age 307200kB, limit 307200kB, failcnt 56740 [ 2050.895107][T11768] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2050.905160][T11768] Memory cgroup stats for /syz3: [ 2050.905382][T11768] anon 90112 [ 2050.905382][T11768] file 782336 [ 2050.905382][T11768] kernel 313700352 [ 2050.905382][T11768] kernel_stack 65536 [ 2050.905382][T11768] pagetables 73728 [ 2050.905382][T11768] percpu 5602688 [ 2050.905382][T11768] sock 0 [ 2050.905382][T11768] vmalloc 0 [ 2050.905382][T11768] shmem 778240 [ 2050.905382][T11768] zswap 0 [ 2050.905382][T11768] zswapped 0 [ 2050.905382][T11768] file_mapped 778240 [ 2050.905382][T11768] file_dirty 4096 [ 2050.905382][T11768] file_writeback 0 [ 2050.905382][T11768] swapcached 0 [ 2050.905382][T11768] anon_thp 0 [ 2050.905382][T11768] file_thp 0 [ 2050.905382][T11768] shmem_thp 0 [ 2050.905382][T11768] inactive_anon 561152 [ 2050.905382][T11768] active_anon 307200 [ 2050.905382][T11768] inactive_file 0 [ 2050.905382][T11768] active_file 4096 [ 2050.905382][T11768] unevictable 0 [ 2050.905382][T11768] slab_reclaimable 123352 [ 2050.905382][T11768] slab_unreclaimable 307790872 [ 2050.905382][T11768] slab 307914224 [ 2051.003150][T11768] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11768,uid=0 03:29:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3dd0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1404}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xb92a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x6, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2051.018974][T11768] Memory cgroup out of memory: Killed process 11768 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2051.037407][T11761] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2051.065934][T11761] CPU: 0 PID: 11761 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2051.075357][T11784] __nla_validate_parse: 12 callbacks suppressed [ 2051.075377][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2051.076379][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2051.076397][T11761] Call Trace: [ 2051.076405][T11761] [ 2051.076415][T11761] dump_stack_lvl+0xcd/0x134 [ 2051.076448][T11761] dump_header+0x10b/0x7f9 [ 2051.117254][T11761] oom_kill_process.cold+0x10/0x15 [ 2051.122406][T11761] out_of_memory+0x358/0x14a0 [ 2051.127131][T11761] ? oom_killer_disable+0x270/0x270 [ 2051.132381][T11761] ? find_held_lock+0x2d/0x110 [ 2051.137182][T11761] mem_cgroup_out_of_memory+0x206/0x270 [ 2051.142769][T11761] ? mem_cgroup_margin+0x130/0x130 [ 2051.147912][T11761] ? lock_downgrade+0x6e0/0x6e0 [ 2051.152818][T11761] try_charge_memcg+0xf67/0x13f0 [ 2051.157810][T11761] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2051.163829][T11761] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2051.169582][T11761] ? lock_downgrade+0x6e0/0x6e0 [ 2051.174494][T11761] obj_cgroup_charge+0x2ab/0x5e0 [ 2051.179473][T11761] __kmalloc+0xb2/0x340 [ 2051.182527][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2051.183639][T11761] ? veth_dev_init+0x1dd/0x3e0 [ 2051.183681][T11761] veth_dev_init+0x1dd/0x3e0 [ 2051.202253][T11761] ? veth_get_num_queues+0x50/0x50 [ 2051.207406][T11761] register_netdevice+0x5e1/0x1680 [ 2051.212569][T11761] ? netdev_change_features+0xb0/0xb0 [ 2051.217977][T11761] ? dev_addr_mod+0x2c9/0x3f0 [ 2051.222693][T11761] veth_newlink+0x338/0x990 [ 2051.227235][T11761] ? veth_set_features+0x190/0x190 [ 2051.232376][T11761] ? netlink_rcv_skb+0x153/0x420 [ 2051.237345][T11761] ? netlink_unicast+0x543/0x7f0 [ 2051.242315][T11761] ? netlink_sendmsg+0x917/0xe10 [ 2051.247358][T11761] ? dev_addr_mod+0x2c9/0x3f0 [ 2051.252083][T11761] ? rtnl_create_link+0x7e8/0xc00 [ 2051.257148][T11761] ? veth_set_features+0x190/0x190 [ 2051.262293][T11761] __rtnl_newlink+0x1087/0x17e0 [ 2051.267200][T11761] ? rtnl_link_unregister+0x250/0x250 [ 2051.272608][T11761] ? find_held_lock+0x2d/0x110 [ 2051.277424][T11761] ? rcu_read_lock_sched_held+0x3a/0x70 03:29:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x7, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2051.282994][T11761] ? trace_kmalloc+0x32/0x100 [ 2051.287705][T11761] rtnl_newlink+0x64/0xa0 [ 2051.292063][T11761] ? __rtnl_newlink+0x17e0/0x17e0 [ 2051.297114][T11761] rtnetlink_rcv_msg+0x43a/0xca0 [ 2051.302086][T11761] ? rtnl_getlink+0xae0/0xae0 [ 2051.306784][T11761] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2051.312090][T11761] ? skb_clone+0x16e/0x3c0 [ 2051.316548][T11761] ? ref_tracker_free+0x370/0x6b0 [ 2051.321609][T11761] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2051.327021][T11761] netlink_rcv_skb+0x153/0x420 [ 2051.331820][T11761] ? rtnl_getlink+0xae0/0xae0 [ 2051.336542][T11761] ? netlink_ack+0xd50/0xd50 [ 2051.341160][T11761] ? netlink_deliver_tap+0x1a2/0xc40 [ 2051.346482][T11761] ? netlink_deliver_tap+0x1b1/0xc40 [ 2051.351814][T11761] netlink_unicast+0x543/0x7f0 [ 2051.356604][T11761] ? netlink_attachskb+0x880/0x880 [ 2051.361716][T11761] ? __phys_addr+0xc4/0x140 [ 2051.366229][T11761] ? __phys_addr_symbol+0x2c/0x70 [ 2051.371245][T11761] ? __check_object_size+0x2de/0x700 [ 2051.376567][T11761] netlink_sendmsg+0x917/0xe10 [ 2051.381367][T11761] ? netlink_unicast+0x7f0/0x7f0 [ 2051.386343][T11761] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2051.391657][T11761] ? netlink_unicast+0x7f0/0x7f0 [ 2051.396625][T11761] sock_sendmsg+0xcf/0x120 [ 2051.401059][T11761] ____sys_sendmsg+0x6eb/0x810 [ 2051.405818][T11761] ? copy_msghdr_from_user+0xfc/0x150 [ 2051.411198][T11761] ? kernel_sendmsg+0x50/0x50 [ 2051.415893][T11761] ? futex_unqueue+0xb3/0x120 [ 2051.420570][T11761] ___sys_sendmsg+0x110/0x1b0 [ 2051.425244][T11761] ? do_recvmmsg+0x6e0/0x6e0 [ 2051.429847][T11761] ? __fget_files+0x248/0x440 [ 2051.434555][T11761] ? lock_downgrade+0x6e0/0x6e0 [ 2051.439421][T11761] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2051.445415][T11761] ? __fget_files+0x26a/0x440 [ 2051.450108][T11761] ? __fget_light+0xe5/0x270 [ 2051.454692][T11761] __sys_sendmsg+0xf3/0x1c0 [ 2051.459193][T11761] ? __sys_sendmsg_sock+0x30/0x30 [ 2051.464214][T11761] ? lock_downgrade+0x6e0/0x6e0 [ 2051.469078][T11761] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2051.474974][T11761] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2051.480874][T11761] ? lockdep_hardirqs_on+0x79/0x100 [ 2051.486088][T11761] do_syscall_64+0x35/0xb0 [ 2051.490498][T11761] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2051.496393][T11761] RIP: 0033:0x7f58e888a5a9 [ 2051.500813][T11761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2051.520415][T11761] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2051.528841][T11761] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2051.536827][T11761] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2051.544795][T11761] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2051.552763][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2051.560727][T11761] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2051.568722][T11761] [ 2051.577119][T11761] memory: usage 307196kB, limit 307200kB, failcnt 41465 [ 2051.584117][T11761] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2051.601221][T11761] Memory cgroup stats for /syz1: [ 2051.601397][T11761] anon 135168 [ 2051.601397][T11761] file 389120 [ 2051.601397][T11761] kernel 314011648 [ 2051.601397][T11761] kernel_stack 32768 [ 2051.601397][T11761] pagetables 77824 [ 2051.601397][T11761] percpu 5593216 [ 2051.601397][T11761] sock 0 [ 2051.601397][T11761] vmalloc 0 [ 2051.601397][T11761] shmem 389120 [ 2051.601397][T11761] zswap 0 [ 2051.601397][T11761] zswapped 0 [ 2051.601397][T11761] file_mapped 389120 [ 2051.601397][T11761] file_dirty 0 [ 2051.601397][T11761] file_writeback 0 [ 2051.601397][T11761] swapcached 0 [ 2051.601397][T11761] anon_thp 0 [ 2051.601397][T11761] file_thp 0 [ 2051.601397][T11761] shmem_thp 0 [ 2051.601397][T11761] inactive_anon 225280 [ 2051.601397][T11761] active_anon 299008 [ 2051.601397][T11761] inactive_file 0 [ 2051.601397][T11761] active_file 0 [ 2051.601397][T11761] unevictable 0 [ 2051.601397][T11761] slab_reclaimable 21832 [ 2051.601397][T11761] slab_unreclaimable 308249776 [ 2051.601397][T11761] slab 308271608 [ 2051.694943][T11761] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11759,uid=0 [ 2051.712312][T11761] Memory cgroup out of memory: Killed process 11761 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2051.754088][T11785] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2051.764797][T11785] CPU: 1 PID: 11785 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2051.775250][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2051.785326][T11785] Call Trace: [ 2051.788621][T11785] [ 2051.791567][T11785] dump_stack_lvl+0xcd/0x134 [ 2051.796186][T11785] dump_header+0x10b/0x7f9 [ 2051.800633][T11785] oom_kill_process.cold+0x10/0x15 [ 2051.805774][T11785] out_of_memory+0x358/0x14a0 [ 2051.810469][T11785] ? find_held_lock+0x2d/0x110 [ 2051.815240][T11785] ? oom_killer_disable+0x270/0x270 [ 2051.820472][T11785] ? find_held_lock+0x2d/0x110 [ 2051.825260][T11785] mem_cgroup_out_of_memory+0x206/0x270 [ 2051.830830][T11785] ? mem_cgroup_margin+0x130/0x130 [ 2051.835964][T11785] ? lock_downgrade+0x6e0/0x6e0 [ 2051.840861][T11785] try_charge_memcg+0xf67/0x13f0 [ 2051.845830][T11785] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2051.851836][T11785] ? lock_downgrade+0x6e0/0x6e0 [ 2051.856710][T11785] charge_memcg+0x31/0x320 [ 2051.861143][T11785] __mem_cgroup_charge+0x27/0x90 [ 2051.866086][T11785] ? _compound_head+0x5d/0x150 [ 2051.870854][T11785] wp_page_copy+0x27c/0x1b60 [ 2051.875464][T11785] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2051.880924][T11785] ? lock_downgrade+0x6e0/0x6e0 [ 2051.885789][T11785] ? vm_normal_page+0x146/0x2a0 [ 2051.890658][T11785] do_wp_page+0x52c/0x1910 [ 2051.895084][T11785] __handle_mm_fault+0x1813/0x39b0 [ 2051.900208][T11785] ? vm_iomap_memory+0x190/0x190 [ 2051.905187][T11785] handle_mm_fault+0x1c8/0x780 [ 2051.909963][T11785] do_user_addr_fault+0x475/0x1210 [ 2051.915100][T11785] exc_page_fault+0x94/0x170 [ 2051.919716][T11785] asm_exc_page_fault+0x22/0x30 [ 2051.924575][T11785] RIP: 0033:0x7f70e7e34a15 [ 2051.928997][T11785] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2051.948608][T11785] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2051.954678][T11785] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2051.962653][T11785] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2051.970641][T11785] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2051.978620][T11785] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001f4e81 [ 2051.986599][T11785] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2051.994602][T11785] [ 2052.012891][T11785] memory: usage 307200kB, limit 307200kB, failcnt 56810 [ 2052.023848][T11785] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2052.037036][T11785] Memory cgroup stats for /syz3: [ 2052.037249][T11785] anon 90112 [ 2052.037249][T11785] file 782336 [ 2052.037249][T11785] kernel 313683968 [ 2052.037249][T11785] kernel_stack 65536 [ 2052.037249][T11785] pagetables 73728 [ 2052.037249][T11785] percpu 5602688 [ 2052.037249][T11785] sock 0 [ 2052.037249][T11785] vmalloc 0 [ 2052.037249][T11785] shmem 778240 [ 2052.037249][T11785] zswap 0 [ 2052.037249][T11785] zswapped 0 [ 2052.037249][T11785] file_mapped 778240 [ 2052.037249][T11785] file_dirty 4096 [ 2052.037249][T11785] file_writeback 0 [ 2052.037249][T11785] swapcached 0 [ 2052.037249][T11785] anon_thp 0 [ 2052.037249][T11785] file_thp 0 [ 2052.037249][T11785] shmem_thp 0 [ 2052.037249][T11785] inactive_anon 561152 [ 2052.037249][T11785] active_anon 307200 [ 2052.037249][T11785] inactive_file 0 [ 2052.037249][T11785] active_file 4096 [ 2052.037249][T11785] unevictable 0 [ 2052.037249][T11785] slab_reclaimable 123352 [ 2052.037249][T11785] slab_unreclaimable 307781576 [ 2052.037249][T11785] slab 307904928 [ 2052.133491][T11785] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11785,uid=0 03:29:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae4f}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1405}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x8, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xb92b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2c2, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xba28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3de0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) [ 2052.150242][T11785] Memory