] shmem_thp 0 [ 3137.776925][T25046] inactive_anon 167936 [ 3137.776925][T25046] active_anon 335872 [ 3137.776925][T25046] inactive_file 0 [ 3137.776925][T25046] active_file 0 [ 3137.776925][T25046] unevictable 0 [ 3137.776925][T25046] slab_reclaimable 27160 [ 3137.776925][T25046] slab_unreclaimable 308411256 [ 3137.776925][T25046] slab 308438416 [ 3137.870500][T25046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25046,uid=0 [ 3137.884491][T25064] bridge2249: port 1(bridge_slave_1) entered blocking state [ 3137.893431][T25064] bridge2249: port 1(bridge_slave_1) entered disabled state [ 3137.902456][T25064] device bridge_slave_1 entered promiscuous mode [ 3137.994647][T25046] Memory cgroup out of memory: Killed process 25046 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3138.230782][T25066] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3138.279870][T25067] bridge2249: port 1(bridge_slave_1) entered blocking state [ 3138.287325][T25067] bridge2249: port 1(bridge_slave_1) entered forwarding state [ 3138.386619][T25067] bond0: (slave bridge2249): Enslaving as an active interface with an up link [ 3138.395710][T25072] bridge811: port 1(bridge_slave_1) entered blocking state 17:54:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b40780008000a000f"], 0x28}}, 0x0) 17:54:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002500)=ANY=[@ANYBLOB='6'], 0x50}}, 0x0) 17:54:36 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000400)=""/218, 0x26, 0xda, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}}, 0x10) 17:54:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000000600010001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000a00000008000a000f"], 0x28}}, 0x0) [ 3138.433743][T25072] bridge811: port 1(bridge_slave_1) entered disabled state [ 3138.507343][T25072] device bridge_slave_1 entered promiscuous mode [ 3138.547550][T26055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2141: link becomes ready 17:54:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0xec1}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "f3d2d8a6b3e7743cd9379f72ce1458b62d4ec6b2eb717528f35c8d8ae0b5d5cf5432d4892bda5a51f67d554b75ec74547f5668938a6cea726718895f349725501b9ef16b92"}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc}}, @NFT_MSG_DELSETELEM={0xd98, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd70, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "a7dd69bfddbf2bde2c179696578a869ffc90b03ae1e5061fbac2a2c52564d9a06f2d25ca6bfb8c780922c28f760ef9ce483479a78086dc9dce60eb22df715f154c8ec909fe25d1886d4844e0e1"}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "d30f050a2fce5c78acf7aeef841a5f595b9debfb221d95e73d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "1e8ed20fa887199c37c239599b30801e5a31c5967afa446a1112371b1591da2741e680f71ee042b98a96ee4359aeb9d7a5ac2e28d80a8bf941c0479ed7ca2413e71ef811c453f9444627d11caee269db9b25985b2bb4a6e42ad5238d4b31fe9d47757b04c86e38f75a9ecaaae64d34952e24e4200c168a162f63aa3e0d6a506e11e60ebf553e879037e9d36c5baa86804dca9a84c025f23996363547bced7727b2a4e0de906588dcd3ccc3dc8b28450a7c43d72fb9419edf83"}, @NFTA_SET_ELEM_EXPRESSIONS={0x174, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xa08, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "87319091a5082ee650df0cce444c1275ff0c4c8905b400dc4a05d7b75e2ffe8205b5d08141ee203a9f3e0ba8174090e4d6d7a7b11f31b6fe759b16c70224297670707127eaa730de6c5f243936ecd88d3a445e0ee68d9e996aa2e2ec52e8463902a6eba6aeb7a981a1cafe47d9a98428e2c2cc46ec926892d8b3010e0137384661ec3efe549b0b9a71"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "8f9dd29490cbb9d6711aac11b6aa1f201d829664659892304362758b7763081cd5ee48d5dc26fda5d9f516a0e6f216badfd5957e29f9f168d97f0b4e840875177a73cb668b1c59a2cfcdfcc56864a69395db9f8b19795e7203f0826bc6826c6893b0afe38e11b6620002a71a79f5e50f65d4b2011f11b9992b774ade7d1ae28f1c52677345477607d6e4f8584d8cbabb9269826be77066f1599737a3ce"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x8b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "061dbb42509f12af5fd1ba2425ebcea72995345df16b6b6c3676d8fbaff8e6145d4a4029d720e3a8565da604546cb4dd58c25481c662edd88c42ea6551c5ce1c910ed2a0cac19756fb9248049cda63e7dc56be5ac9687e6492ee71bd907209258574bc741ff068644d7912b1920ee30ca955066fd03e64235cca2dbd6c2506dfe0248242387003be3c60dba13c815a46164e6f6f0c2b20015628a50b8981e8d323d64e435e3fd85d27ae1deeaf84936f70c22002f958d4236d48aa33d33e8dbe3981915505a1ebe281fc2ec0cfc11ca5cd89a0b71f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x785, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) [ 3138.615131][T25076] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3138.643265][T25065] bridge811: port 1(bridge_slave_1) entered blocking state [ 3138.650660][T25065] bridge811: port 1(bridge_slave_1) entered forwarding state [ 3138.667242][T25076] CPU: 0 PID: 25076 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3138.677708][T25076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3138.687785][T25076] Call Trace: [ 3138.691086][T25076] [ 3138.694034][T25076] dump_stack_lvl+0xcd/0x134 [ 3138.698655][T25076] dump_header+0x10b/0x7f9 [ 3138.703101][T25076] oom_kill_process.cold+0x10/0x15 [ 3138.704885][T25065] bond0: (slave bridge811): Enslaving as an active interface with an up link [ 3138.708233][T25076] out_of_memory+0x358/0x14a0 [ 3138.708273][T25076] ? find_held_lock+0x2d/0x110 [ 3138.708297][T25076] ? oom_killer_disable+0x270/0x270 [ 3138.731724][T25076] ? find_held_lock+0x2d/0x110 [ 3138.736521][T25076] mem_cgroup_out_of_memory+0x206/0x270 [ 3138.742099][T25076] ? mem_cgroup_margin+0x130/0x130 [ 3138.747236][T25076] ? lock_downgrade+0x6e0/0x6e0 [ 3138.752134][T25076] try_charge_memcg+0xf67/0x13f0 [ 3138.757110][T25076] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3138.763128][T25076] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3138.768879][T25076] ? lock_downgrade+0x6e0/0x6e0 [ 3138.773792][T25076] obj_cgroup_charge+0x2ab/0x5e0 [ 3138.778762][T25076] ? __anon_vma_prepare+0x60/0x580 [ 3138.783899][T25076] kmem_cache_alloc+0x96/0x3b0 [ 3138.788695][T25076] __anon_vma_prepare+0x60/0x580 [ 3138.793662][T25076] ? __pmd_alloc+0x2ff/0x5c0 [ 3138.798280][T25076] __handle_mm_fault+0x340e/0x39b0 [ 3138.803422][T25076] ? vm_iomap_memory+0x190/0x190 [ 3138.808414][T25076] handle_mm_fault+0x1c8/0x780 [ 3138.813217][T25076] do_user_addr_fault+0x475/0x1210 [ 3138.818369][T25076] exc_page_fault+0x94/0x170 [ 3138.822995][T25076] asm_exc_page_fault+0x22/0x30 [ 3138.827872][T25076] RIP: 0033:0x7f07204850d5 [ 3138.832306][T25076] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 3138.851943][T25076] RSP: 002b:00007ffc7a569578 EFLAGS: 00010202 [ 3138.858036][T25076] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 3138.866031][T25076] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 3138.874026][T25076] RBP: 00007ffc7a569638 R08: 00007f07209b0000 R09: 00007f07205b00c8 [ 3138.882019][T25076] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00000000002fe3f6 [ 3138.890012][T25076] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3138.898022][T25076] [ 3138.905629][T25082] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:54:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3139.177392][T25076] memory: usage 307188kB, limit 307200kB, failcnt 1062 [ 3139.203907][T25076] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3139.222546][T25076] Memory cgroup stats for /syz4: [ 3139.222773][T25076] anon 135168 [ 3139.222773][T25076] file 368640 [ 3139.222773][T25076] kernel 314052608 [ 3139.222773][T25076] kernel_stack 65536 [ 3139.222773][T25076] pagetables 81920 [ 3139.222773][T25076] percpu 5431008 [ 3139.222773][T25076] sock 0 [ 3139.222773][T25076] vmalloc 0 [ 3139.222773][T25076] shmem 368640 [ 3139.222773][T25076] zswap 0 [ 3139.222773][T25076] zswapped 0 [ 3139.222773][T25076] file_mapped 368640 [ 3139.222773][T25076] file_dirty 0 [ 3139.222773][T25076] file_writeback 0 [ 3139.222773][T25076] swapcached 0 [ 3139.222773][T25076] anon_thp 0 [ 3139.222773][T25076] file_thp 0 [ 3139.222773][T25076] shmem_thp 0 [ 3139.222773][T25076] inactive_anon 167936 [ 3139.222773][T25076] active_anon 335872 [ 3139.222773][T25076] inactive_file 0 [ 3139.222773][T25076] active_file 0 [ 3139.222773][T25076] unevictable 0 [ 3139.222773][T25076] slab_reclaimable 27928 [ 3139.222773][T25076] slab_unreclaimable 308411160 [ 3139.222773][T25076] slab 308439088 [ 3139.324177][T25085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 17:54:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x2400c014) 17:54:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x2400c014) 17:54:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 3139.397709][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:54:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x9c, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0x3d, 0x6, "587f24eb4ee98d954f631321260a6b2130d5ccf0c83a6dc49ac49d11b5a73e901e607a830aaff7ae9c8e937d0403156e2bc2266a9b4aef337b"}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWRULE={0xde4, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_POSITION={0xc}, @NFTA_RULE_POSITION={0xc}, @NFTA_RULE_USERDATA={0xdb5, 0x7, 0x1, 0x0, "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"}]}], {0x14}}, 0xec4}}, 0x20000040) [ 3139.526395][T25076] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25076,uid=0 [ 3139.551419][T25077] bridge466: port 1(bridge_slave_1) entered disabled state [ 3139.578383][T25076] Memory cgroup out of memory: Killed process 25076 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3139.646482][T25077] bridge467: port 1(bridge_slave_1) entered blocking state [ 3139.664843][T25077] bridge467: port 1(bridge_slave_1) entered disabled state [ 3139.680356][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3140.085119][T25097] device bridge_slave_1 left promiscuous mode [ 3140.105017][T25097] bridge2249: port 1(bridge_slave_1) entered disabled state [ 3140.333906][T25097] bridge2250: port 1(bridge_slave_1) entered blocking state [ 3140.341429][T25097] bridge2250: port 1(bridge_slave_1) entered disabled state [ 3140.350537][T25097] device bridge_slave_1 entered promiscuous mode [ 3140.429089][T25096] bond0: (slave bridge467): Enslaving as an active interface with an up link [ 3140.438158][T25102] device bridge_slave_1 left promiscuous mode [ 3140.447835][T25102] bridge811: port 1(bridge_slave_1) entered disabled state [ 3140.533749][T25102] bridge812: port 1(bridge_slave_1) entered blocking state [ 3140.555085][T25102] bridge812: port 1(bridge_slave_1) entered disabled state [ 3140.583442][T25102] device bridge_slave_1 entered promiscuous mode [ 3140.622125][T25080] bridge2250: port 1(bridge_slave_1) entered blocking state [ 3140.629576][T25080] bridge2250: port 1(bridge_slave_1) entered forwarding state [ 3140.753903][T25080] bond0: (slave bridge2250): Enslaving as an active interface with an up link [ 3140.803635][T25105] bridge812: port 1(bridge_slave_1) entered blocking state [ 3140.811002][T25105] bridge812: port 1(bridge_slave_1) entered forwarding state 17:54:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b40790008000a000f"], 0x28}}, 0x0) 17:54:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x2400c014) 17:54:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@pktinfo={{0x24, 0x29, 0x32, {@dev}}}], 0x28}, 0x0) 17:54:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000c00000008000a000f"], 0x28}}, 0x0) 17:54:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000000600010001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) [ 3141.392676][T25105] bond0: (slave bridge812): Enslaving as an active interface with an up link [ 3141.472560][T25121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:39 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffffffffffff8}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8}) 17:54:39 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x894b, 0x0) [ 3141.521562][T25110] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3141.571952][T25110] CPU: 1 PID: 25110 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3141.582425][T25110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3141.592503][T25110] Call Trace: [ 3141.595796][T25110] [ 3141.598750][T25110] dump_stack_lvl+0xcd/0x134 [ 3141.603378][T25110] dump_header+0x10b/0x7f9 [ 3141.607828][T25110] oom_kill_process.cold+0x10/0x15 [ 3141.612977][T25110] out_of_memory+0x358/0x14a0 [ 3141.617692][T25110] ? find_held_lock+0x2d/0x110 [ 3141.622491][T25110] ? oom_killer_disable+0x270/0x270 [ 3141.627722][T25110] ? find_held_lock+0x2d/0x110 [ 3141.632515][T25110] mem_cgroup_out_of_memory+0x206/0x270 [ 3141.638091][T25110] ? mem_cgroup_margin+0x130/0x130 [ 3141.643227][T25110] ? lock_downgrade+0x6e0/0x6e0 [ 3141.648122][T25110] try_charge_memcg+0xf67/0x13f0 [ 3141.653099][T25110] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3141.659109][T25110] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3141.664857][T25110] ? lock_downgrade+0x6e0/0x6e0 [ 3141.669746][T25110] ? lock_downgrade+0x6e0/0x6e0 [ 3141.674638][T25110] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3141.680216][T25110] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3141.686407][T25110] copy_process+0x15f3/0x7090 [ 3141.691126][T25110] ? __lock_acquire+0xbc3/0x56d0 [ 3141.696104][T25110] ? __cleanup_sighand+0xb0/0xb0 [ 3141.701092][T25110] kernel_clone+0xe7/0xab0 [ 3141.705543][T25110] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3141.711556][T25110] ? create_io_thread+0xe0/0xe0 [ 3141.716442][T25110] ? find_held_lock+0x2d/0x110 [ 3141.721242][T25110] ? __ct_user_exit+0xff/0x150 [ 3141.726042][T25110] __do_sys_clone+0xba/0x100 [ 3141.730674][T25110] ? kernel_clone+0xab0/0xab0 [ 3141.735400][T25110] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3141.741326][T25110] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3141.747285][T25110] do_syscall_64+0x35/0xb0 [ 3141.751736][T25110] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3141.757663][T25110] RIP: 0033:0x7f072048b9d1 [ 3141.762101][T25110] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3141.781744][T25110] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3141.790187][T25110] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3141.798184][T25110] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3141.806178][T25110] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3141.814173][T25110] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3141.822169][T25110] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3141.830184][T25110] [ 3141.842549][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2142: link becomes ready 17:54:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0xeb0, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "f3d2d8a6b3e7743cd9379f72ce1458b62d4ec6b2eb717528f35c8d8ae0b5d5cf5432d4892bda5a51f67d554b75ec74547f5668938a6cea726718895f349725501b9ef16b92"}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc}}, @NFT_MSG_DELSETELEM={0xd98, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd70, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "a7dd69bfddbf2bde2c179696578a869ffc90b03ae1e5061fbac2a2c52564d9a06f2d25ca6bfb8c780922c28f760ef9ce483479a78086dc9dce60eb22df715f154c8ec909fe25d1886d4844e0e1"}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "d30f050a2fce5c78acf7aeef841a5f595b9debfb221d95e73d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "1e8ed20fa887199c37c239599b30801e5a31c5967afa446a1112371b1591da2741e680f71ee042b98a96ee4359aeb9d7a5ac2e28d80a8bf941c0479ed7ca2413e71ef811c453f9444627d11caee269db9b25985b2bb4a6e42ad5238d4b31fe9d47757b04c86e38f75a9ecaaae64d34952e24e4200c168a162f63aa3e0d6a506e11e60ebf553e879037e9d36c5baa86804dca9a84c025f23996363547bced7727b2a4e0de906588dcd3ccc3dc8b28450a7c43d72fb9419edf83"}, @NFTA_SET_ELEM_EXPRESSIONS={0x174, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}, @NFTA_CT_KEY={0x8}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xa08, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "87319091a5082ee650df0cce444c1275ff0c4c8905b400dc4a05d7b75e2ffe8205b5d08141ee203a9f3e0ba8174090e4d6d7a7b11f31b6fe759b16c70224297670707127eaa730de6c5f243936ecd88d3a445e0ee68d9e996aa2e2ec52e8463902a6eba6aeb7a981a1cafe47d9a98428e2c2cc46ec926892d8b3010e0137384661ec3efe549b0b9a71"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "8f9dd29490cbb9d6711aac11b6aa1f201d829664659892304362758b7763081cd5ee48d5dc26fda5d9f516a0e6f216badfd5957e29f9f168d97f0b4e840875177a73cb668b1c59a2cfcdfcc56864a69395db9f8b19795e7203f0826bc6826c6893b0afe38e11b6620002a71a79f5e50f65d4b2011f11b9992b774ade7d1ae28f1c52677345477607d6e4f8584d8cbabb9269826be77066f1599737a3ce"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x8b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "061dbb42509f12af5fd1ba2425ebcea72995345df16b6b6c3676d8fbaff8e6145d4a4029d720e3a8565da604546cb4dd58c25481c662edd88c42ea6551c5ce1c910ed2a0cac19756fb9248049cda63e7dc56be5ac9687e6492ee71bd907209258574bc741ff068644d7912b1920ee30ca955066fd03e64235cca2dbd6c2506dfe0248242387003be3c60dba13c815a46164e6f6f0c2b20015628a50b8981e8d323d64e435e3fd85d27ae1deeaf84936f70c22002f958d4236d48aa33d33e8dbe3981915505a1ebe281fc2ec0cfc11ca5cd89a0b71f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x785, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 17:54:39 executing program 2: socketpair(0x10, 0x2, 0x80000000, &(0x7f0000000080)) [ 3142.054146][T25139] device bridge_slave_1 left promiscuous mode [ 3142.072434][T25110] memory: usage 307200kB, limit 307200kB, failcnt 1109 [ 3142.079471][T25110] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 17:54:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x10}}, [], {0x14, 0x10}}, 0x28}}, 0x0) [ 3142.294796][T25139] bridge812: port 1(bridge_slave_1) entered disabled state [ 3142.302976][T25110] Memory cgroup stats for /syz4: [ 3142.303204][T25110] anon 151552 [ 3142.303204][T25110] file 368640 [ 3142.303204][T25110] kernel 314036224 [ 3142.303204][T25110] kernel_stack 65536 [ 3142.303204][T25110] pagetables 81920 [ 3142.303204][T25110] percpu 5431008 [ 3142.303204][T25110] sock 0 [ 3142.303204][T25110] vmalloc 0 [ 3142.303204][T25110] shmem 368640 [ 3142.303204][T25110] zswap 0 [ 3142.303204][T25110] zswapped 0 [ 3142.303204][T25110] file_mapped 368640 [ 3142.303204][T25110] file_dirty 0 [ 3142.303204][T25110] file_writeback 0 [ 3142.303204][T25110] swapcached 0 [ 3142.303204][T25110] anon_thp 0 [ 3142.303204][T25110] file_thp 0 [ 3142.303204][T25110] shmem_thp 0 [ 3142.303204][T25110] inactive_anon 184320 [ 3142.303204][T25110] active_anon 335872 [ 3142.303204][T25110] inactive_file 0 [ 3142.303204][T25110] active_file 0 [ 3142.303204][T25110] unevictable 0 [ 3142.303204][T25110] slab_reclaimable 15320 [ 3142.303204][T25110] slab_unreclaimable 308408016 [ 3142.303204][T25110] slab 308423336 [ 3142.396422][T25110] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25110,uid=0 [ 3142.412044][T25110] Memory cgroup out of memory: Killed process 25110 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3142.574367][T25115] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3142.613995][T25117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3142.647158][T25122] bridge467: port 1(bridge_slave_1) entered disabled state [ 3142.685916][T25122] bridge468: port 1(bridge_slave_1) entered blocking state [ 3142.713797][T25122] bridge468: port 1(bridge_slave_1) entered disabled state [ 3142.845426][T25124] bond0: (slave bridge468): Enslaving as an active interface with an up link [ 3142.895544][T25121] device bridge_slave_1 left promiscuous mode [ 3142.922248][T25121] bridge2250: port 1(bridge_slave_1) entered disabled state [ 3142.985869][T25121] bridge2251: port 1(bridge_slave_1) entered blocking state [ 3143.004422][T25121] bridge2251: port 1(bridge_slave_1) entered disabled state [ 3143.025151][T25121] device bridge_slave_1 entered promiscuous mode [ 3143.093305][T25135] bridge2251: port 1(bridge_slave_1) entered blocking state [ 3143.100789][T25135] bridge2251: port 1(bridge_slave_1) entered forwarding state [ 3143.296269][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.302604][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.624573][T25135] bond0: (slave bridge2251): Enslaving as an active interface with an up link [ 3143.675607][T25136] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000007a0008000a000f"], 0x28}}, 0x0) 17:54:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0x1}], 0x1, &(0x7f0000000600)=[{0x10}, {0x2}], 0x20}}], 0x1, 0x0) 17:54:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201}], {0x14}}, 0x3c}}, 0x0) 17:54:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000e00000008000a000f"], 0x28}}, 0x0) 17:54:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000000600010001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='i', 0x1}], 0x1}}, {{&(0x7f0000000140)=@llc, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="1e", 0x1}], 0x1, &(0x7f00000009c0)=[{0x10}, {0x10, 0x1}], 0x20}}], 0x2, 0x0) [ 3143.866453][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2143: link becomes ready [ 3143.934889][T25143] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 3143.955332][T25140] bond0: (slave bridge813): Enslaving as an active interface with an up link [ 3143.964669][T25149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3143.976452][T25143] CPU: 1 PID: 25143 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3143.987078][T25143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3143.997155][T25143] Call Trace: [ 3144.000456][T25143] [ 3144.003401][T25143] dump_stack_lvl+0xcd/0x134 [ 3144.008021][T25143] dump_header+0x10b/0x7f9 [ 3144.012471][T25143] oom_kill_process.cold+0x10/0x15 [ 3144.017618][T25143] out_of_memory+0x358/0x14a0 [ 3144.022334][T25143] ? find_held_lock+0x2d/0x110 [ 3144.027123][T25143] ? oom_killer_disable+0x270/0x270 [ 3144.032356][T25143] ? find_held_lock+0x2d/0x110 [ 3144.037147][T25143] mem_cgroup_out_of_memory+0x206/0x270 [ 3144.042726][T25143] ? mem_cgroup_margin+0x130/0x130 [ 3144.047863][T25143] ? lock_downgrade+0x6e0/0x6e0 [ 3144.052753][T25143] try_charge_memcg+0xf67/0x13f0 [ 3144.057721][T25143] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3144.063726][T25143] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3144.069473][T25143] ? lock_downgrade+0x6e0/0x6e0 [ 3144.074348][T25143] ? lock_downgrade+0x6e0/0x6e0 [ 3144.079217][T25143] ? rcu_read_unlock+0x9/0x60 [ 3144.083933][T25143] obj_cgroup_charge+0x2ab/0x5e0 [ 3144.088896][T25143] ? copy_process+0x5c2/0x7090 [ 3144.093682][T25143] kmem_cache_alloc_node+0x92/0x3f0 [ 3144.098901][T25143] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3144.104120][T25143] copy_process+0x5c2/0x7090 [ 3144.108736][T25143] ? find_held_lock+0x2d/0x110 [ 3144.113527][T25143] ? find_held_lock+0x2d/0x110 [ 3144.118308][T25143] ? __cleanup_sighand+0xb0/0xb0 [ 3144.123286][T25143] kernel_clone+0xe7/0xab0 [ 3144.127720][T25143] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3144.133723][T25143] ? create_io_thread+0xe0/0xe0 [ 3144.138600][T25143] ? find_held_lock+0x2d/0x110 [ 3144.143386][T25143] ? __ct_user_exit+0xff/0x150 [ 3144.148172][T25143] __do_sys_clone+0xba/0x100 [ 3144.152790][T25143] ? kernel_clone+0xab0/0xab0 [ 3144.157498][T25143] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3144.163417][T25143] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3144.169340][T25143] do_syscall_64+0x35/0xb0 [ 3144.173784][T25143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3144.179702][T25143] RIP: 0033:0x7f072048b9d1 [ 3144.184138][T25143] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3144.203777][T25143] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3144.212309][T25143] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3144.220314][T25143] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3144.228314][T25143] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3144.236309][T25143] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3144.244304][T25143] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3144.252321][T25143] 17:54:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}]}, 0x2c}}, 0x0) 17:54:41 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x2}, 0xe) [ 3144.547344][T25159] device bridge_slave_1 left promiscuous mode [ 3144.556071][T25143] memory: usage 307180kB, limit 307200kB, failcnt 1184 [ 3144.587501][T25143] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 17:54:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8000, @any, 0x0, 0x2}, 0xe) [ 3144.594692][T25159] bridge2251: port 1(bridge_slave_1) entered disabled state 17:54:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x3, 0x401}, 0x14}}, 0x0) [ 3144.622330][T25143] Memory cgroup stats for /syz4: [ 3144.622550][T25143] anon 151552 [ 3144.622550][T25143] file 368640 [ 3144.622550][T25143] kernel 314032128 [ 3144.622550][T25143] kernel_stack 65536 [ 3144.622550][T25143] pagetables 81920 [ 3144.622550][T25143] percpu 5431008 [ 3144.622550][T25143] sock 0 [ 3144.622550][T25143] vmalloc 0 [ 3144.622550][T25143] shmem 368640 [ 3144.622550][T25143] zswap 0 [ 3144.622550][T25143] zswapped 0 [ 3144.622550][T25143] file_mapped 368640 [ 3144.622550][T25143] file_dirty 0 [ 3144.622550][T25143] file_writeback 0 [ 3144.622550][T25143] swapcached 0 [ 3144.622550][T25143] anon_thp 0 [ 3144.622550][T25143] file_thp 0 [ 3144.622550][T25143] shmem_thp 0 [ 3144.622550][T25143] inactive_anon 184320 [ 3144.622550][T25143] active_anon 335872 [ 3144.622550][T25143] inactive_file 0 [ 3144.622550][T25143] active_file 0 [ 3144.622550][T25143] unevictable 0 [ 3144.622550][T25143] slab_reclaimable 23048 [ 3144.622550][T25143] slab_unreclaimable 308400456 [ 3144.622550][T25143] slab 308423504 17:54:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x0, 0xf, 0x201}, 0x14}}, 0x0) [ 3144.844872][T25153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3144.875409][T25154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3144.997347][T25143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25143,uid=0 [ 3145.011602][T25148] bridge468: port 1(bridge_slave_1) entered disabled state [ 3145.017753][T25143] Memory cgroup out of memory: Killed process 25143 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3145.042809][T25148] bridge469: port 1(bridge_slave_1) entered blocking state [ 3145.096302][T25148] bridge469: port 1(bridge_slave_1) entered disabled state [ 3145.203726][T25149] bond0: (slave bridge469): Enslaving as an active interface with an up link [ 3145.439798][T25164] bond0: (slave bridge2252): Enslaving as an active interface with an up link [ 3145.509464][T25169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3145.546168][T25173] bridge814: port 1(bridge_slave_1) entered blocking state [ 3145.554053][T25173] bridge814: port 1(bridge_slave_1) entered disabled state [ 3145.639570][T25173] device bridge_slave_1 entered promiscuous mode [ 3145.662426][T25174] bridge814: port 1(bridge_slave_1) entered blocking state [ 3145.669823][T25174] bridge814: port 1(bridge_slave_1) entered forwarding state [ 3145.688085][T25174] bond0: (slave bridge814): Enslaving as an active interface with an up link 17:54:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b407a0008000a000f"], 0x28}}, 0x0) 17:54:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17}, 0x48) 17:54:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@rthdr={{0x18, 0x29, 0x39, {0x0, 0x0, 0x2}}}], 0x18}, 0x0) 17:54:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023001000000008000a000f"], 0x28}}, 0x0) 17:54:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x44, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) 17:54:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x0, 0x0, 0x2}, 0x48) 17:54:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8000}, 0xe) 17:54:43 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) [ 3145.863047][T25178] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3145.905666][T25189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3145.926035][T25178] CPU: 0 PID: 25178 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3145.926067][T25178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3145.926082][T25178] Call Trace: [ 3145.926089][T25178] [ 3145.926099][T25178] dump_stack_lvl+0xcd/0x134 [ 3145.926134][T25178] dump_header+0x10b/0x7f9 [ 3145.926167][T25178] oom_kill_process.cold+0x10/0x15 [ 3145.926201][T25178] out_of_memory+0x358/0x14a0 [ 3145.926234][T25178] ? find_held_lock+0x2d/0x110 [ 3145.926259][T25178] ? oom_killer_disable+0x270/0x270 [ 3145.926291][T25178] ? find_held_lock+0x2d/0x110 [ 3145.926318][T25178] mem_cgroup_out_of_memory+0x206/0x270 [ 3145.926345][T25178] ? mem_cgroup_margin+0x130/0x130 [ 3145.926366][T25178] ? lock_downgrade+0x6e0/0x6e0 [ 3145.926410][T25178] try_charge_memcg+0xf67/0x13f0 [ 3145.926444][T25178] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3145.926480][T25178] ? lock_downgrade+0x6e0/0x6e0 [ 3145.926521][T25178] charge_memcg+0x31/0x320 [ 3145.926551][T25178] __mem_cgroup_charge+0x27/0x90 [ 3145.926576][T25178] ? _compound_head+0x5d/0x150 [ 3145.926607][T25178] wp_page_copy+0x27c/0x1b60 [ 3145.926641][T25178] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3145.926664][T25178] ? lock_downgrade+0x6e0/0x6e0 [ 3145.926686][T25178] ? vm_normal_page+0x146/0x2a0 [ 3145.926727][T25178] do_wp_page+0x1d1/0x1910 [ 3145.926757][T25178] __handle_mm_fault+0x1813/0x39b0 [ 3145.926790][T25178] ? vm_iomap_memory+0x190/0x190 [ 3145.926843][T25178] handle_mm_fault+0x1c8/0x780 [ 3145.926873][T25178] do_user_addr_fault+0x475/0x1210 [ 3145.926914][T25178] exc_page_fault+0x94/0x170 [ 3145.926946][T25178] asm_exc_page_fault+0x22/0x30 [ 3145.926970][T25178] RIP: 0033:0x7f0720437970 [ 3145.926990][T25178] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3145.927019][T25178] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3145.927040][T25178] RAX: 0000000071860a54 RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3145.927057][T25178] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0e6e [ 3145.927073][T25178] RBP: 0000000071860a54 R08: 0000000000000a54 R09: 0000000071860a58 [ 3145.927089][T25178] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3145.927106][T25178] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff81a326a6 [ 3145.927121][T25178] ? trace_user_exit.constprop.0+0x166/0x210 [ 3145.927169][T25178] [ 3145.927179][T25178] memory: usage 307200kB, limit 307200kB, failcnt 1219 [ 3145.927196][T25178] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3145.927212][T25178] Memory cgroup stats for /syz4: [ 3145.927417][T25178] anon 118784 [ 3145.927417][T25178] file 368640 [ 3145.927417][T25178] kernel 314085376 [ 3145.927417][T25178] kernel_stack 65536 [ 3145.927417][T25178] pagetables 73728 [ 3145.927417][T25178] percpu 5431008 [ 3145.927417][T25178] sock 0 [ 3145.927417][T25178] vmalloc 0 [ 3145.927417][T25178] shmem 368640 [ 3145.927417][T25178] zswap 0 [ 3145.927417][T25178] zswapped 0 [ 3145.927417][T25178] file_mapped 368640 [ 3145.927417][T25178] file_dirty 0 [ 3145.927417][T25178] file_writeback 0 [ 3145.927417][T25178] swapcached 0 [ 3145.927417][T25178] anon_thp 0 [ 3145.927417][T25178] file_thp 0 [ 3145.927417][T25178] shmem_thp 0 [ 3145.927417][T25178] inactive_anon 151552 [ 3145.927417][T25178] active_anon 335872 [ 3145.927417][T25178] inactive_file 0 [ 3145.927417][T25178] active_file 0 [ 3145.927417][T25178] unevictable 0 [ 3145.927417][T25178] slab_reclaimable 56160 [ 3145.927417][T25178] slab_unreclaimable 308423608 [ 3145.927417][T25178] slab 308479768 [ 3145.927482][T25178] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25178,uid=0 [ 3145.927648][T25178] Memory cgroup out of memory: Killed process 25178 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 17:54:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0xf}, 0x0) 17:54:43 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x1010) 17:54:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000200)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@tclass={{0x14, 0x29, 0x43, 0x800}}], 0x18}, 0x0) [ 3146.751250][T25201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3146.809693][T25189] bridge2253: port 1(bridge_slave_1) entered blocking state [ 3146.854950][T25189] bridge2253: port 1(bridge_slave_1) entered disabled state [ 3146.864271][T25189] device bridge_slave_1 entered promiscuous mode [ 3146.915559][T25199] device bridge_slave_1 left promiscuous mode [ 3146.922302][T25199] bridge814: port 1(bridge_slave_1) entered disabled state [ 3146.995631][T25199] bridge815: port 1(bridge_slave_1) entered blocking state [ 3147.023115][T25199] bridge815: port 1(bridge_slave_1) entered disabled state [ 3147.045381][T25199] device bridge_slave_1 entered promiscuous mode [ 3147.092396][T25202] bridge2253: port 1(bridge_slave_1) entered blocking state [ 3147.099832][T25202] bridge2253: port 1(bridge_slave_1) entered forwarding state [ 3147.219369][T25202] bond0: (slave bridge2253): Enslaving as an active interface with an up link 17:54:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b407b0008000a000f"], 0x28}}, 0x0) 17:54:44 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8201, 0x0) 17:54:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000200)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@tclass={{0x14, 0x29, 0x43, 0x800}}], 0x18}, 0x0) 17:54:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023002400000008000a000f"], 0x28}}, 0x0) [ 3147.455564][T25203] bridge815: port 1(bridge_slave_1) entered blocking state [ 3147.462972][T25203] bridge815: port 1(bridge_slave_1) entered forwarding state [ 3147.859739][T25204] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3147.902947][T25204] CPU: 0 PID: 25204 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3147.913423][T25204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3147.920381][T25203] bond0: (slave bridge815): Enslaving as an active interface with an up link [ 3147.923476][T25204] Call Trace: [ 3147.923486][T25204] [ 3147.923496][T25204] dump_stack_lvl+0xcd/0x134 [ 3147.943063][T25204] dump_header+0x10b/0x7f9 [ 3147.947496][T25204] oom_kill_process.cold+0x10/0x15 [ 3147.952641][T25204] out_of_memory+0x358/0x14a0 [ 3147.957350][T25204] ? find_held_lock+0x2d/0x110 [ 3147.962139][T25204] ? oom_killer_disable+0x270/0x270 [ 3147.967369][T25204] ? find_held_lock+0x2d/0x110 [ 3147.972162][T25204] mem_cgroup_out_of_memory+0x206/0x270 [ 3147.977732][T25204] ? mem_cgroup_margin+0x130/0x130 [ 3147.982862][T25204] ? lock_downgrade+0x6e0/0x6e0 [ 3147.987739][T25204] try_charge_memcg+0xf67/0x13f0 [ 3147.992690][T25204] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3147.998673][T25204] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3148.004420][T25204] ? lock_downgrade+0x6e0/0x6e0 [ 3148.009302][T25204] ? lock_downgrade+0x6e0/0x6e0 [ 3148.014194][T25204] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3148.019775][T25204] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3148.025968][T25204] copy_process+0x73e/0x7090 [ 3148.030593][T25204] ? __lock_acquire+0xbc3/0x56d0 [ 3148.035560][T25204] ? __cleanup_sighand+0xb0/0xb0 [ 3148.040510][T25204] kernel_clone+0xe7/0xab0 [ 3148.044919][T25204] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3148.050907][T25204] ? create_io_thread+0xe0/0xe0 [ 3148.055791][T25204] ? find_held_lock+0x2d/0x110 [ 3148.060595][T25204] ? __ct_user_exit+0xff/0x150 [ 3148.065395][T25204] __do_sys_clone+0xba/0x100 [ 3148.070040][T25204] ? kernel_clone+0xab0/0xab0 [ 3148.074761][T25204] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3148.080691][T25204] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3148.086615][T25204] do_syscall_64+0x35/0xb0 [ 3148.091032][T25204] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3148.096927][T25204] RIP: 0033:0x7f072048b9d1 [ 3148.101364][T25204] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3148.120996][T25204] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3148.129431][T25204] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3148.137413][T25204] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3148.145377][T25204] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3148.153355][T25204] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3148.161354][T25204] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3148.169372][T25204] 17:54:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x0, 0x0, 0x0, 0x24}, 0x48) 17:54:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}) [ 3148.246108][T25204] memory: usage 307200kB, limit 307200kB, failcnt 1257 [ 3148.264167][T26055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2145: link becomes ready [ 3148.286614][T25204] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 17:54:45 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) [ 3148.569909][T25227] device bridge_slave_1 left promiscuous mode [ 3148.582543][T25227] bridge815: port 1(bridge_slave_1) entered disabled state 17:54:46 executing program 1: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffffffffffff8}, 0x0, 0x0) [ 3148.651351][T25204] Memory cgroup stats for /syz4: [ 3148.651584][T25204] anon 151552 [ 3148.651584][T25204] file 368640 [ 3148.651584][T25204] kernel 314036224 [ 3148.651584][T25204] kernel_stack 65536 [ 3148.651584][T25204] pagetables 81920 [ 3148.651584][T25204] percpu 5431008 [ 3148.651584][T25204] sock 0 [ 3148.651584][T25204] vmalloc 0 [ 3148.651584][T25204] shmem 368640 [ 3148.651584][T25204] zswap 0 [ 3148.651584][T25204] zswapped 0 [ 3148.651584][T25204] file_mapped 368640 [ 3148.651584][T25204] file_dirty 0 17:54:46 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8000, @any, 0x2}, 0xe) [ 3148.651584][T25204] file_writeback 0 [ 3148.651584][T25204] swapcached 0 [ 3148.651584][T25204] anon_thp 0 [ 3148.651584][T25204] file_thp 0 [ 3148.651584][T25204] shmem_thp 0 [ 3148.651584][T25204] inactive_anon 184320 [ 3148.651584][T25204] active_anon 335872 [ 3148.651584][T25204] inactive_file 0 [ 3148.651584][T25204] active_file 0 [ 3148.651584][T25204] unevictable 0 [ 3148.651584][T25204] slab_reclaimable 15320 [ 3148.651584][T25204] slab_unreclaimable 308407712 [ 3148.651584][T25204] slab 308423032 [ 3148.822404][T25204] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25204,uid=0 [ 3148.851605][T25204] Memory cgroup out of memory: Killed process 25204 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 17:54:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000500), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r1, 0x415, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0xffffffffffffff0c}, @NLBL_MGMT_A_CLPDOI]}, 0x30}}, 0x0) [ 3148.984964][T25214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3149.105835][T25237] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3149.192617][T25215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3149.363743][T25217] device bridge_slave_1 left promiscuous mode [ 3149.635005][T25217] bridge382: port 1(bridge_slave_1) entered disabled state [ 3149.784797][T25217] bridge384: port 1(bridge_slave_1) entered blocking state [ 3149.823539][T25217] bridge384: port 1(bridge_slave_1) entered disabled state [ 3149.832234][T25217] device bridge_slave_1 entered promiscuous mode [ 3149.932994][T25219] device bridge_slave_1 left promiscuous mode [ 3149.953264][T25219] bridge2253: port 1(bridge_slave_1) entered disabled state [ 3150.064897][T25219] bridge2254: port 1(bridge_slave_1) entered blocking state [ 3150.093408][T25219] bridge2254: port 1(bridge_slave_1) entered disabled state [ 3150.123261][T25219] device bridge_slave_1 entered promiscuous mode [ 3150.214996][T25218] bond0: (slave bridge384): Enslaving as an active interface with an up link [ 3150.274530][T25220] bridge2254: port 1(bridge_slave_1) entered blocking state [ 3150.281977][T25220] bridge2254: port 1(bridge_slave_1) entered forwarding state [ 3150.415318][T25220] bond0: (slave bridge2254): Enslaving as an active interface with an up link 17:54:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b407c0008000a000f"], 0x28}}, 0x0) 17:54:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023004800000008000a000f"], 0x28}}, 0x0) 17:54:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xc}}, [], {0x14}}, 0x28}}, 0x0) 17:54:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000400)={{0x14, 0x2}, [@NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x3c}}, 0x0) 17:54:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 3150.665255][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3150.744660][T25240] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3150.894007][T25240] CPU: 0 PID: 25240 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3150.904480][T25240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3150.914646][T25240] Call Trace: [ 3150.917940][T25240] [ 3150.920887][T25240] dump_stack_lvl+0xcd/0x134 [ 3150.925510][T25240] dump_header+0x10b/0x7f9 [ 3150.929952][T25240] oom_kill_process.cold+0x10/0x15 [ 3150.935093][T25240] out_of_memory+0x358/0x14a0 [ 3150.939785][T25240] ? find_held_lock+0x2d/0x110 [ 3150.944563][T25240] ? oom_killer_disable+0x270/0x270 [ 3150.949779][T25240] ? find_held_lock+0x2d/0x110 [ 3150.954588][T25240] mem_cgroup_out_of_memory+0x206/0x270 [ 3150.960164][T25240] ? mem_cgroup_margin+0x130/0x130 [ 3150.965299][T25240] ? lock_downgrade+0x6e0/0x6e0 [ 3150.970192][T25240] try_charge_memcg+0xf67/0x13f0 [ 3150.975165][T25240] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3150.981182][T25240] ? lock_downgrade+0x6e0/0x6e0 [ 3150.986085][T25240] charge_memcg+0x31/0x320 [ 3150.990532][T25240] __mem_cgroup_charge+0x27/0x90 [ 3150.995501][T25240] ? _compound_head+0x5d/0x150 [ 3151.000294][T25240] wp_page_copy+0x27c/0x1b60 [ 3151.004921][T25240] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3151.010405][T25240] ? lock_downgrade+0x6e0/0x6e0 [ 3151.015276][T25240] ? vm_normal_page+0x146/0x2a0 [ 3151.020168][T25240] do_wp_page+0x1d1/0x1910 [ 3151.024613][T25240] __handle_mm_fault+0x1813/0x39b0 [ 3151.029849][T25240] ? vm_iomap_memory+0x190/0x190 [ 3151.034840][T25240] handle_mm_fault+0x1c8/0x780 [ 3151.039627][T25240] do_user_addr_fault+0x475/0x1210 [ 3151.044779][T25240] exc_page_fault+0x94/0x170 [ 3151.050447][T25240] asm_exc_page_fault+0x22/0x30 [ 3151.055324][T25240] RIP: 0033:0x7f0720437970 [ 3151.059762][T25240] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3151.079391][T25240] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3151.085488][T25240] RAX: 0000000071860a54 RBX: 00007f07205ac0e8 RCX: 0000001b2eb20000 [ 3151.093502][T25240] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0e6e [ 3151.101491][T25240] RBP: 0000000071860a54 R08: 0000000000000a54 R09: 0000000071860a58 [ 3151.109509][T25240] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3151.117512][T25240] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff81a326a6 [ 3151.125504][T25240] ? trace_user_exit.constprop.0+0x166/0x210 [ 3151.131533][T25240] [ 3151.214699][T25240] memory: usage 307172kB, limit 307200kB, failcnt 1350 [ 3151.225342][T25240] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3151.244556][T25240] Memory cgroup stats for /syz4: [ 3151.244792][T25240] anon 122880 [ 3151.244792][T25240] file 368640 [ 3151.244792][T25240] kernel 314052608 [ 3151.244792][T25240] kernel_stack 98304 [ 3151.244792][T25240] pagetables 73728 [ 3151.244792][T25240] percpu 5431008 [ 3151.244792][T25240] sock 0 [ 3151.244792][T25240] vmalloc 0 [ 3151.244792][T25240] shmem 368640 [ 3151.244792][T25240] zswap 0 [ 3151.244792][T25240] zswapped 0 [ 3151.244792][T25240] file_mapped 368640 [ 3151.244792][T25240] file_dirty 0 [ 3151.244792][T25240] file_writeback 0 [ 3151.244792][T25240] swapcached 0 [ 3151.244792][T25240] anon_thp 0 [ 3151.244792][T25240] file_thp 0 [ 3151.244792][T25240] shmem_thp 0 [ 3151.244792][T25240] inactive_anon 155648 [ 3151.244792][T25240] active_anon 335872 [ 3151.244792][T25240] inactive_file 0 [ 3151.244792][T25240] active_file 0 [ 3151.244792][T25240] unevictable 0 [ 3151.244792][T25240] slab_reclaimable 13392 [ 3151.244792][T25240] slab_unreclaimable 308407296 [ 3151.244792][T25240] slab 308420688 [ 3151.444918][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2146: link becomes ready [ 3151.475744][T25240] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25240,uid=0 [ 3151.475933][T25240] Memory cgroup out of memory: Killed process 25240 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3151.892459][T25251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:54:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x301}, 0x14}}, 0x0) 17:54:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000040803"], 0x48}}, 0x0) 17:54:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023004c00000008000a000f"], 0x28}}, 0x0) 17:54:49 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x52) 17:54:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a588900000c0a010400000000000000000000000908000440000000030900020073797a31000000000800044000000001980403"], 0x89b4}}, 0x0) [ 3152.046606][T25261] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3152.148915][T25266] netlink: 33936 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3152.163651][T25257] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3152.204219][T25257] CPU: 1 PID: 25257 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3152.214694][T25257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3152.224753][T25257] Call Trace: [ 3152.228036][T25257] [ 3152.230973][T25257] dump_stack_lvl+0xcd/0x134 [ 3152.235584][T25257] dump_header+0x10b/0x7f9 [ 3152.240016][T25257] oom_kill_process.cold+0x10/0x15 [ 3152.245140][T25257] out_of_memory+0x358/0x14a0 [ 3152.249832][T25257] ? find_held_lock+0x2d/0x110 [ 3152.254603][T25257] ? oom_killer_disable+0x270/0x270 [ 3152.259809][T25257] ? find_held_lock+0x2d/0x110 [ 3152.264580][T25257] mem_cgroup_out_of_memory+0x206/0x270 [ 3152.270140][T25257] ? mem_cgroup_margin+0x130/0x130 [ 3152.275251][T25257] ? lock_downgrade+0x6e0/0x6e0 [ 3152.280122][T25257] try_charge_memcg+0xf67/0x13f0 [ 3152.285072][T25257] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3152.291063][T25257] ? lock_downgrade+0x6e0/0x6e0 [ 3152.295933][T25257] charge_memcg+0x31/0x320 [ 3152.300363][T25257] __mem_cgroup_charge+0x27/0x90 [ 3152.305304][T25257] ? _compound_head+0x5d/0x150 [ 3152.310081][T25257] wp_page_copy+0x27c/0x1b60 [ 3152.315120][T25257] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3152.320580][T25257] ? lock_downgrade+0x6e0/0x6e0 [ 3152.325433][T25257] ? vm_normal_page+0x146/0x2a0 [ 3152.330299][T25257] do_wp_page+0x1d1/0x1910 [ 3152.334727][T25257] __handle_mm_fault+0x1813/0x39b0 [ 3152.339851][T25257] ? vm_iomap_memory+0x190/0x190 [ 3152.344814][T25257] handle_mm_fault+0x1c8/0x780 [ 3152.349609][T25257] do_user_addr_fault+0x475/0x1210 [ 3152.354781][T25257] exc_page_fault+0x94/0x170 [ 3152.359401][T25257] asm_exc_page_fault+0x22/0x30 [ 3152.364271][T25257] RIP: 0033:0x7f0720437970 [ 3152.368697][T25257] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3152.388407][T25257] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3152.394491][T25257] RAX: 00000000095816ae RBX: 00007f07205ac018 RCX: 0000001b2eb20000 17:54:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@dontfrag={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x0, 0x0, [@local]}}}], 0x40}, 0x0) [ 3152.402474][T25257] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 000000000c1b0287 [ 3152.410455][T25257] RBP: 00000000095816ae R08: 00000000000016ae R09: 00000000095816b2 [ 3152.418431][T25257] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3152.426405][T25257] R13: 0000000000000001 R14: 0000000000000009 R15: ffffffff874ccdd8 [ 3152.434415][T25257] ? __sock_create+0x28/0x790 [ 3152.439122][T25257] [ 3152.526029][T25253] device bridge_slave_1 left promiscuous mode [ 3152.532926][T25253] bridge2254: port 1(bridge_slave_1) entered disabled state [ 3152.589428][T25257] memory: usage 307148kB, limit 307200kB, failcnt 1377 [ 3152.681798][T25253] bridge2255: port 1(bridge_slave_1) entered blocking state [ 3152.689271][T25257] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3152.696368][T25253] bridge2255: port 1(bridge_slave_1) entered disabled state [ 3152.853875][T25257] Memory cgroup stats for /syz4: [ 3152.854105][T25257] anon 122880 [ 3152.854105][T25257] file 368640 [ 3152.854105][T25257] kernel 314028032 [ 3152.854105][T25257] kernel_stack 65536 [ 3152.854105][T25257] pagetables 73728 [ 3152.854105][T25257] percpu 5431008 [ 3152.854105][T25257] sock 0 [ 3152.854105][T25257] vmalloc 0 [ 3152.854105][T25257] shmem 368640 [ 3152.854105][T25257] zswap 0 [ 3152.854105][T25257] zswapped 0 [ 3152.854105][T25257] file_mapped 368640 [ 3152.854105][T25257] file_dirty 0 [ 3152.854105][T25257] file_writeback 0 [ 3152.854105][T25257] swapcached 0 [ 3152.854105][T25257] anon_thp 0 [ 3152.854105][T25257] file_thp 0 [ 3152.854105][T25257] shmem_thp 0 [ 3152.854105][T25257] inactive_anon 155648 [ 3152.854105][T25257] active_anon 335872 [ 3152.854105][T25257] inactive_file 0 [ 3152.854105][T25257] active_file 0 [ 3152.854105][T25257] unevictable 0 [ 3152.854105][T25257] slab_reclaimable 14160 [ 3152.854105][T25257] slab_unreclaimable 308409560 [ 3152.854105][T25257] slab 308423720 [ 3152.896614][T25253] device bridge_slave_1 entered promiscuous mode [ 3152.974108][T25254] bridge2255: port 1(bridge_slave_1) entered blocking state [ 3152.981547][T25254] bridge2255: port 1(bridge_slave_1) entered forwarding state 17:54:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b407d0008000a000f"], 0x28}}, 0x0) 17:54:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}]}, 0x48}}, 0x0) 17:54:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 17:54:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@dontfrag={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x0, 0x0, [@local]}}}], 0x40}, 0x0) [ 3153.011183][T25257] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25257,uid=0 [ 3153.011684][T25254] bond0: (slave bridge2255): Enslaving as an active interface with an up link [ 3153.036394][T25263] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3153.042547][T25257] Memory cgroup out of memory: Killed process 25257 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 17:54:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023006000000008000a000f"], 0x28}}, 0x0) [ 3153.265853][T23402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2147: link becomes ready [ 3153.474283][T25259] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3153.485887][T25283] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3153.485923][T25283] CPU: 1 PID: 25283 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3153.485949][T25283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3153.485966][T25283] Call Trace: [ 3153.485974][T25283] [ 3153.485984][T25283] dump_stack_lvl+0xcd/0x134 [ 3153.486020][T25283] dump_header+0x10b/0x7f9 [ 3153.486053][T25283] oom_kill_process.cold+0x10/0x15 [ 3153.486085][T25283] out_of_memory+0x358/0x14a0 [ 3153.486119][T25283] ? find_held_lock+0x2d/0x110 [ 3153.486143][T25283] ? oom_killer_disable+0x270/0x270 [ 3153.486174][T25283] ? find_held_lock+0x2d/0x110 [ 3153.486202][T25283] mem_cgroup_out_of_memory+0x206/0x270 [ 3153.486228][T25283] ? mem_cgroup_margin+0x130/0x130 [ 3153.486250][T25283] ? lock_downgrade+0x6e0/0x6e0 [ 3153.486293][T25283] try_charge_memcg+0xf67/0x13f0 [ 3153.486328][T25283] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3153.486364][T25283] ? lock_downgrade+0x6e0/0x6e0 [ 3153.486406][T25283] charge_memcg+0x31/0x320 [ 3153.486435][T25283] __mem_cgroup_charge+0x27/0x90 [ 3153.486459][T25283] ? _compound_head+0x5d/0x150 [ 3153.486490][T25283] __handle_mm_fault+0x17df/0x39b0 [ 3153.486523][T25283] ? vm_iomap_memory+0x190/0x190 [ 3153.486576][T25283] handle_mm_fault+0x1c8/0x780 17:54:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:51 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0x8906, 0x0) 17:54:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x0, 0x0, 0xffff}, 0x48) 17:54:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@hopopts={{0x18}}, @dontfrag={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x0, 0x0, [@local]}}}], 0x58}, 0x0) [ 3153.486607][T25283] do_user_addr_fault+0x475/0x1210 [ 3153.486648][T25283] exc_page_fault+0x94/0x170 [ 3153.486680][T25283] asm_exc_page_fault+0x22/0x30 [ 3153.486704][T25283] RIP: 0033:0x7f07204850d5 [ 3153.486732][T25283] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 3153.486755][T25283] RSP: 002b:00007ffc7a569578 EFLAGS: 00010202 [ 3153.486776][T25283] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 3153.486793][T25283] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 3153.486808][T25283] RBP: 00007ffc7a569638 R08: 00007f07209b0000 R09: 00007f07205b00c8 [ 3153.486824][T25283] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 0000000000301e2a [ 3153.486840][T25283] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3153.486877][T25283] [ 3153.514260][T25283] memory: usage 307200kB, limit 307200kB, failcnt 1407 [ 3153.792324][T25294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3153.852364][T25298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3153.926181][T25294] bridge816: port 1(bridge_slave_1) entered blocking state 17:54:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 17:54:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0xffffffffffffffca}}]}, 0x48}}, 0x0) 17:54:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}, 0x1, 0x0, 0x2}, 0x0) [ 3154.045854][T25283] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3154.073510][T25283] Memory cgroup stats for /syz4: [ 3154.073727][T25283] anon 135168 [ 3154.073727][T25283] file 368640 [ 3154.073727][T25283] kernel 314044416 [ 3154.073727][T25283] kernel_stack 65536 [ 3154.073727][T25283] pagetables 81920 [ 3154.073727][T25283] percpu 5431008 [ 3154.073727][T25283] sock 0 [ 3154.073727][T25283] vmalloc 0 [ 3154.073727][T25283] shmem 368640 [ 3154.073727][T25283] zswap 0 [ 3154.073727][T25283] zswapped 0 [ 3154.073727][T25283] file_mapped 368640 [ 3154.073727][T25283] file_dirty 0 [ 3154.073727][T25283] file_writeback 0 [ 3154.073727][T25283] swapcached 0 [ 3154.073727][T25283] anon_thp 0 [ 3154.073727][T25283] file_thp 0 [ 3154.073727][T25283] shmem_thp 0 [ 3154.073727][T25283] inactive_anon 147456 [ 3154.073727][T25283] active_anon 335872 [ 3154.073727][T25283] inactive_file 0 [ 3154.073727][T25283] active_file 0 [ 3154.073727][T25283] unevictable 0 [ 3154.073727][T25283] slab_reclaimable 15320 [ 3154.073727][T25283] slab_unreclaimable 308412712 [ 3154.073727][T25283] slab 308428032 [ 3154.245765][T25294] bridge816: port 1(bridge_slave_1) entered disabled state [ 3154.254733][T25294] device bridge_slave_1 entered promiscuous mode [ 3154.382719][T25282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3154.412987][T25283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25283,uid=0 [ 3154.453642][T25283] Memory cgroup out of memory: Killed process 25283 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3154.495825][T25286] device bridge_slave_1 left promiscuous mode [ 3154.509993][T25286] bridge2255: port 1(bridge_slave_1) entered disabled state [ 3154.624639][T25286] bridge2256: port 1(bridge_slave_1) entered blocking state [ 3154.653719][T25286] bridge2256: port 1(bridge_slave_1) entered disabled state [ 3154.675254][T25286] device bridge_slave_1 entered promiscuous mode 17:54:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b407e0008000a000f"], 0x28}}, 0x0) 17:54:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14"], 0x4c}}, 0x0) 17:54:52 executing program 2: syz_emit_ethernet(0x16, &(0x7f0000000780)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, "f4", "a7eff3"}}}}}}, 0x0) 17:54:52 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:54:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023006800000008000a000f"], 0x28}}, 0x0) [ 3154.743967][T25299] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3154.857303][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3154.916992][T25303] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3154.945267][T25303] CPU: 0 PID: 25303 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3154.955730][T25303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3154.965811][T25303] Call Trace: [ 3154.969113][T25303] [ 3154.972066][T25303] dump_stack_lvl+0xcd/0x134 [ 3154.976719][T25303] dump_header+0x10b/0x7f9 [ 3154.981176][T25303] oom_kill_process.cold+0x10/0x15 [ 3154.986330][T25303] out_of_memory+0x358/0x14a0 [ 3154.991042][T25303] ? find_held_lock+0x2d/0x110 [ 3154.995830][T25303] ? oom_killer_disable+0x270/0x270 [ 3155.001061][T25303] ? find_held_lock+0x2d/0x110 [ 3155.005853][T25303] mem_cgroup_out_of_memory+0x206/0x270 [ 3155.011431][T25303] ? mem_cgroup_margin+0x130/0x130 [ 3155.016567][T25303] ? lock_downgrade+0x6e0/0x6e0 [ 3155.021475][T25303] try_charge_memcg+0xf67/0x13f0 [ 3155.026456][T25303] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3155.032471][T25303] ? lock_downgrade+0x6e0/0x6e0 [ 3155.037369][T25303] charge_memcg+0x31/0x320 [ 3155.041818][T25303] __mem_cgroup_charge+0x27/0x90 [ 3155.046870][T25303] ? _compound_head+0x5d/0x150 [ 3155.051663][T25303] __handle_mm_fault+0x17df/0x39b0 [ 3155.056806][T25303] ? vm_iomap_memory+0x190/0x190 [ 3155.061797][T25303] handle_mm_fault+0x1c8/0x780 [ 3155.066596][T25303] do_user_addr_fault+0x475/0x1210 [ 3155.071750][T25303] exc_page_fault+0x94/0x170 [ 3155.076371][T25303] asm_exc_page_fault+0x22/0x30 [ 3155.081242][T25303] RIP: 0033:0x7f07204850d5 [ 3155.085678][T25303] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 3155.105308][T25303] RSP: 002b:00007ffc7a569578 EFLAGS: 00010202 [ 3155.111402][T25303] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 3155.119393][T25303] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 3155.127383][T25303] RBP: 00007ffc7a569638 R08: 00007f07209b0000 R09: 00007f07205b00c8 [ 3155.135370][T25303] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00000000003023b0 [ 3155.143347][T25303] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3155.151339][T25303] [ 3155.184082][T25302] bridge816: port 1(bridge_slave_1) entered blocking state [ 3155.191469][T25302] bridge816: port 1(bridge_slave_1) entered forwarding state [ 3155.309315][T25302] bond0: (slave bridge816): Enslaving as an active interface with an up link [ 3155.354873][T25303] memory: usage 307184kB, limit 307200kB, failcnt 1438 17:54:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1000000}, 0x20) [ 3155.433545][T25310] device bridge_slave_1 left promiscuous mode [ 3155.446076][T25303] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3155.484222][T25310] bridge2256: port 1(bridge_slave_1) entered disabled state [ 3155.491824][T25303] Memory cgroup stats for /syz4: [ 3155.492028][T25303] anon 135168 [ 3155.492028][T25303] file 368640 [ 3155.492028][T25303] kernel 314052608 [ 3155.492028][T25303] kernel_stack 65536 [ 3155.492028][T25303] pagetables 81920 [ 3155.492028][T25303] percpu 5431008 [ 3155.492028][T25303] sock 0 [ 3155.492028][T25303] vmalloc 0 [ 3155.492028][T25303] shmem 368640 [ 3155.492028][T25303] zswap 0 [ 3155.492028][T25303] zswapped 0 [ 3155.492028][T25303] file_mapped 368640 [ 3155.492028][T25303] file_dirty 0 [ 3155.492028][T25303] file_writeback 0 [ 3155.492028][T25303] swapcached 0 [ 3155.492028][T25303] anon_thp 0 [ 3155.492028][T25303] file_thp 0 [ 3155.492028][T25303] shmem_thp 0 [ 3155.492028][T25303] inactive_anon 167936 [ 3155.492028][T25303] active_anon 335872 [ 3155.492028][T25303] inactive_file 0 [ 3155.492028][T25303] active_file 0 [ 3155.492028][T25303] unevictable 0 [ 3155.492028][T25303] slab_reclaimable 27160 [ 3155.492028][T25303] slab_unreclaimable 308411560 17:54:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f032704f9160d9eb314b3fa493e2cb9616c4d29db65adcd289355d0c26fa2edd"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b95d661fb6d07fdd707e90c7201ca4f75400ba86c32b9d3b955f126b1e72dfaf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}]}, {0xbf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4a0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x11c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) [ 3155.492028][T25303] slab 308438720 17:54:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) 17:54:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast1}}) 17:54:53 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000340)=""/167, 0x26, 0xa7, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/61, 0x3d, 0x0, 0x0}}, 0x10) [ 3155.804735][T25310] bridge2257: port 1(bridge_slave_1) entered blocking state [ 3155.843871][T25310] bridge2257: port 1(bridge_slave_1) entered disabled state 17:54:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff00000000000013"], 0x4c}}, 0x0) [ 3155.887559][T25310] device bridge_slave_1 entered promiscuous mode [ 3155.915221][T25303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25303,uid=0 [ 3155.941000][T25303] Memory cgroup out of memory: Killed process 25303 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3156.018079][T25314] bridge2257: port 1(bridge_slave_1) entered blocking state [ 3156.025563][T25314] bridge2257: port 1(bridge_slave_1) entered forwarding state 17:54:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b407f0008000a000f"], 0x28}}, 0x0) 17:54:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x9, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 17:54:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023006c00000008000a000f"], 0x28}}, 0x0) [ 3156.266249][T25314] bond0: (slave bridge2257): Enslaving as an active interface with an up link [ 3156.314502][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2149: link becomes ready 17:54:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a80)={0x14}, 0x14}}, 0x0) [ 3156.396219][T25333] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3156.416114][T25329] device bridge_slave_1 left promiscuous mode [ 3156.422412][T25329] bridge816: port 1(bridge_slave_1) entered disabled state 17:54:54 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1000000}, 0x20) [ 3156.459384][T25333] CPU: 0 PID: 25333 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3156.469851][T25333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3156.479943][T25333] Call Trace: [ 3156.483245][T25333] [ 3156.486192][T25333] dump_stack_lvl+0xcd/0x134 [ 3156.490817][T25333] dump_header+0x10b/0x7f9 [ 3156.495269][T25333] oom_kill_process.cold+0x10/0x15 [ 3156.500415][T25333] out_of_memory+0x358/0x14a0 [ 3156.505124][T25333] ? find_held_lock+0x2d/0x110 [ 3156.509923][T25333] ? oom_killer_disable+0x270/0x270 [ 3156.515163][T25333] ? find_held_lock+0x2d/0x110 [ 3156.519977][T25333] mem_cgroup_out_of_memory+0x206/0x270 [ 3156.525549][T25333] ? mem_cgroup_margin+0x130/0x130 [ 3156.530686][T25333] ? lock_downgrade+0x6e0/0x6e0 [ 3156.535583][T25333] try_charge_memcg+0xf67/0x13f0 [ 3156.540821][T25333] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3156.546840][T25333] ? lock_downgrade+0x6e0/0x6e0 [ 3156.551734][T25333] charge_memcg+0x31/0x320 [ 3156.556187][T25333] __mem_cgroup_charge+0x27/0x90 [ 3156.561155][T25333] ? _compound_head+0x5d/0x150 [ 3156.565951][T25333] wp_page_copy+0x27c/0x1b60 [ 3156.570578][T25333] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3156.576066][T25333] ? lock_downgrade+0x6e0/0x6e0 [ 3156.580943][T25333] ? vm_normal_page+0x146/0x2a0 [ 3156.585836][T25333] do_wp_page+0x1d1/0x1910 [ 3156.590283][T25333] __handle_mm_fault+0x1813/0x39b0 [ 3156.595431][T25333] ? vm_iomap_memory+0x190/0x190 [ 3156.600423][T25333] handle_mm_fault+0x1c8/0x780 [ 3156.605219][T25333] do_user_addr_fault+0x475/0x1210 [ 3156.610371][T25333] exc_page_fault+0x94/0x170 [ 3156.614992][T25333] asm_exc_page_fault+0x22/0x30 [ 3156.619871][T25333] RIP: 0033:0x7f0720437970 [ 3156.624327][T25333] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3156.643956][T25333] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3156.650055][T25333] RAX: 00000000410a6c2c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3156.658049][T25333] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000000000022 [ 3156.666043][T25333] RBP: 00000000410a6c2c R08: 0000000000000c2c R09: 00000000410a6c30 [ 3156.674088][T25333] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3156.682170][T25333] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a32546 [ 3156.690162][T25333] ? trace_user_exit.constprop.0+0x6/0x210 [ 3156.696013][T25333] [ 3156.893919][T25333] memory: usage 307184kB, limit 307200kB, failcnt 1486 [ 3156.903253][T25333] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3156.908523][T25329] bridge817: port 1(bridge_slave_1) entered blocking state [ 3156.910808][T25333] Memory cgroup stats for /syz4: [ 3156.917784][T25333] anon 102400 [ 3156.917784][T25333] file 368640 [ 3156.917784][T25333] kernel 314073088 [ 3156.917784][T25333] kernel_stack 65536 [ 3156.917784][T25333] pagetables 73728 [ 3156.917784][T25333] percpu 5431008 [ 3156.917784][T25333] sock 0 [ 3156.917784][T25333] vmalloc 0 [ 3156.917784][T25333] shmem 368640 [ 3156.917784][T25333] zswap 0 [ 3156.917784][T25333] zswapped 0 [ 3156.917784][T25333] file_mapped 368640 [ 3156.917784][T25333] file_dirty 0 [ 3156.917784][T25333] file_writeback 0 [ 3156.917784][T25333] swapcached 0 [ 3156.917784][T25333] anon_thp 0 [ 3156.917784][T25333] file_thp 0 [ 3156.917784][T25333] shmem_thp 0 [ 3156.917784][T25333] inactive_anon 135168 [ 3156.917784][T25333] active_anon 335872 [ 3156.917784][T25333] inactive_file 0 [ 3156.917784][T25333] active_file 0 [ 3156.917784][T25333] unevictable 0 [ 3156.917784][T25333] slab_reclaimable 54616 [ 3156.917784][T25333] slab_unreclaimable 308415680 [ 3156.917784][T25333] slab 308470296 [ 3156.934363][T25329] bridge817: port 1(bridge_slave_1) entered disabled state [ 3157.073865][T25329] device bridge_slave_1 entered promiscuous mode [ 3157.094199][T25332] bridge817: port 1(bridge_slave_1) entered blocking state [ 3157.101600][T25332] bridge817: port 1(bridge_slave_1) entered forwarding state [ 3157.228451][T25332] bond0: (slave bridge817): Enslaving as an active interface with an up link 17:54:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast1}}) 17:54:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7ffffff2}, 0x0) [ 3157.466969][T25340] device bridge_slave_1 left promiscuous mode [ 3157.473257][T25340] bridge2257: port 1(bridge_slave_1) entered disabled state [ 3157.500458][T25352] netlink: 'syz-executor.0': attribute type 19 has an invalid length. 17:54:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000e0013"], 0x4c}}, 0x0) 17:54:55 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 17:54:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9e, &(0x7f0000000140)=""/158, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 3157.518165][T25354] __nla_validate_parse: 2 callbacks suppressed [ 3157.518184][T25354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3157.536068][T25352] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 17:54:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)=ANY=[@ANYRES16=0x0], 0x1190}}, 0x0) [ 3157.598845][T25356] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 17:54:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b40800008000a000f"], 0x28}}, 0x0) 17:54:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}, 0x1, 0x0, 0x6000}, 0x0) [ 3157.743088][T25333] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25333,uid=0 [ 3157.759721][T25333] Memory cgroup out of memory: Killed process 25333 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3157.796569][T25354] device bridge_slave_1 left promiscuous mode [ 3157.816557][T25354] bridge817: port 1(bridge_slave_1) entered disabled state 17:54:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023007400000008000a000f"], 0x28}}, 0x0) 17:54:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000e000003"], 0x4c}}, 0x0) 17:54:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000280)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) [ 3157.947756][T25370] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3157.975719][T25354] bridge818: port 1(bridge_slave_1) entered blocking state [ 3158.014191][T25354] bridge818: port 1(bridge_slave_1) entered disabled state [ 3158.038114][T25372] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3158.061817][T25354] device bridge_slave_1 entered promiscuous mode [ 3158.073653][T25372] CPU: 1 PID: 25372 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3158.084108][T25372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3158.094179][T25372] Call Trace: [ 3158.097469][T25372] [ 3158.100418][T25372] dump_stack_lvl+0xcd/0x134 [ 3158.105039][T25372] dump_header+0x10b/0x7f9 [ 3158.109487][T25372] oom_kill_process.cold+0x10/0x15 [ 3158.114631][T25372] out_of_memory+0x358/0x14a0 [ 3158.119337][T25372] ? find_held_lock+0x2d/0x110 [ 3158.124128][T25372] ? oom_killer_disable+0x270/0x270 [ 3158.129340][T25372] ? find_held_lock+0x2d/0x110 [ 3158.134119][T25372] mem_cgroup_out_of_memory+0x206/0x270 [ 3158.139679][T25372] ? mem_cgroup_margin+0x130/0x130 [ 3158.144810][T25372] ? lock_downgrade+0x6e0/0x6e0 [ 3158.149705][T25372] try_charge_memcg+0xf67/0x13f0 [ 3158.154662][T25372] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3158.160646][T25372] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3158.166394][T25372] ? lock_downgrade+0x6e0/0x6e0 [ 3158.171265][T25372] ? lock_downgrade+0x6e0/0x6e0 [ 3158.176140][T25372] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3158.181712][T25372] __alloc_pages+0x1ef/0x510 [ 3158.186320][T25372] ? __alloc_pages_slowpath.constprop.0+0x2300/0x2300 [ 3158.193106][T25372] ? lock_chain_count+0x20/0x20 [ 3158.197988][T25372] ? __lock_acquire+0xbc3/0x56d0 [ 3158.202953][T25372] alloc_pages+0x1a6/0x270 [ 3158.207398][T25372] pte_alloc_one+0x16/0x230 [ 3158.211929][T25372] __pte_alloc+0x69/0x250 [ 3158.216282][T25372] ? pmd_install+0x150/0x150 [ 3158.220892][T25372] ? hugepage_vma_check+0x44e/0x780 [ 3158.226125][T25372] __handle_mm_fault+0x310b/0x39b0 [ 3158.231275][T25372] ? vm_iomap_memory+0x190/0x190 [ 3158.236261][T25372] handle_mm_fault+0x1c8/0x780 [ 3158.241064][T25372] do_user_addr_fault+0x475/0x1210 [ 3158.246208][T25372] exc_page_fault+0x94/0x170 [ 3158.250833][T25372] asm_exc_page_fault+0x22/0x30 [ 3158.255710][T25372] RIP: 0033:0x7f072043533d [ 3158.260131][T25372] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 53 52 05 00 <83> 05 bc ac 57 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 57 00 0b 01 [ 3158.279860][T25372] RSP: 002b:00007ffc7a569580 EFLAGS: 00010217 [ 3158.285937][T25372] RAX: 0000000000000000 RBX: 00007f07205abf8c RCX: 00007f072048a5a9 [ 3158.293914][T25372] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f07205abf88 [ 3158.301890][T25372] RBP: 00007f07205abf80 R08: 00007f071f3fe700 R09: 0000000000000000 [ 3158.309864][T25372] R10: 00007f071f3fe700 R11: 0000000000000246 R12: 00007f07205abf8c [ 3158.317922][T25372] R13: 00007f07205b0060 R14: 00007f07205abf80 R15: 0000000000000000 [ 3158.325917][T25372] [ 3158.575910][T25372] memory: usage 307152kB, limit 307200kB, failcnt 1553 [ 3158.600202][T25372] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3158.608747][T25356] bridge818: port 1(bridge_slave_1) entered blocking state [ 3158.616119][T25356] bridge818: port 1(bridge_slave_1) entered forwarding state [ 3158.625434][T25372] Memory cgroup stats for /syz4: [ 3158.625657][T25372] anon 94208 [ 3158.625657][T25372] file 368640 [ 3158.625657][T25372] kernel 314044416 [ 3158.625657][T25372] kernel_stack 65536 [ 3158.625657][T25372] pagetables 69632 [ 3158.625657][T25372] percpu 5431008 [ 3158.625657][T25372] sock 0 [ 3158.625657][T25372] vmalloc 0 [ 3158.625657][T25372] shmem 368640 [ 3158.625657][T25372] zswap 0 [ 3158.625657][T25372] zswapped 0 [ 3158.625657][T25372] file_mapped 368640 [ 3158.625657][T25372] file_dirty 0 [ 3158.625657][T25372] file_writeback 0 [ 3158.625657][T25372] swapcached 0 [ 3158.625657][T25372] anon_thp 0 [ 3158.625657][T25372] file_thp 0 [ 3158.625657][T25372] shmem_thp 0 [ 3158.625657][T25372] inactive_anon 114688 [ 3158.625657][T25372] active_anon 335872 [ 3158.625657][T25372] inactive_file 0 [ 3158.625657][T25372] active_file 0 [ 3158.625657][T25372] unevictable 0 [ 3158.625657][T25372] slab_reclaimable 23304 [ 3158.625657][T25372] slab_unreclaimable 308417752 [ 3158.625657][T25372] slab 308441056 [ 3158.646184][T25356] bond0: (slave bridge818): Enslaving as an active interface with an up link [ 3158.805063][T25372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25372,uid=0 [ 3158.805246][T25372] Memory cgroup out of memory: Killed process 25372 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 17:54:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="d3", 0x1}], 0x1, &(0x7f0000000600)=[{0x10}, {0x6558}], 0x20}}], 0x1, 0x0) 17:54:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0x4}, {0x1}, {}]}]}}, &(0x7f0000000040)=""/171, 0x46, 0xab, 0x1}, 0x20) 17:54:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000040)=""/4096, 0x2b, 0x1000, 0x1}, 0x20) 17:54:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023007a00000008000a000f"], 0x28}}, 0x0) [ 3158.986679][T25368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3159.072444][T25375] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 17:54:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000000340)=""/167, 0x26, 0xa7, 0x1}, 0x20) 17:54:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/171, 0x0, 0xab, 0x8}, 0x20) [ 3159.115592][T25384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3159.166403][T25375] CPU: 1 PID: 25375 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3159.176872][T25375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3159.186951][T25375] Call Trace: [ 3159.190245][T25375] [ 3159.193201][T25375] dump_stack_lvl+0xcd/0x134 [ 3159.197836][T25375] dump_header+0x10b/0x7f9 [ 3159.202284][T25375] oom_kill_process.cold+0x10/0x15 [ 3159.207428][T25375] out_of_memory+0x358/0x14a0 [ 3159.212138][T25375] ? find_held_lock+0x2d/0x110 [ 3159.216933][T25375] ? oom_killer_disable+0x270/0x270 [ 3159.222173][T25375] ? find_held_lock+0x2d/0x110 [ 3159.226974][T25375] mem_cgroup_out_of_memory+0x206/0x270 [ 3159.232551][T25375] ? mem_cgroup_margin+0x130/0x130 [ 3159.237692][T25375] ? lock_downgrade+0x6e0/0x6e0 [ 3159.242585][T25375] try_charge_memcg+0xf67/0x13f0 [ 3159.247555][T25375] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3159.253566][T25375] ? lock_downgrade+0x6e0/0x6e0 [ 3159.258439][T25375] charge_memcg+0x31/0x320 [ 3159.262872][T25375] __mem_cgroup_charge+0x27/0x90 [ 3159.267818][T25375] ? _compound_head+0x5d/0x150 [ 3159.272598][T25375] __handle_mm_fault+0x17df/0x39b0 [ 3159.277727][T25375] ? vm_iomap_memory+0x190/0x190 [ 3159.282699][T25375] handle_mm_fault+0x1c8/0x780 [ 3159.287514][T25375] do_user_addr_fault+0x475/0x1210 [ 3159.292664][T25375] exc_page_fault+0x94/0x170 [ 3159.297277][T25375] asm_exc_page_fault+0x22/0x30 [ 3159.302148][T25375] RIP: 0033:0x7f072043533d [ 3159.306572][T25375] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 53 52 05 00 <83> 05 bc ac 57 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 57 00 0b 01 [ 3159.326196][T25375] RSP: 002b:00007ffc7a569580 EFLAGS: 00010207 [ 3159.332270][T25375] RAX: 0000000000000001 RBX: 00007f07205abf8c RCX: 00007f072048a5a9 [ 3159.340256][T25375] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f07205abf88 [ 3159.348233][T25375] RBP: 00007f07205abf80 R08: 00007f071f3fe700 R09: 0000000000000000 [ 3159.356216][T25375] R10: 00007f071f3fe700 R11: 0000000000000246 R12: 00007f07205abf8c [ 3159.364193][T25375] R13: 00007f07205b0060 R14: 00007f07205abf80 R15: 0000000000000000 [ 3159.372189][T25375] 17:54:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000810008000a000f"], 0x28}}, 0x0) 17:54:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}, 0x1, 0x0, 0x972d0000}, 0x0) 17:54:57 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000340)=""/167, 0x26, 0xa7, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 17:54:57 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000040)=""/171, 0x36, 0xab, 0x1}, 0x20) [ 3159.763539][T25384] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3159.775834][T25375] memory: usage 307180kB, limit 307200kB, failcnt 1599 [ 3159.783419][T25375] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3159.790478][T25375] Memory cgroup stats for /syz4: [ 3159.790694][T25375] anon 94208 [ 3159.790694][T25375] file 368640 [ 3159.790694][T25375] kernel 314089472 [ 3159.790694][T25375] kernel_stack 65536 [ 3159.790694][T25375] pagetables 73728 17:54:57 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000040)) [ 3159.790694][T25375] percpu 5431008 [ 3159.790694][T25375] sock 0 [ 3159.790694][T25375] vmalloc 0 [ 3159.790694][T25375] shmem 368640 [ 3159.790694][T25375] zswap 0 [ 3159.790694][T25375] zswapped 0 [ 3159.790694][T25375] file_mapped 368640 [ 3159.790694][T25375] file_dirty 0 [ 3159.790694][T25375] file_writeback 0 [ 3159.790694][T25375] swapcached 0 [ 3159.790694][T25375] anon_thp 0 [ 3159.790694][T25375] file_thp 0 [ 3159.790694][T25375] shmem_thp 0 [ 3159.790694][T25375] inactive_anon 126976 [ 3159.790694][T25375] active_anon 335872 [ 3159.790694][T25375] inactive_file 0 [ 3159.790694][T25375] active_file 0 [ 3159.790694][T25375] unevictable 0 [ 3159.790694][T25375] slab_reclaimable 54616 [ 3159.790694][T25375] slab_unreclaimable 308426776 [ 3159.790694][T25375] slab 308481392 [ 3159.885344][T25397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3160.044620][T25384] device bridge_slave_1 left promiscuous mode [ 3160.051099][T25384] bridge818: port 1(bridge_slave_1) entered disabled state [ 3160.059002][T25375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25375,uid=0 [ 3160.075758][T25375] Memory cgroup out of memory: Killed process 25375 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3160.101363][T25384] bridge819: port 1(bridge_slave_1) entered blocking state [ 3160.109950][T25384] bridge819: port 1(bridge_slave_1) entered disabled state [ 3160.178825][T25384] device bridge_slave_1 entered promiscuous mode [ 3160.266655][T25389] bridge819: port 1(bridge_slave_1) entered blocking state [ 3160.274024][T25389] bridge819: port 1(bridge_slave_1) entered forwarding state [ 3160.312251][T25389] bond0: (slave bridge819): Enslaving as an active interface with an up link [ 3160.367087][T25397] bridge2259: port 1(bridge_slave_1) entered blocking state [ 3160.374492][T25397] bridge2259: port 1(bridge_slave_1) entered disabled state 17:54:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}, 0x1, 0x0, 0x48}, 0x0) 17:54:57 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 17:54:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @rand_addr=0x64010102}}}}) 17:54:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300f000000008000a000f"], 0x28}}, 0x0) [ 3160.415344][T25397] device bridge_slave_1 entered promiscuous mode 17:54:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f032704f9160d9eb314b3fa493e2cb9616c4d29db65adcd289355d0c26fa2edd"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b95d661fb6d07fdd707e90c7201ca4f75400ba86c32b9d3b955f126b1e72dfaf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}]}, {0xbf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4a0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x11c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}]}]}]}, 0xec4}}, 0x0) 17:54:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, 0x0, 0x1a}, 0x20) [ 3160.744266][T25407] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3160.842609][T25407] CPU: 1 PID: 25407 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3160.853089][T25407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3160.863165][T25407] Call