cgroup out of memory: Killed process 11785 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2052.182845][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2c3, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x9, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2052.277949][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1406}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae50}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xba29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xba2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2052.433372][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2052.475595][T11803] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2052.507557][T11803] CPU: 1 PID: 11803 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2052.518025][T11803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2052.528106][T11803] Call Trace: [ 2052.531395][T11803] [ 2052.534336][T11803] dump_stack_lvl+0xcd/0x134 [ 2052.538959][T11803] dump_header+0x10b/0x7f9 [ 2052.543411][T11803] oom_kill_process.cold+0x10/0x15 [ 2052.548560][T11803] out_of_memory+0x358/0x14a0 [ 2052.553275][T11803] ? find_held_lock+0x2d/0x110 [ 2052.558075][T11803] ? oom_killer_disable+0x270/0x270 [ 2052.563306][T11803] ? find_held_lock+0x2d/0x110 [ 2052.568113][T11803] mem_cgroup_out_of_memory+0x206/0x270 [ 2052.573678][T11803] ? mem_cgroup_margin+0x130/0x130 [ 2052.578809][T11803] ? lock_downgrade+0x6e0/0x6e0 [ 2052.583705][T11803] try_charge_memcg+0xf67/0x13f0 [ 2052.588682][T11803] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2052.594723][T11803] ? lock_downgrade+0x6e0/0x6e0 [ 2052.599610][T11803] charge_memcg+0x31/0x320 [ 2052.604044][T11803] __mem_cgroup_charge+0x27/0x90 [ 2052.608991][T11803] ? _compound_head+0x5d/0x150 [ 2052.613765][T11803] wp_page_copy+0x27c/0x1b60 [ 2052.618369][T11803] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2052.623832][T11803] ? lock_downgrade+0x6e0/0x6e0 [ 2052.628686][T11803] ? vm_normal_page+0x146/0x2a0 [ 2052.633554][T11803] do_wp_page+0x1d1/0x1910 [ 2052.637992][T11803] __handle_mm_fault+0x1813/0x39b0 [ 2052.643115][T11803] ? vm_iomap_memory+0x190/0x190 [ 2052.648087][T11803] handle_mm_fault+0x1c8/0x780 [ 2052.652863][T11803] do_user_addr_fault+0x475/0x1210 [ 2052.658002][T11803] exc_page_fault+0x94/0x170 [ 2052.662604][T11803] asm_exc_page_fault+0x22/0x30 [ 2052.667464][T11803] RIP: 0033:0x7f70e7e37970 [ 2052.671882][T11803] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2052.691497][T11803] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2052.697568][T11803] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2052.705540][T11803] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2052.713515][T11803] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2052.721835][T11803] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 03:29:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae51}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2c4, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xba2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1407}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2052.729810][T11803] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2052.737785][T11803] ? __x64_sys_socket+0xd/0xb0 [ 2052.742574][T11803] [ 2052.748603][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xe, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2052.814795][T11803] memory: usage 307200kB, limit 307200kB, failcnt 56871 [ 2052.824015][T11803] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2052.870999][T11803] Memory cgroup stats for /syz3: [ 2052.871168][T11803] anon 106496 [ 2052.871168][T11803] file 782336 [ 2052.871168][T11803] kernel 313683968 [ 2052.871168][T11803] kernel_stack 65536 [ 2052.871168][T11803] pagetables 73728 [ 2052.871168][T11803] percpu 5602688 [ 2052.871168][T11803] sock 0 [ 2052.871168][T11803] vmalloc 0 [ 2052.871168][T11803] shmem 778240 [ 2052.871168][T11803] zswap 0 [ 2052.871168][T11803] zswapped 0 [ 2052.871168][T11803] file_mapped 778240 [ 2052.871168][T11803] file_dirty 4096 [ 2052.871168][T11803] file_writeback 0 [ 2052.871168][T11803] swapcached 0 [ 2052.871168][T11803] anon_thp 0 [ 2052.871168][T11803] file_thp 0 [ 2052.871168][T11803] shmem_thp 0 [ 2052.871168][T11803] inactive_anon 577536 [ 2052.871168][T11803] active_anon 307200 [ 2052.871168][T11803] inactive_file 0 [ 2052.871168][T11803] active_file 4096 [ 2052.871168][T11803] unevictable 0 [ 2052.871168][T11803] slab_reclaimable 123352 [ 2052.871168][T11803] slab_unreclaimable 307779472 [ 2052.871168][T11803] slab 307902824 03:29:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3df0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2c5, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae52}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbb28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2052.945940][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2052.988289][T11803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11803,uid=0 [ 2053.004147][T11803] Memory cgroup out of memory: Killed process 11803 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbb29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x60, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2c6, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2053.114822][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbb2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1504}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2053.224843][T11835] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2053.249619][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2053.257656][T11835] CPU: 1 PID: 11835 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2053.269271][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2053.279352][T11835] Call Trace: [ 2053.282703][T11835] [ 2053.285650][T11835] dump_stack_lvl+0xcd/0x134 [ 2053.290269][T11835] dump_header+0x10b/0x7f9 [ 2053.294716][T11835] oom_kill_process.cold+0x10/0x15 [ 2053.299860][T11835] out_of_memory+0x358/0x14a0 [ 2053.304568][T11835] ? find_held_lock+0x2d/0x110 [ 2053.309367][T11835] ? oom_killer_disable+0x270/0x270 [ 2053.314592][T11835] ? find_held_lock+0x2d/0x110 [ 2053.319381][T11835] mem_cgroup_out_of_memory+0x206/0x270 [ 2053.324937][T11835] ? mem_cgroup_margin+0x130/0x130 [ 2053.330054][T11835] ? lock_downgrade+0x6e0/0x6e0 [ 2053.334923][T11835] try_charge_memcg+0xf67/0x13f0 [ 2053.339872][T11835] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2053.345866][T11835] ? lock_downgrade+0x6e0/0x6e0 [ 2053.350735][T11835] charge_memcg+0x31/0x320 [ 2053.355158][T11835] __mem_cgroup_charge+0x27/0x90 [ 2053.360102][T11835] ? _compound_head+0x5d/0x150 [ 2053.364869][T11835] wp_page_copy+0x27c/0x1b60 [ 2053.369473][T11835] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2053.374938][T11835] ? lock_downgrade+0x6e0/0x6e0 [ 2053.379791][T11835] ? vm_normal_page+0x146/0x2a0 [ 2053.384659][T11835] do_wp_page+0x1d1/0x1910 [ 2053.389085][T11835] __handle_mm_fault+0x1813/0x39b0 [ 2053.394210][T11835] ? vm_iomap_memory+0x190/0x190 [ 2053.399174][T11835] handle_mm_fault+0x1c8/0x780 [ 2053.403946][T11835] do_user_addr_fault+0x475/0x1210 [ 2053.409073][T11835] exc_page_fault+0x94/0x170 [ 2053.413674][T11835] asm_exc_page_fault+0x22/0x30 [ 2053.418530][T11835] RIP: 0033:0x7f70e7e37970 [ 2053.422945][T11835] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2053.442559][T11835] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2053.448628][T11835] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2053.456601][T11835] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2053.464572][T11835] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e 03:29:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbb2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae53}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2053.472543][T11835] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2053.480516][T11835] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2053.488486][T11835] ? __x64_sys_socket+0xd/0xb0 [ 2053.493275][T11835] [ 2053.506490][T11835] memory: usage 307200kB, limit 307200kB, failcnt 56930 [ 2053.527341][T11835] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2053.541198][T11835] Memory cgroup stats for /syz3: [ 2053.541370][T11835] anon 106496 [ 2053.541370][T11835] file 782336 [ 2053.541370][T11835] kernel 313683968 [ 2053.541370][T11835] kernel_stack 65536 [ 2053.541370][T11835] pagetables 73728 [ 2053.541370][T11835] percpu 5602688 [ 2053.541370][T11835] sock 0 [ 2053.541370][T11835] vmalloc 0 [ 2053.541370][T11835] shmem 778240 [ 2053.541370][T11835] zswap 0 [ 2053.541370][T11835] zswapped 0 [ 2053.541370][T11835] file_mapped 778240 [ 2053.541370][T11835] file_dirty 4096 [ 2053.541370][T11835] file_writeback 0 [ 2053.541370][T11835] swapcached 0 [ 2053.541370][T11835] anon_thp 0 [ 2053.541370][T11835] file_thp 0 [ 2053.541370][T11835] shmem_thp 0 [ 2053.541370][T11835] inactive_anon 577536 [ 2053.541370][T11835] active_anon 307200 [ 2053.541370][T11835] inactive_file 0 [ 2053.541370][T11835] active_file 4096 [ 2053.541370][T11835] unevictable 0 [ 2053.541370][T11835] slab_reclaimable 123352 03:29:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2c7, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e00000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbc28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2053.541370][T11835] slab_unreclaimable 307779472 [ 2053.541370][T11835] slab 307902824 [ 2053.640754][T11835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11835,uid=0 [ 2053.656632][T11835] Memory cgroup out of memory: Killed process 11835 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbc29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xf0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2c8, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2053.718414][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1505}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2053.802578][T11857] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2053.837728][T11857] CPU: 0 PID: 11857 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2053.848206][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2053.858287][T11857] Call Trace: [ 2053.861583][T11857] [ 2053.864526][T11857] dump_stack_lvl+0xcd/0x134 [ 2053.869145][T11857] dump_header+0x10b/0x7f9 [ 2053.873587][T11857] oom_kill_process.cold+0x10/0x15 [ 2053.878721][T11857] out_of_memory+0x358/0x14a0 [ 2053.883435][T11857] ? find_held_lock+0x2d/0x110 [ 2053.888217][T11857] ? oom_killer_disable+0x270/0x270 [ 2053.893445][T11857] ? find_held_lock+0x2d/0x110 [ 2053.898238][T11857] mem_cgroup_out_of_memory+0x206/0x270 [ 2053.903812][T11857] ? mem_cgroup_margin+0x130/0x130 [ 2053.908948][T11857] ? lock_downgrade+0x6e0/0x6e0 [ 2053.913851][T11857] try_charge_memcg+0xf67/0x13f0 [ 2053.918828][T11857] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2053.924863][T11857] ? lock_downgrade+0x6e0/0x6e0 [ 2053.929762][T11857] charge_memcg+0x31/0x320 [ 2053.934214][T11857] __mem_cgroup_charge+0x27/0x90 [ 2053.939183][T11857] ? _compound_head+0x5d/0x150 [ 2053.943972][T11857] wp_page_copy+0x27c/0x1b60 03:29:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x300, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2c9, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2053.948600][T11857] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2053.954079][T11857] ? lock_downgrade+0x6e0/0x6e0 [ 2053.958950][T11857] ? vm_normal_page+0x146/0x2a0 [ 2053.963849][T11857] do_wp_page+0x52c/0x1910 [ 2053.968295][T11857] __handle_mm_fault+0x1813/0x39b0 [ 2053.973445][T11857] ? vm_iomap_memory+0x190/0x190 [ 2053.978431][T11857] handle_mm_fault+0x1c8/0x780 [ 2053.983237][T11857] do_user_addr_fault+0x475/0x1210 [ 2053.988392][T11857] exc_page_fault+0x94/0x170 [ 2053.993016][T11857] asm_exc_page_fault+0x22/0x30 [ 2053.997895][T11857] RIP: 0033:0x7f70e7e34a15 [ 2054.002325][T11857] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2054.021971][T11857] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2054.028069][T11857] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2054.036056][T11857] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2054.044039][T11857] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 03:29:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x500, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbc2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2054.052030][T11857] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001f5672 [ 2054.060025][T11857] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2054.068046][T11857] [ 2054.097342][T11857] memory: usage 307200kB, limit 307200kB, failcnt 56965 [ 2054.105204][T11857] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2054.120379][T11857] Memory cgroup stats for /syz3: [ 2054.120592][T11857] anon 90112 [ 2054.120592][T11857] file 782336 [ 2054.120592][T11857] kernel 313700352 [ 2054.120592][T11857] kernel_stack 65536 [ 2054.120592][T11857] pagetables 73728 [ 2054.120592][T11857] percpu 5602688 [ 2054.120592][T11857] sock 0 [ 2054.120592][T11857] vmalloc 0 [ 2054.120592][T11857] shmem 778240 [ 2054.120592][T11857] zswap 0 [ 2054.120592][T11857] zswapped 0 [ 2054.120592][T11857] file_mapped 778240 [ 2054.120592][T11857] file_dirty 4096 [ 2054.120592][T11857] file_writeback 0 [ 2054.120592][T11857] swapcached 0 [ 2054.120592][T11857] anon_thp 0 [ 2054.120592][T11857] file_thp 0 [ 2054.120592][T11857] shmem_thp 0 [ 2054.120592][T11857] inactive_anon 561152 [ 2054.120592][T11857] active_anon 307200 [ 2054.120592][T11857] inactive_file 0 [ 2054.120592][T11857] active_file 4096 [ 2054.120592][T11857] unevictable 0 [ 2054.120592][T11857] slab_reclaimable 123352 [ 2054.120592][T11857] slab_unreclaimable 307790872 [ 2054.120592][T11857] slab 307914224 [ 2054.224825][T11857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11857,uid=0 [ 2054.245556][T11857] Memory cgroup out of memory: Killed process 11857 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2054.263495][T11854] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2054.275990][T11854] CPU: 1 PID: 11854 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2054.286443][T11854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2054.296523][T11854] Call Trace: [ 2054.299808][T11854] [ 2054.302732][T11854] dump_stack_lvl+0xcd/0x134 [ 2054.307333][T11854] dump_header+0x10b/0x7f9 [ 2054.311783][T11854] oom_kill_process.cold+0x10/0x15 [ 2054.316929][T11854] out_of_memory+0x358/0x14a0 [ 2054.321638][T11854] ? oom_killer_disable+0x270/0x270 [ 2054.327111][T11854] ? find_held_lock+0x2d/0x110 [ 2054.331893][T11854] mem_cgroup_out_of_memory+0x206/0x270 [ 2054.337452][T11854] ? mem_cgroup_margin+0x130/0x130 [ 2054.342683][T11854] ? lock_downgrade+0x6e0/0x6e0 [ 2054.347585][T11854] try_charge_memcg+0xf67/0x13f0 [ 2054.352549][T11854] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2054.358538][T11854] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2054.364283][T11854] ? lock_downgrade+0x6e0/0x6e0 [ 2054.369163][T11854] obj_cgroup_charge+0x2ab/0x5e0 [ 2054.374124][T11854] __kmalloc+0xb2/0x340 [ 2054.378292][T11854] ? veth_dev_init+0x1dd/0x3e0 [ 2054.383079][T11854] veth_dev_init+0x1dd/0x3e0 [ 2054.387678][T11854] ? veth_get_num_queues+0x50/0x50 [ 2054.392808][T11854] register_netdevice+0x5e1/0x1680 [ 2054.398023][T11854] ? netdev_change_features+0xb0/0xb0 [ 2054.403418][T11854] ? dev_addr_mod+0x2c9/0x3f0 [ 2054.408113][T11854] veth_newlink+0x338/0x990 [ 2054.412637][T11854] ? veth_set_features+0x190/0x190 [ 2054.417752][T11854] ? netlink_rcv_skb+0x153/0x420 [ 2054.422707][T11854] ? netlink_unicast+0x543/0x7f0 [ 2054.427655][T11854] ? netlink_sendmsg+0x917/0xe10 [ 2054.432643][T11854] ? dev_addr_mod+0x2c9/0x3f0 [ 2054.437336][T11854] ? rtnl_create_link+0x7e8/0xc00 [ 2054.442377][T11854] ? veth_set_features+0x190/0x190 [ 2054.447515][T11854] __rtnl_newlink+0x1087/0x17e0 [ 2054.452420][T11854] ? rtnl_link_unregister+0x250/0x250 [ 2054.457911][T11854] ? find_held_lock+0x2d/0x110 [ 2054.462731][T11854] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2054.468291][T11854] ? trace_kmalloc+0x32/0x100 [ 2054.472987][T11854] rtnl_newlink+0x64/0xa0 [ 2054.477327][T11854] ? __rtnl_newlink+0x17e0/0x17e0 [ 2054.482368][T11854] rtnetlink_rcv_msg+0x43a/0xca0 [ 2054.487321][T11854] ? rtnl_getlink+0xae0/0xae0 [ 2054.492191][T11854] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2054.497490][T11854] ? ref_tracker_free+0x370/0x6b0 [ 2054.502533][T11854] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2054.507922][T11854] netlink_rcv_skb+0x153/0x420 [ 2054.512706][T11854] ? rtnl_getlink+0xae0/0xae0 [ 2054.517392][T11854] ? netlink_ack+0xd50/0xd50 [ 2054.521999][T11854] ? netlink_deliver_tap+0x1a2/0xc40 [ 2054.527303][T11854] ? netlink_deliver_tap+0x1b1/0xc40 [ 2054.532611][T11854] netlink_unicast+0x543/0x7f0 [ 2054.537397][T11854] ? netlink_attachskb+0x880/0x880 [ 2054.542525][T11854] ? __phys_addr+0xc4/0x140 [ 2054.547642][T11854] ? __phys_addr_symbol+0x2c/0x70 [ 2054.552681][T11854] ? __check_object_size+0x2de/0x700 [ 2054.557985][T11854] netlink_sendmsg+0x917/0xe10 [ 2054.562790][T11854] ? netlink_unicast+0x7f0/0x7f0 [ 2054.567768][T11854] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2054.573076][T11854] ? netlink_unicast+0x7f0/0x7f0 [ 2054.578026][T11854] sock_sendmsg+0xcf/0x120 [ 2054.582483][T11854] ____sys_sendmsg+0x6eb/0x810 [ 2054.587267][T11854] ? copy_msghdr_from_user+0xfc/0x150 [ 2054.592662][T11854] ? kernel_sendmsg+0x50/0x50 [ 2054.597353][T11854] ? futex_unqueue+0xb3/0x120 [ 2054.602052][T11854] ___sys_sendmsg+0x110/0x1b0 [ 2054.606742][T11854] ? do_recvmmsg+0x6e0/0x6e0 [ 2054.611364][T11854] ? __fget_files+0x248/0x440 [ 2054.616068][T11854] ? lock_downgrade+0x6e0/0x6e0 [ 2054.620939][T11854] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2054.626937][T11854] ? __fget_files+0x26a/0x440 [ 2054.631635][T11854] ? __fget_light+0xe5/0x270 [ 2054.636249][T11854] __sys_sendmsg+0xf3/0x1c0 [ 2054.640770][T11854] ? __sys_sendmsg_sock+0x30/0x30 [ 2054.645799][T11854] ? lock_downgrade+0x6e0/0x6e0 [ 2054.650689][T11854] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2054.656614][T11854] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2054.662529][T11854] ? lockdep_hardirqs_on+0x79/0x100 [ 2054.667756][T11854] do_syscall_64+0x35/0xb0 [ 2054.672205][T11854] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2054.678135][T11854] RIP: 0033:0x7f58e888a5a9 [ 