Trace: [ 3160.866469][T25407] [ 3160.869413][T25407] dump_stack_lvl+0xcd/0x134 [ 3160.874032][T25407] dump_header+0x10b/0x7f9 [ 3160.878489][T25407] oom_kill_process.cold+0x10/0x15 [ 3160.883640][T25407] out_of_memory+0x358/0x14a0 [ 3160.886775][T25403] bridge2259: port 1(bridge_slave_1) entered blocking state [ 3160.888337][T25407] ? find_held_lock+0x2d/0x110 [ 3160.888368][T25407] ? oom_killer_disable+0x270/0x270 [ 3160.888400][T25407] ? find_held_lock+0x2d/0x110 [ 3160.895720][T25403] bridge2259: port 1(bridge_slave_1) entered forwarding state [ 3160.900417][T25407] mem_cgroup_out_of_memory+0x206/0x270 [ 3160.900446][T25407] ? mem_cgroup_margin+0x130/0x130 [ 3160.900466][T25407] ? lock_downgrade+0x6e0/0x6e0 [ 3160.933411][T25407] try_charge_memcg+0xf67/0x13f0 [ 3160.938390][T25407] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3160.944395][T25407] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3160.950126][T25407] ? lock_downgrade+0x6e0/0x6e0 [ 3160.955006][T25407] obj_cgroup_charge+0x2ab/0x5e0 [ 3160.959955][T25407] ? __anon_vma_prepare+0x60/0x580 [ 3160.965076][T25407] kmem_cache_alloc+0x96/0x3b0 [ 3160.969850][T25407] __anon_vma_prepare+0x60/0x580 [ 3160.974804][T25407] ? __pmd_alloc+0x2ff/0x5c0 [ 3160.979407][T25407] __handle_mm_fault+0x340e/0x39b0 [ 3160.984531][T25407] ? vm_iomap_memory+0x190/0x190 [ 3160.989499][T25407] handle_mm_fault+0x1c8/0x780 [ 3160.994272][T25407] do_user_addr_fault+0x475/0x1210 [ 3160.999408][T25407] exc_page_fault+0x94/0x170 [ 3161.004010][T25407] asm_exc_page_fault+0x22/0x30 [ 3161.008867][T25407] RIP: 0033:0x7f07204850d5 [ 3161.013288][T25407] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 3161.032901][T25407] RSP: 002b:00007ffc7a569578 EFLAGS: 00010202 [ 3161.038970][T25407] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 3161.046941][T25407] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 3161.054914][T25407] RBP: 00007ffc7a569638 R08: 00007f07209b0000 R09: 00007f07205b00c8 [ 3161.062885][T25407] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 000000000030397f [ 3161.070857][T25407] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3161.078847][T25407] [ 3161.142334][T25403] bond0: (slave bridge2259): Enslaving as an active interface with an up link [ 3161.245381][T25407] memory: usage 307184kB, limit 307200kB, failcnt 1631 17:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023d77f4b870008000a000f"], 0x28}}, 0x0) 17:54:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x3}]}]}}, &(0x7f0000000040)=""/171, 0x2e, 0xab, 0x1}, 0x20) 17:54:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x13}, 0x0) 17:54:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0x4}, {0x1}, {0x10, 0x3}]}]}}, &(0x7f0000000040)=""/171, 0x46, 0xab, 0x1}, 0x20) [ 3161.276293][T25414] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3161.364134][T26046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2151: link becomes ready 17:54:58 executing program 2: socketpair(0x25, 0x1, 0x7f, &(0x7f0000000040)) [ 3161.377791][T25417] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3161.431432][T25407] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3161.438968][T25407] Memory cgroup stats for /syz4: [ 3161.439190][T25407] anon 135168 [ 3161.439190][T25407] file 368640 [ 3161.439190][T25407] kernel 314052608 [ 3161.439190][T25407] kernel_stack 65536 [ 3161.439190][T25407] pagetables 81920 [ 3161.439190][T25407] percpu 5431008 [ 3161.439190][T25407] sock 0 [ 3161.439190][T25407] vmalloc 0 [ 3161.439190][T25407] shmem 368640 [ 3161.439190][T25407] zswap 0 [ 3161.439190][T25407] zswapped 0 [ 3161.439190][T25407] file_mapped 368640 [ 3161.439190][T25407] file_dirty 0 [ 3161.439190][T25407] file_writeback 0 [ 3161.439190][T25407] swapcached 0 [ 3161.439190][T25407] anon_thp 0 [ 3161.439190][T25407] file_thp 0 [ 3161.439190][T25407] shmem_thp 0 [ 3161.439190][T25407] inactive_anon 167936 [ 3161.439190][T25407] active_anon 335872 [ 3161.439190][T25407] inactive_file 0 [ 3161.439190][T25407] active_file 0 [ 3161.439190][T25407] unevictable 0 [ 3161.439190][T25407] slab_reclaimable 27160 [ 3161.439190][T25407] slab_unreclaimable 308410816 [ 3161.439190][T25407] slab 308437976 [ 3161.536082][T25421] device bridge_slave_1 left promiscuous mode [ 3161.542399][T25421] bridge819: port 1(bridge_slave_1) entered disabled state [ 3161.817324][T25421] bridge820: port 1(bridge_slave_1) entered blocking state [ 3161.825182][T25421] bridge820: port 1(bridge_slave_1) entered disabled state [ 3161.833816][T25421] device bridge_slave_1 entered promiscuous mode [ 3161.850263][T25413] bridge820: port 1(bridge_slave_1) entered blocking state [ 3161.857639][T25413] bridge820: port 1(bridge_slave_1) entered forwarding state [ 3161.886063][T25407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25407,uid=0 [ 3161.887737][T25413] bond0: (slave bridge820): Enslaving as an active interface with an up link [ 3161.901734][T25407] Memory cgroup out of memory: Killed process 25407 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 17:54:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:54:59 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000200)) 17:54:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x13}, 0x0) 17:54:59 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000040)=""/171, 0x2e, 0xab, 0x1}, 0x20) 17:54:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000003000008000a000f"], 0x28}}, 0x0) [ 3162.122575][T25438] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3162.153753][T25434] device bridge_slave_1 left promiscuous mode [ 3162.163031][T25438] CPU: 1 PID: 25438 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3162.173496][T25438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3162.183843][T25438] Call Trace: [ 3162.187149][T25438] [ 3162.190101][T25438] dump_stack_lvl+0xcd/0x134 [ 3162.194734][T25438] dump_header+0x10b/0x7f9 [ 3162.199202][T25438] oom_kill_process.cold+0x10/0x15 [ 3162.204354][T25438] out_of_memory+0x358/0x14a0 [ 3162.209072][T25438] ? find_held_lock+0x2d/0x110 [ 3162.213863][T25438] ? oom_killer_disable+0x270/0x270 [ 3162.219096][T25438] ? find_held_lock+0x2d/0x110 [ 3162.223889][T25438] mem_cgroup_out_of_memory+0x206/0x270 [ 3162.229476][T25438] ? mem_cgroup_margin+0x130/0x130 [ 3162.234611][T25438] ? lock_downgrade+0x6e0/0x6e0 [ 3162.239513][T25438] try_charge_memcg+0xf67/0x13f0 [ 3162.244516][T25438] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3162.245681][T25434] bridge2259: port 1(bridge_slave_1) entered disabled state [ 3162.250510][T25438] ? lock_downgrade+0x6e0/0x6e0 [ 3162.250554][T25438] charge_memcg+0x31/0x320 [ 3162.250583][T25438] __mem_cgroup_charge+0x27/0x90 [ 3162.250608][T25438] ? _compound_head+0x5d/0x150 [ 3162.276875][T25438] __handle_mm_fault+0x17df/0x39b0 [ 3162.282032][T25438] ? vm_iomap_memory+0x190/0x190 [ 3162.287026][T25438] handle_mm_fault+0x1c8/0x780 [ 3162.291829][T25438] do_user_addr_fault+0x475/0x1210 [ 3162.296986][T25438] exc_page_fault+0x94/0x170 [ 3162.301610][T25438] asm_exc_page_fault+0x22/0x30 [ 3162.306576][T25438] RIP: 0033:0x7f072043533d [ 3162.311006][T25438] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 53 52 05 00 <83> 05 bc ac 57 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 57 00 0b 01 [ 3162.330624][T25438] RSP: 002b:00007ffc7a569580 EFLAGS: 00010217 [ 3162.336702][T25438] RAX: 0000000000000000 RBX: 00007f07205abf8c RCX: 00007f072048a5a9 [ 3162.344678][T25438] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f07205abf88 [ 3162.352652][T25438] RBP: 00007f07205abf80 R08: 00007f071f3fe700 R09: 0000000000000000 [ 3162.360642][T25438] R10: 00007f071f3fe700 R11: 0000000000000246 R12: 00007f07205abf8c [ 3162.368631][T25438] R13: 00007f07205b0060 R14: 00007f07205abf80 R15: 0000000000000000 [ 3162.376646][T25438] 17:54:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000017c0)=ANY=[], 0x1190}}, 0x0) 17:54:59 executing program 0: bpf$BPF_BTF_LOAD(0x4, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) [ 3162.516481][T25438] memory: usage 307180kB, limit 307200kB, failcnt 1699 [ 3162.523592][T25438] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3162.534511][T25434] bridge2260: port 1(bridge_slave_1) entered blocking state [ 3162.534626][T25434] bridge2260: port 1(bridge_slave_1) entered disabled state [ 3162.536511][T25434] device bridge_slave_1 entered promiscuous mode [ 3162.880569][T25435] bridge2260: port 1(bridge_slave_1) entered blocking state [ 3162.888030][T25435] bridge2260: port 1(bridge_slave_1) entered forwarding state [ 3162.917797][T25435] bond0: (slave bridge2260): Enslaving as an active interface with an up link [ 3162.926771][T25438] Memory cgroup stats for /syz4: [ 3162.927001][T25438] anon 94208 [ 3162.927001][T25438] file 368640 [ 3162.927001][T25438] kernel 314077184 [ 3162.927001][T25438] kernel_stack 65536 [ 3162.927001][T25438] pagetables 73728 [ 3162.927001][T25438] percpu 5431008 [ 3162.927001][T25438] sock 0 [ 3162.927001][T25438] vmalloc 0 [ 3162.927001][T25438] shmem 368640 [ 3162.927001][T25438] zswap 0 [ 3162.927001][T25438] zswapped 0 [ 3162.927001][T25438] file_mapped 368640 [ 3162.927001][T25438] file_dirty 0 [ 3162.927001][T25438] file_writeback 0 [ 3162.927001][T25438] swapcached 0 [ 3162.927001][T25438] anon_thp 0 [ 3162.927001][T25438] file_thp 0 [ 3162.927001][T25438] shmem_thp 0 [ 3162.927001][T25438] inactive_anon 126976 [ 3162.927001][T25438] active_anon 335872 [ 3162.927001][T25438] inactive_file 0 [ 3162.927001][T25438] active_file 0 [ 3162.927001][T25438] unevictable 0 [ 3162.927001][T25438] slab_reclaimable 51144 [ 3162.927001][T25438] slab_unreclaimable 308421968 [ 3162.927001][T25438] slab 308473112 [ 3163.025024][ T3165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2152: link becomes ready [ 3163.033809][T25438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25438,uid=0 17:55:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffa8880008000a000f"], 0x28}}, 0x0) 17:55:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000e0001006e657464657673696d02"], 0x4c}}, 0x0) 17:55:00 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0xffffff76}, 0x20) 17:55:00 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 17:55:00 executing program 1: r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) [ 3163.158729][T25450] __nla_validate_parse: 1 callbacks suppressed [ 3163.158751][T25450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3163.169429][T25438] Memory cgroup out of memory: Killed process 25438 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3163.255549][T25452] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3163.366142][T25451] device bridge_slave_1 left promiscuous mode [ 3163.372460][T25451] bridge820: port 1(bridge_slave_1) entered disabled state [ 3163.470314][T25451] bridge821: port 1(bridge_slave_1) entered blocking state [ 3163.477787][T25451] bridge821: port 1(bridge_slave_1) entered disabled state [ 3163.485780][T25451] device bridge_slave_1 entered promiscuous mode [ 3163.533510][T25445] bridge821: port 1(bridge_slave_1) entered blocking state [ 3163.540874][T25445] bridge821: port 1(bridge_slave_1) entered forwarding state [ 3163.620193][T25445] bond0: (slave bridge821): Enslaving as an active interface with an up link [ 3163.629501][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:55:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}, 0x1, 0x0, 0x6c}, 0x0) 17:55:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000005000008000a000f"], 0x28}}, 0x0) 17:55:01 executing program 1: socketpair(0x29, 0x802, 0x0, &(0x7f00000000c0)) 17:55:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f00", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:55:01 executing program 2: socketpair(0x2, 0xa, 0x1, &(0x7f0000000000)) [ 3163.777113][T25468] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3163.797354][T25468] CPU: 0 PID: 25468 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3163.807826][T25468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3163.817912][T25468] Call Trace: [ 3163.821210][T25468] [ 3163.824163][T25468] dump_stack_lvl+0xcd/0x134 [ 3163.828793][T25468] dump_header+0x10b/0x7f9 [ 3163.833252][T25468] oom_kill_process.cold+0x10/0x15 [ 3163.838410][T25468] out_of_memory+0x358/0x14a0 [ 3163.843121][T25468] ? find_held_lock+0x2d/0x110 [ 3163.847914][T25468] ? oom_killer_disable+0x270/0x270 [ 3163.853144][T25468] ? find_held_lock+0x2d/0x110 [ 3163.857937][T25468] mem_cgroup_out_of_memory+0x206/0x270 [ 3163.863515][T25468] ? mem_cgroup_margin+0x130/0x130 [ 3163.868825][T25468] ? lock_downgrade+0x6e0/0x6e0 [ 3163.873727][T25468] try_charge_memcg+0xf67/0x13f0 [ 3163.878704][T25468] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3163.884798][T25468] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3163.890552][T25468] ? lock_downgrade+0x6e0/0x6e0 [ 3163.895440][T25468] ? lock_downgrade+0x6e0/0x6e0 [ 3163.900338][T25468] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3163.905922][T25468] __alloc_pages+0x1ef/0x510 [ 3163.910547][T25468] ? __alloc_pages_slowpath.constprop.0+0x2300/0x2300 [ 3163.917354][T25468] ? find_held_lock+0x2d/0x110 [ 3163.922156][T25468] alloc_pages+0x1a6/0x270 17:55:01 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000780000007800000006000000000000000600000d"], &(0x7f0000000200)=""/160, 0x96, 0xa0, 0x1}, 0x20) 17:55:01 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) [ 3163.926606][T25468] pte_alloc_one+0x16/0x230 [ 3163.931142][T25468] __pte_alloc+0x69/0x250 [ 3163.935512][T25468] ? pmd_install+0x150/0x150 [ 3163.940134][T25468] ? hugepage_vma_check+0x44e/0x780 [ 3163.945374][T25468] ? __pmd_alloc+0x2ff/0x5c0 [ 3163.949994][T25468] __handle_mm_fault+0x310b/0x39b0 [ 3163.955153][T25468] ? vm_iomap_memory+0x190/0x190 [ 3163.960152][T25468] handle_mm_fault+0x1c8/0x780 [ 3163.964940][T25468] do_user_addr_fault+0x475/0x1210 [ 3163.970084][T25468] exc_page_fault+0x94/0x170 [ 3163.974706][T25468] asm_exc_page_fault+0x22/0x30 [ 3163.979584][T25468] RIP: 0033:0x7f07204850d5 [ 3163.984021][T25468] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 3164.003662][T25468] RSP: 002b:00007ffc7a569578 EFLAGS: 00010202 [ 3164.009759][T25468] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 3164.017754][T25468] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 3164.025753][T25468] RBP: 00007ffc7a569638 R08: 00007f07209b0000 R09: 00007f07205b00c8 [ 3164.033750][T25468] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 000000000030464a [ 3164.041734][T25468] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3164.049818][T25468] [ 3164.126574][T25468] memory: usage 307184kB, limit 307200kB, failcnt 1730 [ 3164.133653][T25468] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3164.184960][T25468] Memory cgroup stats for /syz4: [ 3164.185187][T25468] anon 135168 [ 3164.185187][T25468] file 368640 [ 3164.185187][T25468] kernel 314052608 [ 3164.185187][T25468] kernel_stack 65536 [ 3164.185187][T25468] pagetables 77824 [ 3164.185187][T25468] percpu 5431008 [ 3164.185187][T25468] sock 0 [ 3164.185187][T25468] vmalloc 0 [ 3164.185187][T25468] shmem 368640 [ 3164.185187][T25468] zswap 0 [ 3164.185187][T25468] zswapped 0 [ 3164.185187][T25468] file_mapped 368640 [ 3164.185187][T25468] file_dirty 0 [ 3164.185187][T25468] file_writeback 0 [ 3164.185187][T25468] swapcached 0 [ 3164.185187][T25468] anon_thp 0 [ 3164.185187][T25468] file_thp 0 [ 3164.185187][T25468] shmem_thp 0 [ 3164.185187][T25468] inactive_anon 155648 [ 3164.185187][T25468] active_anon 335872 [ 3164.185187][T25468] inactive_file 0 [ 3164.185187][T25468] active_file 0 [ 3164.185187][T25468] unevictable 0 [ 3164.185187][T25468] slab_reclaimable 30248 [ 3164.185187][T25468] slab_unreclaimable 308412456 [ 3164.185187][T25468] slab 308442704 [ 3164.305127][T25466] device bridge_slave_1 left promiscuous mode [ 3164.305327][T25466] bridge2260: port 1(bridge_slave_1) entered disabled state [ 3164.442984][T25468] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25468,uid=0 [ 3164.525409][T25468] Memory cgroup out of memory: Killed process 25468 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3164.558678][T25466] bridge2261: port 1(bridge_slave_1) entered blocking state [ 3164.558747][T25466] bridge2261: port 1(bridge_slave_1) entered disabled state [ 3164.560207][T25466] device bridge_slave_1 entered promiscuous mode [ 3164.682932][T25467] bridge2261: port 1(bridge_slave_1) entered blocking state [ 3164.690433][T25467] bridge2261: port 1(bridge_slave_1) entered forwarding state [ 3164.785864][T25467] bond0: (slave bridge2261): Enslaving as an active interface with an up link [ 3165.104377][T26046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2153: link becomes ready 17:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000e0890008000a000f"], 0x28}}, 0x0) 17:55:02 executing program 1: socketpair(0x29, 0x802, 0x0, &(0x7f00000000c0)) 17:55:02 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "fd9b0d7900bf0439e2a238ea533f04415fca57653317aa6751436a8dda293f4cba91e9ec7154b4ce5c0b602dd620a2cc07cfb4b3fbe5c7f0efdd9c00", 0x22}, 0x60) 17:55:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x30, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0xa8, 0x2f0, 0xffffffff, 0xa8, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, @gre_key, @gre_key}}}}, {{@ip={@dev, @remote, 0x0, 0x0, 'wg1\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @gre_key, @gre_key}}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'batadv0\x00', 'dvmrp1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @dev, @empty}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv6=@private0}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) 17:55:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000006000008000a000f"], 0x28}}, 0x0) [ 3165.370350][T25479] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:55:03 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "fd9b0d7900bf0439e2a238ea533f04415fca57653317aa6751436a8dda293f4cba91e9ec7154b4ce5c0b602dd620a2cc07cfb4b3fbe5c7f0efdd9c00", 0x22}, 0x60) 17:55:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {}]}]}}, &(0x7f0000000040)=""/171, 0x36, 0xab, 0x1}, 0x20) 17:55:03 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) [ 3165.557971][T25482] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3165.587314][T25491] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3165.612951][T25491] CPU: 1 PID: 25491 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3165.623421][T25491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3165.633496][T25491] Call Trace: [ 3165.636795][T25491] [ 3165.639748][T25491] dump_stack_lvl+0xcd/0x134 [ 3165.644380][T25491] dump_header+0x10b/0x7f9 [ 3165.648846][T25491] oom_kill_process.cold+0x10/0x15 [ 3165.651763][T25483] device bridge_slave_1 left promiscuous mode [ 3165.653974][T25491] out_of_memory+0x358/0x14a0 [ 3165.660238][T25483] bridge821: port 1(bridge_slave_1) entered disabled state [ 3165.664686][T25491] ? find_held_lock+0x2d/0x110 [ 3165.676676][T25491] ? oom_killer_disable+0x270/0x270 [ 3165.681913][T25491] ? find_held_lock+0x2d/0x110 [ 3165.686711][T25491] mem_cgroup_out_of_memory+0x206/0x270 [ 3165.692284][T25491] ? mem_cgroup_margin+0x130/0x130 [ 3165.697418][T25491] ? lock_downgrade+0x6e0/0x6e0 [ 3165.702312][T25491] try_charge_memcg+0xf67/0x13f0 [ 3165.707286][T25491] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3165.713304][T25491] ? lock_downgrade+0x6e0/0x6e0 [ 3165.718285][T25491] charge_memcg+0x31/0x320 [ 3165.722730][T25491] __mem_cgroup_charge+0x27/0x90 [ 3165.727690][T25491] ? _compound_head+0x5d/0x150 [ 3165.732486][T25491] wp_page_copy+0x27c/0x1b60 [ 3165.737120][T25491] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3165.742600][T25491] ? lock_downgrade+0x6e0/0x6e0 [ 3165.747734][T25491] ? vm_normal_page+0x146/0x2a0 [ 3165.752628][T25491] do_wp_page+0x1d1/0x1910 [ 3165.757076][T25491] __handle_mm_fault+0x1813/0x39b0 [ 3165.762229][T25491] ? vm_iomap_memory+0x190/0x190 [ 3165.767220][T25491] handle_mm_fault+0x1c8/0x780 [ 3165.772018][T25491] do_user_addr_fault+0x475/0x1210 [ 3165.777171][T25491] exc_page_fault+0x94/0x170 [ 3165.781792][T25491] asm_exc_page_fault+0x22/0x30 [ 3165.786662][T25491] RIP: 0033:0x7f0720437970 [ 3165.791090][T25491] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3165.810722][T25491] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3165.816815][T25491] RAX: 00000000a2f2bdf7 RBX: 00007f07205ac0e8 RCX: 0000001b2eb20000 [ 3165.824804][T25491] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0cc7 [ 3165.832799][T25491] RBP: 00000000a2f2bdf7 R08: 0000000000001df7 R09: 00000000a2f2bdfb [ 3165.840791][T25491] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3165.848780][T25491] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff81a3267f [ 3165.856770][T25491] ? trace_user_exit.constprop.0+0x13f/0x210 [ 3165.862803][T25491] [ 3166.222778][T25491] memory: usage 307200kB, limit 307200kB, failcnt 1779 [ 3166.244167][T25491] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3166.267768][T25491] Memory cgroup stats for /syz4: [ 3166.267992][T25491] anon 118784 [ 3166.267992][T25491] file 368640 [ 3166.267992][T25491] kernel 314085376 [ 3166.267992][T25491] kernel_stack 98304 [ 3166.267992][T25491] pagetables 73728 [ 3166.267992][T25491] percpu 5431008 [ 3166.267992][T25491] sock 0 [ 3166.267992][T25491] vmalloc 0 [ 3166.267992][T25491] shmem 368640 [ 3166.267992][T25491] zswap 0 [ 3166.267992][T25491] zswapped 0 [ 3166.267992][T25491] file_mapped 368640 [ 3166.267992][T25491] file_dirty 0 [ 3166.267992][T25491] file_writeback 0 [ 3166.267992][T25491] swapcached 0 [ 3166.267992][T25491] anon_thp 0 [ 3166.267992][T25491] file_thp 0 [ 3166.267992][T25491] shmem_thp 0 [ 3166.267992][T25491] inactive_anon 151552 [ 3166.267992][T25491] active_anon 335872 [ 3166.267992][T25491] inactive_file 0 [ 3166.267992][T25491] active_file 0 [ 3166.267992][T25491] unevictable 0 [ 3166.267992][T25491] slab_reclaimable 27928 [ 3166.267992][T25491] slab_unreclaimable 308419688 [ 3166.267992][T25491] slab 308447616 [ 3166.354126][T25483] bridge822: port 1(bridge_slave_1) entered blocking state [ 3166.401716][T25483] bridge822: port 1(bridge_slave_1) entered disabled state [ 3166.469192][T25491] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25491,uid=0 [ 3166.469378][T25491] Memory cgroup out of memory: Killed process 25491 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3166.604812][T25483] device bridge_slave_1 entered promiscuous mode [ 3166.659393][T25503] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:55:04 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) bind$l2tp(r0, 0x0, 0x0) 17:55:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f00", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:55:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 17:55:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000007000008000a000f"], 0x28}}, 0x0) [ 3166.815240][T25513] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3166.892790][T25513] CPU: 0 PID: 25513 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3166.903269][T25513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3166.913359][T25513] Call Trace: [ 3166.916657][T25513] [ 3166.919608][T25513] dump_stack_lvl+0xcd/0x134 [ 3166.924027][T25505] device bridge_slave_1 left promiscuous mode [ 3166.924216][T25513] dump_header+0x10b/0x7f9 [ 3166.930911][T25505] bridge2261: port 1(bridge_slave_1) entered disabled state [ 3166.934673][T25513] oom_kill_process.cold+0x10/0x15 [ 3166.947098][T25513] out_of_memory+0x358/0x14a0 [ 3166.951813][T25513] ? find_held_lock+0x2d/0x110 [ 3166.956611][T25513] ? oom_killer_disable+0x270/0x270 [ 3166.961851][T25513] ? find_held_lock+0x2d/0x110 [ 3166.966654][T25513] mem_cgroup_out_of_memory+0x206/0x270 [ 3166.972234][T25513] ? mem_cgroup_margin+0x130/0x130 [ 3166.977379][T25513] ? lock_downgrade+0x6e0/0x6e0 [ 3166.982363][T25513] try_charge_memcg+0xf67/0x13f0 [ 3166.987336][T25513] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3166.993342][T25513] ? lock_downgrade+0x6e0/0x6e0 [ 3166.998228][T25513] charge_memcg+0x31/0x320 [ 3167.002682][T25513] __mem_cgroup_charge+0x27/0x90 [ 3167.007658][T25513] ? _compound_head+0x5d/0x150 [ 3167.012456][T25513] __handle_mm_fault+0x17df/0x39b0 [ 3167.017605][T25513] ? vm_iomap_memory+0x190/0x190 [ 3167.022602][T25513] handle_mm_fault+0x1c8/0x780 [ 3167.027407][T25513] do_user_addr_fault+0x475/0x1210 [ 3167.032566][T25513] exc_page_fault+0x94/0x170 [ 3167.037189][T25513] asm_exc_page_fault+0x22/0x30 [ 3167.042055][T25513] RIP: 0033:0x7f072042f1dc [ 3167.046486][T25513] Code: c0 e8 b8 65 ff ff b8 ff ff ff ff e9 33 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 54 31 c0 55 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 60 68 0a 00 48 89 34 24 48 8b 14 24 48 8b [ 3167.066109][T25513] RSP: 002b:00007f071f3fd0e0 EFLAGS: 00010202 [ 3167.072188][T25513] RAX: 0000000000000000 RBX: 00007f07205abf80 RCX: 0000000000000000 [ 3167.080168][T25513] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000200005c0 [ 3167.088147][T25513] RBP: 00007f07204e5580 R08: 0000000000000000 R09: 0000000000000000 [ 3167.096144][T25513] R10: 00000000200005c0 R11: 0000000000000000 R12: 0000000000000000 [ 3167.104124][T25513] R13: 00007ffc7a5694ff R14: 00007f071f3fe300 R15: 0000000000022000 [ 3167.112122][T25513] [ 3167.365244][T25513] memory: usage 307188kB, limit 307200kB, failcnt 1813 [ 3167.373660][T25513] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3167.388552][T25513] Memory cgroup stats for /syz4: [ 3167.388776][T25513] anon 139264 [ 3167.388776][T25513] file 368640 [ 3167.388776][T25513] kernel 314052608 [ 3167.388776][T25513] kernel_stack 65536 [ 3167.388776][T25513] pagetables 81920 [ 3167.388776][T25513] percpu 5431008 [ 3167.388776][T25513] sock 0 [ 3167.388776][T25513] vmalloc 0 [ 3167.388776][T25513] shmem 368640 [ 3167.388776][T25513] zswap 0 [ 3167.388776][T25513] zswapped 0 [ 3167.388776][T25513] file_mapped 368640 [ 3167.388776][T25513] file_dirty 0 [ 3167.388776][T25513] file_writeback 0 [ 3167.388776][T25513] swapcached 0 [ 3167.388776][T25513] anon_thp 0 [ 3167.388776][T25513] file_thp 0 [ 3167.388776][T25513] shmem_thp 0 [ 3167.388776][T25513] inactive_anon 167936 [ 3167.388776][T25513] active_anon 335872 [ 3167.388776][T25513] inactive_file 0 [ 3167.388776][T25513] active_file 0 [ 3167.388776][T25513] unevictable 0 [ 3167.388776][T25513] slab_reclaimable 27160 [ 3167.388776][T25513] slab_unreclaimable 308411560 [ 3167.388776][T25513] slab 308438720 [ 3167.485638][T25505] bridge2262: port 1(bridge_slave_1) entered blocking state [ 3167.493380][T25505] bridge2262: port 1(bridge_slave_1) entered disabled state [ 3167.509286][T25505] device bridge_slave_1 entered promiscuous mode [ 3167.523416][T25513] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25511,uid=0 [ 3167.534618][T25508] bridge2262: port 1(bridge_slave_1) entered blocking state [ 3167.546408][T25508] bridge2262: port 1(bridge_slave_1) entered forwarding state [ 3167.582389][T25508] bond0: (slave bridge2262): Enslaving as an active interface with an up link [ 3167.585209][T25513] Memory cgroup out of memory: Killed process 25511 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 17:55:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffff9e0008000a000f"], 0x28}}, 0x0) 17:55:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x13}, 0x0) 17:55:05 executing program 0: syz_emit_ethernet(0x38, &(0x7f0000000000)={@random="2ff7e86c55f0", @local, @val, {@ipv6}}, 0x0) 17:55:05 executing program 1: socketpair(0x10, 0x2, 0x2e1, &(0x7f0000000000)) 17:55:05 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x5}]}}, &(0x7f0000000340)=""/167, 0x26, 0xa7, 0x1}, 0x20) [ 3167.704546][T26049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2154: link becomes ready 17:55:05 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f0000000340)=""/167, 0x26, 0xa7, 0x1}, 0x20) 17:55:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000009000008000a000f"], 0x28}}, 0x0) 17:55:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7ffffffff000}}, 0x0) [ 3167.790437][T25518] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3167.848080][T25533] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3167.858411][T25519] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3167.873510][T25520] device bridge_slave_1 left promiscuous mode [ 3167.948749][T25520] bridge822: port 1(bridge_slave_1) entered disabled state [ 3167.963999][T25533] CPU: 0 PID: 25533 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3167.974462][T25533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3167.984528][T25533] Call Trace: [ 3167.987823][T25533] [ 3167.990760][T25533] dump_stack_lvl+0xcd/0x134 [ 3167.995349][T25533] dump_header+0x10b/0x7f9 [ 3167.999764][T25533] oom_kill_process.cold+0x10/0x15 [ 3168.004906][T25533] out_of_memory+0x358/0x14a0 [ 3168.009621][T25533] ? find_held_lock+0x2d/0x110 [ 3168.014416][T25533] ? oom_killer_disable+0x270/0x270 [ 3168.019654][T25533] ? find_held_lock+0x2d/0x110 [ 3168.024452][T25533] mem_cgroup_out_of_memory+0x206/0x270 [ 3168.030031][T25533] ? mem_cgroup_margin+0x130/0x130 [ 3168.035168][T25533] ? lock_downgrade+0x6e0/0x6e0 [ 3168.040042][T25533] try_charge_memcg+0xf67/0x13f0 [ 3168.044992][T25533] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3168.050994][T25533] ? lock_downgrade+0x6e0/0x6e0 [ 3168.055871][T25533] charge_memcg+0x31/0x320 [ 3168.060301][T25533] __mem_cgroup_charge+0x27/0x90 [ 3168.065271][T25533] ? _compound_head+0x5d/0x150 [ 3168.070065][T25533] wp_page_copy+0x27c/0x1b60 [ 3168.074694][T25533] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3168.080179][T25533] ? lock_downgrade+0x6e0/0x6e0 [ 3168.085054][T25533] ? vm_normal_page+0x146/0x2a0 [ 3168.089949][T25533] do_wp_page+0x1d1/0x1910 [ 3168.094395][T25533] __handle_mm_fault+0x1813/0x39b0 [ 3168.099529][T25533] ? vm_iomap_memory+0x190/0x190 [ 3168.104474][T25533] handle_mm_fault+0x1c8/0x780 [ 3168.109256][T25533] do_user_addr_fault+0x475/0x1210 [ 3168.114415][T25533] exc_page_fault+0x94/0x170 [ 3168.119099][T25533] asm_exc_page_fault+0x22/0x30 [ 3168.123981][T25533] RIP: 0033:0x7f0720437970 [ 3168.128422][T25533] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3168.148052][T25533] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3168.154113][T25533] RAX: 00000000410a6c2c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3168.162122][T25533] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000000000022 [ 3168.170151][T25533] RBP: 00000000410a6c2c R08: 0000000000000c2c R09: 00000000410a6c30 [ 3168.178232][T25533] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3168.186223][T25533] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a32546 [ 3168.194213][T25533] ? trace_user_exit.constprop.0+0x6/0x210 [ 3168.200032][T25533] [ 3168.515250][T25520] bridge823: port 1(bridge_slave_1) entered blocking state [ 3168.553134][T25533] memory: usage 307140kB, limit 307200kB, failcnt 1861 [ 3168.574651][T25533] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3168.603548][T25533] Memory cgroup stats for /syz4: [ 3168.603782][T25533] anon 102400 [ 3168.603782][T25533] file 368640 [ 3168.603782][T25533] kernel 314040320 [ 3168.603782][T25533] kernel_stack 65536 [ 3168.603782][T25533] pagetables 73728 [ 3168.603782][T25533] percpu 5431008 [ 3168.603782][T25533] sock 0 [ 3168.603782][T25533] vmalloc 0 [ 3168.603782][T25533] shmem 368640 [ 3168.603782][T25533] zswap 0 [ 3168.603782][T25533] zswapped 0 [ 3168.603782][T25533] file_mapped 368640 [ 3168.603782][T25533] file_dirty 0 [ 3168.603782][T25533] file_writeback 0 [ 3168.603782][T25533] swapcached 0 [ 3168.603782][T25533] anon_thp 0 [ 3168.603782][T25533] file_thp 0 [ 3168.603782][T25533] shmem_thp 0 [ 3168.603782][T25533] inactive_anon 135168 [ 3168.603782][T25533] active_anon 335872 [ 3168.603782][T25533] inactive_file 0 [ 3168.603782][T25533] active_file 0 [ 3168.603782][T25533] unevictable 0 [ 3168.603782][T25533] slab_reclaimable 16480 [ 3168.603782][T25533] slab_unreclaimable 308419048 [ 3168.603782][T25533] slab 308435528 [ 3168.845839][T25520] bridge823: port 1(bridge_slave_1) entered disabled state [ 3168.866481][T25520] device bridge_slave_1 entered promiscuous mode [ 3168.905951][T25533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25533,uid=0 [ 3168.915548][T25521] bridge823: port 1(bridge_slave_1) entered blocking state [ 3168.927841][T25533] Memory cgroup out of memory: Killed process 25533 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3168.935085][T25521] bridge823: port 1(bridge_slave_1) entered forwarding state 17:55:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f00", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:55:06 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 17:55:06 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "cf"}]}}, &(0x7f0000000100)=""/171, 0x1000000, 0xab, 0x1}, 0x20) 17:55:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000e00b0"], 0x4c}}, 0x0) [ 3169.276074][T25521] bond0: (slave bridge823): Enslaving as an active interface with an up link [ 3169.395541][T25545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3169.684037][T25532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3169.853060][T25540] device bridge_slave_1 left promiscuous mode [ 3169.873039][T25540] bridge2262: port 1(bridge_slave_1) entered disabled state [ 3169.973695][T25540] bridge2263: port 1(bridge_slave_1) entered blocking state [ 3169.995479][T25540] bridge2263: port 1(bridge_slave_1) entered disabled state [ 3170.048638][T25540] device bridge_slave_1 entered promiscuous mode [ 3170.302845][T25541] bridge2263: port 1(bridge_slave_1) entered blocking state [ 3170.310334][T25541] bridge2263: port 1(bridge_slave_1) entered forwarding state [ 3170.473365][T25541] bond0: (slave bridge2263): Enslaving as an active interface with an up link [ 3170.530409][T32379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2155: link becomes ready [ 3170.614743][T25546] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3170.726641][T25558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffffa10008000a000f"], 0x28}}, 0x0) 17:55:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300000a000008000a000f"], 0x28}}, 0x0) 17:55:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16], 0x4c}, 0x8e}, 0x0) 17:55:08 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @private, 0x0, "694a02284596957d10c9ab93401de46334ec19c0f6d6a9884372a06597669e22"}, 0x3c) 17:55:08 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "cf"}]}}, &(0x7f0000000100)=""/171, 0x1000000, 0xab, 0x1}, 0x20) 17:55:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0xf}}, 0x0) 17:55:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 3170.922359][T25552] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3170.955745][T25545] device bridge_slave_1 left promiscuous mode [ 3170.975157][T25552] CPU: 0 PID: 25552 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3170.985627][T25552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3170.995706][T25552] Call Trace: [ 3170.999007][T25552] [ 3171.001963][T25552] dump_stack_lvl+0xcd/0x134 [ 3171.006591][T25552] dump_header+0x10b/0x7f9 [ 3171.011048][T25552] oom_kill_process.cold+0x10/0x15 [ 3171.016206][T25552] out_of_memory+0x358/0x14a0 [ 3171.020930][T25552] ? find_held_lock+0x2d/0x110 [ 3171.025724][T25552] ? oom_killer_disable+0x270/0x270 [ 3171.030960][T25552] ? find_held_lock+0x2d/0x110 [ 3171.035760][T25552] mem_cgroup_out_of_memory+0x206/0x270 [ 3171.041335][T25552] ? mem_cgroup_margin+0x130/0x130 [ 3171.046474][T25552] ? lock_downgrade+0x6e0/0x6e0 [ 3171.051372][T25552] try_charge_memcg+0xf67/0x13f0 [ 3171.056345][T25552] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3171.062356][T25552] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3171.068112][T25552] ? lock_downgrade+0x6e0/0x6e0 [ 3171.073018][T25552] obj_cgroup_charge+0x2ab/0x5e0 [ 3171.077994][T25552] ? vm_area_dup+0x88/0x3f0 [ 3171.082528][T25552] kmem_cache_alloc+0x96/0x3b0 [ 3171.087328][T25552] vm_area_dup+0x88/0x3f0 [ 3171.091684][T25552] ? mark_lock.part.0+0xee/0x1910 [ 3171.096741][T25552] ? lock_chain_count+0x20/0x20 [ 3171.101615][T25552] ? __vma_adjust+0x109c/0x24a0 [ 3171.106513][T25552] ? __vma_link_rb+0x710/0x710 [ 3171.111309][T25552] ? __lock_acquire+0x166e/0x56d0 [ 3171.116362][T25552] ? vm_area_alloc+0x110/0x110 [ 3171.121162][T25552] ? perf_event_namespaces+0x50/0x50 [ 3171.126481][T25552] ? vma_merge+0x47a/0xeb0 [ 3171.130926][T25552] ? ima_file_mprotect+0x175/0x470 [ 3171.136138][T25552] ? ima_file_mmap+0x130/0x130 [ 3171.140922][T25552] ? vma_wants_writenotify+0x1f8/0x370 [ 3171.146415][T25552] ? __ia32_sys_mmap_pgoff+0x1b0/0x1b0 [ 3171.151901][T25552] ? vma_merge+0x47a/0xeb0 [ 3171.156356][T25552] ? __vma_adjust+0x24a0/0x24a0 [ 3171.161236][T25552] __split_vma+0xa5/0x550 [ 3171.165601][T25552] split_vma+0x95/0xd0 [ 3171.169702][T25552] mprotect_fixup+0x6d9/0x970 [ 3171.174420][T25552] ? change_protection+0x4280/0x4280 [ 3171.179737][T25552] ? vmacache_find+0x62/0x330 [ 3171.184455][T25552] do_mprotect_pkey+0x6c5/0x9e0 [ 3171.189337][T25552] ? __ct_user_exit+0xff/0x150 [ 3171.194143][T25552] ? mprotect_fixup+0x970/0x970 [ 3171.199060][T25552] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3171.204996][T25552] __x64_sys_mprotect+0x74/0xb0 [ 3171.209887][T25552] do_syscall_64+0x35/0xb0 [ 3171.214330][T25552] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3171.220251][T25552] RIP: 0033:0x7f072048a6b7 [ 3171.224688][T25552] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3171.244326][T25552] RSP: 002b:00007ffc7a569498 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 3171.252767][T25552] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f072048a6b7 [ 3171.260770][T25552] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f071f3be000 [ 3171.268768][T25552] RBP: 00007ffc7a569570 R08: 00000000ffffffff R09: 00007f071f3dd700 [ 3171.276881][T25552] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffc7a569690 [ 3171.284874][T25552] R13: 00007f071f3dd700 R14: 0000000000000000 R15: 0000000000022000 [ 3171.292896][T25552] 17:55:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f032704f9160d9eb314b3fa493e2cb9616c4d29db65adcd289355d0c26fa2edd"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback, 0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b95d661fb6d07fdd707e90c7201ca4f75400ba86c32b9d3b955f126b1e72dfaf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_FLAGS={0x8}]}, {0xbec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4a0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0xec4}}, 0x0) [ 3171.364528][T25545] bridge823: port 1(bridge_slave_1) entered disabled state [ 3171.403602][T25545] bridge824: port 1(bridge_slave_1) entered blocking state [ 3171.405432][T25552] memory: usage 307188kB, limit 307200kB, failcnt 1947 [ 3171.419910][T25545] bridge824: port 1(bridge_slave_1) entered disabled state [ 3171.431640][T25552] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3171.443830][T25552] Memory cgroup stats for /syz4: [ 3171.444046][T25552] anon 147456 [ 3171.444046][T25552] file 368640 [ 3171.444046][T25552] kernel 314036224 [ 3171.444046][T25552] kernel_stack 65536 [ 3171.444046][T25552] pagetables 81920 [ 3171.444046][T25552] percpu 5431008 [ 3171.444046][T25552] sock 0 [ 3171.444046][T25552] vmalloc 0 [ 3171.444046][T25552] shmem 368640 [ 3171.444046][T25552] zswap 0 [ 3171.444046][T25552] zswapped 0 [ 3171.444046][T25552] file_mapped 368640 [ 3171.444046][T25552] file_dirty 0 [ 3171.444046][T25552] file_writeback 0 [ 3171.444046][T25552] swapcached 0 [ 3171.444046][T25552] anon_thp 0 [ 3171.444046][T25552] file_thp 0 [ 3171.444046][T25552] shmem_thp 0 [ 3171.444046][T25552] inactive_anon 180224 [ 3171.444046][T25552] active_anon 335872 [ 3171.444046][T25552] inactive_file 0 [ 3171.444046][T25552] active_file 0 [ 3171.444046][T25552] unevictable 