2054.682562][T11854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2054.702166][T11854] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2054.710583][T11854] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2054.718578][T11854] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2054.726569][T11854] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2054.734549][T11854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2054.742515][T11854] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2054.750539][T11854] [ 2054.782501][T11854] memory: usage 307196kB, limit 307200kB, failcnt 41725 [ 2054.790045][T11854] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2054.797745][T11854] Memory cgroup stats for /syz1: [ 2054.797935][T11854] anon 135168 [ 2054.797935][T11854] file 389120 [ 2054.797935][T11854] kernel 314011648 [ 2054.797935][T11854] kernel_stack 32768 [ 2054.797935][T11854] pagetables 77824 [ 2054.797935][T11854] percpu 5593216 [ 2054.797935][T11854] sock 0 [ 2054.797935][T11854] vmalloc 0 [ 2054.797935][T11854] shmem 389120 [ 2054.797935][T11854] zswap 0 [ 2054.797935][T11854] zswapped 0 [ 2054.797935][T11854] file_mapped 389120 [ 2054.797935][T11854] file_dirty 0 [ 2054.797935][T11854] file_writeback 0 [ 2054.797935][T11854] swapcached 0 [ 2054.797935][T11854] anon_thp 0 [ 2054.797935][T11854] file_thp 0 [ 2054.797935][T11854] shmem_thp 0 [ 2054.797935][T11854] inactive_anon 225280 [ 2054.797935][T11854] active_anon 299008 [ 2054.797935][T11854] inactive_file 0 [ 2054.797935][T11854] active_file 0 [ 2054.797935][T11854] unevictable 0 [ 2054.797935][T11854] slab_reclaimable 21832 [ 2054.797935][T11854] slab_unreclaimable 308249776 [ 2054.797935][T11854] slab 308271608 [ 2054.893847][T11854] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11850,uid=0 [ 2054.910202][T11854] Memory cgroup out of memory: Killed process 11854 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 03:29:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae54}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1506}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbc2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x600, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e10000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2ca, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1507}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbd28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbd29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2055.157506][T11880] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2055.168966][T11880] CPU: 1 PID: 11880 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2055.179424][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2055.189507][T11880] Call Trace: [ 2055.192808][T11880] [ 2055.195753][T11880] dump_stack_lvl+0xcd/0x134 [ 2055.200371][T11880] dump_header+0x10b/0x7f9 [ 2055.204822][T11880] oom_kill_process.cold+0x10/0x15 [ 2055.209966][T11880] out_of_memory+0x358/0x14a0 [ 2055.214690][T11880] ? find_held_lock+0x2d/0x110 [ 2055.219478][T11880] ? oom_killer_disable+0x270/0x270 [ 2055.224716][T11880] ? find_held_lock+0x2d/0x110 [ 2055.229510][T11880] mem_cgroup_out_of_memory+0x206/0x270 [ 2055.235088][T11880] ? mem_cgroup_margin+0x130/0x130 [ 2055.240232][T11880] ? lock_downgrade+0x6e0/0x6e0 [ 2055.245135][T11880] try_charge_memcg+0xf67/0x13f0 [ 2055.250109][T11880] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2055.256124][T11880] ? lock_downgrade+0x6e0/0x6e0 [ 2055.261002][T11880] charge_memcg+0x31/0x320 [ 2055.265438][T11880] __mem_cgroup_charge+0x27/0x90 [ 2055.270380][T11880] ? _compound_head+0x5d/0x150 [ 2055.275151][T11880] wp_page_copy+0x27c/0x1b60 [ 2055.279754][T11880] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2055.285221][T11880] ? lock_downgrade+0x6e0/0x6e0 [ 2055.290075][T11880] ? vm_normal_page+0x146/0x2a0 [ 2055.294943][T11880] do_wp_page+0x1d1/0x1910 [ 2055.299367][T11880] __handle_mm_fault+0x1813/0x39b0 [ 2055.304495][T11880] ? vm_iomap_memory+0x190/0x190 [ 2055.309467][T11880] handle_mm_fault+0x1c8/0x780 [ 2055.314241][T11880] do_user_addr_fault+0x475/0x1210 [ 2055.319373][T11880] exc_page_fault+0x94/0x170 [ 2055.323975][T11880] asm_exc_page_fault+0x22/0x30 [ 2055.328833][T11880] RIP: 0033:0x7f70e7e37970 [ 2055.333250][T11880] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 03:29:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x700, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1604}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2cb, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2055.352865][T11880] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2055.358935][T11880] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2055.366913][T11880] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2055.374888][T11880] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2055.383035][T11880] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2055.391021][T11880] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2055.398993][T11880] ? __x64_sys_socket+0xd/0xb0 [ 2055.403786][T11880] 03:29:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbd2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae55}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbd2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2cc, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2055.621474][T11880] memory: usage 307200kB, limit 307200kB, failcnt 57024 [ 2055.631585][T11880] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2055.649728][T11880] Memory cgroup stats for /syz3: [ 2055.649942][T11880] anon 106496 [ 2055.649942][T11880] file 782336 [ 2055.649942][T11880] kernel 313683968 [ 2055.649942][T11880] kernel_stack 65536 [ 2055.649942][T11880] pagetables 73728 [ 2055.649942][T11880] percpu 5602688 [ 2055.649942][T11880] sock 0 [ 2055.649942][T11880] vmalloc 0 [ 2055.649942][T11880] shmem 778240 [ 2055.649942][T11880] zswap 0 [ 2055.649942][T11880] zswapped 0 [ 2055.649942][T11880] file_mapped 778240 [ 2055.649942][T11880] file_dirty 4096 [ 2055.649942][T11880] file_writeback 0 [ 2055.649942][T11880] swapcached 0 [ 2055.649942][T11880] anon_thp 0 [ 2055.649942][T11880] file_thp 0 [ 2055.649942][T11880] shmem_thp 0 [ 2055.649942][T11880] inactive_anon 577536 [ 2055.649942][T11880] active_anon 307200 [ 2055.649942][T11880] inactive_file 