0 [ 3171.444046][T25552] slab_reclaimable 27928 [ 3171.444046][T25552] slab_unreclaimable 308401960 [ 3171.444046][T25552] slab 308429888 [ 3171.444270][T25545] device bridge_slave_1 entered promiscuous mode [ 3171.454377][T25552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25552,uid=0 [ 3171.915861][T25551] bridge824: port 1(bridge_slave_1) entered blocking state [ 3171.916045][T25551] bridge824: port 1(bridge_slave_1) entered forwarding state [ 3171.939288][T25551] bond0: (slave bridge824): Enslaving as an active interface with an up link 17:55:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:55:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x7ffffffff000}}, 0x0) 17:55:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x2}, 0x0) 17:55:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000340)=""/167, 0x26, 0xa7, 0x1}, 0x20) [ 3172.006542][T25552] Memory cgroup out of memory: Killed process 25552 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3172.026404][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3172.289919][T25581] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3172.299467][T25568] device bridge_slave_1 left promiscuous mode [ 3172.305740][T25568] bridge2263: port 1(bridge_slave_1) entered disabled state [ 3172.327017][T25568] bridge2264: port 1(bridge_slave_1) entered blocking state [ 3172.334543][T25568] bridge2264: port 1(bridge_slave_1) entered disabled state [ 3172.343304][T25568] device bridge_slave_1 entered promiscuous mode [ 3172.367162][T25571] bridge2264: port 1(bridge_slave_1) entered blocking state [ 3172.374567][T25571] bridge2264: port 1(bridge_slave_1) entered forwarding state [ 3172.545346][T25571] bond0: (slave bridge2264): Enslaving as an active interface with an up link 17:55:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffffc30008000a000f"], 0x28}}, 0x0) 17:55:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300000c000008000a000f"], 0x28}}, 0x0) 17:55:10 executing program 1: bpf$BPF_BTF_LOAD(0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 17:55:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000e0025"], 0x4c}}, 0x0) 17:55:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="13000000", @ANYRES16=r1, @ANYBLOB="01"], 0x4c}}, 0x0) 17:55:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}, 0x1, 0x0, 0x68}, 0x0) 17:55:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000e008e"], 0x4c}}, 0x0) [ 3172.953573][T25591] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3173.035355][T26046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2156: link becomes ready 17:55:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000e0025"], 0x4c}}, 0x0) [ 3173.078755][T25585] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 3173.078791][T25585] CPU: 0 PID: 25585 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3173.078816][T25585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3173.078831][T25585] Call Trace: [ 3173.078839][T25585] [ 3173.078849][T25585] dump_stack_lvl+0xcd/0x134 [ 3173.078884][T25585] dump_header+0x10b/0x7f9 [ 3173.078918][T25585] oom_kill_process.cold+0x10/0x15 [ 3173.078951][T25585] out_of_memory+0x358/0x14a0 [ 3173.078990][T25585] ? find_held_lock+0x2d/0x110 [ 3173.079016][T25585] ? oom_killer_disable+0x270/0x270 [ 3173.079046][T25585] ? find_held_lock+0x2d/0x110 [ 3173.079074][T25585] mem_cgroup_out_of_memory+0x206/0x270 [ 3173.079101][T25585] ? mem_cgroup_margin+0x130/0x130 [ 3173.079126][T25585] ? lock_downgrade+0x6e0/0x6e0 [ 3173.079168][T25585] try_charge_memcg+0xf67/0x13f0 [ 3173.079202][T25585] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3173.079229][T25585] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3173.079254][T25585] ? lock_downgrade+0x6e0/0x6e0 [ 3173.079283][T25585] ? lock_downgrade+0x6e0/0x6e0 [ 3173.079308][T25585] ? rcu_read_unlock+0x9/0x60 [ 3173.079349][T25585] obj_cgroup_charge+0x2ab/0x5e0 [ 3173.079381][T25585] ? copy_process+0x5c2/0x7090 [ 3173.079406][T25585] kmem_cache_alloc_node+0x92/0x3f0 [ 3173.079430][T25585] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3173.079461][T25585] copy_process+0x5c2/0x7090 [ 3173.079493][T25585] ? find_held_lock+0x2d/0x110 [ 3173.079522][T25585] ? find_held_lock+0x2d/0x110 [ 3173.079549][T25585] ? __cleanup_sighand+0xb0/0xb0 [ 3173.079597][T25585] kernel_clone+0xe7/0xab0 [ 3173.079623][T25585] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3173.079652][T25585] ? create_io_thread+0xe0/0xe0 [ 3173.079686][T25585] ? find_held_lock+0x2d/0x110 [ 3173.079714][T25585] ? __ct_user_exit+0xff/0x150 [ 3173.079748][T25585] __do_sys_clone+0xba/0x100 [ 3173.079774][T25585] ? kernel_clone+0xab0/0xab0 [ 3173.079814][T25585] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3173.079844][T25585] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3173.079883][T25585] do_syscall_64+0x35/0xb0 [ 3173.079907][T25585] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3173.079932][T25585] RIP: 0033:0x7f072048b9d1 [ 3173.079953][T25585] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3173.079977][T25585] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3173.080007][T25585] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3173.080024][T25585] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3173.080040][T25585] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3173.080057][T25585] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3173.080073][T25585] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3173.080109][T25585] [ 3173.091933][T25585] memory: usage 307200kB, limit 307200kB, failcnt 1976 [ 3173.167523][T25597] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3173.200610][T25600] netlink: 'syz-executor.2': attribute type 142 has an invalid length. [ 3173.271657][T25585] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3173.540794][T25580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3173.553638][T25585] Memory cgroup stats for /syz4: [ 3173.553821][T25585] anon 151552 [ 3173.553821][T25585] file 368640 [ 3173.553821][T25585] kernel 314040320 [ 3173.553821][T25585] kernel_stack 65536 [ 3173.553821][T25585] pagetables 81920 [ 3173.553821][T25585] percpu 5431008 [ 3173.553821][T25585] sock 0 [ 3173.553821][T25585] vmalloc 0 [ 3173.553821][T25585] shmem 368640 [ 3173.553821][T25585] zswap 0 [ 3173.553821][T25585] zswapped 0 [ 3173.553821][T25585] file_mapped 368640 [ 3173.553821][T25585] file_dirty 0 [ 3173.553821][T25585] file_writeback 0 [ 3173.553821][T25585] swapcached 0 [ 3173.553821][T25585] anon_thp 0 [ 3173.553821][T25585] file_thp 0 [ 3173.553821][T25585] shmem_thp 0 [ 3173.553821][T25585] inactive_anon 184320 [ 3173.553821][T25585] active_anon 335872 [ 3173.553821][T25585] inactive_file 0 [ 3173.553821][T25585] active_file 0 [ 3173.553821][T25585] unevictable 0 [ 3173.553821][T25585] slab_reclaimable 15320 [ 3173.553821][T25585] slab_unreclaimable 308411552 [ 3173.553821][T25585] slab 308426872 [ 3173.575613][T25581] device bridge_slave_1 left promiscuous mode [ 3173.907489][T25585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25585,uid=0 [ 3173.923489][T25585] Memory cgroup out of memory: Killed process 25585 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3173.926609][T25581] bridge824: port 1(bridge_slave_1) entered disabled state [ 3174.037632][T25581] bridge825: port 1(bridge_slave_1) entered blocking state [ 3174.044977][T25581] bridge825: port 1(bridge_slave_1) entered disabled state [ 3174.053200][T25581] device bridge_slave_1 entered promiscuous mode [ 3174.071062][T25582] bridge825: port 1(bridge_slave_1) entered blocking state [ 3174.078449][T25582] bridge825: port 1(bridge_slave_1) entered forwarding state [ 3174.094742][T25582] bond0: (slave bridge825): Enslaving as an active interface with an up link [ 3174.163414][T25595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:55:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:55:11 executing program 1: socketpair(0x2b, 0x1, 0x1, &(0x7f00000000c0)) 17:55:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f032704f9160d9eb314b3fa493e2cb9616c4d29db65adcd289355d0c26fa2edd"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b95d661fb6d07fdd707e90c7201ca4f75400ba86c32b9d3b955f126b1e72dfaf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_FLAGS={0x8}]}, {0xbec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4a0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x110, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0xec4}}, 0x0) 17:55:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000040)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) [ 3174.322655][T25601] device bridge_slave_1 left promiscuous mode [ 3174.338996][T25601] bridge2264: port 1(bridge_slave_1) entered disabled state [ 3174.493016][T25598] bond0: (slave bridge2265): Enslaving as an active interface with an up link 17:55:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300001bcd0008000a000f"], 0x28}}, 0x0) 17:55:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300720c000008000a000f"], 0x28}}, 0x0) 17:55:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xc}]}}, &(0x7f0000000340)=""/167, 0x26, 0xa7, 0x1}, 0x20) 17:55:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4001) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0xeee9161b7394abcd, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 17:55:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)=ANY=[], 0x1190}}, 0x0) [ 3174.704858][T25611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3175.019515][T25615] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3175.061050][T25615] CPU: 1 PID: 25615 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3175.071523][T25615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3175.081605][T25615] Call Trace: [ 3175.084911][T25615] [ 3175.084932][T25612] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3175.087842][T25615] dump_stack_lvl+0xcd/0x134 [ 3175.087882][T25615] dump_header+0x10b/0x7f9 [ 3175.087913][T25615] oom_kill_process.cold+0x10/0x15 [ 3175.087944][T25615] out_of_memory+0x358/0x14a0 [ 3175.087976][T25615] ? find_held_lock+0x2d/0x110 [ 3175.088002][T25615] ? oom_killer_disable+0x270/0x270 [ 3175.088031][T25615] ? find_held_lock+0x2d/0x110 [ 3175.088059][T25615] mem_cgroup_out_of_memory+0x206/0x270 [ 3175.088085][T25615] ? mem_cgroup_margin+0x130/0x130 [ 3175.088106][T25615] ? lock_downgrade+0x6e0/0x6e0 [ 3175.088149][T25615] try_charge_memcg+0xf67/0x13f0 [ 3175.088183][T25615] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3175.088215][T25615] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3175.088242][T25615] ? lock_downgrade+0x6e0/0x6e0 [ 3175.088270][T25615] ? lock_downgrade+0x6e0/0x6e0 [ 3175.088309][T25615] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3175.088340][T25615] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3175.088375][T25615] copy_process+0x73e/0x7090 [ 3175.088412][T25615] ? find_held_lock+0x2d/0x110 [ 3175.088470][T25615] ? __cleanup_sighand+0xb0/0xb0 [ 3175.088526][T25615] kernel_clone+0xe7/0xab0 [ 3175.088553][T25615] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3175.088581][T25615] ? create_io_thread+0xe0/0xe0 [ 3175.088615][T25615] ? find_held_lock+0x2d/0x110 [ 3175.088643][T25615] ? __ct_user_exit+0xff/0x150 [ 3175.088677][T25615] __do_sys_clone+0xba/0x100 [ 3175.088703][T25615] ? kernel_clone+0xab0/0xab0 [ 3175.088742][T25615] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3175.088773][T25615] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3175.088810][T25615] do_syscall_64+0x35/0xb0 [ 3175.088835][T25615] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3175.088861][T25615] RIP: 0033:0x7f072048b9d1 [ 3175.088882][T25615] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3175.088905][T25615] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3175.088930][T25615] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3175.088947][T25615] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3175.088964][T25615] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3175.088980][T25615] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3175.088996][T25615] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3175.089031][T25615] [ 3175.138352][T25615] memory: usage 307200kB, limit 307200kB, failcnt 2051 [ 3175.235445][T25613] device bridge_slave_1 left promiscuous mode [ 3175.242677][T25615] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3175.273023][T25613] bridge825: port 1(bridge_slave_1) entered disabled state [ 3175.280339][T25615] Memory cgroup stats for /syz4: [ 3175.383473][T25615] anon 151552 [ 3175.383473][T25615] file 368640 [ 3175.383473][T25615] kernel 314052608 [ 3175.383473][T25615] kernel_stack 65536 [ 3175.383473][T25615] pagetables 81920 [ 3175.383473][T25615] percpu 5431008 17:55:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb0, 0x8, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f032704f9160d9eb314b3fa493e2cb9616c4d29db65adcd289355d0c26fa2edd"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback, 0x5}}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private=0xa010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b95d661fb6d07fdd707e90c7201ca4f75400ba86c32b9d3b955f126b1e72dfaf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0xaf, @empty}}]}, {0xbf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4a0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x11c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0xec4}}, 0x0) 17:55:12 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 17:55:12 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 3175.383473][T25615] sock 0 [ 3175.383473][T25615] vmalloc 0 [ 3175.383473][T25615] shmem 368640 [ 3175.383473][T25615] zswap 0 [ 3175.383473][T25615] zswapped 0 [ 3175.383473][T25615] file_mapped 368640 [ 3175.383473][T25615] file_dirty 0 [ 3175.383473][T25615] file_writeback 0 [ 3175.383473][T25615] swapcached 0 [ 3175.383473][T25615] anon_thp 0 [ 3175.383473][T25615] file_thp 0 [ 3175.383473][T25615] shmem_thp 0 [ 3175.383473][T25615] inactive_anon 184320 [ 3175.383473][T25615] active_anon 335872 [ 3175.383473][T25615] inactive_file 0 [ 3175.383473][T25615] active_file 0 [ 3175.383473][T25615] unevictable 0 [ 3175.383473][T25615] slab_reclaimable 16088 [ 3175.383473][T25615] slab_unreclaimable 308419760 [ 3175.383473][T25615] slab 308435848 [ 3175.594486][T25613] bridge826: port 1(bridge_slave_1) entered blocking state [ 3175.632899][T25615] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25615,uid=0 [ 3175.644250][T25613] bridge826: port 1(bridge_slave_1) entered disabled state [ 3175.656486][T25615] Memory cgroup out of memory: Killed process 25615 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3175.753636][T25613] device bridge_slave_1 entered promiscuous mode [ 3175.804032][T25619] bridge826: port 1(bridge_slave_1) entered blocking state [ 3175.811467][T25619] bridge826: port 1(bridge_slave_1) entered forwarding state [ 3176.091815][T25619] bond0: (slave bridge826): Enslaving as an active interface with an up link 17:55:13 executing program 1: bpf$BPF_BTF_LOAD(0x10, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 17:55:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:55:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x65724b053a98cdcc}, 0x48) 17:55:13 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) write$ppp(r0, 0x0, 0x0) [ 3176.155262][T25625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3176.459575][T25631] bridge2266: port 1(bridge_slave_1) entered blocking state [ 3176.493932][T25631] bridge2266: port 1(bridge_slave_1) entered disabled state [ 3176.516729][T25631] device bridge_slave_1 entered promiscuous mode [ 3176.714115][T25632] bridge2266: port 1(bridge_slave_1) entered blocking state [ 3176.721529][T25632] bridge2266: port 1(bridge_slave_1) entered forwarding state [ 3177.035707][T25632] bond0: (slave bridge2266): Enslaving as an active interface with an up link [ 3177.134566][T26040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2157: link becomes ready 17:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300001bce0008000a000f"], 0x28}}, 0x0) 17:55:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000013"], 0x4c}}, 0x0) 17:55:14 executing program 0: bpf$BPF_BTF_LOAD(0x10, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/171, 0x0, 0xab}, 0x20) 17:55:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300000e000008000a000f"], 0x28}}, 0x0) 17:55:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0xec8, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xeb4, 0x8, 0x0, 0x1, [{0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f032704f9160d9eb314b3fa493e2cb9616c4d29db65adcd289355d0c26fa2edd"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @loopback}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b95d661fb6d07fdd707e90c7201ca4f75400ba86c32b9d3b955f126b1e72dfaf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @empty}}, @WGPEER_A_FLAGS={0x8}]}, {0xbf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x4a0, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @empty}}, @WGPEER_A_ALLOWEDIPS={0x1c4, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2c4, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x11c, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}]}]}]}, 0xec8}}, 0x0) [ 3177.184900][T25641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3177.253249][T25644] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 17:55:14 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @private, 0xffffffffffffffff, "694a02284596957d10c9ab93401de46334ec19c0f6d6a9884372a06597669e22"}, 0x3c) 17:55:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback}}) 17:55:14 executing program 2: bpf$BPF_BTF_LOAD(0x16, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 3177.300915][T25649] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 3177.366469][T25649] CPU: 0 PID: 25649 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3177.376955][T25649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3177.377903][T25645] device bridge_slave_1 left promiscuous mode [ 3177.387137][T25649] Call Trace: [ 3177.387152][T25649] [ 3177.387162][T25649] dump_stack_lvl+0xcd/0x134 [ 3177.387196][T25649] dump_header+0x10b/0x7f9 [ 3177.387227][T25649] oom_kill_process.cold+0x10/0x15 [ 3177.413564][T25649] out_of_memory+0x358/0x14a0 [ 3177.418263][T25649] ? find_held_lock+0x2d/0x110 [ 3177.423032][T25649] ? oom_killer_disable+0x270/0x270 [ 3177.428250][T25649] ? find_held_lock+0x2d/0x110 [ 3177.433023][T25649] mem_cgroup_out_of_memory+0x206/0x270 [ 3177.438574][T25649] ? mem_cgroup_margin+0x130/0x130 [ 3177.443689][T25649] ? lock_downgrade+0x6e0/0x6e0 [ 3177.448565][T25649] try_charge_memcg+0xf67/0x13f0 [ 3177.453514][T25649] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3177.459501][T25649] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3177.465228][T25649] ? lock_downgrade+0x6e0/0x6e0 [ 3177.470087][T25649] ? lock_downgrade+0x6e0/0x6e0 [ 3177.474941][T25649] ? rcu_read_unlock+0x9/0x60 [ 3177.479635][T25649] obj_cgroup_charge+0x2ab/0x5e0 [ 3177.484584][T25649] ? copy_process+0x5c2/0x7090 [ 3177.489353][T25649] kmem_cache_alloc_node+0x92/0x3f0 [ 3177.494555][T25649] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3177.499763][T25649] copy_process+0x5c2/0x7090 [ 3177.504366][T25649] ? find_held_lock+0x2d/0x110 [ 3177.509137][T25649] ? find_held_lock+0x2d/0x110 [ 3177.513914][T25649] ? __cleanup_sighand+0xb0/0xb0 [ 3177.518875][T25649] kernel_clone+0xe7/0xab0 [ 3177.523301][T25649] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3177.529288][T25649] ? create_io_thread+0xe0/0xe0 [ 3177.534151][T25649] ? find_held_lock+0x2d/0x110 [ 3177.538931][T25649] ? __ct_user_exit+0xff/0x150 [ 3177.543708][T25649] __do_sys_clone+0xba/0x100 [ 3177.548303][T25649] ? kernel_clone+0xab0/0xab0 [ 3177.553001][T25649] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3177.558908][T25649] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3177.564815][T25649] do_syscall_64+0x35/0xb0 [ 3177.569243][T25649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3177.575141][T25649] RIP: 0033:0x7f072048b9d1 [ 3177.579559][T25649] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3177.599168][T25649] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3177.607761][T25649] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3177.615744][T25649] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3177.623718][T25649] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3177.631693][T25649] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3177.639665][T25649] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3177.647655][T25649] [ 3177.672493][T25645] bridge826: port 1(bridge_slave_1) entered disabled state [ 3177.754537][T25649] memory: usage 307200kB, limit 307200kB, failcnt 2089 [ 3177.765521][T25649] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 17:55:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xc, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf}, {0xb}, {0xc, 0x4}]}, @func_proto, @union]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000480)=""/196, 0x60, 0xc4, 0x1}, 0x20) [ 3177.850390][T25645] bridge827: port 1(bridge_slave_1) entered blocking state [ 3177.857951][T25649] Memory cgroup stats for /syz4: [ 3177.858175][T25649] anon 151552 [ 3177.858175][T25649] file 368640 [ 3177.858175][T25649] kernel 314040320 [ 3177.858175][T25649] kernel_stack 65536 [ 3177.858175][T25649] pagetables 81920 [ 3177.858175][T25649] percpu 5431008 [ 3177.858175][T25649] sock 0 [ 3177.858175][T25649] vmalloc 0 [ 3177.858175][T25649] shmem 368640 [ 3177.858175][T25649] zswap 0 [ 3177.858175][T25649] zswapped 0 [ 3177.858175][T25649] file_mapped 368640 [ 3177.858175][T25649] file_dirty 0 [ 3177.858175][T25649] file_writeback 0 [ 3177.858175][T25649] swapcached 0 [ 3177.858175][T25649] anon_thp 0 [ 3177.858175][T25649] file_thp 0 [ 3177.858175][T25649] shmem_thp 0 [ 3177.858175][T25649] inactive_anon 184320 [ 3177.858175][T25649] active_anon 335872 [ 3177.858175][T25649] inactive_file 0 [ 3177.858175][T25649] active_file 0 [ 3177.858175][T25649] unevictable 0 [ 3177.858175][T25649] slab_reclaimable 27160 [ 3177.858175][T25649] slab_unreclaimable 308400456 [ 3177.858175][T25649] slab 308427616 [ 3178.183985][T25645] bridge827: port 1(bridge_slave_1) entered disabled state [ 3178.219859][T25645] device bridge_slave_1 entered promiscuous mode [ 3178.239331][T25646] bridge827: port 1(bridge_slave_1) entered blocking state [ 3178.246729][T25646] bridge827: port 1(bridge_slave_1) entered forwarding state [ 3178.254502][T25649] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25649,uid=0 [ 3178.267051][T25646] bond0: (slave bridge827): Enslaving as an active interface with an up link 17:55:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:55:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8f1a000000001a0000000100000024000180080006000300000008000300ac1414bb060005004e2200000600010002"], 0x38}}, 0x0) 17:55:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300000a000008000a000f"], 0x28}}, 0x0) [ 3178.353361][T25649] Memory cgroup out of memory: Killed process 25649 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3178.375230][T25662] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3178.569513][T25668] device bridge_slave_1 left promiscuous mode [ 3178.576052][T25668] bridge2266: port 1(bridge_slave_1) entered disabled state [ 3178.784258][T25667] bond0: (slave bridge2267): Enslaving as an active interface with an up link [ 3178.945363][T25676] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3179.045369][T25677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 17:55:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:55:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8f1a000000001a0000000100000024000180080006000300000008000300ac1414bb060005004e2200000600010002"], 0x38}}, 0x0) 17:55:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300991c000008000a000f"], 0x28}}, 0x0) 17:55:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023874b7fd70008000a000f"], 0x28}}, 0x0) 17:55:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b0000000600010001"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3179.422812][T25686] MPTCP: kernel_bind error, err=-98 [ 3179.455119][T25678] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3179.532205][T25680] device bridge_slave_1 left promiscuous mode [ 3179.557628][T25680] bridge827: port 1(bridge_slave_1) entered disabled state [ 3179.593762][T25687] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3179.661779][T25687] CPU: 1 PID: 25687 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3179.672241][T25687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3179.682311][T25687] Call Trace: [ 3179.685594][T25687] [ 3179.688538][T25687] dump_stack_lvl+0xcd/0x134 [ 3179.693163][T25687] dump_header+0x10b/0x7f9 [ 3179.697607][T25687] oom_kill_process.cold+0x10/0x15 [ 3179.702775][T25687] out_of_memory+0x358/0x14a0 [ 3179.707477][T25687] ? find_held_lock+0x2d/0x110 [ 3179.712264][T25687] ? oom_killer_disable+0x270/0x270 [ 3179.717486][T25687] ? find_held_lock+0x2d/0x110 [ 3179.722278][T25687] mem_cgroup_out_of_memory+0x206/0x270 [ 3179.727846][T25687] ? mem_cgroup_margin+0x130/0x130 [ 3179.732978][T25687] ? lock_downgrade+0x6e0/0x6e0 [ 3179.737864][T25687] try_charge_memcg+0xf67/0x13f0 [ 3179.743009][T25687] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3179.749017][T25687] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3179.754766][T25687] ? lock_downgrade+0x6e0/0x6e0 [ 3179.759637][T25687] ? lock_downgrade+0x6e0/0x6e0 [ 3179.764521][T25687] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3179.770093][T25687] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3179.776279][T25687] copy_process+0x73e/0x7090 [ 3179.780902][T25687] ? find_held_lock+0x2d/0x110 [ 3179.785697][T25687] ? __cleanup_sighand+0xb0/0xb0 [ 3179.790680][T25687] kernel_clone+0xe7/0xab0 [ 3179.795116][T25687] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3179.801120][T25687] ? create_io_thread+0xe0/0xe0 [ 3179.806005][T25687] ? find_held_lock+0x2d/0x110 [ 3179.810809][T25687] ? __ct_user_exit+0xff/0x150 [ 3179.815599][T25687] __do_sys_clone+0xba/0x100 [ 3179.820210][T25687] ? kernel_clone+0xab0/0xab0 [ 3179.824919][T25687] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3179.830835][T25687] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3179.836772][T25687] do_syscall_64+0x35/0xb0 [ 3179.841216][T25687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3179.847133][T25687] RIP: 0033:0x7f072048b9d1 [ 3179.851570][T25687] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3179.871198][T25687] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3179.879643][T25687] RAX: ffffffffffffffda RBX: 00007f071f3dd700 RCX: 00007f072048b9d1 [ 3179.887638][T25687] RDX: 00007f071f3dd9d0 RSI: 00007f071f3dd2f0 RDI: 00000000003d0f00 [ 3179.895627][T25687] RBP: 00007ffc7a569690 R08: 00007f071f3dd700 R09: 00007f071f3dd700 [ 3179.903615][T25687] R10: 00007f071f3dd9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3179.911602][T25687] R13: 00007ffc7a5694ff R14: 00007f071f3dd300 R15: 0000000000022000 [ 3179.919624][T25687] [ 3180.065660][T25697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3180.343466][T25687] memory: usage 307200kB, limit 307200kB, failcnt 2116 [ 3180.362892][T25687] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3180.383224][T25687] Memory cgroup stats for /syz4: [ 3180.383448][T25687] anon 151552 [ 3180.383448][T25687] file 368640 [ 3180.383448][T25687] kernel 314052608 [ 3180.383448][T25687] kernel_stack 65536 [ 3180.383448][T25687] pagetables 81920 [ 3180.383448][T25687] percpu 5431008 [ 3180.383448][T25687] sock 0 [ 3180.383448][T25687] vmalloc 0 [ 3180.383448][T25687] shmem 368640 [ 3180.383448][T25687] zswap 0 [ 3180.383448][T25687] zswapped 0 [ 3180.383448][T25687] file_mapped 368640 [ 3180.383448][T25687] file_dirty 0 [ 3180.383448][T25687] file_writeback 0 [ 3180.383448][T25687] swapcached 0 [ 3180.383448][T25687] anon_thp 0 [ 3180.383448][T25687] file_thp 0 [ 3180.383448][T25687] shmem_thp 0 [ 3180.383448][T25687] inactive_anon 180224 [ 3180.383448][T25687] active_anon 335872 [ 3180.383448][T25687] inactive_file 0 [ 3180.383448][T25687] active_file 0 [ 3180.383448][T25687] unevictable 0 [ 3180.383448][T25687] slab_reclaimable 15320 [ 3180.383448][T25687] slab_unreclaimable 308419112 [ 3180.383448][T25687] slab 308434432 [ 3180.565929][T25687] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25687,uid=0 [ 3180.594630][T25687] Memory cgroup out of memory: Killed process 25687 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3180.634698][T25681] bond0: (slave bridge828): Enslaving as an active interface with an up link [ 3180.644005][T25682] bridge497: port 1(bridge_slave_1) entered blocking state 17:55:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3180.693554][T25682] bridge497: port 1(bridge_slave_1) entered disabled state [ 3180.714820][T25682] device bridge_slave_1 entered promiscuous mode [ 3180.783430][T25683] bridge497: port 1(bridge_slave_1) entered blocking state [ 3180.790813][T25683] bridge497: port 1(bridge_slave_1) entered forwarding state [ 3180.864403][T25683] bond0: (slave bridge497): Enslaving as an active interface with an up link 17:55:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023009a1c000008000a000f"], 0x28}}, 0x0) 17:55:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000006c0008000a000f"], 0x28}}, 0x0) [ 3180.933982][T25692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3181.068707][T25694] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3181.080395][T25695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3181.084546][T25710] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3181.124309][T25710] CPU: 0 PID: 25710 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3181.134778][T25710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3181.144866][T25710] Call Trace: [ 3181.148174][T25710] [ 3181.151163][T25710] dump_stack_lvl+0xcd/0x134 [ 3181.155788][T25710] dump_header+0x10b/0x7f9 [ 3181.160240][T25710] oom_kill_process.cold+0x10/0x15 [ 3181.165390][T25710] out_of_memory+0x358/0x14a0 [ 3181.170101][T25710] ? find_held_lock+0x2d/0x110 [ 3181.174895][T25710] ? oom_killer_disable+0x270/0x270 [ 3181.180134][T25710] ? find_held_lock+0x2d/0x110 [ 3181.184933][T25710] mem_cgroup_out_of_memory+0x206/0x270 [ 3181.190508][T25710] ? mem_cgroup_margin+0x130/0x130 [ 3181.195645][T25710] ? lock_downgrade+0x6e0/0x6e0 [ 3181.200538][T25710] try_charge_memcg+0xf67/0x13f0 [ 3181.205517][T25710] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3181.211626][T25710] ? lock_downgrade+0x6e0/0x6e0 [ 3181.216524][T25710] charge_memcg+0x31/0x320 [ 3181.220971][T25710] __mem_cgroup_charge+0x27/0x90 [ 3181.226199][T25710] ? _compound_head+0x5d/0x150 [ 3181.230990][T25710] wp_page_copy+0x27c/0x1b60 [ 3181.235618][T25710] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3181.241099][T25710] ? lock_downgrade+0x6e0/0x6e0 [ 3181.245972][T25710] ? vm_normal_page+0x146/0x2a0 [ 3181.250868][T25710] do_wp_page+0x1d1/0x1910 [ 3181.255314][T25710] __handle_mm_fault+0x1813/0x39b0 [ 3181.260460][T25710] ? vm_iomap_memory+0x190/0x190 [ 3181.265450][T25710] handle_mm_fault+0x1c8/0x780 [ 3181.270333][T25710] do_user_addr_fault+0x475/0x1210 [ 3181.275491][T25710] exc_page_fault+0x94/0x170 [ 3181.280114][T25710] asm_exc_page_fault+0x22/0x30 [ 3181.284988][T25710] RIP: 0033:0x7f0720437970 [ 3181.289436][T25710] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3181.309073][T25710] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3181.315171][T25710] RAX: 0000000071860a54 RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3181.323177][T25710] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0e6e [ 3181.331176][T25710] RBP: 0000000071860a54 R08: 0000000000000a54 R09: 0000000071860a58 [ 3181.339343][T25710] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3181.347425][T25710] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff81a326a6 [ 3181.355505][T25710] ? trace_user_exit.constprop.0+0x166/0x210 [ 3181.361547][T25710] [ 3181.638554][T26046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan373: link becomes ready [ 3181.644003][T25710] memory: usage 307176kB, limit 307200kB, failcnt 2176 [ 3181.662686][T25698] bridge469: port 1(bridge_slave_1) entered disabled state [ 3181.712985][T25710] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3181.735738][T25710] Memory cgroup stats for /syz4: [ 3181.736035][T25710] anon 118784 [ 3181.736035][T25710] file 368640 [ 3181.736035][T25710] kernel 314040320 [ 3181.736035][T25710] kernel_stack 65536 [ 3181.736035][T25710] pagetables 73728 [ 3181.736035][T25710] percpu 5431008 [ 3181.736035][T25710] sock 0 [ 3181.736035][T25710] vmalloc 0 [ 3181.736035][T25710] shmem 368640 [ 3181.736035][T25710] zswap 0 [ 3181.736035][T25710] zswapped 0 [ 3181.736035][T25710] file_mapped 368640 [ 3181.736035][T25710] file_dirty 0 [ 3181.736035][T25710] file_writeback 0 [ 3181.736035][T25710] swapcached 0 [ 3181.736035][T25710] anon_thp 0 [ 3181.736035][T25710] file_thp 0 [ 3181.736035][T25710] shmem_thp 0 [ 3181.736035][T25710] inactive_anon 131072 [ 3181.736035][T25710] active_anon 335872 [ 3181.736035][T25710] inactive_file 0 [ 3181.736035][T25710] active_file 0 [ 3181.736035][T25710] unevictable 0 [ 3181.736035][T25710] slab_reclaimable 25232 [ 3181.736035][T25710] slab_unreclaimable 308409560 [ 3181.736035][T25710] slab 308434792 [ 3181.750322][T25698] bridge470: port 1(bridge_slave_1) entered blocking state [ 3181.895028][T25698] bridge470: port 1(bridge_slave_1) entered disabled state [ 3181.931330][T25710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25710,uid=0 [ 3181.955677][T25710] Memory cgroup out of memory: Killed process 25710 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 17:55:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300001f000008000a000f"], 0x28}}, 0x0) [ 3182.064411][T25701] bond0: (slave bridge470): Enslaving as an active interface with an up link [ 3182.095738][T25719] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3182.143893][T25700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3182.155188][T25719] CPU: 0 PID: 25719 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3182.165647][T25719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3182.175736][T25719] Call Trace: [ 3182.179036][T25719] [ 3182.181986][T25719] dump_stack_lvl+0xcd/0x134 [ 3182.186610][T25719] dump_header+0x10b/0x7f9 [ 3182.191099][T25719] oom_kill_process.cold+0x10/0x15 [ 3182.196245][T25719] out_of_memory+0x358/0x14a0 [ 3182.200960][T25719] ? find_held_lock+0x2d/0x110 [ 3182.205757][T25719] ? oom_killer_disable+0x270/0x270 [ 3182.210989][T25719] ? find_held_lock+0x2d/0x110 [ 3182.215787][T25719] mem_cgroup_out_of_memory+0x206/0x270 [ 3182.221416][T25719] ? mem_cgroup_margin+0x130/0x130 [ 3182.226562][T25719] ? lock_downgrade+0x6e0/0x6e0 [ 3182.231462][T25719] try_charge_memcg+0xf67/0x13f0 [ 3182.236442][T25719] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3182.242455][T25719] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3182.248195][T25719] ? lock_downgrade+0x6e0/0x6e0 [ 3182.253061][T25719] ? lock_downgrade+0x6e0/0x6e0 [ 3182.257936][T25719] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3182.263501][T25719] __alloc_pages+0x1ef/0x510 [ 3182.268108][T25719] ? __alloc_pages_slowpath.constprop.0+0x2300/0x2300 [ 3182.274928][T25719] alloc_pages+0x1a6/0x270 [ 3182.279362][T25719] get_zeroed_page+0x10/0x40 [ 3182.283961][T25719] __pud_alloc+0x37/0x170 [ 3182.288304][T25719] __handle_mm_fault+0x919/0x39b0 [ 3182.293343][T25719] ? vm_iomap_memory+0x190/0x190 [ 3182.298311][T25719] handle_mm_fault+0x1c8/0x780 [ 3182.303086][T25719] do_user_addr_fault+0x475/0x1210 [ 3182.308239][T25719] exc_page_fault+0x94/0x170 [ 3182.312842][T25719] asm_exc_page_fault+0x22/0x30 [ 3182.317700][T25719] RIP: 0033:0x7f07204264f6 [ 3182.322118][T25719] Code: 1f 44 00 00 48 8b 0d f9 ee 0b 01 4c 63 05 e2 ee 0b 01 48 8b 05 e3 ee 0b 01 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 c9 ee 0b 01 c3 52 48 8d 35 47 dd 0b 00 48 89 c2 48 [ 3182.341823][T25719] RSP: 002b:00007ffc7a569578 EFLAGS: 00010287 [ 3182.347896][T25719] RAX: 0000001b2eb20000 RBX: 0000000000000003 RCX: 0000001b2eb20000 [ 3182.355871][T25719] RDX: 0000001b2eb20004 RSI: 00000000003c0000 RDI: 0000000000000000 [ 3182.363842][T25719] RBP: 0000000000000000 R08: 0000001b2ef20000 R09: 0000000000040000 [ 3182.371826][T25719] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 [ 3182.379802][T25719] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc7a569820 [ 3182.387799][T25719] 17:55:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3182.392413][T25702] bridge2268: port 1(bridge_slave_1) entered blocking state [ 3182.674034][T25702] bridge2268: port 1(bridge_slave_1) entered disabled state [ 3182.683207][T25702] device bridge_slave_1 entered promiscuous mode [ 3182.700111][T25697] device bridge_slave_1 left promiscuous mode [ 3182.706980][T25697] bridge384: port 1(bridge_slave_1) entered disabled state [ 3182.725660][T25719] memory: usage 307072kB, limit 307200kB, failcnt 2203 [ 3182.747218][T25719] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3182.754363][T25719] Memory cgroup stats for /syz4: [ 3182.754580][T25719] anon 77824 [ 3182.754580][T25719] file 368640 [ 3182.754580][T25719] kernel 313962496 [ 3182.754580][T25719] kernel_stack 32768 [ 3182.754580][T25719] pagetables 57344 [ 3182.754580][T25719] percpu 5431008 [ 3182.754580][T25719] sock 0 [ 3182.754580][T25719] vmalloc 0 [ 3182.754580][T25719] shmem 368640 [ 3182.754580][T25719] zswap 0 [ 3182.754580][T25719] zswapped 0 [ 3182.754580][T25719] file_mapped 368640 [ 3182.754580][T25719] file_dirty 0 [ 3182.754580][T25719] file_writeback 0 [ 3182.754580][T25719] swapcached 0 [ 3182.754580][T25719] anon_thp 0 [ 3182.754580][T25719] file_thp 0 [ 3182.754580][T25719] shmem_thp 0 [ 3182.754580][T25719] inactive_anon 110592 [ 3182.754580][T25719] active_anon 335872 [ 3182.754580][T25719] inactive_file 0 [ 3182.754580][T25719] active_file 0 [ 3182.754580][T25719] unevictable 0 [ 3182.754580][T25719] slab_reclaimable 11464 [ 3182.754580][T25719] slab_unreclaimable 308400248 [ 3182.754580][T25719] slab 308411712 [ 3182.800787][T25697] bridge385: port 1(bridge_slave_1) entered blocking state [ 3182.959848][T25697] bridge385: port 1(bridge_slave_1) entered disabled state [ 3182.969109][T25697] device bridge_slave_1 entered promiscuous mode [ 3182.994316][T25703] bond0: (slave bridge385): Enslaving as an active interface with an up link [ 3182.997884][T25719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25719,uid=0 [ 3183.047609][T25704] bridge2268: port 1(bridge_slave_1) entered blocking state 17:55:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000006c0008000a000f"], 0x28}}, 0x0) [ 3183.055028][T25704] bridge2268: port 1(bridge_slave_1) entered forwarding state [ 3183.060958][T25719] Memory cgroup out of memory: Killed process 25719 (syz-executor.4) total-vm:54460kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:1000 17:55:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000020000008000a000f"], 0x28}}, 0x0) [ 3183.179857][T25704] bond0: (slave bridge2268): Enslaving as an active interface with an up link 17:55:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000024000008000a000f"], 0x28}}, 0x0) [ 3183.263228][T25729] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3183.263266][T25729] CPU: 0 PID: 25729 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3183.263293][T25729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3183.263313][T25729] Call Trace: [ 3183.263322][T25729] [ 3183.263331][T25729] dump_stack_lvl+0xcd/0x134 [ 3183.263367][T25729] dump_header+0x10b/0x7f9 [ 3183.263399][T25729] oom_kill_process.cold+0x10/0x15 [ 3183.263432][T25729] out_of_memory+0x358/0x14a0 [ 3183.263464][T25729] ? find_held_lock+0x2d/0x110 [ 3183.263489][T25729] ? oom_killer_disable+0x270/0x270 [ 3183.263521][T25729] ? find_held_lock+0x2d/0x110 [ 3183.263549][T25729] mem_cgroup_out_of_memory+0x206/0x270 [ 3183.263579][T25729] ? mem_cgroup_margin+0x130/0x130 [ 3183.263601][T25729] ? lock_downgrade+0x6e0/0x6e0 [ 3183.263645][T25729] try_charge_memcg+0xf67/0x13f0 [ 3183.263679][T25729] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3183.263715][T25729] ? lock_downgrade+0x6e0/0x6e0 [ 3183.263756][T25729] charge_memcg+0x31/0x320 [ 3183.263785][T25729] __mem_cgroup_charge+0x27/0x90 [ 3183.263809][T25729] ? _compound_head+0x5d/0x150 [ 3183.263839][T25729] wp_page_copy+0x27c/0x1b60 [ 3183.263873][T25729] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3183.263897][T25729] ? lock_downgrade+0x6e0/0x6e0 [ 3183.263920][T25729] ? vm_normal_page+0x146/0x2a0 [ 3183.263961][T25729] do_wp_page+0x1d1/0x1910 [ 3183.263991][T25729] __handle_mm_fault+0x1813/0x39b0 [ 3183.264024][T25729] ? vm_iomap_memory+0x190/0x190 [ 3183.264076][T25729] handle_mm_fault+0x1c8/0x780 [ 3183.264107][T25729] do_user_addr_fault+0x475/0x1210 [ 3183.264148][T25729] exc_page_fault+0x94/0x170 [ 3183.264182][T25729] asm_exc_page_fault+0x22/0x30 [ 3183.264206][T25729] RIP: 0033:0x7f0720437970 [ 3183.264226][T25729] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3183.264249][T25729] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3183.264271][T25729] RAX: 0000000071860a54 RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3183.264288][T25729] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0e6e [ 3183.264303][T25729] RBP: 0000000071860a54 R08: 0000000000000a54 R09: 0000000071860a58 [ 3183.264326][T25729] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3183.264342][T25729] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff81a326a6 [ 3183.264358][T25729] ? trace_user_exit.constprop.0+0x166/0x210 [ 3183.264406][T25729] [ 3183.264672][T25729] memory: usage 307200kB, limit 307200kB, failcnt 2251 [ 3183.264691][T25729] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3183.264706][T25729] Memory cgroup stats for /syz4: [ 3183.264854][T25729] anon 118784 [ 3183.264854][T25729] file 368640 [ 3183.264854][T25729] kernel 314085376 [ 3183.264854][T25729] kernel_stack 65536 [ 3183.264854][T25729] pagetables 73728 [ 3183.264854][T25729] percpu 5431008 [ 3183.264854][T25729] sock 0 [ 3183.264854][T25729] vmalloc 0 [ 3183.264854][T25729] shmem 368640 [ 3183.264854][T25729] zswap 0 [ 3183.264854][T25729] zswapped 0 [ 3183.264854][T25729] file_mapped 368640 [ 3183.264854][T25729] file_dirty 0 [ 3183.264854][T25729] file_writeback 0 [ 3183.264854][T25729] swapcached 0 [ 3183.264854][T25729] anon_thp 0 [ 3183.264854][T25729] file_thp 0 [ 3183.264854][T25729] shmem_thp 0 [ 3183.264854][T25729] inactive_anon 131072 [ 3183.264854][T25729] active_anon 335872 [ 3183.264854][T25729] inactive_file 0 [ 3183.264854][T25729] active_file 0 [ 3183.264854][T25729] unevictable 0 [ 3183.264854][T25729] slab_reclaimable 50112 17:55:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffffe40008000a000f"], 0x28}}, 0x0) [ 3183.264854][T25729] slab_unreclaimable 308425824 [ 3183.264854][T25729] slab 308475936 [ 3183.264918][T25729] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25729,uid=0 [ 3183.265049][T25729] Memory cgroup out of memory: Killed process 25729 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3183.423652][T25734] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3183.659419][T25707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3184.007674][T25708] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3184.060600][T25714] bond0: (slave bridge829): Enslaving as an active interface with an up link [ 3184.069655][T25716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3184.087559][T25734] CPU: 0 PID: 25734 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3184.098014][T25734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3184.108085][T25734] Call Trace: [ 3184.111373][T25734] [ 3184.114308][T25734] dump_stack_lvl+0xcd/0x134 [ 3184.118910][T25734] dump_header+0x10b/0x7f9 [ 3184.123338][T25734] oom_kill_process.cold+0x10/0x15 [ 3184.128456][T25734] out_of_memory+0x358/0x14a0 [ 3184.133141][T25734] ? find_held_lock+0x2d/0x110 [ 3184.137903][T25734] ? oom_killer_disable+0x270/0x270 [ 3184.143108][T25734] ? find_held_lock+0x2d/0x110 [ 3184.147884][T25734] mem_cgroup_out_of_memory+0x206/0x270 [ 3184.153452][T25734] ? mem_cgroup_margin+0x130/0x130 [ 3184.158586][T25734] ? lock_downgrade+0x6e0/0x6e0 [ 3184.163477][T25734] try_charge_memcg+0xf67/0x13f0 [ 3184.168460][T25734] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3184.174466][T25734] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3184.180206][T25734] ? lock_downgrade+0x6e0/0x6e0 [ 3184.185086][T25734] ? lock_downgrade+0x6e0/0x6e0 [ 3184.189984][T25734] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3184.195556][T25734] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3184.201729][T25734] copy_process+0x15f3/0x7090 [ 3184.206416][T25734] ? __lock_acquire+0xbc3/0x56d0 [ 3184.211368][T25734] ? __cleanup_sighand+0xb0/0xb0 [ 3184.216324][T25734] kernel_clone+0xe7/0xab0 [ 3184.220828][T25734] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3184.226809][T25734] ? create_io_thread+0xe0/0xe0 [ 3184.231668][T25734] ? find_held_lock+0x2d/0x110 [ 3184.236432][T25734] ? __ct_user_exit+0xff/0x150 [ 3184.241202][T25734] __do_sys_clone+0xba/0x100 [ 3184.245797][T25734] ? kernel_clone+0xab0/0xab0 [ 3184.250483][T25734] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3184.256381][T25734] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3184.262304][T25734] do_syscall_64+0x35/0xb0 [ 3184.266720][T25734] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3184.272615][T25734] RIP: 0033:0x7f072048b9d1 [ 3184.277030][T25734] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3184.296635][T25734] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3184.305068][T25734] RAX: ffffffffffffffda RBX: 00007f071f3fe700 RCX: 00007f072048b9d1 [ 3184.313036][T25734] RDX: 00007f071f3fe9d0 RSI: 00007f071f3fe2f0 RDI: 00000000003d0f00 [ 3184.321003][T25734] RBP: 00007ffc7a569690 R08: 00007f071f3fe700 R09: 00007f071f3fe700 [ 3184.328970][T25734] R10: 00007f071f3fe9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3184.336940][T25734] R13: 00007ffc7a5694ff R14: 00007f071f3fe300 R15: 0000000000022000 [ 3184.344944][T25734] 17:55:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3184.716817][T25734] memory: usage 307092kB, limit 307200kB, failcnt 2295 [ 3184.723839][T25734] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3184.730848][T25734] Memory cgroup stats for /syz4: [ 3184.731067][T25734] anon 90112 [ 3184.731067][T25734] file 368640 [ 3184.731067][T25734] kernel 314003456 [ 3184.731067][T25734] kernel_stack 32768 [ 3184.731067][T25734] pagetables 69632 [ 3184.731067][T25734] percpu 5431008 [ 3184.731067][T25734] sock 0 [ 3184.731067][T25734] vmalloc 0 [ 3184.731067][T25734] shmem 368640 [ 3184.731067][T25734] zswap 0 [ 3184.731067][T25734] zswapped 0 [ 3184.731067][T25734] file_mapped 368640 [ 3184.731067][T25734] file_dirty 0 [ 3184.731067][T25734] file_writeback 0 [ 3184.731067][T25734] swapcached 0 [ 3184.731067][T25734] anon_thp 0 [ 3184.731067][T25734] file_thp 0 [ 3184.731067][T25734] shmem_thp 0 [ 3184.731067][T25734] inactive_anon 122880 [ 3184.731067][T25734] active_anon 335872 [ 3184.731067][T25734] inactive_file 0 [ 3184.731067][T25734] active_file 0 [ 3184.731067][T25734] unevictable 0 [ 3184.731067][T25734] slab_reclaimable 11464 [ 3184.731067][T25734] slab_unreclaimable 308419848 [ 3184.731067][T25734] slab 308431312 [ 3184.828277][T25734] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25734,uid=0 [ 3184.844963][T25734] Memory cgroup out of memory: Killed process 25734 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 17:55:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300003f000008000a000f"], 0x28}}, 0x0) [ 3185.112332][T25715] device bridge_slave_1 left promiscuous mode [ 3185.123934][T25715] bridge497: port 1(bridge_slave_1) entered disabled state [ 3185.133673][T25745] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3185.145272][T25745] CPU: 1 PID: 25745 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3185.155722][T25745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3185.165800][T25745] Call Trace: [ 3185.169097][T25745] [ 3185.172048][T25745] dump_stack_lvl+0xcd/0x134 [ 3185.176677][T25745] dump_header+0x10b/0x7f9 [ 3185.181128][T25745] oom_kill_process.cold+0x10/0x15 [ 3185.186277][T25745] out_of_memory+0x358/0x14a0 [ 3185.190989][T25745] ? find_held_lock+0x2d/0x110 [ 3185.195794][T25745] ? oom_killer_disable+0x270/0x270 [ 3185.201030][T25745] ? find_held_lock+0x2d/0x110 [ 3185.205824][T25745] mem_cgroup_out_of_memory+0x206/0x270 [ 3185.213472][T25745] ? mem_cgroup_margin+0x130/0x130 [ 3185.218611][T25745] ? lock_downgrade+0x6e0/0x6e0 [ 3185.223508][T25745] try_charge_memcg+0xf67/0x13f0 [ 3185.228481][T25745] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3185.234490][T25745] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3185.240236][T25745] ? lock_downgrade+0x6e0/0x6e0 [ 3185.245117][T25745] ? lock_downgrade+0x6e0/0x6e0 [ 3185.249993][T25745] ? rcu_read_unlock+0x9/0x60 [ 3185.254717][T25745] obj_cgroup_charge+0x2ab/0x5e0 [ 3185.259698][T25745] ? __alloc_file+0x21/0x270 [ 3185.264315][T25745] kmem_cache_alloc+0x96/0x3b0 [ 3185.269103][T25745] ? d_instantiate+0x75/0x90 [ 3185.273726][T25745] __alloc_file+0x21/0x270 [ 3185.278185][T25745] alloc_empty_file+0x6d/0x170 [ 3185.282984][T25745] alloc_file+0x59/0x800 [ 3185.287262][T25745] alloc_file_pseudo+0x165/0x250 [ 3185.292230][T25745] ? alloc_file+0x800/0x800 [ 3185.296771][T25745] ? alloc_fd+0x2f0/0x6f0 [ 3185.301133][T25745] sock_alloc_file+0x4f/0x190 [ 3185.305914][T25745] __sys_socket+0x1a4/0x240 [ 3185.310432][T25745] ? __sys_socket_file+0x1f0/0x1f0 [ 3185.315571][T25745] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3185.321505][T25745] __x64_sys_socket+0x6f/0xb0 [ 3185.326212][T25745] do_syscall_64+0x35/0xb0 [ 3185.330656][T25745] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3185.336584][T25745] RIP: 0033:0x7f072048a5a9 [ 3185.341021][T25745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3185.360655][T25745] RSP: 002b:00007f071f3fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3185.369092][T25745] RAX: ffffffffffffffda RBX: 00007f07205abf80 RCX: 00007f072048a5a9 [ 3185.377094][T25745] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3185.385103][T25745] RBP: 00007f07204e5580 R08: 0000000000000000 R09: 0000000000000000 [ 3185.393101][T25745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3185.401094][T25745] R13: 00007ffc7a5694ff R14: 00007f071f3fe300 R15: 0000000000022000 [ 3185.409107][T25745] [ 3185.475710][T25745] memory: usage 307172kB, limit 307200kB, failcnt 2322 17:55:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000006c0008000a000f"], 0x28}}, 0x0) [ 3185.774720][T25745] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3185.784684][T25722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3185.791095][T25745] Memory cgroup stats for /syz4: [ 3185.794226][T25745] anon 102400 [ 3185.794226][T25745] file 368640 [ 3185.794226][T25745] kernel 314101760 [ 3185.794226][T25745] kernel_stack 65536 [ 3185.794226][T25745] pagetables 73728 [ 3185.794226][T25745] percpu 5431008 [ 3185.794226][T25745] sock 0 [ 3185.794226][T25745] vmalloc 0 [ 3185.794226][T25745] shmem 368640 [ 3185.794226][T25745] zswap 0 [ 3185.794226][T25745] zswapped 0 [ 3185.794226][T25745] file_mapped 368640 [ 3185.794226][T25745] file_dirty 0 [ 3185.794226][T25745] file_writeback 0 [ 3185.794226][T25745] swapcached 0 [ 3185.794226][T25745] anon_thp 0 [ 3185.794226][T25745] file_thp 0 [ 3185.794226][T25745] shmem_thp 0 [ 3185.794226][T25745] inactive_anon 131072 [ 3185.794226][T25745] active_anon 335872 [ 3185.794226][T25745] inactive_file 0 [ 3185.794226][T25745] active_file 0 [ 3185.794226][T25745] unevictable 0 [ 3185.794226][T25745] slab_reclaimable 44016 [ 3185.794226][T25745] slab_unreclaimable 308422560 [ 3185.794226][T25745] slab 308466576 [ 3186.020018][T25745] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25744,uid=0 [ 3186.094243][T25745] Memory cgroup out of memory: Killed process 25744 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 17:55:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000048000008000a000f"], 0x28}}, 0x0) [ 3186.174715][T25723] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3186.195378][T25724] bridge470: port 1(bridge_slave_1) entered disabled state [ 3186.283044][T25724] bridge471: port 1(bridge_slave_1) entered blocking state [ 3186.310913][T25757] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3186.342670][T25757] CPU: 0 PID: 25757 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3186.353134][T25757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3186.360488][T25724] bridge471: port 1(bridge_slave_1) entered disabled state [ 3186.363193][T25757] Call Trace: [ 3186.363205][T25757] [ 3186.363214][T25757] dump_stack_lvl+0xcd/0x134 [ 3186.363251][T25757] dump_header+0x10b/0x7f9 [ 3186.385656][T25757] oom_kill_process.cold+0x10/0x15 [ 3186.390791][T25757] out_of_memory+0x358/0x14a0 [ 3186.395493][T25757] ? find_held_lock+0x2d/0x110 [ 3186.400280][T25757] ? oom_killer_disable+0x270/0x270 [ 3186.405506][T25757] ? find_held_lock+0x2d/0x110 [ 3186.410298][T25757] mem_cgroup_out_of_memory+0x206/0x270 [ 3186.415870][T25757] ? mem_cgroup_margin+0x130/0x130 [ 3186.421009][T25757] ? lock_downgrade+0x6e0/0x6e0 [ 3186.425939][T25757] try_charge_memcg+0xf67/0x13f0 [ 3186.430912][T25757] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3186.436927][T25757] ? lock_downgrade+0x6e0/0x6e0 [ 3186.441769][T25725] bond0: (slave bridge471): Enslaving as an active interface with an up link [ 3186.450568][T25757] charge_memcg+0x31/0x320 [ 3186.455022][T25757] __mem_cgroup_charge+0x27/0x90 [ 3186.459994][T25757] ? _compound_head+0x5d/0x150 [ 3186.464796][T25757] wp_page_copy+0x27c/0x1b60 [ 3186.469431][T25757] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3186.474907][T25757] ? lock_downgrade+0x6e0/0x6e0 [ 3186.479777][T25757] ? vm_normal_page+0x146/0x2a0 [ 3186.484646][T25757] do_wp_page+0x1d1/0x1910 [ 3186.489078][T25757] __handle_mm_fault+0x1813/0x39b0 [ 3186.494203][T25757] ? vm_iomap_memory+0x190/0x190 [ 3186.499172][T25757] handle_mm_fault+0x1c8/0x780 [ 3186.503953][T25757] do_user_addr_fault+0x475/0x1210 [ 3186.509104][T25757] exc_page_fault+0x94/0x170 [ 3186.513708][T25757] asm_exc_page_fault+0x22/0x30 [ 3186.518656][T25757] RIP: 0033:0x7f0720437970 [ 3186.523076][T25757] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3186.542687][T25757] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3186.548759][T25757] RAX: 00000000410a6c2c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3186.556734][T25757] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000000000022 [ 3186.564731][T25757] RBP: 00000000410a6c2c R08: 0000000000000c2c R09: 00000000410a6c30 [ 3186.572704][T25757] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3186.580676][T25757] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a32546 [ 3186.588650][T25757] ? trace_user_exit.constprop.0+0x6/0x210 [ 3186.594480][T25757] [ 3186.598218][T25728] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3186.748033][T25732] device bridge_slave_1 left promiscuous mode [ 3186.754951][T25732] bridge385: port 1(bridge_slave_1) entered disabled state 17:55:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3186.893544][T25757] memory: usage 307152kB, limit 307200kB, failcnt 2417 [ 3186.902742][T25757] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3186.909848][T25757] Memory cgroup stats for /syz4: [ 3186.910072][T25757] anon 102400 [ 3186.910072][T25757] file 368640 [ 3186.910072][T25757] kernel 314036224 [ 3186.910072][T25757] kernel_stack 65536 [ 3186.910072][T25757] pagetables 73728 [ 3186.910072][T25757] percpu 5431008 [ 3186.910072][T25757] sock 0 [ 3186.910072][T25757] vmalloc 0 [ 3186.910072][T25757] shmem 368640 [ 3186.910072][T25757] zswap 0 [ 3186.910072][T25757] zswapped 0 [ 3186.910072][T25757] file_mapped 368640 [ 3186.910072][T25757] file_dirty 0 [ 3186.910072][T25757] file_writeback 0 [ 3186.910072][T25757] swapcached 0 [ 3186.910072][T25757] anon_thp 0 [ 3186.910072][T25757] file_thp 0 [ 3186.910072][T25757] shmem_thp 0 [ 3186.910072][T25757] inactive_anon 135168 [ 3186.910072][T25757] active_anon 335872 [ 3186.910072][T25757] inactive_file 0 [ 3186.910072][T25757] active_file 0 [ 3186.910072][T25757] unevictable 0 [ 3186.910072][T25757] slab_reclaimable 18792 [ 3186.910072][T25757] slab_unreclaimable 308413608 [ 3186.910072][T25757] slab 308432400 [ 3187.012166][T25757] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25757,uid=0 [ 3187.028019][T25757] Memory cgroup out of memory: Killed process 25757 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 17:55:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300004c000008000a000f"], 0x28}}, 0x0) [ 3187.129551][T25732] bridge386: port 1(bridge_slave_1) entered blocking state [ 3187.137199][T25732] bridge386: port 1(bridge_slave_1) entered disabled state [ 3187.148010][T25732] device bridge_slave_1 entered promiscuous mode 17:55:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000006c0008000a000f"], 0x28}}, 0x0) [ 3187.178160][T25733] bond0: (slave bridge386): Enslaving as an active interface with an up link [ 3187.187702][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3187.273000][T25739] device bridge_slave_1 left promiscuous mode [ 3187.280751][T25739] bridge2268: port 1(bridge_slave_1) entered disabled state [ 3187.354153][T25761] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3187.415388][T25761] CPU: 1 PID: 25761 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3187.425867][T25761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3187.431068][T25739] bridge2269: port 1(bridge_slave_1) entered blocking state [ 3187.435924][T25761] Call Trace: [ 3187.435935][T25761] [ 3187.435946][T25761] dump_stack_lvl+0xcd/0x134 [ 3187.435982][T25761] dump_header+0x10b/0x7f9 [ 3187.443419][T25739] bridge2269: port 1(bridge_slave_1) entered disabled state [ 3187.446579][T25761] oom_kill_process.cold+0x10/0x15 [ 3187.446628][T25761] out_of_memory+0x358/0x14a0 [ 3187.446659][T25761] ? find_held_lock+0x2d/0x110 [ 3187.446685][T25761] ? oom_killer_disable+0x270/0x270 [ 3187.452785][T25739] device bridge_slave_1 entered promiscuous mode [ 3187.454190][T25761] ? find_held_lock+0x2d/0x110 [ 3187.454226][T25761] mem_cgroup_out_of_memory+0x206/0x270 [ 3187.502324][T25761] ? mem_cgroup_margin+0x130/0x130 [ 3187.507456][T25761] ? lock_downgrade+0x6e0/0x6e0 [ 3187.512237][T25746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3187.512336][T25761] try_charge_memcg+0xf67/0x13f0 [ 3187.526561][T25761] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3187.532577][T25761] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3187.538331][T25761] ? lock_downgrade+0x6e0/0x6e0 [ 3187.543233][T25761] obj_cgroup_charge+0x2ab/0x5e0 [ 3187.548210][T25761] ? vm_area_dup+0x88/0x3f0 [ 3187.552750][T25761] kmem_cache_alloc+0x96/0x3b0 [ 3187.557550][T25761] vm_area_dup+0x88/0x3f0 [ 3187.561911][T25761] ? mark_lock.part.0+0xee/0x1910 [ 3187.566981][T25761] ? lock_chain_count+0x20/0x20 [ 3187.571857][T25761] ? __vma_adjust+0x109c/0x24a0 [ 3187.576760][T25761] ? __vma_link_rb+0x710/0x710 [ 3187.581558][T25761] ? __lock_acquire+0x166e/0x56d0 [ 3187.586613][T25761] ? vm_area_alloc+0x110/0x110 [ 3187.591413][T25761] ? perf_event_namespaces+0x50/0x50 [ 3187.596584][T25747] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3187.596708][T25761] ? vma_merge+0x47a/0xeb0 [ 3187.596740][T25761] ? ima_file_mprotect+0x175/0x470 [ 3187.596770][T25761] ? ima_file_mmap+0x130/0x130 [ 3187.620318][T25761] ? vma_wants_writenotify+0x1f8/0x370 [ 3187.625804][T25761] ? __ia32_sys_mmap_pgoff+0x1b0/0x1b0 [ 3187.631302][T25761] ? vma_merge+0x47a/0xeb0 [ 3187.635778][T25761] ? __vma_adjust+0x24a0/0x24a0 [ 3187.640673][T25761] __split_vma+0xa5/0x550 [ 3187.645050][T25761] split_vma+0x95/0xd0 [ 3187.649154][T25761] mprotect_fixup+0x6d9/0x970 [ 3187.653879][T25761] ? change_protection+0x4280/0x4280 [ 3187.659202][T25761] ? vmacache_find+0x62/0x330 [ 3187.662479][T25749] bond0: (slave bridge830): Enslaving as an active interface with an up link [ 3187.663910][T25761] do_mprotect_pkey+0x6c5/0x9e0 [ 3187.663954][T25761] ? __ct_user_exit+0xff/0x150 [ 3187.682342][T25761] ? mprotect_fixup+0x970/0x970 [ 3187.687245][T25761] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3187.693175][T25761] __x64_sys_mprotect+0x74/0xb0 [ 3187.698062][T25761] do_syscall_64+0x35/0xb0 [ 3187.702502][T25761] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3187.708419][T25761] RIP: 0033:0x7f072048a6b7 17:55:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffff00008000a000f"], 0x28}}, 0x0) [ 3187.712853][T25761] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3187.732489][T25761] RSP: 002b:00007ffc7a569498 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 3187.740940][T25761] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f072048a6b7 [ 3187.748942][T25761] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f071f3be000 [ 3187.757027][T25761] RBP: 00007ffc7a569570 R08: 00000000ffffffff R09: 00007f071f3dd700 17:55:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3187.765028][T25761] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffc7a569690 [ 3187.773025][T25761] R13: 00007f071f3dd700 R14: 0000000000000000 R15: 0000000000022000 [ 3187.781043][T25761] [ 3188.145713][T25761] memory: usage 307200kB, limit 307200kB, failcnt 2478 [ 3188.165655][T25761] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3188.193811][T25761] Memory cgroup stats for /syz4: [ 3188.194046][T25761] anon 147456 [ 3188.194046][T25761] file 368640 [ 3188.194046][T25761] kernel 314040320 [ 3188.194046][T25761] kernel_stack 65536 [ 3188.194046][T25761] pagetables 81920 [ 3188.194046][T25761] percpu 5431008 [ 3188.194046][T25761] sock 0 [ 3188.194046][T25761] vmalloc 0 [ 3188.194046][T25761] shmem 368640 [ 3188.194046][T25761] zswap 0 [ 3188.194046][T25761] zswapped 0 [ 3188.194046][T25761] file_mapped 368640 [ 3188.194046][T25761] file_dirty 0 [ 3188.194046][T25761] file_writeback 0 [ 3188.194046][T25761] swapcached 0 [ 3188.194046][T25761] anon_thp 0 [ 3188.194046][T25761] file_thp 0 [ 3188.194046][T25761] shmem_thp 0 [ 3188.194046][T25761] inactive_anon 159744 [ 3188.194046][T25761] active_anon 335872 [ 3188.194046][T25761] inactive_file 0 [ 3188.194046][T25761] active_file 0 [ 3188.194046][T25761] unevictable 0 [ 3188.194046][T25761] slab_reclaimable 15320 [ 3188.194046][T25761] slab_unreclaimable 308410912 [ 3188.194046][T25761] slab 308426232 [ 3188.381972][T25775] device bridge_slave_1 left promiscuous mode [ 3188.390574][T25775] bridge2269: port 1(bridge_slave_1) entered disabled state [ 3188.424147][T25752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3188.496874][T25754] bridge498: port 1(bridge_slave_1) entered blocking state [ 3188.504793][T25754] bridge498: port 1(bridge_slave_1) entered disabled state [ 3188.573950][T25761] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25761,uid=0 [ 3188.583339][T25754] device bridge_slave_1 entered promiscuous mode [ 3188.611710][T25761] Memory cgroup out of memory: Killed process 25761 (syz-executor.4) total-vm:54724kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3188.615995][T25756] bridge498: port 1(bridge_slave_1) entered blocking state [ 3188.636353][T25756] bridge498: port 1(bridge_slave_1) entered forwarding state [ 3188.664834][T25756] bond0: (slave bridge498): Enslaving as an active interface with an up link [ 3188.691934][T25763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3188.755007][T25766] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 17:55:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023006558000008000a000f"], 0x28}}, 0x0) 17:55:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000006c0008000a000f"], 0x28}}, 0x0) [ 3188.824951][T25767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3188.914606][T25768] bridge471: port 1(bridge_slave_1) entered disabled state [ 3189.220424][T25784] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3189.232190][T25784] CPU: 1 PID: 25784 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3189.242652][T25784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3189.252720][T25784] Call Trace: [ 3189.256003][T25784] [ 3189.258958][T25784] dump_stack_lvl+0xcd/0x134 [ 3189.263578][T25784] dump_header+0x10b/0x7f9 [ 3189.268010][T25784] oom_kill_process.cold+0x10/0x15 [ 3189.273147][T25784] out_of_memory+0x358/0x14a0 [ 3189.277841][T25784] ? find_held_lock+0x2d/0x110 [ 3189.282619][T25784] ? oom_killer_disable+0x270/0x270 [ 3189.287831][T25784] ? find_held_lock+0x2d/0x110 [ 3189.292638][T25784] mem_cgroup_out_of_memory+0x206/0x270 [ 3189.298193][T25784] ? mem_cgroup_margin+0x130/0x130 [ 3189.303391][T25784] ? lock_downgrade+0x6e0/0x6e0 [ 3189.308285][T25784] try_charge_memcg+0xf67/0x13f0 [ 3189.313249][T25784] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3189.319249][T25784] ? lock_downgrade+0x6e0/0x6e0 [ 3189.324127][T25784] charge_memcg+0x31/0x320 [ 3189.328558][T25784] __mem_cgroup_charge+0x27/0x90 [ 3189.333511][T25784] ? _compound_head+0x5d/0x150 [ 3189.338286][T25784] wp_page_copy+0x27c/0x1b60 [ 3189.342897][T25784] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3189.348362][T25784] ? lock_downgrade+0x6e0/0x6e0 [ 3189.353228][T25784] ? vm_normal_page+0x146/0x2a0 [ 3189.358100][T25784] do_wp_page+0x1d1/0x1910 [ 3189.362537][T25784] __handle_mm_fault+0x1813/0x39b0 [ 3189.367664][T25784] ? vm_iomap_memory+0x190/0x190 [ 3189.372658][T25784] handle_mm_fault+0x1c8/0x780 [ 3189.377453][T25784] do_user_addr_fault+0x475/0x1210 [ 3189.382616][T25784] exc_page_fault+0x94/0x170 [ 3189.387220][T25784] asm_exc_page_fault+0x22/0x30 [ 3189.392086][T25784] RIP: 0033:0x7f0720437970 [ 3189.396500][T25784] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3189.416132][T25784] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3189.422215][T25784] RAX: 0000000071860a54 RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3189.430190][T25784] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0e6e [ 3189.438183][T25784] RBP: 0000000071860a54 R08: 0000000000000a54 R09: 0000000071860a58 [ 3189.446174][T25784] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3189.454166][T25784] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff81a326a6 [ 3189.462161][T25784] ? trace_user_exit.constprop.0+0x166/0x210 [ 3189.468191][T25784] [ 3189.475834][T25768] bridge472: port 1(bridge_slave_1) entered blocking state [ 3189.534579][T25768] bridge472: port 1(bridge_slave_1) entered disabled state [ 3189.584228][T25784] memory: usage 307168kB, limit 307200kB, failcnt 2526 [ 3189.602418][T25784] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3189.615389][T25784] Memory cgroup stats for /syz4: [ 3189.615624][T25784] anon 118784 [ 3189.615624][T25784] file 368640 [ 3189.615624][T25784] kernel 314028032 [ 3189.615624][T25784] kernel_stack 65536 [ 3189.615624][T25784] pagetables 73728 [ 3189.615624][T25784] percpu 5431008 [ 3189.615624][T25784] sock 0 [ 3189.615624][T25784] vmalloc 0 [ 3189.615624][T25784] shmem 368640 [ 3189.615624][T25784] zswap 0 [ 3189.615624][T25784] zswapped 0 [ 3189.615624][T25784] file_mapped 368640 [ 3189.615624][T25784] file_dirty 0 [ 3189.615624][T25784] file_writeback 0 [ 3189.615624][T25784] swapcached 0 [ 3189.615624][T25784] anon_thp 0 [ 3189.615624][T25784] file_thp 0 [ 3189.615624][T25784] shmem_thp 0 [ 3189.615624][T25784] inactive_anon 114688 [ 3189.615624][T25784] active_anon 335872 [ 3189.615624][T25784] inactive_file 0 [ 3189.615624][T25784] active_file 0 [ 3189.615624][T25784] unevictable 0 [ 3189.615624][T25784] slab_reclaimable 13392 [ 3189.615624][T25784] slab_unreclaimable 308410208 [ 3189.615624][T25784] slab 308423600 [ 3189.752270][T25784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25784,uid=0 [ 3189.815466][T25784] Memory cgroup out of memory: Killed process 25784 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3189.836537][T25770] bond0: (slave bridge472): Enslaving as an active interface with an up link [ 3189.836699][T25771] device bridge_slave_1 left promiscuous mode [ 3189.836847][T25771] bridge386: port 1(bridge_slave_1) entered disabled state 17:55:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffff50008000a000f"], 0x28}}, 0x0) 17:55:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000006c0008000a000f"], 0x28}}, 0x0) [ 3190.214118][T25771] bridge387: port 1(bridge_slave_1) entered blocking state [ 3190.221855][T25771] bridge387: port 1(bridge_slave_1) entered disabled state [ 3190.231756][T25771] device bridge_slave_1 entered promiscuous mode 17:55:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000060000008000a000f"], 0x28}}, 0x0) [ 3190.359443][T25783] bond0: (slave bridge831): Enslaving as an active interface with an up link [ 3190.369382][T26049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan374: link becomes ready [ 3190.384541][T25797] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3190.404139][T25797] CPU: 0 PID: 25797 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3190.414596][T25797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3190.424680][T25797] Call Trace: [ 3190.427981][T25797] [ 3190.430935][T25797] dump_stack_lvl+0xcd/0x134 [ 3190.435557][T25797] dump_header+0x10b/0x7f9 [ 3190.438530][T25790] device bridge_slave_1 left promiscuous mode [ 3190.439978][T25797] oom_kill_process.cold+0x10/0x15 [ 3190.440020][T25797] out_of_memory+0x358/0x14a0 [ 3190.446854][T25790] bridge498: port 1(bridge_slave_1) entered disabled state [ 3190.451160][T25797] ? find_held_lock+0x2d/0x110 [ 3190.451192][T25797] ? oom_killer_disable+0x270/0x270 [ 3190.473055][T25797] ? find_held_lock+0x2d/0x110 [ 3190.477853][T25797] mem_cgroup_out_of_memory+0x206/0x270 [ 3190.483431][T25797] ? mem_cgroup_margin+0x130/0x130 [ 3190.488566][T25797] ? lock_downgrade+0x6e0/0x6e0 [ 3190.493465][T25797] try_charge_memcg+0xf67/0x13f0 [ 3190.498441][T25797] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3190.504457][T25797] ? lock_downgrade+0x6e0/0x6e0 17:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffff50008000a000f"], 0x28}}, 0x0) 17:55:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3190.509352][T25797] charge_memcg+0x31/0x320 [ 3190.513798][T25797] __mem_cgroup_charge+0x27/0x90 [ 3190.518758][T25797] ? _compound_head+0x5d/0x150 [ 3190.523554][T25797] wp_page_copy+0x27c/0x1b60 [ 3190.528193][T25797] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3190.533679][T25797] ? lock_downgrade+0x6e0/0x6e0 [ 3190.538551][T25797] ? vm_normal_page+0x146/0x2a0 [ 3190.543433][T25797] do_wp_page+0x1d1/0x1910 [ 3190.547885][T25797] __handle_mm_fault+0x1813/0x39b0 [ 3190.553035][T25797] ? vm_iomap_memory+0x190/0x190 [ 3190.558026][T25797] handle_mm_fault+0x1c8/0x780 [ 3190.562823][T25797] do_user_addr_fault+0x475/0x1210 [ 3190.567976][T25797] exc_page_fault+0x94/0x170 [ 3190.572600][T25797] asm_exc_page_fault+0x22/0x30 [ 3190.577475][T25797] RIP: 0033:0x7f0720437970 [ 3190.581900][T25797] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3190.601504][T25797] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3190.607574][T25797] RAX: 00000000410a6c2c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3190.615570][T25797] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000000000022 [ 3190.623561][T25797] RBP: 00000000410a6c2c R08: 0000000000000c2c R09: 00000000410a6c30 [ 3190.631544][T25797] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3190.639521][T25797] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a32546 [ 3190.647587][T25797] ? trace_user_exit.constprop.0+0x6/0x210 [ 3190.653426][T25797] [ 3190.752126][T25790] bridge499: port 1(bridge_slave_1) entered blocking state [ 3190.776159][T25790] bridge499: port 1(bridge_slave_1) entered disabled state [ 3190.796001][T25797] memory: usage 307184kB, limit 307200kB, failcnt 2557 [ 3190.804276][T25797] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3190.811621][T25790] device bridge_slave_1 entered promiscuous mode [ 3190.819414][T25797] Memory cgroup stats for /syz4: [ 3190.820719][T25797] anon 102400 [ 3190.820719][T25797] file 368640 [ 3190.820719][T25797] kernel 314085376 [ 3190.820719][T25797] kernel_stack 65536 [ 3190.820719][T25797] pagetables 73728 [ 3190.820719][T25797] percpu 5431008 [ 3190.820719][T25797] sock 0 [ 3190.820719][T25797] vmalloc 0 [ 3190.820719][T25797] shmem 368640 [ 3190.820719][T25797] zswap 0 [ 3190.820719][T25797] zswapped 0 [ 3190.820719][T25797] file_mapped 368640 [ 3190.820719][T25797] file_dirty 0 [ 3190.820719][T25797] file_writeback 0 [ 3190.820719][T25797] swapcached 0 [ 3190.820719][T25797] anon_thp 0 [ 3190.820719][T25797] file_thp 0 [ 3190.820719][T25797] shmem_thp 0 [ 3190.820719][T25797] inactive_anon 135168 [ 3190.820719][T25797] active_anon 335872 [ 3190.820719][T25797] inactive_file 0 [ 3190.820719][T25797] active_file 0 [ 3190.820719][T25797] unevictable 0 [ 3190.820719][T25797] slab_reclaimable 57576 [ 3190.820719][T25797] slab_unreclaimable 308423264 [ 3190.820719][T25797] slab 308480840 [ 3191.265874][T25797] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25797,uid=0 [ 3191.297747][T25791] bridge499: port 1(bridge_slave_1) entered blocking state [ 3191.308179][T25791] bridge499: port 1(bridge_slave_1) entered forwarding state [ 3191.331533][T25797] Memory cgroup out of memory: Killed process 25797 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3191.347139][T25791] bond0: (slave bridge499): Enslaving as an active interface with an up link 17:55:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023005865000008000a000f"], 0x28}}, 0x0) 17:55:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffff00008000a000f"], 0x28}}, 0x0) [ 3191.483667][T25799] __nla_validate_parse: 4 callbacks suppressed [ 3191.483687][T25799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3191.555659][T26049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan375: link becomes ready [ 3191.585743][T25819] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3191.587899][T25804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3191.643535][T25819] CPU: 0 PID: 25819 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3191.654007][T25819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3191.664086][T25819] Call Trace: [ 3191.667389][T25819] [ 3191.670338][T25819] dump_stack_lvl+0xcd/0x134 [ 3191.674954][T25819] dump_header+0x10b/0x7f9 [ 3191.679391][T25819] oom_kill_process.cold+0x10/0x15 [ 3191.684544][T25819] out_of_memory+0x358/0x14a0 [ 3191.689243][T25819] ? find_held_lock+0x2d/0x110 [ 3191.694024][T25819] ? oom_killer_disable+0x270/0x270 [ 3191.698261][T25805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3191.699222][T25819] ? find_held_lock+0x2d/0x110 [ 3191.699257][T25819] mem_cgroup_out_of_memory+0x206/0x270 [ 3191.699286][T25819] ? mem_cgroup_margin+0x130/0x130 [ 3191.699308][T25819] ? lock_downgrade+0x6e0/0x6e0 [ 3191.728866][T25819] try_charge_memcg+0xf67/0x13f0 [ 3191.733857][T25819] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3191.739876][T25819] ? lock_downgrade+0x6e0/0x6e0 [ 3191.744777][T25819] charge_memcg+0x31/0x320 [ 3191.749226][T25819] __mem_cgroup_charge+0x27/0x90 [ 3191.754173][T25819] ? _compound_head+0x5d/0x150 [ 3191.758969][T25819] __handle_mm_fault+0x17df/0x39b0 [ 3191.764146][T25819] ? vm_iomap_memory+0x190/0x190 [ 3191.769143][T25819] handle_mm_fault+0x1c8/0x780 [ 3191.773949][T25819] do_user_addr_fault+0x475/0x1210 [ 3191.779106][T25819] exc_page_fault+0x94/0x170 [ 3191.783734][T25819] asm_exc_page_fault+0x22/0x30 [ 3191.788608][T25819] RIP: 0033:0x7f07204850d5 [ 3191.793051][T25819] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 3191.812690][T25819] RSP: 002b:00007ffc7a569578 EFLAGS: 00010202 [ 3191.818793][T25819] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 3191.826792][T25819] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 3191.834785][T25819] RBP: 00007ffc7a569638 R08: 00007f07209b0000 R09: 00007f07205b00c8 [ 3191.842783][T25819] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 000000000030b2fd [ 3191.850777][T25819] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3191.858799][T25819] [ 3191.954295][T25819] memory: usage 307188kB, limit 307200kB, failcnt 2596 [ 3191.955563][T25808] bridge472: port 1(bridge_slave_1) entered disabled state [ 3191.972183][T25819] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3192.400372][T25808] bridge473: port 1(bridge_slave_1) entered blocking state [ 3192.407917][T25808] bridge473: port 1(bridge_slave_1) entered disabled state [ 3192.410567][T25819] Memory cgroup stats for /syz4: [ 3192.415464][T25819] anon 135168 [ 3192.415464][T25819] file 368640 [ 3192.415464][T25819] kernel 314040320 [ 3192.415464][T25819] kernel_stack 65536 [ 3192.415464][T25819] pagetables 81920 [ 3192.415464][T25819] percpu 5431008 [ 3192.415464][T25819] sock 0 [ 3192.415464][T25819] vmalloc 0 [ 3192.415464][T25819] shmem 368640 [ 3192.415464][T25819] zswap 0 [ 3192.415464][T25819] zswapped 0 [ 3192.415464][T25819] file_mapped 368640 [ 3192.415464][T25819] file_dirty 0 [ 3192.415464][T25819] file_writeback 0 [ 3192.415464][T25819] swapcached 0 [ 3192.415464][T25819] anon_thp 0 [ 3192.415464][T25819] file_thp 0 [ 3192.415464][T25819] shmem_thp 0 [ 3192.415464][T25819] inactive_anon 110592 [ 3192.415464][T25819] active_anon 335872 [ 3192.415464][T25819] inactive_file 0 [ 3192.415464][T25819] active_file 0 [ 3192.415464][T25819] unevictable 0 [ 3192.415464][T25819] slab_reclaimable 15320 [ 3192.415464][T25819] slab_unreclaimable 308410912 [ 3192.415464][T25819] slab 308426232 [ 3192.512082][T25809] bond0: (slave bridge473): Enslaving as an active interface with an up link 17:55:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffff00008000a000f"], 0x28}}, 0x0) [ 3192.624858][T25811] device bridge_slave_1 left promiscuous mode [ 3192.632530][T25811] bridge387: port 1(bridge_slave_1) entered disabled state [ 3192.684817][T25819] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25819,uid=0 [ 3192.692296][T25811] bridge388: port 1(bridge_slave_1) entered blocking state [ 3192.733473][T25811] bridge388: port 1(bridge_slave_1) entered disabled state [ 3192.742458][T25811] device bridge_slave_1 entered promiscuous mode [ 3192.777414][T25819] Memory cgroup out of memory: Killed process 25819 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3192.805909][T25810] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3192.816259][T25812] bridge2270: port 1(bridge_slave_1) entered blocking state [ 3192.823767][T25812] bridge2270: port 1(bridge_slave_1) entered disabled state 17:55:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000068000008000a000f"], 0x28}}, 0x0) [ 3192.887173][T25812] device bridge_slave_1 entered promiscuous mode [ 3192.921270][T25816] bond0: (slave bridge832): Enslaving as an active interface with an up link 17:55:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3192.986052][T25813] bridge2270: port 1(bridge_slave_1) entered blocking state [ 3192.993542][T25813] bridge2270: port 1(bridge_slave_1) entered forwarding state [ 3193.142372][T25813] bond0: (slave bridge2270): Enslaving as an active interface with an up link [ 3193.156913][T25832] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3193.180597][T25836] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3193.196961][T25832] CPU: 0 PID: 25832 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3193.207433][T25832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3193.217515][T25832] Call Trace: [ 3193.220810][T25832] [ 3193.223765][T25832] dump_stack_lvl+0xcd/0x134 [ 3193.228407][T25832] dump_header+0x10b/0x7f9 [ 3193.232860][T25832] oom_kill_process.cold+0x10/0x15 [ 3193.238009][T25832] out_of_memory+0x358/0x14a0 [ 3193.242708][T25832] ? find_held_lock+0x2d/0x110 [ 3193.247492][T25832] ? oom_killer_disable+0x270/0x270 [ 3193.252709][T25832] ? find_held_lock+0x2d/0x110 [ 3193.257490][T25832] mem_cgroup_out_of_memory+0x206/0x270 [ 3193.263053][T25832] ? mem_cgroup_margin+0x130/0x130 [ 3193.268179][T25832] ? lock_downgrade+0x6e0/0x6e0 [ 3193.273058][T25832] try_charge_memcg+0xf67/0x13f0 [ 3193.278012][T25832] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3193.284007][T25832] ? lock_downgrade+0x6e0/0x6e0 [ 3193.288877][T25832] charge_memcg+0x31/0x320 [ 3193.293393][T25832] __mem_cgroup_charge+0x27/0x90 [ 3193.298336][T25832] ? _compound_head+0x5d/0x150 [ 3193.303111][T25832] wp_page_copy+0x27c/0x1b60 [ 3193.307715][T25832] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3193.313177][T25832] ? lock_downgrade+0x6e0/0x6e0 [ 3193.318034][T25832] ? vm_normal_page+0x146/0x2a0 [ 3193.322900][T25832] do_wp_page+0x1d1/0x1910 [ 3193.327326][T25832] __handle_mm_fault+0x1813/0x39b0 [ 3193.332453][T25832] ? vm_iomap_memory+0x190/0x190 [ 3193.337419][T25832] handle_mm_fault+0x1c8/0x780 [ 3193.342192][T25832] do_user_addr_fault+0x475/0x1210 [ 3193.347322][T25832] exc_page_fault+0x94/0x170 [ 3193.351928][T25832] asm_exc_page_fault+0x22/0x30 [ 3193.356784][T25832] RIP: 0033:0x7f0720437970 [ 3193.361206][T25832] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3193.380816][T25832] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3193.386892][T25832] RAX: 000000001f5c537c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 17:55:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffffe0008000a000f"], 0x28}}, 0x0) [ 3193.394882][T25832] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0cb9 [ 3193.402868][T25832] RBP: 000000001f5c537c R08: 000000000000137c R09: 000000001f5c5380 [ 3193.410847][T25832] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3193.418827][T25832] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff81a3254d [ 3193.426809][T25832] ? trace_user_exit.constprop.0+0xd/0x210 [ 3193.432656][T25832] [ 3193.488343][T25815] bond0: (slave bridge388): Enslaving as an active interface with an up link [ 3193.499661][T25821] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3193.552806][T26049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2160: link becomes ready 17:55:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffffe40008000a000f"], 0x28}}, 0x0) [ 3193.733788][T25832] memory: usage 307184kB, limit 307200kB, failcnt 2650 [ 3193.782618][T25824] device bridge_slave_1 left promiscuous mode [ 3193.817284][T25824] bridge499: port 1(bridge_slave_1) entered disabled state [ 3193.825791][T25832] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3193.867371][T25832] Memory cgroup stats for /syz4: [ 3193.872023][T25832] anon 106496 [ 3193.872023][T25832] file 368640 [ 3193.872023][T25832] kernel 314028032 [ 3193.872023][T25832] kernel_stack 65536 [ 3193.872023][T25832] pagetables 73728 [ 3193.872023][T25832] percpu 5431008 [ 3193.872023][T25832] sock 0 [ 3193.872023][T25832] vmalloc 0 [ 3193.872023][T25832] shmem 368640 [ 3193.872023][T25832] zswap 0 [ 3193.872023][T25832] zswapped 0 [ 3193.872023][T25832] file_mapped 368640 [ 3193.872023][T25832] file_dirty 0 17:55:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffff00008000a000f"], 0x28}}, 0x0) [ 3193.872023][T25832] file_writeback 0 [ 3193.872023][T25832] swapcached 0 [ 3193.872023][T25832] anon_thp 0 [ 3193.872023][T25832] file_thp 0 [ 3193.872023][T25832] shmem_thp 0 [ 3193.872023][T25832] inactive_anon 139264 [ 3193.872023][T25832] active_anon 335872 [ 3193.872023][T25832] inactive_file 0 [ 3193.872023][T25832] active_file 0 [ 3193.872023][T25832] unevictable 0 [ 3193.872023][T25832] slab_reclaimable 13392 [ 3193.872023][T25832] slab_unreclaimable 308409560 [ 3193.872023][T25832] slab 308422952 [ 3193.983784][T25828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3194.125302][T25830] bridge473: port 1(bridge_slave_1) entered disabled state [ 3194.154223][T25832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25832,uid=0 [ 3194.225277][T25832] Memory cgroup out of memory: Killed process 25832 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3194.313891][T25830] bridge474: port 1(bridge_slave_1) entered blocking state [ 3194.344872][T25830] bridge474: port 1(bridge_slave_1) entered disabled state 17:55:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300006c000008000a000f"], 0x28}}, 0x0) [ 3194.484715][T25831] bond0: (slave bridge474): Enslaving as an active interface with an up link [ 3194.502037][T25854] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3194.502074][T25854] CPU: 1 PID: 25854 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3194.502100][T25854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3194.502114][T25854] Call Trace: [ 3194.502122][T25854] [ 3194.502132][T25854] dump_stack_lvl+0xcd/0x134 [ 3194.502167][T25854] dump_header+0x10b/0x7f9 [ 3194.502200][T25854] oom_kill_process.cold+0x10/0x15 [ 3194.502234][T25854] out_of_memory+0x358/0x14a0 [ 3194.502267][T25854] ? find_held_lock+0x2d/0x110 [ 3194.502293][T25854] ? oom_killer_disable+0x270/0x270 [ 3194.502322][T25854] ? find_held_lock+0x2d/0x110 [ 3194.502349][T25854] mem_cgroup_out_of_memory+0x206/0x270 [ 3194.502375][T25854] ? mem_cgroup_margin+0x130/0x130 [ 3194.502396][T25854] ? lock_downgrade+0x6e0/0x6e0 [ 3194.502439][T25854] try_charge_memcg+0xf67/0x13f0 [ 3194.502470][T25854] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3194.502504][T25854] ? lock_downgrade+0x6e0/0x6e0 [ 3194.502546][T25854] charge_memcg+0x31/0x320 [ 3194.502576][T25854] __mem_cgroup_charge+0x27/0x90 [ 3194.502600][T25854] ? _compound_head+0x5d/0x150 [ 3194.502630][T25854] __handle_mm_fault+0x17df/0x39b0 [ 3194.502663][T25854] ? vm_iomap_memory+0x190/0x190 [ 3194.502715][T25854] handle_mm_fault+0x1c8/0x780 [ 3194.502752][T25854] do_user_addr_fault+0x475/0x1210 [ 3194.502794][T25854] exc_page_fault+0x94/0x170 [ 3194.502826][T25854] asm_exc_page_fault+0x22/0x30 [ 3194.502850][T25854] RIP: 0033:0x7f07204850d5 [ 3194.502870][T25854] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 3194.502893][T25854] RSP: 002b:00007ffc7a569578 EFLAGS: 00010202 [ 3194.502915][T25854] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 3194.502932][T25854] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 3194.502948][T25854] RBP: 00007ffc7a569638 R08: 00007f07209b0000 R09: 00007f07205b00c8 [ 3194.502968][T25854] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 000000000030be2d [ 3194.502984][T25854] R13: 00007ffc7a569660 R14: 00007f07205abf80 R15: 0000000000000032 [ 3194.503021][T25854] [ 3194.503163][T25854] memory: usage 307200kB, limit 307200kB, failcnt 2707 [ 3194.503182][T25854] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3194.503198][T25854] Memory cgroup stats for /syz4: [ 3194.503345][T25854] anon 135168 [ 3194.503345][T25854] file 368640 [ 3194.503345][T25854] kernel 314068992 [ 3194.503345][T25854] kernel_stack 65536 [ 3194.503345][T25854] pagetables 81920 [ 3194.503345][T25854] percpu 5431008 [ 3194.503345][T25854] sock 0 [ 3194.503345][T25854] vmalloc 0 [ 3194.503345][T25854] shmem 368640 [ 3194.503345][T25854] zswap 0 [ 3194.503345][T25854] zswapped 0 [ 3194.503345][T25854] file_mapped 368640 [ 3194.503345][T25854] file_dirty 0 [ 3194.503345][T25854] file_writeback 0 [ 3194.503345][T25854] swapcached 0 [ 3194.503345][T25854] anon_thp 0 [ 3194.503345][T25854] file_thp 0 [ 3194.503345][T25854] shmem_thp 0 [ 3194.503345][T25854] inactive_anon 139264 [ 3194.503345][T25854] active_anon 335872 [ 3194.503345][T25854] inactive_file 0 [ 3194.503345][T25854] active_file 0 [ 3194.503345][T25854] unevictable 0 [ 3194.503345][T25854] slab_reclaimable 27160 [ 3194.503345][T25854] slab_unreclaimable 308422656 [ 3194.503345][T25854] slab 308449816 [ 3194.503410][T25854] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25854,uid=0 [ 3194.503542][T25854] Memory cgroup out of memory: Killed process 25854 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 17:55:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000c72000008000a000f"], 0x28}}, 0x0) [ 3195.267885][T25856] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3195.278417][T25856] CPU: 0 PID: 25856 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3195.288864][T25856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3195.298941][T25856] Call Trace: [ 3195.302248][T25856] [ 3195.305205][T25856] dump_stack_lvl+0xcd/0x134 [ 3195.309831][T25856] dump_header+0x10b/0x7f9 [ 3195.314284][T25856] oom_kill_process.cold+0x10/0x15 [ 3195.319434][T25856] out_of_memory+0x358/0x14a0 [ 3195.324236][T25856] ? find_held_lock+0x2d/0x110 [ 3195.329024][T25856] ? oom_killer_disable+0x270/0x270 [ 3195.334254][T25856] ? find_held_lock+0x2d/0x110 [ 3195.339043][T25856] mem_cgroup_out_of_memory+0x206/0x270 [ 3195.344610][T25856] ? mem_cgroup_margin+0x130/0x130 [ 3195.349740][T25856] ? lock_downgrade+0x6e0/0x6e0 [ 3195.354632][T25856] try_charge_memcg+0xf67/0x13f0 [ 3195.359693][T25856] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3195.365695][T25856] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3195.371440][T25856] ? lock_downgrade+0x6e0/0x6e0 [ 3195.376315][T25856] ? lock_downgrade+0x6e0/0x6e0 [ 3195.381209][T25856] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3195.386788][T25856] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3195.392977][T25856] copy_process+0x15f3/0x7090 [ 3195.397696][T25856] ? __lock_acquire+0xbc3/0x56d0 [ 3195.402678][T25856] ? __cleanup_sighand+0xb0/0xb0 [ 3195.407669][T25856] kernel_clone+0xe7/0xab0 [ 3195.412113][T25856] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3195.418118][T25856] ? create_io_thread+0xe0/0xe0 [ 3195.423003][T25856] ? find_held_lock+0x2d/0x110 [ 3195.427801][T25856] __do_sys_clone+0xba/0x100 [ 3195.432420][T25856] ? kernel_clone+0xab0/0xab0 [ 3195.437149][T25856] do_syscall_64+0x35/0xb0 [ 3195.441597][T25856] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3195.447523][T25856] RIP: 0033:0x7f072048b9d1 [ 3195.451960][T25856] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3195.471682][T25856] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3195.480126][T25856] RAX: ffffffffffffffda RBX: 00007f071f3fe700 RCX: 00007f072048b9d1 [ 3195.488126][T25856] RDX: 00007f071f3fe9d0 RSI: 00007f071f3fe2f0 RDI: 00000000003d0f00 [ 3195.496138][T25856] RBP: 00007ffc7a569690 R08: 00007f071f3fe700 R09: 00007f071f3fe700 [ 3195.504135][T25856] R10: 00007f071f3fe9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe 17:55:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffffc30008000a000f"], 0x28}}, 0x0) [ 3195.512125][T25856] R13: 00007ffc7a5694ff R14: 00007f071f3fe300 R15: 0000000000022000 [ 3195.520135][T25856] [ 3195.578156][T25858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3195.626620][T25856] memory: usage 307188kB, limit 307200kB, failcnt 2755 [ 3195.636028][T25856] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3195.650325][T25856] Memory cgroup stats for /syz4: [ 3195.650548][T25856] anon 90112 [ 3195.650548][T25856] file 368640 [ 3195.650548][T25856] kernel 314073088 [ 3195.650548][T25856] kernel_stack 32768 [ 3195.650548][T25856] pagetables 69632 [ 3195.650548][T25856] percpu 5431008 [ 3195.650548][T25856] sock 0 [ 3195.650548][T25856] vmalloc 0 [ 3195.650548][T25856] shmem 368640 [ 3195.650548][T25856] zswap 0 [ 3195.650548][T25856] zswapped 0 [ 3195.650548][T25856] file_mapped 368640 [ 3195.650548][T25856] file_dirty 0 [ 3195.650548][T25856] file_writeback 0 [ 3195.650548][T25856] swapcached 0 [ 3195.650548][T25856] anon_thp 0 [ 3195.650548][T25856] file_thp 0 [ 3195.650548][T25856] shmem_thp 0 [ 3195.650548][T25856] inactive_anon 94208 [ 3195.650548][T25856] active_anon 335872 [ 3195.650548][T25856] inactive_file 0 [ 3195.650548][T25856] active_file 0 [ 3195.650548][T25856] unevictable 0 [ 3195.650548][T25856] slab_reclaimable 54104 [ 3195.650548][T25856] slab_unreclaimable 308424712 [ 3195.650548][T25856] slab 308478816 17:55:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3195.778226][T25839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3195.835695][T25856] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25856,uid=0 [ 3195.851331][T25856] Memory cgroup out of memory: Killed process 25856 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 17:55:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000074000008000a000f"], 0x28}}, 0x0) [ 3195.972571][T25843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3195.996749][T25844] device bridge_slave_1 left promiscuous mode [ 3196.003040][T25844] bridge2270: port 1(bridge_slave_1) entered disabled state [ 3196.022050][T25864] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3196.026399][T25844] bridge2271: port 1(bridge_slave_1) entered blocking state [ 3196.040017][T25844] bridge2271: port 1(bridge_slave_1) entered disabled state [ 3196.042853][T25864] CPU: 0 PID: 25864 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3196.049488][T25844] device bridge_slave_1 entered promiscuous mode [ 3196.057691][T25864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3196.057710][T25864] Call Trace: [ 3196.057718][T25864] [ 3196.057729][T25864] dump_stack_lvl+0xcd/0x134 [ 3196.057764][T25864] dump_header+0x10b/0x7f9 [ 3196.077041][T25846] device bridge_slave_1 left promiscuous mode [ 3196.079407][T25864] oom_kill_process.cold+0x10/0x15 [ 3196.079448][T25864] out_of_memory+0x358/0x14a0 [ 3196.082604][T25846] bridge388: port 1(bridge_slave_1) entered disabled state [ 3196.086952][T25864] ? find_held_lock+0x2d/0x110 [ 3196.086983][T25864] ? oom_killer_disable+0x270/0x270 [ 3196.087014][T25864] ? find_held_lock+0x2d/0x110 [ 3196.087040][T25864] mem_cgroup_out_of_memory+0x206/0x270 [ 3196.134844][T25864] ? mem_cgroup_margin+0x130/0x130 [ 3196.139979][T25864] ? lock_downgrade+0x6e0/0x6e0 [ 3196.144878][T25864] try_charge_memcg+0xf67/0x13f0 [ 3196.149858][T25864] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3196.155869][T25864] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 3196.161624][T25864] ? lock_downgrade+0x6e0/0x6e0 [ 3196.166506][T25864] ? lock_downgrade+0x6e0/0x6e0 [ 3196.171397][T25864] __memcg_kmem_charge_page+0x16a/0x3b0 [ 3196.176981][T25864] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3196.183174][T25864] copy_process+0x73e/0x7090 [ 3196.187795][T25864] ? __lock_acquire+0xbc3/0x56d0 [ 3196.192763][T25864] ? __cleanup_sighand+0xb0/0xb0 [ 3196.197732][T25864] kernel_clone+0xe7/0xab0 [ 3196.202162][T25864] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3196.208158][T25864] ? create_io_thread+0xe0/0xe0 [ 3196.213134][T25864] ? find_held_lock+0x2d/0x110 [ 3196.217909][T25864] ? __ct_user_exit+0xff/0x150 [ 3196.222690][T25864] __do_sys_clone+0xba/0x100 [ 3196.227290][T25864] ? kernel_clone+0xab0/0xab0 [ 3196.231987][T25864] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3196.237888][T25864] ? syscall_enter_from_user_mode+0x22/0xb0 [ 3196.243805][T25864] do_syscall_64+0x35/0xb0 [ 3196.248227][T25864] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3196.254127][T25864] RIP: 0033:0x7f072048b9d1 [ 3196.258548][T25864] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3196.278163][T25864] RSP: 002b:00007ffc7a569448 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3196.286587][T25864] RAX: ffffffffffffffda RBX: 00007f071f3fe700 RCX: 00007f072048b9d1 [ 3196.294561][T25864] RDX: 00007f071f3fe9d0 RSI: 00007f071f3fe2f0 RDI: 00000000003d0f00 [ 3196.302544][T25864] RBP: 00007ffc7a569690 R08: 00007f071f3fe700 R09: 00007f071f3fe700 [ 3196.310521][T25864] R10: 00007f071f3fe9d0 R11: 0000000000000206 R12: 00007ffc7a5694fe [ 3196.318494][T25864] R13: 00007ffc7a5694ff R14: 00007f071f3fe300 R15: 0000000000022000 [ 3196.326481][T25864] 17:55:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002388a8ffff0008000a000f"], 0x28}}, 0x0) [ 3196.604449][T25846] bridge389: port 1(bridge_slave_1) entered blocking state [ 3196.611974][T25846] bridge389: port 1(bridge_slave_1) entered disabled state [ 3196.657812][T25846] device bridge_slave_1 entered promiscuous mode [ 3196.685676][T25849] bond0: (slave bridge389): Enslaving as an active interface with an up link [ 3196.757873][T25864] memory: usage 307100kB, limit 307200kB, failcnt 2797 [ 3196.765019][T25864] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3196.773543][T25850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3196.783562][T25864] Memory cgroup stats for /syz4: [ 3196.784799][T25864] anon 90112 [ 3196.784799][T25864] file 368640 [ 3196.784799][T25864] kernel 314011648 [ 3196.784799][T25864] kernel_stack 32768 [ 3196.784799][T25864] pagetables 69632 [ 3196.784799][T25864] percpu 5431008 [ 3196.784799][T25864] sock 0 [ 3196.784799][T25864] vmalloc 0 [ 3196.784799][T25864] shmem 368640 [ 3196.784799][T25864] zswap 0 [ 3196.784799][T25864] zswapped 0 [ 3196.784799][T25864] file_mapped 368640 [ 3196.784799][T25864] file_dirty 0 [ 3196.784799][T25864] file_writeback 0 [ 3196.784799][T25864] swapcached 0 [ 3196.784799][T25864] anon_thp 0 [ 3196.784799][T25864] file_thp 0 [ 3196.784799][T25864] shmem_thp 0 [ 3196.784799][T25864] inactive_anon 122880 [ 3196.784799][T25864] active_anon 335872 17:55:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000740008000a000f"], 0x28}}, 0x0) [ 3196.784799][T25864] inactive_file 0 [ 3196.784799][T25864] active_file 0 [ 3196.784799][T25864] unevictable 0 [ 3196.784799][T25864] slab_reclaimable 12232 [ 3196.784799][T25864] slab_unreclaimable 308409704 [ 3196.784799][T25864] slab 308421936 [ 3197.065661][T25852] bond0: (slave bridge501): Enslaving as an active interface with an up link [ 3197.094782][T25865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:55:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023fffffff00008000a000f"], 0x28}}, 0x0) [ 3197.104635][T25864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25864,uid=0 [ 3197.104940][T25864] Memory cgroup out of memory: Killed process 25864 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 17:55:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300007a000008000a000f"], 0x28}}, 0x0) [ 3197.307164][T25885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3197.310084][T25883] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3197.340164][T25867] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3197.397450][T25883] CPU: 1 PID: 25883 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3197.407929][T25883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3197.418025][T25883] Call Trace: [ 3197.421325][T25883] [ 3197.424278][T25883] dump_stack_lvl+0xcd/0x134 [ 3197.428907][T25883] dump_header+0x10b/0x7f9 [ 3197.433370][T25883] oom_kill_process.cold+0x10/0x15 [ 3197.436151][T25859] bridge474: port 1(bridge_slave_1) entered disabled state [ 3197.438506][T25883] out_of_memory+0x358/0x14a0 [ 3197.438547][T25883] ? find_held_lock+0x2d/0x110 [ 3197.438572][T25883] ? oom_killer_disable+0x270/0x270 [ 3197.460378][T25883] ? find_held_lock+0x2d/0x110 [ 3197.465161][T25883] mem_cgroup_out_of_memory+0x206/0x270 [ 3197.470719][T25883] ? mem_cgroup_margin+0x130/0x130 [ 3197.475834][T25883] ? lock_downgrade+0x6e0/0x6e0 [ 3197.480706][T25883] try_charge_memcg+0xf67/0x13f0 [ 3197.485664][T25883] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3197.491658][T25883] ? lock_downgrade+0x6e0/0x6e0 [ 3197.496525][T25883] charge_memcg+0x31/0x320 [ 3197.500954][T25883] __mem_cgroup_charge+0x27/0x90 [ 3197.505901][T25883] ? _compound_head+0x5d/0x150 [ 3197.510676][T25883] wp_page_copy+0x27c/0x1b60 [ 3197.515278][T25883] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3197.520737][T25883] ? lock_downgrade+0x6e0/0x6e0 [ 3197.525613][T25883] ? vm_normal_page+0x146/0x2a0 [ 3197.530500][T25883] do_wp_page+0x1d1/0x1910 [ 3197.534977][T25883] __handle_mm_fault+0x1813/0x39b0 [ 3197.540113][T25883] ? vm_iomap_memory+0x190/0x190 [ 3197.545085][T25883] handle_mm_fault+0x1c8/0x780 [ 3197.549859][T25883] do_user_addr_fault+0x475/0x1210 [ 3197.554993][T25883] exc_page_fault+0x94/0x170 [ 3197.559597][T25883] asm_exc_page_fault+0x22/0x30 [ 3197.564455][T25883] RIP: 0033:0x7f0720437970 [ 3197.568875][T25883] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3197.588484][T25883] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3197.594554][T25883] RAX: 000000001f5c537c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3197.602525][T25883] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0cb9 [ 3197.610507][T25883] RBP: 000000001f5c537c R08: 000000000000137c R09: 000000001f5c5380 [ 3197.618491][T25883] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3197.626472][T25883] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff81a3254d [ 3197.634455][T25883] ? trace_user_exit.constprop.0+0xd/0x210 [ 3197.640301][T25883] [ 3197.960640][T25883] memory: usage 307164kB, limit 307200kB, failcnt 2850 [ 3197.986492][T25883] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3197.993503][T25883] Memory cgroup stats for /syz4: [ 3197.993741][T25883] anon 106496 [ 3197.993741][T25883] file 368640 [ 3197.993741][T25883] kernel 314044416 [ 3197.993741][T25883] kernel_stack 65536 [ 3197.993741][T25883] pagetables 73728 [ 3197.993741][T25883] percpu 5431008 [ 3197.993741][T25883] sock 0 [ 3197.993741][T25883] vmalloc 0 [ 3197.993741][T25883] shmem 368640 [ 3197.993741][T25883] zswap 0 [ 3197.993741][T25883] zswapped 0 [ 3197.993741][T25883] file_mapped 368640 [ 3197.993741][T25883] file_dirty 0 [ 3197.993741][T25883] file_writeback 0 [ 3197.993741][T25883] swapcached 0 [ 3197.993741][T25883] anon_thp 0 [ 3197.993741][T25883] file_thp 0 [ 3197.993741][T25883] shmem_thp 0 [ 3197.993741][T25883] inactive_anon 126976 [ 3197.993741][T25883] active_anon 335872 [ 3197.993741][T25883] inactive_file 0 [ 3197.993741][T25883] active_file 0 [ 3197.993741][T25883] unevictable 0 [ 3197.993741][T25883] slab_reclaimable 13392 [ 3197.993741][T25883] slab_unreclaimable 308420960 [ 3197.993741][T25883] slab 308434352 [ 3198.045047][T25859] bridge475: port 1(bridge_slave_1) entered blocking state [ 3198.045154][T25859] bridge475: port 1(bridge_slave_1) entered disabled state [ 3198.122514][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3198.241632][T25870] bond0: (slave bridge833): Enslaving as an active interface with an up link [ 3198.355992][T25883] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25883,uid=0 17:55:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) 17:55:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000081000008000a000f"], 0x28}}, 0x0) [ 3198.392616][T25883] Memory cgroup out of memory: Killed process 25883 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 17:55:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffffc30008000a000f"], 0x28}}, 0x0) [ 3198.440652][T25860] bond0: (slave bridge475): Enslaving as an active interface with an up link [ 3198.462989][T25890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3198.610590][T25891] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3198.612437][T25876] device bridge_slave_1 left promiscuous mode [ 3198.621139][T25891] CPU: 0 PID: 25891 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3198.621171][T25891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3198.621185][T25891] Call Trace: [ 3198.621194][T25891] [ 3198.621205][T25891] dump_stack_lvl+0xcd/0x134 [ 3198.621240][T25891] dump_header+0x10b/0x7f9 [ 3198.621273][T25891] oom_kill_process.cold+0x10/0x15 17:55:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023001c99000008000a000f"], 0x28}}, 0x0) [ 3198.621306][T25891] out_of_memory+0x358/0x14a0 [ 3198.621348][T25891] ? find_held_lock+0x2d/0x110 [ 3198.621373][T25891] ? oom_killer_disable+0x270/0x270 [ 3198.621403][T25891] ? find_held_lock+0x2d/0x110 [ 3198.621432][T25891] mem_cgroup_out_of_memory+0x206/0x270 [ 3198.621457][T25891] ? mem_cgroup_margin+0x130/0x130 [ 3198.621479][T25891] ? lock_downgrade+0x6e0/0x6e0 [ 3198.621522][T25891] try_charge_memcg+0xf67/0x13f0 [ 3198.621556][T25891] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3198.621591][T25891] ? lock_downgrade+0x6e0/0x6e0 [ 3198.621634][T25891] charge_memcg+0x31/0x320 [ 3198.621663][T25891] __mem_cgroup_charge+0x27/0x90 [ 3198.621689][T25891] ? _compound_head+0x5d/0x150 [ 3198.621718][T25891] wp_page_copy+0x27c/0x1b60 [ 3198.621751][T25891] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3198.621774][T25891] ? lock_downgrade+0x6e0/0x6e0 [ 3198.621797][T25891] ? vm_normal_page+0x146/0x2a0 [ 3198.621836][T25891] do_wp_page+0x1d1/0x1910 [ 3198.621866][T25891] __handle_mm_fault+0x1813/0x39b0 [ 3198.621899][T25891] ? vm_iomap_memory+0x190/0x190 [ 3198.621953][T25891] handle_mm_fault+0x1c8/0x780 [ 3198.621983][T25891] do_user_addr_fault+0x475/0x1210 [ 3198.622028][T25891] exc_page_fault+0x94/0x170 [ 3198.622060][T25891] asm_exc_page_fault+0x22/0x30 [ 3198.622084][T25891] RIP: 0033:0x7f0720437970 [ 3198.622105][T25891] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3198.622128][T25891] RSP: 002b:00007ffc7a569490 EFLAGS: 00010246 [ 3198.622150][T25891] RAX: 000000001f5c537c RBX: 00007f07205ac018 RCX: 0000001b2eb20000 [ 3198.622167][T25891] RDX: 0000000000000000 RSI: 0000001b2eb20018 RDI: 0000000008ec0cb9 [ 3198.622182][T25891] RBP: 000000001f5c537c R08: 000000000000137c R09: 000000001f5c5380 [ 3198.622198][T25891] R10: 00007ffc7a569660 R11: 0000000000000246 R12: 00007f07205a0000 [ 3198.622214][T25891] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff81a3254d [ 3198.622229][T25891] ? trace_user_exit.constprop.0+0xd/0x210 [ 3198.622277][T25891] [ 3198.622595][T25891] memory: usage 307200kB, limit 307200kB, failcnt 2906 [ 3198.622614][T25891] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3198.622629][T25891] Memory cgroup stats for /syz4: [ 3198.622820][T25891] anon 106496 [ 3198.622820][T25891] file 368640 [ 3198.622820][T25891] kernel 314097664 [ 3198.622820][T25891] kernel_stack 65536 [ 3198.622820][T25891] pagetables 73728 [ 3198.622820][T25891] percpu 5431008 [ 3198.622820][T25891] sock 0 [ 3198.622820][T25891] vmalloc 0 [ 3198.622820][T25891] shmem 368640 [ 3198.622820][T25891] zswap 0 [ 3198.622820][T25891] zswapped 0 [ 3198.622820][T25891] file_mapped 368640 [ 3198.622820][T25891] file_dirty 0 [ 3198.622820][T25891] file_writeback 0 [ 3198.622820][T25891] swapcached 0 [ 3198.622820][T25891] anon_thp 0 [ 3198.622820][T25891] file_thp 0 [ 3198.622820][T25891] shmem_thp 0 [ 3198.622820][T25891] inactive_anon 94208 [ 3198.622820][T25891] active_anon 335872 [ 3198.622820][T25891] inactive_file 0 [ 3198.622820][T25891] active_file 0 [ 3198.622820][T25891] unevictable 0 [ 3198.622820][T25891] slab_reclaimable 54616 [ 3198.622820][T25891] slab_unreclaimable 308434360 [ 3198.622820][T25891] slab 308488976 [ 3198.622884][T25891] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25891,uid=0 [ 3198.623018][T25891] Memory cgroup out of memory: Killed process 25891 (syz-executor.4) total-vm:54592kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3198.773424][T25898] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3198.958930][T25876] bridge2271: port 1(bridge_slave_1) entered disabled state [ 3199.286696][T25898] CPU: 1 PID: 25898 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-00140-gae3ed15da588 #0 [ 3199.297176][T25898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 3199.307259][T25898] Call Trace: [ 3199.310559][T25898] [ 3199.313520][T25898] dump_stack_lvl+0xcd/0x134 [ 3199.318240][T25898] dump_header+0x10b/0x7f9 [ 3199.322693][T25898] oom_kill_process.cold+0x10/0x15 [ 3199.327842][T25898] out_of_memory+0x358/0x14a0 [ 3199.332557][T25898] ? find_held_lock+0x2d/0x110 [ 3199.337344][T25898] ? oom_killer_disable+0x270/0x270 [ 3199.342574][T25898] ? find_held_lock+0x2d/0x110 [ 3199.347417][T25898] mem_cgroup_out_of_memory+0x206/0x270 [ 3199.352997][T25898] ? mem_cgroup_margin+0x130/0x130 [ 3199.358134][T25898] ? lock_downgrade+0x6e0/0x6e0 [ 3199.363028][T25898] try_charge_memcg+0xf67/0x13f0 [ 3199.367988][T25898] ? mem_cgroup_handle_over_high+0x510/0x510 [ 3199.373989][T25898] ? lock_downgrade+0x6e0/0x6e0 [ 3199.378875][T25898] charge_memcg+0x31/0x320 [ 3199.383309][T25898] __mem_cgroup_charge+0x27/0x90 [ 3199.388367][T25898] ? _compound_head+0x5d/0x150 [ 3199.393176][T25898] wp_page_copy+0x27c/0x1b60 [ 3199.397883][T25898] ? restore_exclusive_pte+0x8b0/0x8b0 [ 3199.403359][T25898] ? lock_downgrade+0x6e0/0x6e0 [ 3199.408213][T25898] ? vm_normal_page+0x146/0x2a0 [ 3199.413084][T25898] do_wp_page+0x52c/0x1910 [ 3199.417512][T25898] __handle_mm_fault+0x1813/0x39b0 [ 3199.422637][T25898] ? vm_iomap_memory+0x190/0x190 [ 3199.427603][T25898] handle_mm_fault+0x1c8/0x780 [ 3199.432375][T25898] do_user_addr_fault+0x475/0x1210 [ 3199.437506][T25898] exc_page_fault+0x94/0x170 [ 3199.442110][T25898] asm_exc_page_fault+0x22/0x30 [ 3199.446979][T25898] RIP: 0033:0x7f07204487ba [ 3199.451399][T25898] Code: 89 fb 83 e3 02 0f 85 85 03 00 00 f3 41 0f 6f 0e 49 8b 46 10 be 25 00 00 00 4c 89 ef 48 89 85 c8 fb ff ff 0f 11 8d b8 fb ff ff 41 a9 fd ff 41 81 e7 00 80 00 00 48 89 85 30 fb ff ff 48 89 85 [ 3199.471011][T25898] RSP: 002b:00007ffc7a568f90 EFLAGS: 00010246 [ 3199.477079][T25898] RAX: 00007ffc7a5696a0 RBX: 0000000000000000 RCX: 0000000000000000 [ 3199.485052][T25898] RDX: 00007ffc7a569680 RSI: 0000000000000025 RDI: 00007f07204e54a2 [ 3199.493024][T25898] RBP: 00007ffc7a5694e0 R08: 0000000000000000 R09: 00007ffc7a5695f0 [ 3199.501001][T25898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7a569500 [ 3199.508971][T25898] R13: 00007f07204e54a2 R14: 00007ffc7a569680 R15: 00000000fbad8001 [ 3199.516963][T25898] [ 3199.646156][T25877] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3199.662473][T25898] memory: usage 307088kB, limit 307200kB, failcnt 2938 [ 3199.686519][T25898] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3199.693654][T25898] Memory cgroup stats for /syz4: [ 3199.693832][T25898] anon 73728 [ 3199.693832][T25898] file 368640 [ 3199.693832][T25898] kernel 313974784 [ 3199.693832][T25898] kernel_stack 32768 [ 3199.693832][T25898] pagetables 57344 [ 3199.693832][T25898] percpu 5431008 [ 3199.693832][T25898] sock 0 [ 3199.693832][T25898] vmalloc 0 [ 3199.693832][T25898] shmem 368640 [ 3199.693832][T25898] zswap 0 [ 3199.693832][T25898] zswapped 0 [ 3199.693832][T25898] file_mapped 368640 [ 3199.693832][T25898] file_dirty 0 [ 3199.693832][T25898] file_writeback 0 [ 3199.693832][T25898] swapcached 0 [ 3199.693832][T25898] anon_thp 0 [ 3199.693832][T25898] file_thp 0 [ 3199.693832][T25898] shmem_thp 0 [ 3199.693832][T25898] inactive_anon 77824 [ 3199.693832][T25898] active_anon 335872 [ 3199.693832][T25898] inactive_file 0 [ 3199.693832][T25898] active_file 0 [ 3199.693832][T25898] unevictable 0 [ 3199.693832][T25898] slab_reclaimable 7944 [ 3199.693832][T25898] slab_unreclaimable 308411344 [ 3199.693832][T25898] slab 308419288 [ 3199.864718][T25898] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=3641,uid=0 [ 3199.902820][T25898] Memory cgroup out of memory: Killed process 3641 (syz-executor.4) total-vm:50620kB, anon-rss:464kB, file-rss:9064kB, shmem-rss:4kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3199.944713][T25875] bond0: (slave bridge2272): Enslaving as an active interface with an up link [ 3200.045915][T25879] device bridge_slave_1 left promiscuous mode [ 3200.056984][T25879] bridge389: port 1(bridge_slave_1) entered disabled state 17:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300e0ffff0008000a000f"], 0x28}}, 0x0) [ 3200.370129][T25879] bridge390: port 1(bridge_slave_1) entered blocking state [ 3200.379390][T25879] bridge390: port 1(bridge_slave_1) entered disabled state [ 3200.446030][T25879] device bridge_slave_1 entered promiscuous mode [ 3200.524027][T25886] bond0: (slave bridge390): Enslaving as an active interface with an up link 17:55:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000006c0008000a000f"], 0x28}}, 0x0) [ 3200.604146][T25887] bridge502: port 1(bridge_slave_1) entered blocking state [ 3200.612574][T25887] bridge502: port 1(bridge_slave_1) entered disabled state [ 3200.652453][T25887] device bridge_slave_1 entered promiscuous mode [ 3200.700686][T25888] bridge502: port 1(bridge_slave_1) entered blocking state [ 3200.708037][T25888] bridge502: port 1(bridge_slave_1) entered forwarding state [ 3200.748590][T25888] bond0: (slave bridge502): Enslaving as an active interface with an up link 17:55:38 executing program 0: r0 = socket(0x2a, 0x2, 0x0) getsockname$tipc(r0, 0x0, 0x0) [ 3200.893609][T23402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan378: link becomes ready 17:55:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000480008000a000f"], 0x28}}, 0x0) [ 3201.343631][T25890] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3201.366252][T25896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3201.488766][T25900] bond0: (slave bridge834): Enslaving as an active interface with an up link [ 3201.498063][T25899] bridge475: port 1(bridge_slave_1) entered disabled state 17:55:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3201.592802][T25899] bridge476: port 1(bridge_slave_1) entered blocking state [ 3201.601720][T25899] bridge476: port 1(bridge_slave_1) entered disabled state 17:55:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023ffffffc30008000a000f"], 0x28}}, 0x0) [ 3201.705855][T25901] bond0: (slave bridge476): Enslaving as an active interface with an up link [ 3201.734894][T25925] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3201.845039][T25904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3202.552803][T25907] bridge2273: port 1(bridge_slave_1) entered blocking state [ 3202.573247][T25907] bridge2273: port 1(bridge_slave_1) entered disabled state [ 3202.595747][T25907] device bridge_slave_1 entered promiscuous mode 17:55:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023001c9a000008000a000f"], 0x28}}, 0x0) [ 3202.792485][T25909] bridge2273: port 1(bridge_slave_1) entered blocking state [ 3202.800016][T25909] bridge2273: port 1(bridge_slave_1) entered forwarding state [ 3202.974309][T25909] bond0: (slave bridge2273): Enslaving as an active interface with an up link 17:55:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300f0ffff0008000a000f"], 0x28}}, 0x0) [ 3203.124235][T25936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:55:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230089e0000008000a000f"], 0x28}}, 0x0) [ 3203.563945][T25912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3203.636775][T25914] device bridge_slave_1 left promiscuous mode [ 3203.643166][T25914] bridge390: port 1(bridge_slave_1) entered disabled state [ 3203.752369][T25914] bridge391: port 1(bridge_slave_1) entered blocking state [ 3203.803903][T25914] bridge391: port 1(bridge_slave_1) entered disabled state [ 3203.825747][T25914] device bridge_slave_1 entered promiscuous mode 17:55:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b87460008000a000f"], 0x28}}, 0x0) [ 3203.871088][T25920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3204.251571][T25924] device bridge_slave_1 left promiscuous mode [ 3204.263675][T25924] bridge502: port 1(bridge_slave_1) entered disabled state [ 3204.435882][T25924] bridge503: port 1(bridge_slave_1) entered blocking state [ 3204.456418][T25924] bridge503: port 1(bridge_slave_1) entered disabled state [ 3204.479866][T25924] device bridge_slave_1 entered promiscuous mode [ 3204.529012][T25926] bridge503: port 1(bridge_slave_1) entered blocking state [ 3204.536396][T25926] bridge503: port 1(bridge_slave_1) entered forwarding state [ 3204.567474][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.573853][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.633723][T25926] bond0: (slave bridge503): Enslaving as an active interface with an up link [ 3204.660206][T25928] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3204.844169][T26040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2163: link becomes ready 17:55:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000480008000a000f"], 0x28}}, 0x0) [ 3204.952048][T26040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan379: link becomes ready [ 3205.275002][T25930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3205.315306][T25931] bond0: (slave bridge835): Enslaving as an active interface with an up link [ 3205.420633][T25949] device bridge_slave_1 left promiscuous mode [ 3205.427125][T25949] bridge503: port 1(bridge_slave_1) entered disabled state 17:55:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3205.581640][T25933] bridge476: port 1(bridge_slave_1) entered disabled state [ 3205.634923][T25933] bridge477: port 1(bridge_slave_1) entered blocking state [ 3205.667095][T25933] bridge477: port 1(bridge_slave_1) entered disabled state 17:55:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3205.777847][T25934] bond0: (slave bridge477): Enslaving as an active interface with an up link [ 3205.822952][T25957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3206.069170][T25937] device bridge_slave_1 left promiscuous mode [ 3206.088950][T25937] bridge2273: port 1(bridge_slave_1) entered disabled state [ 3206.145729][T25937] bridge2274: port 1(bridge_slave_1) entered blocking state [ 3206.165498][T25937] bridge2274: port 1(bridge_slave_1) entered disabled state [ 3206.188054][T25937] device bridge_slave_1 entered promiscuous mode [ 3206.571493][T25938] bridge2274: port 1(bridge_slave_1) entered blocking state [ 3206.578944][T25938] bridge2274: port 1(bridge_slave_1) entered forwarding state [ 3206.729974][T25938] bond0: (slave bridge2274): Enslaving as an active interface with an up link 17:55:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000237fffffff0008000a000f"], 0x28}}, 0x0) [ 3206.794068][T25941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3206.861272][T25943] device bridge_slave_1 left promiscuous mode [ 3207.008682][T25943] bridge391: port 1(bridge_slave_1) entered disabled state [ 3207.042373][T25943] bridge392: port 1(bridge_slave_1) entered blocking state [ 3207.066086][T25943] bridge392: port 1(bridge_slave_1) entered disabled state [ 3207.086070][T25943] device bridge_slave_1 entered promiscuous mode 17:55:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000b87460008000a000f"], 0x28}}, 0x0) [ 3207.150689][T25944] bond0: (slave bridge392): Enslaving as an active interface with an up link [ 3207.166651][T25947] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3207.655621][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2164: link becomes ready [ 3207.813673][T25950] bond0: (slave bridge504): Enslaving as an active interface with an up link [ 3207.915754][T25953] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:55:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000480008000a000f"], 0x28}}, 0x0) [ 3207.973522][T25954] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3208.048730][T25955] bond0: (slave bridge836): Enslaving as an active interface with an up link 17:55:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100"], 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3208.303327][T27857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3208.376060][T25959] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3208.394156][T25957] bridge477: port 1(bridge_slave_1) entered disabled state [ 3208.960311][T25960] bond0: (slave bridge478): Enslaving as an active interface with an up link [ 3208.994986][T25963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:55:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x0, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000008000a000f"], 0x28}}, 0x0) [ 3209.106254][T25965] device bridge_slave_1 left