0 [ 2055.649942][T11880] active_file 4096 [ 2055.649942][T11880] unevictable 0 [ 2055.649942][T11880] slab_reclaimable 123352 [ 2055.649942][T11880] slab_unreclaimable 307779472 [ 2055.649942][T11880] slab 307902824 [ 2055.750391][T11880] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11880,uid=0 03:29:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e20000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1605}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbe28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x900, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae56}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2cd, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2055.766402][T11880] Memory cgroup out of memory: Killed process 11880 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1606}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbe29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae57}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbe2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2ce, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1607}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2056.074827][T11921] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2056.103313][T11921] CPU: 1 PID: 11921 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2056.113780][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2056.119490][T11934] __nla_validate_parse: 12 callbacks suppressed [ 2056.119511][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2056.123932][T11921] Call Trace: [ 2056.123945][T11921] [ 2056.131640][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2056.139334][T11921] dump_stack_lvl+0xcd/0x134 [ 2056.139371][T11921] dump_header+0x10b/0x7f9 [ 2056.139401][T11921] oom_kill_process.cold+0x10/0x15 [ 2056.139427][T11921] out_of_memory+0x358/0x14a0 [ 2056.139458][T11921] ? find_held_lock+0x2d/0x110 [ 2056.139481][T11921] ? oom_killer_disable+0x270/0x270 [ 2056.139509][T11921] ? find_held_lock+0x2d/0x110 [ 2056.139535][T11921] mem_cgroup_out_of_memory+0x206/0x270 [ 2056.139560][T11921] ? mem_cgroup_margin+0x130/0x130 [ 2056.198991][T11921] ? lock_downgrade+0x6e0/0x6e0 [ 2056.203877][T11921] try_charge_memcg+0xf67/0x13f0 [ 2056.208838][T11921] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2056.214820][T11921] ? lock_downgrade+0x6e0/0x6e0 [ 2056.219677][T11921] charge_memcg+0x31/0x320 [ 2056.224106][T11921] __mem_cgroup_charge+0x27/0x90 [ 2056.229058][T11921] ? _compound_head+0x5d/0x150 [ 2056.233835][T11921] wp_page_copy+0x27c/0x1b60 [ 2056.238431][T11921] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2056.243894][T11921] ? lock_downgrade+0x6e0/0x6e0 [ 2056.248759][T11921] ? vm_normal_page+0x146/0x2a0 [ 2056.253609][T11921] do_wp_page+0x1d1/0x1910 [ 2056.258037][T11921] __handle_mm_fault+0x1813/0x39b0 [ 2056.263160][T11921] ? vm_iomap_memory+0x190/0x190 [ 2056.268113][T11921] handle_mm_fault+0x1c8/0x780 [ 2056.272872][T11921] do_user_addr_fault+0x475/0x1210 [ 2056.277987][T11921] exc_page_fault+0x94/0x170 [ 2056.282580][T11921] asm_exc_page_fault+0x22/0x30 [ 2056.287424][T11921] RIP: 0033:0x7f70e7e37970 [ 2056.291833][T11921] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2056.311437][T11921] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2056.317499][T11921] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2056.325462][T11921] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2056.333427][T11921] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2056.341392][T11921] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2056.349446][T11921] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2056.357426][T11921] ? __x64_sys_socket+0xd/0xb0 [ 2056.362221][T11921] [ 2056.367674][T11921] memory: usage 307200kB, limit 307200kB, failcnt 57091 [ 2056.374727][T11921] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2056.381773][T11921] Memory cgroup stats for /syz3: [ 2056.381927][T11921] anon 106496 [ 2056.381927][T11921] file 782336 [ 2056.381927][T11921] kernel 313667584 [ 2056.381927][T11921] kernel_stack 65536 [ 2056.381927][T11921] pagetables 73728 [ 2056.381927][T11921] percpu 5602688 [ 2056.381927][T11921] sock 0 [ 2056.381927][T11921] vmalloc 0 [ 2056.381927][T11921] shmem 778240 [ 2056.381927][T11921] zswap 0 [ 2056.381927][T11921] zswapped 0 [ 2056.381927][T11921] file_mapped 778240 [ 2056.381927][T11921] file_dirty 4096 [ 2056.381927][T11921] file_writeback 0 [ 2056.381927][T11921] swapcached 0 [ 2056.381927][T11921] anon_thp 0 [ 2056.381927][T11921] file_thp 0 [ 2056.381927][T11921] shmem_thp 0 [ 2056.381927][T11921] inactive_anon 577536 [ 2056.381927][T11921] active_anon 307200 [ 2056.381927][T11921] inactive_file 0 [ 2056.381927][T11921] active_file 4096 [ 2056.381927][T11921] unevictable 0 [ 2056.381927][T11921] slab_reclaimable 123352 [ 2056.381927][T11921] slab_unreclaimable 307770176 [ 2056.381927][T11921] slab 307893528 03:29:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e30000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbe2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xe00, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1704}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12e2cf, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae58}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2056.479136][T11921] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11921,uid=0 [ 2056.499016][T11921] Memory cgroup out of memory: Killed process 11921 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbf28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2056.559686][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbf29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xec0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae59}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1705}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2056.714338][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2056.739776][T11945] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2056.786089][T11945] CPU: 0 PID: 11945 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2056.796562][T11945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2056.806643][T11945] Call