promiscuous mode [ 3209.112861][T25965] bridge2274: port 1(bridge_slave_1) entered disabled state [ 3209.192939][T25965] bridge2275: port 1(bridge_slave_1) entered blocking state [ 3209.212691][T25965] bridge2275: port 1(bridge_slave_1) entered disabled state [ 3209.234433][T25965] device bridge_slave_1 entered promiscuous mode [ 3209.373068][T25966] bridge2275: port 1(bridge_slave_1) entered blocking state [ 3209.380605][T25966] bridge2275: port 1(bridge_slave_1) entered forwarding state 17:55:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r9], 0x50}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000239effffff0008000a000f"], 0x28}}, 0x0) [ 3209.661931][T25966] bond0: (slave bridge2275): Enslaving as an active interface with an up link [ 3209.681952][T25969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3210.155506][T25971] device bridge_slave_1 left promiscuous mode [ 3210.172260][T25971] bridge392: port 1(bridge_slave_1) entered disabled state [ 3210.222216][T25996] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3210.274095][T25996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3210.312759][T25971] bridge393: port 1(bridge_slave_1) entered blocking state [ 3210.343363][T25996] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3210.415777][T25971] bridge393: port 1(bridge_slave_1) entered disabled state [ 3210.484650][T25996] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3210.488737][T25971] device bridge_slave_1 entered promiscuous mode [ 3210.570310][T25972] bond0: (slave bridge393): Enslaving as an active interface with an up link 17:55:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x400000}]}}, &(0x7f0000000340)=""/167, 0x26, 0xa7, 0x1}, 0x20) [ 3210.755000][T25996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3210.762849][T25996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3210.834177][T25975] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3210.926088][T25977] bridge505: port 1(bridge_slave_1) entered blocking state [ 3210.933400][T25977] bridge505: port 1(bridge_slave_1) entered disabled state [ 3210.958124][T25977] device bridge_slave_1 entered promiscuous mode [ 3211.315823][T26040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2165: link becomes ready [ 3211.821589][T25980] bridge505: port 1(bridge_slave_1) entered blocking state [ 3211.828987][T25980] bridge505: port 1(bridge_slave_1) entered forwarding state [ 3211.982480][T25980] bond0: (slave bridge505): Enslaving as an active interface with an up link [ 3212.325416][T25981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3212.400334][T25982] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3212.464619][T25983] bond0: (slave bridge837): Enslaving as an active interface with an up link [ 3212.493229][T25987] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3212.835471][T27857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3212.962078][T25989] bridge479: port 1(bridge_slave_1) entered blocking state [ 3212.962859][T26050] Bluetooth: hci3: command 0x0409 tx timeout [ 3212.978119][T25989] bridge479: port 1(bridge_slave_1) entered disabled state [ 3213.005701][T25990] bond0: (slave bridge479): Enslaving as an active interface with an up link [ 3213.094429][T25993] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3213.343904][T25998] device bridge_slave_1 left promiscuous mode [ 3213.383464][T25998] bridge2275: port 1(bridge_slave_1) entered disabled state [ 3213.502651][T25998] bridge2276: port 1(bridge_slave_1) entered blocking state [ 3213.552223][T25998] bridge2276: port 1(bridge_slave_1) entered disabled state [ 3213.604115][T25998] device bridge_slave_1 entered promiscuous mode [ 3214.034657][T25999] bridge2276: port 1(bridge_slave_1) entered blocking state [ 3214.042104][T25999] bridge2276: port 1(bridge_slave_1) entered forwarding state [ 3214.153415][T25999] bond0: (slave bridge2276): Enslaving as an active interface with an up link [ 3214.287984][T32379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2166: link becomes ready [ 3214.353784][T25984] vxcan1 speed is unknown, defaulting to 1000 [ 3215.052695][T23402] Bluetooth: hci3: command 0x041b tx timeout [ 3216.005207][T25984] chnl_net:caif_netlink_parms(): no params data found [ 3216.594109][T25984] bridge0: port 1(bridge_slave_0) entered blocking state [ 3216.652024][T25984] bridge0: port 1(bridge_slave_0) entered disabled state [ 3216.683307][T25984] device bridge_slave_0 entered promiscuous mode [ 3217.005888][T25984] bridge0: port 2(bridge_slave_1) entered blocking state [ 3217.023873][T25984] bridge0: port 2(bridge_slave_1) entered disabled state [ 3217.053803][T25984] device bridge_slave_1 entered promiscuous mode [ 3217.132110][ T4043] Bluetooth: hci3: command 0x040f tx timeout [ 3217.492755][T25984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3217.632194][T25984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3218.204539][T25984] team0: Port device team_slave_0 added [ 3218.312900][T25984] team0: Port device team_slave_1 added [ 3218.665470][T25984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3218.742134][T25984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3218.803714][T25984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3219.123446][T25984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3219.145974][T25984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3219.202468][T25984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3219.212058][T23402] Bluetooth: hci3: command 0x0419 tx timeout [ 3219.362644][T25984] device hsr_slave_0 entered promiscuous mode [ 3219.398435][T25984] device hsr_slave_1 entered promiscuous mode [ 3219.426053][T25984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3219.433669][T25984] Cannot create hsr debugfs directory [ 3225.013632][T27857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3229.642503][T27857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3237.643015][T25984] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3237.888665][T25984] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3238.100044][T25984] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3238.273524][T25984] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3240.006336][T25984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3240.062467][T27857] device bridge_slave_1 left promiscuous mode [ 3240.076537][T27857] bridge2368: port 1(bridge_slave_1) entered disabled state [ 3261.485468][T27857] device hsr_slave_0 left promiscuous mode [ 3261.495584][T27857] device hsr_slave_1 left promiscuous mode [ 3261.516102][T27857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3261.525098][T27857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3261.563861][T27857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3261.586929][T27857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3261.605094][T27857] device bridge_slave_0 left promiscuous mode [ 3261.701440][T27857] bridge0: port 1(bridge_slave_0) entered disabled state [ 3265.997367][T27857] device veth1_macvtap left promiscuous mode [ 3266.004097][T27857] device veth0_macvtap left promiscuous mode [ 3266.010603][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.016958][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.028030][T27857] device veth1_vlan left promiscuous mode [ 3266.033849][T27857] device veth0_vlan left promiscuous mode [ 3274.803760][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3274.861612][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3274.890087][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3274.912897][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3274.925339][ T49] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3274.939495][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3276.981178][T26050] Bluetooth: hci6: command 0x0409 tx timeout [ 3279.054853][T26050] Bluetooth: hci6: command 0x041b tx timeout [ 3281.134540][T26050] Bluetooth: hci6: command 0x040f tx timeout [ 3283.216011][ T4849] Bluetooth: hci6: command 0x0419 tx timeout [ 3296.165809][T27857] bond0 (unregistering): (slave bridge2368): Releasing backup interface [ 3296.372294][T27857] bond0 (unregistering): (slave bridge2366): Releasing backup interface [ 3296.482998][T27857] bond0 (unregistering): (slave bridge2365): Releasing backup interface [ 3296.671388][T27857] bond0 (unregistering): (slave bridge2364): Releasing backup interface [ 3296.775537][T27857] bond0 (unregistering): (slave bridge2363): Releasing backup interface [ 3296.879740][T27857] bond0 (unregistering): (slave bridge2362): Releasing backup interface [ 3297.014110][T27857] bond0 (unregistering): (slave bridge2361): Releasing backup interface [ 3297.187492][T27857] bond0 (unregistering): (slave bridge2360): Releasing backup interface [ 3297.283084][T27857] bond0 (unregistering): (slave bridge2359): Releasing backup interface [ 3297.419992][T27857] bond0 (unregistering): (slave bridge2358): Releasing backup interface [ 3297.522727][T27857] bond0 (unregistering): (slave bridge2357): Releasing backup interface [ 3297.608629][T27857] bond0 (unregistering): (slave bridge2356): Releasing backup interface [ 3297.803383][T27857] bond0 (unregistering): (slave bridge2355): Releasing backup interface [ 3297.904960][T27857] bond0 (unregistering): (slave bridge2354): Releasing backup interface [ 3297.993736][T27857] bond0 (unregistering): (slave bridge2353): Releasing backup interface [ 3298.171130][T27857] bond0 (unregistering): (slave bridge2352): Releasing backup interface [ 3298.281921][T27857] bond0 (unregistering): (slave bridge2351): Releasing backup interface [ 3298.391036][T27857] bond0 (unregistering): (slave bridge2350): Releasing backup interface [ 3298.522608][T27857] bond0 (unregistering): (slave bridge2349): Releasing backup interface [ 3298.608423][T27857] bond0 (unregistering): (slave bridge2348): Releasing backup interface [ 3298.781024][T27857] bond0 (unregistering): (slave bridge2347): Releasing backup interface [ 3298.882482][T27857] bond0 (unregistering): (slave bridge2346): Releasing backup interface [ 3299.004584][T27857] bond0 (unregistering): (slave bridge2345): Releasing backup interface [ 3299.113445][T27857] bond0 (unregistering): (slave bridge2344): Releasing backup interface [ 3299.285377][T27857] bond0 (unregistering): (slave bridge2343): Releasing backup interface [ 3299.404642][T27857] bond0 (unregistering): (slave bridge2342): Releasing backup interface [ 3299.521196][T27857] bond0 (unregistering): (slave bridge2341): Releasing backup interface [ 3299.653543][T27857] bond0 (unregistering): (slave bridge2340): Releasing backup interface [ 3299.923273][T27857] bond0 (unregistering): (slave bridge2337): Releasing backup interface [ 3300.033413][T27857] bond0 (unregistering): (slave bridge2336): Releasing backup interface [ 3300.270242][T27857] bond0 (unregistering): (slave bridge2334): Releasing backup interface [ 3300.372890][T27857] bond0 (unregistering): (slave bridge2333): Releasing backup interface [ 3300.495252][T27857] bond0 (unregistering): (slave bridge2332): Releasing backup interface [ 3300.668426][T27857] bond0 (unregistering): (slave bridge2330): Releasing backup interface [ 3300.825807][T27857] bond0 (unregistering): (slave bridge2329): Releasing backup interface [ 3300.940977][T27857] bond0 (unregistering): (slave bridge2328): Releasing backup interface [ 3301.023621][T27857] bond0 (unregistering): (slave bridge2327): Releasing backup interface [ 3301.118517][T27857] bond0 (unregistering): (slave bridge2326): Releasing backup interface [ 3301.273971][T27857] bond0 (unregistering): (slave bridge2325): Releasing backup interface [ 3301.378011][T27857] bond0 (unregistering): (slave bridge2324): Releasing backup interface [ 3301.514338][T27857] bond0 (unregistering): (slave bridge2323): Releasing backup interface [ 3301.611120][T27857] bond0 (unregistering): (slave bridge2322): Releasing backup interface [ 3301.732329][T27857] bond0 (unregistering): (slave bridge2321): Releasing backup interface [ 3301.895029][T27857] bond0 (unregistering): (slave bridge2320): Releasing backup interface [ 3302.001922][T27857] bond0 (unregistering): (slave bridge2319): Releasing backup interface [ 3302.104711][T27857] bond0 (unregistering): (slave bridge2318): Releasing backup interface [ 3302.231632][T27857] bond0 (unregistering): (slave bridge2317): Releasing backup interface [ 3302.374585][T27857] bond0 (unregistering): (slave bridge2316): Releasing backup interface [ 3302.535172][T27857] bond0 (unregistering): (slave bridge2314): Releasing backup interface [ 3302.681923][T27857] bond0 (unregistering): (slave bridge2313): Releasing backup interface [ 3302.781175][T27857] bond0 (unregistering): (slave bridge2312): Releasing backup interface [ 3302.934505][T27857] bond0 (unregistering): (slave bridge2311): Releasing backup interface [ 3303.042196][T27857] bond0 (unregistering): (slave bridge2310): Releasing backup interface [ 3303.136835][T27857] bond0 (unregistering): (slave bridge2309): Releasing backup interface [ 3303.254413][T27857] bond0 (unregistering): (slave bridge2308): Releasing backup interface [ 3303.386645][T27857] bond0 (unregistering): (slave bridge2307): Releasing backup interface [ 3303.493429][T27857] bond0 (unregistering): (slave bridge2306): Releasing backup interface [ 3303.633300][T27857] bond0 (unregistering): (slave bridge2305): Releasing backup interface [ 3303.734534][T27857] bond0 (unregistering): (slave bridge2304): Releasing backup interface [ 3303.842506][T27857] bond0 (unregistering): (slave bridge2303): Releasing backup interface [ 3303.986207][T27857] bond0 (unregistering): (slave bridge2302): Releasing backup interface [ 3304.135080][T27857] bond0 (unregistering): (slave bridge2300): Releasing backup interface [ 3304.231779][T27857] bond0 (unregistering): (slave bridge2299): Releasing backup interface [ 3304.349255][T27857] bond0 (unregistering): (slave bridge2298): Releasing backup interface [ 3304.459345][T27857] bond0 (unregistering): (slave bridge2297): Releasing backup interface [ 3304.548388][T27857] bond0 (unregistering): (slave bridge2296): Releasing backup interface [ 3304.673154][T27857] bond0 (unregistering): (slave bridge2295): Releasing backup interface [ 3304.783806][T27857] bond0 (unregistering): (slave bridge2294): Releasing backup interface [ 3304.894651][T27857] bond0 (unregistering): (slave bridge2293): Releasing backup interface [ 3305.024868][T27857] bond0 (unregistering): (slave bridge2292): Releasing backup interface [ 3305.136206][T27857] bond0 (unregistering): (slave bridge2291): Releasing backup interface [ 3305.289091][T27857] bond0 (unregistering): (slave bridge2289): Releasing backup interface [ 3305.400673][T27857] bond0 (unregistering): (slave bridge2288): Releasing backup interface [ 3305.506626][T27857] bond0 (unregistering): (slave bridge2287): Releasing backup interface [ 3305.594843][T27857] bond0 (unregistering): (slave bridge2286): Releasing backup interface [ 3305.741832][T27857] bond0 (unregistering): (slave bridge2285): Releasing backup interface [ 3305.842027][T27857] bond0 (unregistering): (slave bridge2284): Releasing backup interface [ 3305.935711][T27857] bond0 (unregistering): (slave bridge2283): Releasing backup interface [ 3306.081445][T27857] bond0 (unregistering): (slave bridge2282): Releasing backup interface [ 3306.175218][T27857] bond0 (unregistering): (slave bridge2281): Releasing backup interface [ 3306.275245][T27857] bond0 (unregistering): (slave bridge2280): Releasing backup interface [ 3306.385717][T27857] bond0 (unregistering): (slave bridge2279): Releasing backup interface [ 3306.515229][T27857] bond0 (unregistering): (slave bridge2278): Releasing backup interface [ 3306.653220][T27857] bond0 (unregistering): (slave bridge2276): Releasing backup interface [ 3306.752963][T27857] bond0 (unregistering): (slave bridge2275): Releasing backup interface [ 3306.853476][T27857] bond0 (unregistering): (slave bridge2274): Releasing backup interface [ 3306.963075][T27857] bond0 (unregistering): (slave bridge2273): Releasing backup interface [ 3307.144717][T27857] bond0 (unregistering): (slave bridge2272): Releasing backup interface [ 3307.243967][T27857] bond0 (unregistering): (slave bridge2271): Releasing backup interface [ 3307.343649][T27857] bond0 (unregistering): (slave bridge2270): Releasing backup interface [ 3307.484892][T27857] bond0 (unregistering): (slave bridge2269): Releasing backup interface [ 3307.604234][T27857] bond0 (unregistering): (slave bridge2268): Releasing backup interface [ 3307.747867][T27857] bond0 (unregistering): (slave bridge2267): Releasing backup interface [ 3307.848041][T27857] bond0 (unregistering): (slave bridge2266): Releasing backup interface [ 3307.935182][T27857] bond0 (unregistering): (slave bridge2265): Releasing backup interface [ 3308.091464][T27857] bond0 (unregistering): (slave bridge2264): Releasing backup interface [ 3308.193509][T27857] bond0 (unregistering): (slave bridge2263): Releasing backup interface [ 3308.303034][T27857] bond0 (unregistering): (slave bridge2262): Releasing backup interface [ 3308.395627][T27857] bond0 (unregistering): (slave bridge2261): Releasing backup interface [ 3308.553938][T27857] bond0 (unregistering): (slave bridge2260): Releasing backup interface [ 3308.682950][T27857] bond0 (unregistering): (slave bridge2259): Releasing backup interface [ 3308.825722][T27857] bond0 (unregistering): (slave bridge2258): Releasing backup interface [ 3308.955810][T27857] bond0 (unregistering): (slave bridge2257): Releasing backup interface [ 3309.053170][T27857] bond0 (unregistering): (slave bridge2256): Releasing backup interface [ 3309.195257][T27857] bond0 (unregistering): (slave bridge2255): Releasing backup interface [ 3309.303298][T27857] bond0 (unregistering): (slave bridge2254): Releasing backup interface [ 3309.422448][T27857] bond0 (unregistering): (slave bridge2253): Releasing backup interface [ 3309.528964][T27857] bond0 (unregistering): (slave bridge2252): Releasing backup interface [ 3309.645672][T27857] bond0 (unregistering): (slave bridge2251): Releasing backup interface [ 3309.733083][T27857] bond0 (unregistering): (slave bridge2250): Releasing backup interface [ 3309.870870][T27857] bond0 (unregistering): (slave bridge2249): Releasing backup interface [ 3309.964773][T27857] bond0 (unregistering): (slave bridge2248): Releasing backup interface [ 3310.073967][T27857] bond0 (unregistering): (slave bridge2247): Releasing backup interface [ 3310.214333][T27857] bond0 (unregistering): (slave bridge2246): Releasing backup interface [ 3310.309432][T27857] bond0 (unregistering): (slave bridge2245): Releasing backup interface [ 3310.429182][T27857] bond0 (unregistering): (slave bridge2244): Releasing backup interface [ 3310.554306][T27857] bond0 (unregistering): (slave bridge2243): Releasing backup interface [ 3310.674922][T27857] bond0 (unregistering): (slave bridge2242): Releasing backup interface [ 3310.773502][T27857] bond0 (unregistering): (slave bridge2241): Releasing backup interface [ 3310.893361][T27857] bond0 (unregistering): (slave bridge2240): Releasing backup interface [ 3311.072436][T27857] bond0 (unregistering): (slave bridge2238): Releasing backup interface [ 3311.204441][T27857] bond0 (unregistering): (slave bridge2237): Releasing backup interface [ 3311.323462][T27857] bond0 (unregistering): (slave bridge2236): Releasing backup interface [ 3311.421916][T27857] bond0 (unregistering): (slave bridge2235): Releasing backup interface [ 3311.519899][T27857] bond0 (unregistering): (slave bridge2234): Releasing backup interface [ 3311.684286][T27857] bond0 (unregistering): (slave bridge2233): Releasing backup interface [ 3311.794772][T27857] bond0 (unregistering): (slave bridge2232): Releasing backup interface [ 3311.893360][T27857] bond0 (unregistering): (slave bridge2231): Releasing backup interface [ 3311.995336][T27857] bond0 (unregistering): (slave bridge2230): Releasing backup interface [ 3312.107010][T27857] bond0 (unregistering): (slave bridge2229): Releasing backup interface [ 3312.244554][T27857] bond0 (unregistering): (slave bridge2228): Releasing backup interface [ 3312.385529][T27857] bond0 (unregistering): (slave bridge2227): Releasing backup interface [ 3312.472372][T27857] bond0 (unregistering): (slave bridge2226): Releasing backup interface [ 3312.594278][T27857] bond0 (unregistering): (slave bridge2225): Releasing backup interface [ 3312.744624][T27857] bond0 (unregistering): (slave bridge2224): Releasing backup interface [ 3312.944768][T27857] bond0 (unregistering): (slave bridge2222): Releasing backup interface [ 3313.033789][T27857] bond0 (unregistering): (slave bridge2221): Releasing backup interface [ 3313.152245][T27857] bond0 (unregistering): (slave bridge2220): Releasing backup interface [ 3313.300889][T27857] bond0 (unregistering): (slave bridge2219): Releasing backup interface [ 3313.402469][T27857] bond0 (unregistering): (slave bridge2218): Releasing backup interface [ 3313.493349][T27857] bond0 (unregistering): (slave bridge2217): Releasing backup interface [ 3313.590855][T27857] bond0 (unregistering): (slave bridge2216): Releasing backup interface [ 3313.833831][T27857] bond0 (unregistering): (slave bridge2213): Releasing backup interface [ 3313.948219][T27857] bond0 (unregistering): (slave bridge2212): Releasing backup interface [ 3314.060152][T27857] bond0 (unregistering): (slave bridge2211): Releasing backup interface [ 3314.194274][T27857] bond0 (unregistering): (slave bridge2210): Releasing backup interface [ 3314.298256][T27857] bond0 (unregistering): (slave bridge2209): Releasing backup interface [ 3314.440632][T27857] bond0 (unregistering): (slave bridge2208): Releasing backup interface [ 3314.545998][T27857] bond0 (unregistering): (slave bridge2207): Releasing backup interface [ 3314.642974][T27857] bond0 (unregistering): (slave bridge2206): Releasing backup interface [ 3314.794843][T27857] bond0 (unregistering): (slave bridge2205): Releasing backup interface [ 3314.905343][T27857] bond0 (unregistering): (slave bridge2204): Releasing backup interface [ 3315.017047][T27857] bond0 (unregistering): (slave bridge2203): Releasing backup interface [ 3315.103881][T27857] bond0 (unregistering): (slave bridge2202): Releasing backup interface [ 3315.204962][T27857] bond0 (unregistering): (slave bridge2201): Releasing backup interface [ 3315.371182][T27857] bond0 (unregistering): (slave bridge2200): Releasing backup interface [ 3315.469120][T27857] bond0 (unregistering): (slave bridge2199): Releasing backup interface [ 3315.584220][T27857] bond0 (unregistering): (slave bridge2198): Releasing backup interface [ 3315.816229][T27857] bond0 (unregistering): (slave bridge2196): Releasing backup interface [ 3315.923128][T27857] bond0 (unregistering): (slave bridge2195): Releasing backup interface [ 3316.052357][T27857] bond0 (unregistering): (slave bridge2194): Releasing backup interface [ 3316.223968][T27857] bond0 (unregistering): (slave bridge2192): Releasing backup interface [ 3316.421166][T27857] bond0 (unregistering): (slave bridge2190): Releasing backup interface [ 3316.611248][T27857] bond0 (unregistering): (slave bridge2188): Releasing backup interface [ 3316.803254][T27857] bond0 (unregistering): (slave bridge2186): Releasing backup interface [ 3316.922163][T27857] bond0 (unregistering): (slave bridge2185): Releasing backup interface [ 3317.022288][T27857] bond0 (unregistering): (slave bridge2184): Releasing backup interface [ 3317.141215][T27857] bond0 (unregistering): (slave bridge2183): Releasing backup interface [ 3317.270882][T27857] bond0 (unregistering): (slave bridge2182): Releasing backup interface [ 3317.490526][T27857] bond0 (unregistering): (slave bridge2179): Releasing backup interface [ 3317.572804][T27857] bond0 (unregistering): (slave bridge2178): Releasing backup interface [ 3317.661952][T27857] bond0 (unregistering): (slave bridge2177): Releasing backup interface [ 3317.762226][T27857] bond0 (unregistering): (slave bridge2176): Releasing backup interface [ 3317.927005][T27857] bond0 (unregistering): (slave bridge2175): Releasing backup interface [ 3318.014157][T27857] bond0 (unregistering): (slave bridge2174): Releasing backup interface [ 3318.128800][T27857] bond0 (unregistering): (slave bridge2173): Releasing backup interface [ 3318.275072][T27857] bond0 (unregistering): (slave bridge2172): Releasing backup interface [ 3318.362280][T27857] bond0 (unregistering): (slave bridge2171): Releasing backup interface [ 3318.481345][T27857] bond0 (unregistering): (slave bridge2170): Releasing backup interface [ 3318.641775][T27857] bond0 (unregistering): (slave bridge2168): Releasing backup interface [ 3318.743896][T27857] bond0 (unregistering): (slave bridge2167): Releasing backup interface [ 3318.854282][T27857] bond0 (unregistering): (slave bridge2166): Releasing backup interface [ 3318.993371][T27857] bond0 (unregistering): (slave bridge2165): Releasing backup interface [ 3319.187721][T27857] bond0 (unregistering): (slave bridge2163): Releasing backup interface [ 3319.321726][T27857] bond0 (unregistering): (slave bridge2162): Releasing backup interface [ 3319.403869][T27857] bond0 (unregistering): (slave bridge2161): Releasing backup interface [ 3319.541642][T27857] bond0 (unregistering): (slave bridge2160): Releasing backup interface [ 3319.663452][T27857] bond0 (unregistering): (slave bridge2159): Releasing backup interface [ 3319.762681][T27857] bond0 (unregistering): (slave bridge2158): Releasing backup interface [ 3319.895415][T27857] bond0 (unregistering): (slave bridge2157): Releasing backup interface [ 3320.035760][T27857] bond0 (unregistering): (slave bridge2156): Releasing backup interface [ 3320.137860][T27857] bond0 (unregistering): (slave bridge2155): Releasing backup interface [ 3320.271105][T27857] bond0 (unregistering): (slave bridge2154): Releasing backup interface [ 3320.372451][T27857] bond0 (unregistering): (slave bridge2153): Releasing backup interface [ 3320.464357][T27857] bond0 (unregistering): (slave bridge2152): Releasing backup interface [ 3320.622089][T27857] bond0 (unregistering): (slave bridge2151): Releasing backup interface [ 3320.713377][T27857] bond0 (unregistering): (slave bridge2150): Releasing backup interface [ 3320.801568][T27857] bond0 (unregistering): (slave bridge2149): Releasing backup interface [ 3320.934099][T27857] bond0 (unregistering): (slave bridge2148): Releasing backup interface [ 3321.044267][T27857] bond0 (unregistering): (slave bridge2147): Releasing backup interface [ 3321.166052][T27857] bond0 (unregistering): (slave bridge2146): Releasing backup interface [ 3321.285310][T27857] bond0 (unregistering): (slave bridge2145): Releasing backup interface [ 3321.420066][T27857] bond0 (unregistering): (slave bridge2144): Releasing backup interface [ 3321.510811][T27857] bond0 (unregistering): (slave bridge2143): Releasing backup interface [ 3321.651666][T27857] bond0 (unregistering): (slave bridge2142): Releasing backup interface [ 3321.773728][T27857] bond0 (unregistering): (slave bridge2141): Releasing backup interface [ 3321.874677][T27857] bond0 (unregistering): (slave bridge2140): Releasing backup interface [ 3321.969517][T27857] bond0 (unregistering): (slave bridge2139): Releasing backup interface [ 3322.105619][T27857] bond0 (unregistering): (slave bridge2138): Releasing backup interface [ 3322.227630][T27857] bond0 (unregistering): (slave bridge2137): Releasing backup interface [ 3322.355533][T27857] bond0 (unregistering): (slave bridge2136): Releasing backup interface [ 3322.455586][T27857] bond0 (unregistering): (slave bridge2135): Releasing backup interface [ 3322.553241][T27857] bond0 (unregistering): (slave bridge2134): Releasing backup interface [ 3322.701178][T27857] bond0 (unregistering): (slave bridge2133): Releasing backup interface [ 3322.811391][T27857] bond0 (unregistering): (slave bridge2132): Releasing backup interface [ 3322.932708][T27857] bond0 (unregistering): (slave bridge2131): Releasing backup interface [ 3323.044802][T27857] bond0 (unregistering): (slave bridge2130): Releasing backup interface [ 3323.194929][T27857] bond0 (unregistering): (slave bridge2129): Releasing backup interface [ 3323.289253][T27857] bond0 (unregistering): (slave bridge2128): Releasing backup interface [ 3323.430374][T27857] bond0 (unregistering): (slave bridge2127): Releasing backup interface [ 3323.502521][T27857] bond0 (unregistering): (slave bridge2126): Releasing backup interface [ 3323.598521][T27857] bond0 (unregistering): (slave bridge2125): Releasing backup interface [ 3323.791631][T27857] bond0 (unregistering): (slave bridge2124): Releasing backup interface [ 3323.861806][T27857] bond0 (unregistering): (slave bridge2123): Releasing backup interface [ 3323.970933][T27857] bond0 (unregistering): (slave bridge2122): Releasing backup interface [ 3324.077911][T27857] bond0 (unregistering): (slave bridge2121): Releasing backup interface [ 3324.208680][T27857] bond0 (unregistering): (slave bridge2120): Releasing backup interface [ 3324.292873][T27857] bond0 (unregistering): (slave bridge2119): Releasing backup interface [ 3324.418112][T27857] bond0 (unregistering): (slave bridge2118): Releasing backup interface [ 3324.524306][T27857] bond0 (unregistering): (slave bridge2117): Releasing backup interface [ 3324.622562][T27857] bond0 (unregistering): (slave bridge2116): Releasing backup interface [ 3324.724587][T27857] bond0 (unregistering): (slave bridge2115): Releasing backup interface [ 3324.832278][T27857] bond0 (unregistering): (slave bridge2114): Releasing backup interface [ 3324.931430][T27857] bond0 (unregistering): (slave bridge2113): Releasing backup interface [ 3325.018146][T27857] bond0 (unregistering): (slave bridge2112): Releasing backup interface [ 3325.126457][T27857] bond0 (unregistering): (slave bridge2111): Releasing backup interface [ 3325.245597][T27857] bond0 (unregistering): (slave bridge2110): Releasing backup interface [ 3325.357749][T27857] bond0 (unregistering): (slave bridge2109): Releasing backup interface [ 3325.491993][T27857] bond0 (unregistering): (slave bridge2108): Releasing backup interface [ 3325.573084][T27857] bond0 (unregistering): (slave bridge2107): Releasing backup interface [ 3325.651748][T27857] bond0 (unregistering): (slave bridge2106): Releasing backup interface [ 3325.773203][T27857] bond0 (unregistering): (slave bridge2105): Releasing backup interface [ 3325.918259][T27857] bond0 (unregistering): (slave bridge2103): Releasing backup interface [ 3326.013194][T27857] bond0 (unregistering): (slave bridge2102): Releasing backup interface [ 3326.137608][T27857] bond0 (unregistering): (slave bridge2101): Releasing backup interface [ 3326.323229][T27857] bond0 (unregistering): (slave bridge2099): Releasing backup interface [ 3326.430311][T27857] bond0 (unregistering): (slave bridge2098): Releasing backup interface [ 3326.552564][T27857] bond0 (unregistering): (slave bridge2097): Releasing backup interface [ 3326.653227][T27857] bond0 (unregistering): (slave bridge2096): Releasing backup interface [ 3326.782415][T27857] bond0 (unregistering): (slave bridge2095): Releasing backup interface [ 3326.914188][T27857] bond0 (unregistering): (slave bridge2094): Releasing backup interface [ 3327.022638][T27857] bond0 (unregistering): (slave bridge2093): Releasing backup interface [ 3327.122801][T27857] bond0 (unregistering): (slave bridge2092): Releasing backup interface [ 3327.275261][T27857] bond0 (unregistering): (slave bridge2091): Releasing backup interface [ 3327.382626][T27857] bond0 (unregistering): (slave bridge2090): Releasing backup interface [ 3327.453348][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.459728][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.530251][T27857] bond0 (unregistering): (slave bridge2089): Releasing backup interface [ 3327.605660][T27857] bond0 (unregistering): (slave bridge2088): Releasing backup interface [ 3327.730304][T27857] bond0 (unregistering): (slave bridge2087): Releasing backup interface [ 3327.868128][T27857] bond0 (unregistering): (slave bridge2086): Releasing backup interface [ 3327.973082][T27857] bond0 (unregistering): (slave bridge2085): Releasing backup interface [ 3328.070826][T27857] bond0 (unregistering): (slave bridge2084): Releasing backup interface [ 3328.160405][T27857] bond0 (unregistering): (slave bridge2083): Releasing backup interface [ 3328.315132][T27857] bond0 (unregistering): (slave bridge2082): Releasing backup interface [ 3328.442671][T27857] bond0 (unregistering): (slave bridge2081): Releasing backup interface [ 3328.551134][T27857] bond0 (unregistering): (slave bridge2080): Releasing backup interface [ 3328.680808][T27857] bond0 (unregistering): (slave bridge2079): Releasing backup interface [ 3328.760513][T27857] bond0 (unregistering): (slave bridge2078): Releasing backup interface [ 3328.903258][T27857] bond0 (unregistering): (slave bridge2077): Releasing backup interface [ 3329.001878][T27857] bond0 (unregistering): (slave bridge2076): Releasing backup interface [ 3329.092579][T27857] bond0 (unregistering): (slave bridge2075): Releasing backup interface [ 3329.203308][T27857] bond0 (unregistering): (slave bridge2074): Releasing backup interface [ 3329.370745][T27857] bond0 (unregistering): (slave bridge2073): Releasing backup interface [ 3329.483064][T27857] bond0 (unregistering): (slave bridge2072): Releasing backup interface [ 3329.575693][T27857] bond0 (unregistering): (slave bridge2071): Releasing backup interface [ 3329.702021][T27857] bond0 (unregistering): (slave bridge2070): Releasing backup interface [ 3329.891473][T27857] bond0 (unregistering): (slave bridge2068): Releasing backup interface [ 3330.005056][T27857] bond0 (unregistering): (slave bridge2067): Releasing backup interface [ 3330.095610][T27857] bond0 (unregistering): (slave bridge2066): Releasing backup interface [ 3330.193295][T27857] bond0 (unregistering): (slave bridge2065): Releasing backup interface [ 3330.305657][T27857] bond0 (unregistering): (slave bridge2064): Releasing backup interface [ 3330.446269][T27857] bond0 (unregistering): (slave bridge2063): Releasing backup interface [ 3330.552355][T27857] bond0 (unregistering): (slave bridge2062): Releasing backup interface [ 3330.682651][T27857] bond0 (unregistering): (slave bridge2061): Releasing backup interface [ 3330.772840][T27857] bond0 (unregistering): (slave bridge2060): Releasing backup interface [ 3331.052503][T27857] bond0 (unregistering): (slave bridge2057): Releasing backup interface [ 3331.162969][T27857] bond0 (unregistering): (slave bridge2056): Releasing backup interface [ 3331.261222][T27857] bond0 (unregistering): (slave bridge2055): Releasing backup interface [ 3331.424821][T27857] bond0 (unregistering): (slave bridge2054): Releasing backup interface [ 3331.543427][T27857] bond0 (unregistering): (slave bridge2053): Releasing backup interface [ 3331.669983][T27857] bond0 (unregistering): (slave bridge2052): Releasing backup interface [ 3331.734785][T27857] bond0 (unregistering): (slave bridge2051): Releasing backup interface [ 3331.833344][T27857] bond0 (unregistering): (slave bridge2050): Releasing backup interface [ 3331.925959][T27857] bond0 (unregistering): (slave bridge2049): Releasing backup interface [ 3332.099406][T27857] bond0 (unregistering): (slave bridge2048): Releasing backup interface [ 3332.224282][T27857] bond0 (unregistering): (slave bridge2047): Releasing backup interface [ 3332.320891][T27857] bond0 (unregistering): (slave bridge2046): Releasing backup interface [ 3332.475367][T27857] bond0 (unregistering): (slave bridge2045): Releasing backup interface [ 3332.613036][T27857] bond0 (unregistering): (slave bridge2044): Releasing backup interface [ 3332.701828][T27857] bond0 (unregistering): (slave bridge2043): Releasing backup interface [ 3332.823877][T27857] bond0 (unregistering): (slave bridge2042): Releasing backup interface [ 3332.922256][T27857] bond0 (unregistering): (slave bridge2041): Releasing backup interface [ 3333.043060][T27857] bond0 (unregistering): (slave bridge2040): Releasing backup interface [ 3333.132581][T27857] bond0 (unregistering): (slave bridge2039): Releasing backup interface [ 3333.234253][T27857] bond0 (unregistering): (slave bridge2038): Releasing backup interface [ 3333.343256][T27857] bond0 (unregistering): (slave bridge2037): Releasing backup interface [ 3333.485749][T27857] bond0 (unregistering): (slave bridge2036): Releasing backup interface [ 3333.626625][T27857] bond0 (unregistering): (slave bridge2035): Releasing backup interface [ 3333.747464][T27857] bond0 (unregistering): (slave bridge2034): Releasing backup interface [ 3333.842788][T27857] bond0 (unregistering): (slave bridge2033): Releasing backup interface [ 3333.974491][T27857] bond0 (unregistering): (slave bridge2032): Releasing backup interface [ 3334.118511][T27857] bond0 (unregistering): (slave bridge2031): Releasing backup interface [ 3334.224010][T27857] bond0 (unregistering): (slave bridge2030): Releasing backup interface [ 3334.303011][T27857] bond0 (unregistering): (slave bridge2029): Releasing backup interface [ 3334.389060][T27857] bond0 (unregistering): (slave bridge2028): Releasing backup interface [ 3334.510954][T27857] bond0 (unregistering): (slave bridge2027): Releasing backup interface [ 3334.617533][T27857] bond0 (unregistering): (slave bridge2026): Releasing backup interface [ 3334.650516][ T3165] Bluetooth: hci3: command 0x0406 tx timeout [ 3334.723555][T27857] bond0 (unregistering): (slave bridge2025): Releasing backup interface [ 3334.854538][T27857] bond0 (unregistering): (slave bridge2024): Releasing backup interface [ 3334.943247][T27857] bond0 (unregistering): (slave bridge2023): Releasing backup interface [ 3335.034330][T27857] bond0 (unregistering): (slave bridge2022): Releasing backup interface [ 3335.173282][T27857] bond0 (unregistering): (slave bridge2021): Releasing backup interface [ 3335.274490][T27857] bond0 (unregistering): (slave bridge2020): Releasing backup interface [ 3335.379557][T27857] bond0 (unregistering): (slave bridge2019): Releasing backup interface [ 3335.484803][T27857] bond0 (unregistering): (slave bridge2018): Releasing backup interface [ 3335.617764][T27857] bond0 (unregistering): (slave bridge2017): Releasing backup interface [ 3335.723902][T27857] bond0 (unregistering): (slave bridge2016): Releasing backup interface [ 3335.861741][T27857] bond0 (unregistering): (slave bridge2015): Releasing backup interface [ 3335.972209][T27857] bond0 (unregistering): (slave bridge2014): Releasing backup interface [ 3336.073225][T27857] bond0 (unregistering): (slave bridge2013): Releasing backup interface [ 3336.223342][T27857] bond0 (unregistering): (slave bridge2012): Releasing backup interface [ 3336.335069][T27857] bond0 (unregistering): (slave bridge2011): Releasing backup interface [ 3336.452731][T27857] bond0 (unregistering): (slave bridge2010): Releasing backup interface [ 3336.655201][T27857] bond0 (unregistering): (slave bridge2008): Releasing backup interface [ 3336.802756][T27857] bond0 (unregistering): (slave bridge2006): Releasing backup interface [ 3336.930138][T27857] bond0 (unregistering): (slave bridge2005): Releasing backup interface [ 3337.042035][T27857] bond0 (unregistering): (slave bridge2004): Releasing backup interface [ 3337.210729][T27857] bond0 (unregistering): (slave bridge2003): Releasing backup interface [ 3337.321112][T27857] bond0 (unregistering): (slave bridge2002): Releasing backup interface [ 3337.421155][T27857] bond0 (unregistering): (slave bridge2001): Releasing backup interface [ 3337.514621][T27857] bond0 (unregistering): (slave bridge2000): Releasing backup interface [ 3337.677737][T27857] bond0 (unregistering): (slave bridge1999): Releasing backup interface [ 3337.792288][T27857] bond0 (unregistering): (slave bridge1998): Releasing backup interface [ 3337.901973][T27857] bond0 (unregistering): (slave bridge1997): Releasing backup interface [ 3338.033398][T27857] bond0 (unregistering): (slave bridge1996): Releasing backup interface [ 3338.128331][T27857] bond0 (unregistering): (slave bridge1995): Releasing backup interface [ 3338.283194][T27857] bond0 (unregistering): (slave bridge1994): Releasing backup interface [ 3338.459661][T27857] bond0 (unregistering): (slave bridge1993): Releasing backup interface [ 3338.656008][T27857] bond0 (unregistering): (slave bridge1992): Releasing backup interface [ 3338.833983][T27857] bond0 (unregistering): (slave bridge1991): Releasing backup interface [ 3339.022815][T27857] bond0 (unregistering): (slave bridge1990): Releasing backup interface [ 3339.293127][T27857] bond0 (unregistering): (slave bridge1987): Releasing backup interface [ 3339.402236][T27857] bond0 (unregistering): (slave bridge1986): Releasing backup interface [ 3339.514175][T27857] bond0 (unregistering): (slave bridge1985): Releasing backup interface [ 3339.602985][T27857] bond0 (unregistering): (slave bridge1984): Releasing backup interface [ 3339.754982][T27857] bond0 (unregistering): (slave bridge1983): Releasing backup interface [ 3339.878975][T27857] bond0 (unregistering): (slave bridge1982): Releasing backup interface [ 3339.970610][T27857] bond0 (unregistering): (slave bridge1981): Releasing backup interface [ 3340.143970][T27857] bond0 (unregistering): (slave bridge1980): Releasing backup interface [ 3340.393736][T27857] bond0 (unregistering): (slave bridge1979): Releasing backup interface [ 3340.483567][T27857] bond0 (unregistering): (slave bridge1978): Releasing backup interface [ 3340.603360][T27857] bond0 (unregistering): (slave bridge1977): Releasing backup interface [ 3340.714335][T27857] bond0 (unregistering): (slave bridge1976): Releasing backup interface [ 3340.834575][T27857] bond0 (unregistering): (slave bridge1975): Releasing backup interface [ 3340.932383][T27857] bond0 (unregistering): (slave bridge1974): Releasing backup interface [ 3341.033129][T27857] bond0 (unregistering): (slave bridge1973): Releasing backup interface [ 3341.140150][T27857] bond0 (unregistering): (slave bridge1972): Releasing backup interface [ 3341.254374][T27857] bond0 (unregistering): (slave bridge1971): Releasing backup interface [ 3341.394679][T27857] bond0 (unregistering): (slave bridge1970): Releasing backup interface [ 3341.480381][T25996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3341.495288][T25996] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3341.511871][T25996] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3341.523606][T25996] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3341.535835][T25996] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3341.557312][ T3653] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3341.563269][T27857] bond0 (unregistering): (slave bridge1969): Releasing backup interface [ 3341.688019][T27857] bond0 (unregistering): (slave bridge1968): Releasing backup interface [ 3341.801034][T27857] bond0 (unregistering): (slave bridge1967): Releasing backup interface [ 3341.893488][T27857] bond0 (unregistering): (slave bridge1966): Releasing backup interface [ 3341.996807][T27857] bond0 (unregistering): (slave bridge1965): Releasing backup interface [ 3342.123401][T27857] bond0 (unregistering): (slave bridge1964): Releasing backup interface [ 3342.293678][T27857] bond0 (unregistering): (slave bridge1962): Releasing backup interface [ 3342.413552][T27857] bond0 (unregistering): (slave bridge1961): Releasing backup interface [ 3342.512308][T27857] bond0 (unregistering): (slave bridge1960): Releasing backup interface [ 3342.600097][T27857] bond0 (unregistering): (slave bridge1959): Releasing backup interface [ 3342.703769][T27857] bond0 (unregistering): (slave bridge1958): Releasing backup interface [ 3342.836318][T27857] bond0 (unregistering): (slave bridge1957): Releasing backup interface [ 3342.934511][T27857] bond0 (unregistering): (slave bridge1956): Releasing backup interface [ 3343.089285][T27857] bond0 (unregistering): (slave bridge1954): Releasing backup interface [ 3343.203481][T27857] bond0 (unregistering): (slave bridge1953): Releasing backup interface [ 3343.314290][T27857] bond0 (unregistering): (slave bridge1952): Releasing backup interface [ 3343.468389][T27857] bond0 (unregistering): (slave bridge1951): Releasing backup interface [ 3343.572854][T27857] bond0 (unregistering): (slave bridge1950): Releasing backup interface [ 3343.683378][T27857] bond0 (unregistering): (slave bridge1949): Releasing backup interface [ 3343.699726][ T3165] Bluetooth: hci7: command 0x0409 tx timeout [ 3343.794817][T27857] bond0 (unregistering): (slave bridge1948): Releasing backup interface [ 3343.936195][T27857] bond0 (unregistering): (slave bridge1947): Releasing backup interface [ 3344.042764][T27857] bond0 (unregistering): (slave bridge1946): Releasing backup interface [ 3344.163452][T27857] bond0 (unregistering): (slave bridge1945): Releasing backup interface [ 3344.269349][T27857] bond0 (unregistering): (slave bridge1944): Releasing backup interface [ 3344.400856][T27857] bond0 (unregistering): (slave bridge1943): Releasing backup interface [ 3344.563352][T27857] bond0 (unregistering): (slave bridge1942): Releasing backup interface [ 3344.718962][T27857] bond0 (unregistering): (slave bridge1940): Releasing backup interface [ 3344.844521][T27857] bond0 (unregistering): (slave bridge1939): Releasing backup interface [ 3344.974536][T27857] bond0 (unregistering): (slave bridge1938): Releasing backup interface [ 3345.062791][T27857] bond0 (unregistering): (slave bridge1937): Releasing backup interface [ 3345.191538][T27857] bond0 (unregistering): (slave bridge1936): Releasing backup interface [ 3345.278672][T27857] bond0 (unregistering): (slave bridge1935): Releasing backup interface [ 3345.383447][T27857] bond0 (unregistering): (slave bridge1934): Releasing backup interface [ 3345.580648][T27857] bond0 (unregistering): (slave bridge1932): Releasing backup interface [ 3345.724528][T27857] bond0 (unregistering): (slave bridge1930): Releasing backup interface [ 3345.769664][T26055] Bluetooth: hci7: command 0x041b tx timeout [ 3345.815140][T27857] bond0 (unregistering): (slave bridge1929): Releasing backup interface [ 3345.951195][T27857] bond0 (unregistering): (slave bridge1928): Releasing backup interface [ 3346.062675][T27857] bond0 (unregistering): (slave bridge1927): Releasing backup interface [ 3346.156879][T27857] bond0 (unregistering): (slave bridge1926): Releasing backup interface [ 3346.292384][T27857] bond0 (unregistering): (slave bridge1925): Releasing backup interface [ 3346.377756][T27857] bond0 (unregistering): (slave bridge1924): Releasing backup interface [ 3346.471066][T27857] bond0 (unregistering): (slave bridge1923): Releasing backup interface [ 3346.598531][T27857] bond0 (unregistering): (slave bridge1922): Releasing backup interface [ 3346.723362][T27857] bond0 (unregistering): (slave bridge1921): Releasing backup interface [ 3346.828600][T27857] bond0 (unregistering): (slave bridge1920): Releasing backup interface [ 3346.934816][T27857] bond0 (unregistering): (slave bridge1919): Releasing backup interface [ 3347.066379][T27857] bond0 (unregistering): (slave bridge1918): Releasing backup interface [ 3347.152979][T27857] bond0 (unregistering): (slave bridge1917): Releasing backup interface [ 3347.304964][T27857] bond0 (unregistering): (slave bridge1915): Releasing backup interface [ 3347.395140][T27857] bond0 (unregistering): (slave bridge1914): Releasing backup interface [ 3347.494915][T27857] bond0 (unregistering): (slave bridge1913): Releasing backup interface [ 3347.630859][T27857] bond0 (unregistering): (slave bridge1912): Releasing backup interface [ 3347.738297][T27857] bond0 (unregistering): (slave bridge1911): Releasing backup interface [ 3347.842718][T27857] bond0 (unregistering): (slave bridge1910): Releasing backup interface [ 3347.855524][ T3165] Bluetooth: hci7: command 0x040f tx timeout [ 3347.974703][T27857] bond0 (unregistering): (slave bridge1909): Releasing backup interface [ 3348.075200][T27857] bond0 (unregistering): (slave bridge1908): Releasing backup interface [ 3348.173621][T27857] bond0 (unregistering): (slave bridge1907): Releasing backup interface [ 3348.303928][T27857] bond0 (unregistering): (slave bridge1906): Releasing backup interface [ 3348.412839][T27857] bond0 (unregistering): (slave bridge1905): Releasing backup interface [ 3348.502850][T27857] bond0 (unregistering): (slave bridge1904): Releasing backup interface [ 3348.642476][T27857] bond0 (unregistering): (slave bridge1903): Releasing backup interface [ 3348.754525][T27857] bond0 (unregistering): (slave bridge1902): Releasing backup interface [ 3348.855070][T27857] bond0 (unregistering): (slave bridge1901): Releasing backup interface [ 3349.030604][T27857] bond0 (unregistering): (slave bridge1899): Releasing backup interface [ 3349.145009][T27857] bond0 (unregistering): (slave bridge1898): Releasing backup interface [ 3349.249817][T27857] bond0 (unregistering): (slave bridge1897): Releasing backup interface [ 3349.431223][T27857] bond0 (unregistering): (slave bridge1895): Releasing backup interface [ 3349.551692][T27857] bond0 (unregistering): (slave bridge1894): Releasing backup interface [ 3349.692562][T27857] bond0 (unregistering): (slave bridge1893): Releasing backup interface [ 3349.805673][T27857] bond0 (unregistering): (slave bridge1892): Releasing backup interface [ 3349.901672][T27857] bond0 (unregistering): (slave bridge1891): Releasing backup interface [ 3349.929460][ T3165] Bluetooth: hci7: command 0x0419 tx timeout [ 3350.001761][T27857] bond0 (unregistering): (slave bridge1890): Releasing backup interface [ 3350.167550][T27857] bond0 (unregistering): (slave bridge1889): Releasing backup interface [ 3350.254210][T27857] bond0 (unregistering): (slave bridge1888): Releasing backup interface [ 3350.374324][T27857] bond0 (unregistering): (slave bridge1887): Releasing backup interface [ 3350.464939][T27857] bond0 (unregistering): (slave bridge1886): Releasing backup interface [ 3350.563601][T27857] bond0 (unregistering): (slave bridge1885): Releasing backup interface [ 3350.693469][T27857] bond0 (unregistering): (slave bridge1884): Releasing backup interface [ 3350.814355][T27857] bond0 (unregistering): (slave bridge1883): Releasing backup interface [ 3350.924637][T27857] bond0 (unregistering): (slave bridge1882): Releasing backup interface [ 3351.021112][T27857] bond0 (unregistering): (slave bridge1881): Releasing backup interface [ 3351.124914][T27857] bond0 (unregistering): (slave bridge1880): Releasing backup interface [ 3351.243657][T27857] bond0 (unregistering): (slave bridge1879): Releasing backup interface [ 3351.331983][T27857] bond0 (unregistering): (slave bridge1878): Releasing backup interface [ 3351.457921][T27857] bond0 (unregistering): (slave bridge1877): Releasing backup interface [ 3351.563285][T27857] bond0 (unregistering): (slave bridge1876): Releasing backup interface [ 3351.655405][T27857] bond0 (unregistering): (slave bridge1875): Releasing backup interface [ 3351.800838][T27857] bond0 (unregistering): (slave bridge1874): Releasing backup interface [ 3351.898280][T27857] bond0 (unregistering): (slave bridge1873): Releasing backup interface [ 3351.982251][T27857] bond0 (unregistering): (slave bridge1872): Releasing backup interface [ 3352.071584][T27857] bond0 (unregistering): (slave bridge1871): Releasing backup interface [ 3352.207079][T27857] bond0 (unregistering): (slave bridge1870): Releasing backup interface [ 3352.310938][T27857] bond0 (unregistering): (slave bridge1869): Releasing backup interface [ 3352.402524][T27857] bond0 (unregistering): (slave bridge1868): Releasing backup interface [ 3352.520803][T27857] bond0 (unregistering): (slave bridge1867): Releasing backup interface [ 3352.615379][T27857] bond0 (unregistering): (slave bridge1866): Releasing backup interface [ 3352.700539][T27857] bond0 (unregistering): (slave bridge1865): Releasing backup interface [ 3352.851475][T27857] bond0 (unregistering): (slave bridge1864): Releasing backup interface [ 3352.937599][T27857] bond0 (unregistering): (slave bridge1863): Releasing backup interface [ 3353.042889][T27857] bond0 (unregistering): (slave bridge1862): Releasing backup interface [ 3353.307713][T27857] bond0 (unregistering): (slave bridge1861): Releasing backup interface [ 3353.493554][T27857] bond0 (unregistering): (slave bridge1860): Releasing backup interface [ 3353.625713][T27857] bond0 (unregistering): (slave bridge1859): Releasing backup interface [ 3353.844237][T27857] bond0 (unregistering): (slave bridge1858): Releasing backup interface [ 3354.034564][T27857] bond0 (unregistering): (slave bridge1857): Releasing backup interface [ 3354.117623][T27857] bond0 (unregistering): (slave bridge1856): Releasing backup interface [ 3354.214834][T27857] bond0 (unregistering): (slave bridge1855): Releasing backup interface [ 3354.355259][T27857] bond0 (unregistering): (slave bridge1854): Releasing backup interface [ 3354.451934][T27857] bond0 (unregistering): (slave bridge1853): Releasing backup interface [ 3354.561550][T27857] bond0 (unregistering): (slave bridge1852): Releasing backup interface [ 3354.657717][T27857] bond0 (unregistering): (slave bridge1851): Releasing backup interface [ 3354.773581][T27857] bond0 (unregistering): (slave bridge1850): Releasing backup interface [ 3354.930262][T27857] bond0 (unregistering): (slave bridge1849): Releasing backup interface [ 3355.017578][T27857] bond0 (unregistering): (slave bridge1848): Releasing backup interface [ 3355.125683][T27857] bond0 (unregistering): (slave bridge1847): Releasing backup interface [ 3355.239946][T27857] bond0 (unregistering): (slave bridge1846): Releasing backup interface [ 3355.346796][T27857] bond0 (unregistering): (slave bridge1845): Releasing backup interface [ 3355.435198][T27857] bond0 (unregistering): (slave bridge1844): Releasing backup interface [ 3355.523274][T27857] bond0 (unregistering): (slave bridge1843): Releasing backup interface [ 3355.634962][T27857] bond0 (unregistering): (slave bridge1842): Releasing backup interface [ 3355.731678][T27857] bond0 (unregistering): (slave bridge1841): Releasing backup interface [ 3355.822064][T27857] bond0 (unregistering): (slave bridge1840): Releasing backup interface [ 3355.995797][T27857] bond0 (unregistering): (slave bridge1839): Releasing backup interface [ 3356.101258][T27857] bond0 (unregistering): (slave bridge1838): Releasing backup interface [ 3356.210455][T27857] bond0 (unregistering): (slave bridge1837): Releasing backup interface [ 3356.322442][T27857] bond0 (unregistering): (slave bridge1836): Releasing backup interface [ 3356.455505][T27857] bond0 (unregistering): (slave bridge1835): Releasing backup interface [ 3356.564625][T27857] bond0 (unregistering): (slave bridge1834): Releasing backup interface [ 3356.708927][T27857] bond0 (unregistering): (slave bridge1833): Releasing backup interface [ 3356.842526][T27857] bond0 (unregistering): (slave bridge1831): Releasing backup interface [ 3356.953723][T27857] bond0 (unregistering): (slave bridge1830): Releasing backup interface [ 3357.042882][T27857] bond0 (unregistering): (slave bridge1829): Releasing backup interface [ 3357.144591][T27857] bond0 (unregistering): (slave bridge1828): Releasing backup interface [ 3357.243228][T27857] bond0 (unregistering): (slave bridge1827): Releasing backup interface [ 3357.377242][T27857] bond0 (unregistering): (slave bridge1826): Releasing backup interface [ 3357.494969][T27857] bond0 (unregistering): (slave bridge1825): Releasing backup interface [ 3357.575385][T27857] bond0 (unregistering): (slave bridge1824): Releasing backup interface [ 3357.675090][T27857] bond0 (unregistering): (slave bridge1823): Releasing backup interface [ 3357.784975][T27857] bond0 (unregistering): (slave bridge1822): Releasing backup interface [ 3357.883710][T27857] bond0 (unregistering): (slave bridge1821): Releasing backup interface [ 3358.031295][T27857] bond0 (unregistering): (slave bridge1820): Releasing backup interface [ 3358.138095][T27857] bond0 (unregistering): (slave bridge1819): Releasing backup interface [ 3358.228476][T27857] bond0 (unregistering): (slave bridge1818): Releasing backup interface [ 3358.353541][T27857] bond0 (unregistering): (slave bridge1817): Releasing backup interface [ 3358.515334][T27857] bond0 (unregistering): (slave bridge1816): Releasing backup interface [ 3358.621994][T27857] bond0 (unregistering): (slave bridge1815): Releasing backup interface [ 3358.751408][T27857] bond0 (unregistering): (slave bridge1814): Releasing backup interface [ 3358.862483][T27857] bond0 (unregistering): (slave bridge1813): Releasing backup interface [ 3358.962450][T27857] bond0 (unregistering): (slave bridge1812): Releasing backup interface [ 3359.133232][T27857] bond0 (unregistering): (slave bridge1811): Releasing backup interface [ 3359.241580][T27857] bond0 (unregistering): (slave bridge1810): Releasing backup interface [ 3359.343826][T27857] bond0 (unregistering): (slave bridge1809): Releasing backup interface [ 3359.442700][T27857] bond0 (unregistering): (slave bridge1808): Releasing backup interface [ 3359.556520][T27857] bond0 (unregistering): (slave bridge1807): Releasing backup interface [ 3359.665196][T27857] bond0 (unregistering): (slave bridge1806): Releasing backup interface [ 3359.835477][T27857] bond0 (unregistering): (slave bridge1804): Releasing backup interface [ 3359.945028][T27857] bond0 (unregistering): (slave bridge1803): Releasing backup interface [ 3360.090857][T27857] bond0 (unregistering): (slave bridge1802): Releasing backup interface [ 3360.202398][T27857] bond0 (unregistering): (slave bridge1801): Releasing backup interface [ 3360.302820][T27857] bond0 (unregistering): (slave bridge1800): Releasing backup interface [ 3360.447675][T27857] bond0 (unregistering): (slave bridge1799): Releasing backup interface [ 3360.554338][T27857] bond0 (unregistering): (slave bridge1798): Releasing backup interface [ 3360.644336][T27857] bond0 (unregistering): (slave bridge1797): Releasing backup interface [ 3360.751582][T27857] bond0 (unregistering): (slave bridge1796): Releasing backup interface [ 3360.861667][T27857] bond0 (unregistering): (slave bridge1795): Releasing backup interface [ 3360.944146][T27857] bond0 (unregistering): (slave bridge1794): Releasing backup interface [ 3361.053275][T27857] bond0 (unregistering): (slave bridge1793): Releasing backup interface [ 3361.210667][T27857] bond0 (unregistering): (slave bridge1792): Releasing backup interface [ 3361.392437][T27857] bond0 (unregistering): (slave bridge1790): Releasing backup interface [ 3361.504017][T27857] bond0 (unregistering): (slave bridge1789): Releasing backup interface [ 3361.735554][T27857] bond0 (unregistering): (slave bridge1786): Releasing backup interface [ 3361.852383][T27857] bond0 (unregistering): (slave bridge1785): Releasing backup interface [ 3361.968325][T27857] bond0 (unregistering): (slave bridge1784): Releasing backup interface [ 3362.044474][T27857] bond0 (unregistering): (slave bridge1783): Releasing backup interface [ 3362.192550][T27857] bond0 (unregistering): (slave bridge1782): Releasing backup interface [ 3362.302063][T27857] bond0 (unregistering): (slave bridge1781): Releasing backup interface [ 3362.388549][T27857] bond0 (unregistering): (slave bridge1780): Releasing backup interface [ 3362.481346][T27857] bond0 (unregistering): (slave bridge1779): Releasing backup interface [ 3362.624812][T27857] bond0 (unregistering): (slave bridge1778): Releasing backup interface [ 3362.712421][T27857] bond0 (unregistering): (slave bridge1777): Releasing backup interface [ 3362.802285][T27857] bond0 (unregistering): (slave bridge1776): Releasing backup interface [ 3362.901896][T27857] bond0 (unregistering): (slave bridge1775): Releasing backup interface [ 3363.031113][T27857] bond0 (unregistering): (slave bridge1774): Releasing backup interface [ 3363.118685][T27857] bond0 (unregistering): (slave bridge1773): Releasing backup interface [ 3363.302315][T27857] bond0 (unregistering): (slave bridge1772): Releasing backup interface [ 3363.402596][T27857] bond0 (unregistering): (slave bridge1771): Releasing backup interface [ 3363.491316][T27857] bond0 (unregistering): (slave bridge1770): Releasing backup interface [ 3363.593758][T27857] bond0 (unregistering): (slave bridge1769): Releasing backup interface [ 3363.724667][T27857] bond0 (unregistering): (slave bridge1768): Releasing backup interface [ 3363.825034][T27857] bond0 (unregistering): (slave bridge1767): Releasing backup interface [ 3363.972017][T27857] bond0 (unregistering): (slave bridge1766): Releasing backup interface [ 3364.057658][T27857] bond0 (unregistering): (slave bridge1765): Releasing backup interface [ 3364.171849][T27857] bond0 (unregistering): (slave bridge1764): Releasing backup interface [ 3364.283307][T27857] bond0 (unregistering): (slave bridge1763): Releasing backup interface [ 3364.381197][T27857] bond0 (unregistering): (slave bridge1762): Releasing backup interface [ 3364.490686][T27857] bond0 (unregistering): (slave bridge1761): Releasing backup interface [ 3364.617961][T27857] bond0 (unregistering): (slave bridge1760): Releasing backup interface [ 3364.758564][T27857] bond0 (unregistering): (slave bridge1759): Releasing backup interface [ 3364.833895][T27857] bond0 (unregistering): (slave bridge1758): Releasing backup interface [ 3364.935345][T27857] bond0 (unregistering): (slave bridge1757): Releasing backup interface [ 3365.061298][T27857] bond0 (unregistering): (slave bridge1756): Releasing backup interface [ 3365.179470][T27857] bond0 (unregistering): (slave bridge1755): Releasing backup interface [ 3365.320869][T27857] bond0 (unregistering): (slave bridge1754): Releasing backup interface [ 3365.481277][T27857] bond0 (unregistering): (slave bridge1752): Releasing backup interface [ 3365.583392][T27857] bond0 (unregistering): (slave bridge1751): Releasing backup interface [ 3365.708968][T27857] bond0 (unregistering): (slave bridge1750): Releasing backup interface [ 3365.823309][T27857] bond0 (unregistering): (slave bridge1749): Releasing backup interface [ 3365.925251][T27857] bond0 (unregistering): (slave bridge1748): Releasing backup interface [ 3366.054400][T27857] bond0 (unregistering): (slave bridge1747): Releasing backup interface [ 3366.161652][T27857] bond0 (unregistering): (slave bridge1746): Releasing backup interface [ 3366.250818][T27857] bond0 (unregistering): (slave bridge1745): Releasing backup interface [ 3366.394663][T27857] bond0 (unregistering): (slave bridge1744): Releasing backup interface [ 3366.503037][T27857] bond0 (unregistering): (slave bridge1743): Releasing backup interface [ 3366.597296][T27857] bond0 (unregistering): (slave bridge1742): Releasing backup interface [ 3366.695357][T27857] bond0 (unregistering): (slave bridge1741): Releasing backup interface [ 3366.811188][T27857] bond0 (unregistering): (slave bridge1740): Releasing backup interface [ 3366.900521][T27857] bond0 (unregistering): (slave bridge1739): Releasing backup interface [ 3367.022111][T27857] bond0 (unregistering): (slave bridge1738): Releasing backup interface [ 3367.124819][T27857] bond0 (unregistering): (slave bridge1737): Releasing backup interface [ 3367.232449][T27857] bond0 (unregistering): (slave bridge1736): Releasing backup interface [ 3367.366284][T27857] bond0 (unregistering): (slave bridge1735): Releasing backup interface [ 3367.462511][T27857] bond0 (unregistering): (slave bridge1734): Releasing backup interface [ 3367.564773][T27857] bond0 (unregistering): (slave bridge1733): Releasing backup interface [ 3367.681310][T27857] bond0 (unregistering): (slave bridge1732): Releasing backup interface [ 3367.825025][T27857] bond0 (unregistering): (slave bridge1731): Releasing backup interface [ 3367.948666][T27857] bond0 (unregistering): (slave bridge1730): Releasing backup interface [ 3368.072202][T27857] bond0 (unregistering): (slave bridge1729): Releasing backup interface [ 3368.172662][T27857] bond0 (unregistering): (slave bridge1728): Releasing backup interface [ 3368.282047][T27857] bond0 (unregistering): (slave bridge1727): Releasing backup interface [ 3368.422352][T27857] bond0 (unregistering): (slave bridge1726): Releasing backup interface [ 3368.530737][T27857] bond0 (unregistering): (slave bridge1725): Releasing backup interface [ 3368.632282][T27857] bond0 (unregistering): (slave bridge1724): Releasing backup interface [ 3368.725124][T27857] bond0 (unregistering): (slave bridge1723): Releasing backup interface [ 3368.875331][T27857] bond0 (unregistering): (slave bridge1722): Releasing backup interface [ 3368.982152][T27857] bond0 (unregistering): (slave bridge1721): Releasing backup interface [ 3369.092428][T27857] bond0 (unregistering): (slave bridge1720): Releasing backup interface [ 3369.195081][T27857] bond0 (unregistering): (slave bridge1719): Releasing backup interface [ 3369.278181][T27857] bond0 (unregistering): (slave bridge1718): Releasing backup interface [ 3369.372200][T27857] bond0 (unregistering): (slave bridge1717): Releasing backup interface [ 3369.481947][T27857] bond0 (unregistering): (slave bridge1716): Releasing backup interface [ 3369.562184][T27857] bond0 (unregistering): (slave bridge1715): Releasing backup interface [ 3369.639186][T27857] bond0 (unregistering): (slave bridge1714): Releasing backup interface [ 3369.733298][T27857] bond0 (unregistering): (slave bridge1713): Releasing backup interface [ 3369.823188][T27857] bond0 (unregistering): (slave bridge1712): Releasing backup interface [ 3369.935476][T27857] bond0 (unregistering): (slave bridge1711): Releasing backup interface [ 3370.047727][T27857] bond0 (unregistering): (slave bridge1710): Releasing backup interface [ 3370.153647][T27857] bond0 (unregistering): (slave bridge1709): Releasing backup interface [ 3370.264716][T27857] bond0 (unregistering): (slave bridge1708): Releasing backup interface [ 3370.363325][T27857] bond0 (unregistering): (slave bridge1707): Releasing backup interface [ 3370.484176][T27857] bond0 (unregistering): (slave bridge1706): Releasing backup interface [ 3370.601236][T27857] bond0 (unregistering): (slave bridge1705): Releasing backup interface [ 3370.709795][T27857] bond0 (unregistering): (slave bridge1704): Releasing backup interface [ 3370.852685][T27857] bond0 (unregistering): (slave bridge1703): Releasing backup interface [ 3370.954772][T27857] bond0 (unregistering): (slave bridge1702): Releasing backup interface [ 3371.073924][T27857] bond0 (unregistering): (slave bridge1701): Releasing backup interface [ 3371.175243][T27857] bond0 (unregistering): (slave bridge1700): Releasing backup interface [ 3371.292164][T27857] bond0 (unregistering): (slave bridge1699): Releasing backup interface [ 3371.395755][T27857] bond0 (unregistering): (slave bridge1698): Releasing backup interface [ 3371.545191][T27857] bond0 (unregistering): (slave bridge1697): Releasing backup interface [ 3371.641180][T27857] bond0 (unregistering): (slave bridge1696): Releasing backup interface [ 3371.728972][T27857] bond0 (unregistering): (slave bridge1695): Releasing backup interface [ 3371.827771][T27857] bond0 (unregistering): (slave bridge1694): Releasing backup interface [ 3371.924127][T27857] bond0 (unregistering): (slave bridge1693): Releasing backup interface [ 3372.033661][T27857] bond0 (unregistering): (slave bridge1692): Releasing backup interface [ 3372.124170][T27857] bond0 (unregistering): (slave bridge1691): Releasing backup interface [ 3372.260000][T27857] bond0 (unregistering): (slave bridge1690): Releasing backup interface [ 3372.520138][T27857] bond0 (unregistering): (slave bridge1687): Releasing backup interface [ 3372.602681][T27857] bond0 (unregistering): (slave bridge1686): Releasing backup interface [ 3372.698613][T27857] bond0 (unregistering): (slave bridge1685): Releasing backup interface [ 3372.781354][T27857] bond0 (unregistering): (slave bridge1684): Releasing backup interface [ 3372.861379][T27857] bond0 (unregistering): (slave bridge1683): Releasing backup interface [ 3372.964592][T27857] bond0 (unregistering): (slave bridge1682): Releasing backup interface [ 3373.085348][T27857] bond0 (unregistering): (slave bridge1681): Releasing backup interface [ 3373.187021][T27857] bond0 (unregistering): (slave bridge1680): Releasing backup interface [ 3373.308693][T27857] bond0 (unregistering): (slave bridge1679): Releasing backup interface [ 3373.403954][T27857] bond0 (unregistering): (slave bridge1678): Releasing backup interface [ 3373.502546][T27857] bond0 (unregistering): (slave bridge1677): Releasing backup interface [ 3373.655341][T27857] bond0 (unregistering): (slave bridge1676): Releasing backup interface [ 3373.755705][T27857] bond0 (unregistering): (slave bridge1675): Releasing backup interface [ 3373.848793][T27857] bond0 (unregistering): (slave bridge1674): Releasing backup interface [ 3373.974662][T27857] bond0 (unregistering): (slave bridge1673): Releasing backup interface [ 3374.085499][T27857] bond0 (unregistering): (slave bridge1672): Releasing backup interface [ 3374.205861][T27857] bond0 (unregistering): (slave bridge1671): Releasing backup interface [ 3374.300304][T27857] bond0 (unregistering): (slave bridge1670): Releasing backup interface [ 3374.404571][T27857] bond0 (unregistering): (slave bridge1669): Releasing backup interface [ 3374.524779][T27857] bond0 (unregistering): (slave bridge1668): Releasing backup interface [ 3374.681200][T27857] bond0 (unregistering): (slave bridge1667): Releasing backup interface [ 3374.764227][T27857] bond0 (unregistering): (slave bridge1666): Releasing backup interface [ 3374.841732][T27857] bond0 (unregistering): (slave bridge1665): Releasing backup interface [ 3374.933530][T27857] bond0 (unregistering): (slave bridge1664): Releasing backup interface [ 3375.043229][T27857] bond0 (unregistering): (slave bridge1663): Releasing backup interface [ 3375.155386][T27857] bond0 (unregistering): (slave bridge1662): Releasing backup interface [ 3375.251047][T27857] bond0 (unregistering): (slave bridge1661): Releasing backup interface [ 3375.380636][T27857] bond0 (unregistering): (slave bridge1660): Releasing backup interface [ 3375.492600][T27857] bond0 (unregistering): (slave bridge1659): Releasing backup interface [ 3375.585228][T27857] bond0 (unregistering): (slave bridge1658): Releasing backup interface [ 3375.745259][T27857] bond0 (unregistering): (slave bridge1657): Releasing backup interface [ 3375.972239][T27857] bond0 (unregistering): (slave bridge1654): Releasing backup interface [ 3376.063124][T27857] bond0 (unregistering): (slave bridge1653): Releasing backup interface [ 3376.166945][T27857] bond0 (unregistering): (slave bridge1652): Releasing backup interface [ 3376.262460][T27857] bond0 (unregistering): (slave bridge1651): Releasing backup interface [ 3376.342555][T27857] bond0 (unregistering): (slave bridge1650): Releasing backup interface [ 3376.441217][T27857] bond0 (unregistering): (slave bridge1649): Releasing backup interface [ 3376.530556][T27857] bond0 (unregistering): (slave bridge1648): Releasing backup interface [ 3376.612089][T27857] bond0 (unregistering): (slave bridge1647): Releasing backup interface [ 3376.735813][T27857] bond0 (unregistering): (slave bridge1646): Releasing backup interface [ 3376.844281][T27857] bond0 (unregistering): (slave bridge1645): Releasing backup interface [ 3376.942598][T27857] bond0 (unregistering): (slave bridge1644): Releasing backup interface [ 3377.032404][T27857] bond0 (unregistering): (slave bridge1643): Releasing backup interface [ 3377.186873][T27857] bond0 (unregistering): (slave bridge1642): Releasing backup interface [ 3377.274656][T27857] bond0 (unregistering): (slave bridge1641): Releasing backup interface [ 3377.383184][T27857] bond0 (unregistering): (slave bridge1640): Releasing backup interface [ 3377.482419][T27857] bond0 (unregistering): (slave bridge1639): Releasing backup interface [ 3377.581117][T27857] bond0 (unregistering): (slave bridge1638): Releasing backup interface [ 3377.651945][T27857] bond0 (unregistering): (slave bridge1637): Releasing backup interface [ 3377.742932][T27857] bond0 (unregistering): (slave bridge1636): Releasing backup interface [ 3377.855127][T27857] bond0 (unregistering): (slave bridge1635): Releasing backup interface [ 3377.943487][T27857] bond0 (unregistering): (slave bridge1634): Releasing backup interface [ 3378.049877][T27857] bond0 (unregistering): (slave bridge1633): Releasing backup interface [ 3378.238680][T27857] bond0 (unregistering): (slave bridge1632): Releasing backup interface [ 3378.348903][T27857] bond0 (unregistering): (slave bridge1631): Releasing backup interface [ 3378.444552][T27857] bond0 (unregistering): (slave bridge1630): Releasing backup interface [ 3378.561096][T27857] bond0 (unregistering): (slave bridge1629): Releasing backup interface [ 3378.635378][T27857] bond0 (unregistering): (slave bridge1628): Releasing backup interface [ 3378.742463][T27857] bond0 (unregistering): (slave bridge1627): Releasing backup interface [ 3378.860507][T27857] bond0 (unregistering): (slave bridge1626): Releasing backup interface [ 3378.954397][T27857] bond0 (unregistering): (slave bridge1625): Releasing backup interface [ 3379.066982][T27857] bond0 (unregistering): (slave bridge1624): Releasing backup interface [ 3379.173428][T27857] bond0 (unregistering): (slave bridge1623): Releasing backup interface [ 3379.284834][T27857] bond0 (unregistering): (slave bridge1622): Releasing backup interface [ 3379.391488][T27857] bond0 (unregistering): (slave bridge1621): Releasing backup interface [ 3379.492709][T27857] bond0 (unregistering): (slave bridge1620): Releasing backup interface [ 3379.585706][T27857] bond0 (unregistering): (slave bridge1619): Releasing backup interface [ 3379.681523][T27857] bond0 (unregistering): (slave bridge1618): Releasing backup interface [ 3379.771298][T27857] bond0 (unregistering): (slave bridge1617): Releasing backup interface [ 3379.900559][T27857] bond0 (unregistering): (slave bridge1616): Releasing backup interface [ 3379.991730][T27857] bond0 (unregistering): (slave bridge1615): Releasing backup interface [ 3380.062254][T27857] bond0 (unregistering): (slave bridge1614): Releasing backup interface [ 3380.162826][T27857] bond0 (unregistering): (slave bridge1613): Releasing backup interface [ 3380.295917][T27857] bond0 (unregistering): (slave bridge1612): Releasing backup interface [ 3380.383231][T27857] bond0 (unregistering): (slave bridge1611): Releasing backup interface [ 3380.487452][T27857] bond0 (unregistering): (slave bridge1610): Releasing backup interface [ 3380.601318][T27857] bond0 (unregistering): (slave bridge1609): Releasing backup interface [ 3380.681421][T27857] bond0 (unregistering): (slave bridge1608): Releasing backup interface [ 3380.753742][T27857] bond0 (unregistering): (slave bridge1607): Releasing backup interface [ 3380.874609][T27857] bond0 (unregistering): (slave bridge1606): Releasing backup interface [ 3380.982834][T27857] bond0 (unregistering): (slave bridge1605): Releasing backup interface [ 3381.093022][T27857] bond0 (unregistering): (slave bridge1604): Releasing backup interface [ 3381.265673][T27857] bond0 (unregistering): (slave bridge1602): Releasing backup interface [ 3381.392719][T27857] bond0 (unregistering): (slave bridge1601): Releasing backup interface [ 3381.472849][T27857] bond0 (unregistering): (slave bridge1600): Releasing backup interface [ 3381.590276][T27857] bond0 (unregistering): (slave bridge1599): Releasing backup interface [ 3381.678308][T27857] bond0 (unregistering): (slave bridge1598): Releasing backup interface [ 3381.784604][T27857] bond0 (unregistering): (slave bridge1597): Releasing backup interface [ 3381.952115][T27857] bond0 (unregistering): (slave bridge1596): Releasing backup interface [ 3382.055628][T27857] bond0 (unregistering): (slave bridge1595): Releasing backup interface [ 3382.160547][T27857] bond0 (unregistering): (slave bridge1594): Releasing backup interface [ 3382.222239][T27857] bond0 (unregistering): (slave bridge1593): Releasing backup interface [ 3382.295839][T27857] bond0 (unregistering): (slave bridge1592): Releasing backup interface [ 3382.405840][T27857] bond0 (unregistering): (slave bridge1591): Releasing backup interface [ 3382.517223][T27857] bond0 (unregistering): (slave bridge1590): Releasing backup interface [ 3382.610643][T27857] bond0 (unregistering): (slave bridge1589): Releasing backup interface [ 3382.718372][T27857] bond0 (unregistering): (slave bridge1588): Releasing backup interface [ 3382.824848][T27857] bond0 (unregistering): (slave bridge1587): Releasing backup interface [ 3382.961620][T27857] bond0 (unregistering): (slave bridge1586): Releasing backup interface [ 3383.050372][T27857] bond0 (unregistering): (slave bridge1585): Releasing backup interface [ 3383.143919][T27857] bond0 (unregistering): (slave bridge1584): Releasing backup interface [ 3383.235552][T27857] bond0 (unregistering): (slave bridge1583): Releasing backup interface [ 3383.333288][T27857] bond0 (unregistering): (slave bridge1582): Releasing backup interface [ 3383.456986][T27857] bond0 (unregistering): (slave bridge1581): Releasing backup interface [ 3383.565724][T27857] bond0 (unregistering): (slave bridge1580): Releasing backup interface [ 3383.681546][T27857] bond0 (unregistering): (slave bridge1579): Releasing backup interface [ 3383.791144][T27857] bond0 (unregistering): (slave bridge1578): Releasing backup interface [ 3383.885144][T27857] bond0 (unregistering): (slave bridge1577): Releasing backup interface [ 3384.001943][T27857] bond0 (unregistering): (slave bridge1576): Releasing backup interface [ 3384.099912][T27857] bond0 (unregistering): (slave bridge1575): Releasing backup interface [ 3384.213163][T27857] bond0 (unregistering): (slave bridge1574): Releasing backup interface [ 3384.315674][T27857] bond0 (unregistering): (slave bridge1573): Releasing backup interface [ 3384.476910][T27857] bond0 (unregistering): (slave bridge1572): Releasing backup interface [ 3384.580242][T27857] bond0 (unregistering): (slave bridge1571): Releasing backup interface [ 3384.695677][T27857] bond0 (unregistering): (slave bridge1569): Releasing backup interface [ 3384.780722][T27857] bond0 (unregistering): (slave bridge1568): Releasing backup interface [ 3384.859796][T27857] bond0 (unregistering): (slave bridge1567): Releasing backup interface [ 3384.934425][T27857] bond0 (unregistering): (slave bridge1566): Releasing backup interface [ 3385.082156][T27857] bond0 (unregistering): (slave bridge1565): Releasing backup interface [ 3385.179148][T27857] bond0 (unregistering): (slave bridge1564): Releasing backup interface [ 3385.272063][T27857] bond0 (unregistering): (slave bridge1563): Releasing backup interface [ 3385.351973][T27857] bond0 (unregistering): (slave bridge1562): Releasing backup interface [ 3385.482841][T27857] bond0 (unregistering): (slave bridge1561): Releasing backup interface [ 3385.612264][T27857] bond0 (unregistering): (slave bridge1560): Releasing backup interface [ 3385.711419][T27857] bond0 (unregistering): (slave bridge1559): Releasing backup interface [ 3385.810302][T27857] bond0 (unregistering): (slave bridge1558): Releasing backup interface [ 3385.910605][T27857] bond0 (unregistering): (slave bridge1557): Releasing backup interface [ 3385.973123][T27857] bond0 (unregistering): (slave bridge1556): Releasing backup interface [ 3386.112199][T27857] bond0 (unregistering): (slave bridge1555): Releasing backup interface [ 3386.212264][T27857] bond0 (unregistering): (slave bridge1554): Releasing backup interface [ 3386.297840][T27857] bond0 (unregistering): (slave bridge1553): Releasing backup interface