Trace: [ 2056.809946][T11945] [ 2056.812900][T11945] dump_stack_lvl+0xcd/0x134 [ 2056.814255][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2056.817505][T11945] dump_header+0x10b/0x7f9 [ 2056.817540][T11945] oom_kill_process.cold+0x10/0x15 [ 2056.817570][T11945] out_of_memory+0x358/0x14a0 [ 2056.826962][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2056.831145][T11945] ? find_held_lock+0x2d/0x110 [ 2056.831176][T11945] ? oom_killer_disable+0x270/0x270 [ 2056.831209][T11945] ? find_held_lock+0x2d/0x110 [ 2056.864885][T11945] mem_cgroup_out_of_memory+0x206/0x270 [ 2056.870480][T11945] ? mem_cgroup_margin+0x130/0x130 [ 2056.875621][T11945] ? lock_downgrade+0x6e0/0x6e0 [ 2056.880522][T11945] try_charge_memcg+0xf67/0x13f0 [ 2056.885496][T11945] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2056.891525][T11945] ? lock_downgrade+0x6e0/0x6e0 [ 2056.896426][T11945] charge_memcg+0x31/0x320 [ 2056.901054][T11945] __mem_cgroup_charge+0x27/0x90 [ 2056.906015][T11945] ? _compound_head+0x5d/0x150 [ 2056.910800][T11945] wp_page_copy+0x27c/0x1b60 [ 2056.915421][T11945] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2056.920915][T11945] ? lock_downgrade+0x6e0/0x6e0 [ 2056.925792][T11945] ? vm_normal_page+0x146/0x2a0 [ 2056.930687][T11945] do_wp_page+0x1d1/0x1910 [ 2056.935139][T11945] __handle_mm_fault+0x1813/0x39b0 [ 2056.940287][T11945] ? vm_iomap_memory+0x190/0x190 [ 2056.945254][T11945] handle_mm_fault+0x1c8/0x780 [ 2056.950030][T11945] do_user_addr_fault+0x475/0x1210 [ 2056.955199][T11945] exc_page_fault+0x94/0x170 [ 2056.959821][T11945] asm_exc_page_fault+0x22/0x30 [ 2056.964700][T11945] RIP: 0033:0x7f70e7e37970 [ 2056.969135][T11945] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2056.988760][T11945] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2056.994819][T11945] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2057.002803][T11945] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2057.010784][T11945] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2057.018746][T11945] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2057.026720][T11945] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2057.034696][T11945] ? __x64_sys_socket+0xd/0xb0 [ 2057.039487][T11945] [ 2057.053572][T11945] memory: usage 307200kB, limit 307200kB, failcnt 57141 [ 2057.060816][T11945] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2057.067800][T11945] Memory cgroup stats for /syz3: [ 2057.068014][T11945] anon 106496 [ 2057.068014][T11945] file 782336 [ 2057.068014][T11945] kernel 313683968 [ 2057.068014][T11945] kernel_stack 65536 [ 2057.068014][T11945] pagetables 73728 [ 2057.068014][T11945] percpu 5602688 [ 2057.068014][T11945] sock 0 [ 2057.068014][T11945] vmalloc 0 [ 2057.068014][T11945] shmem 778240 [ 2057.068014][T11945] zswap 0 [ 2057.068014][T11945] zswapped 0 [ 2057.068014][T11945] file_mapped 778240 [ 2057.068014][T11945] file_dirty 4096 [ 2057.068014][T11945] file_writeback 0 [ 2057.068014][T11945] swapcached 0 [ 2057.068014][T11945] anon_thp 0 [ 2057.068014][T11945] file_thp 0 [ 2057.068014][T11945] shmem_thp 0 [ 2057.068014][T11945] inactive_anon 577536 [ 2057.068014][T11945] active_anon 307200 [ 2057.068014][T11945] inactive_file 0 [ 2057.068014][T11945] active_file 4096 [ 2057.068014][T11945] unevictable 0 [ 2057.068014][T11945] slab_reclaimable 123352 [ 2057.068014][T11945] slab_unreclaimable 307779472 [ 2057.068014][T11945] slab 307902824 [ 2057.163638][T11945] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11945,uid=0 03:29:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e40000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x2000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1706}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbf2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2057.185234][T11945] Memory cgroup out of memory: Killed process 11945 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xbf2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2057.233272][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2057.267353][T11956] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2057.317703][T11956] CPU: 1 PID: 11956 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2057.328172][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2057.338245][T11956] Call Trace: [ 2057.341545][T11956] [ 2057.344495][T11956] dump_stack_lvl+0xcd/0x134 [ 2057.349117][T11956] dump_header+0x10b/0x7f9 [ 2057.353565][T11956] oom_kill_process.cold+0x10/0x15 [ 2057.358705][T11956] out_of_memory+0x358/0x14a0 [ 2057.363419][T11956] ? find_held_lock+0x2d/0x110 [ 2057.368212][T11956] ? oom_killer_disable+0x270/0x270 [ 2057.373452][T11956] ? find_held_lock+0x2d/0x110 [ 2057.378260][T11956] mem_cgroup_out_of_memory+0x206/0x270 [ 2057.383839][T11956] ? mem_cgroup_margin+0x130/0x130 [ 2057.388975][T11956] ? lock_downgrade+0x6e0/0x6e0 [ 2057.393872][T11956] try_charge_memcg+0xf67/0x13f0 [ 2057.398843][T11956] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2057.404862][T11956] ? lock_downgrade+0x6e0/0x6e0 [ 2057.409753][T11956] charge_memcg+0x31/0x320 [ 2057.414201][T11956] __mem_cgroup_charge+0x27/0x90 [ 2057.419165][T11956] ? _compound_head+0x5d/0x150 [ 2057.423947][T11956] wp_page_copy+0x27c/0x1b60 [ 2057.428555][T11956] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2057.434020][T11956] ? lock_downgrade+0x6e0/0x6e0 [ 2057.438877][T11956] ? vm_normal_page+0x146/0x2a0 [ 2057.443745][T11956] do_wp_page+0x1d1/0x1910 [ 2057.448174][T11956] __handle_mm_fault+0x1813/0x39b0 [ 2057.453298][T11956] ? vm_iomap_memory+0x190/0x190 [ 2057.458267][T11956] handle_mm_fault+0x1c8/0x780 [ 2057.463043][T11956] do_user_addr_fault+0x475/0x1210 [ 2057.468174][T11956] exc_page_fault+0x94/0x170 [ 2057.472772][T11956] asm_exc_page_fault+0x22/0x30 [ 2057.477629][T11956] RIP: 0033:0x7f58e8837970 [ 2057.482048][T11956] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2057.501746][T11956] RSP: 002b:00007ffce2e5b650 EFLAGS: 00010246 [ 2057.507816][T11956] RAX: 00000000fe0921cb RBX: 00007f58e89ac0e8 RCX: 0000001b2ea20000 03:29:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc028, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2057.515801][T11956] RDX: 0000000000000000 RSI: 0000001b2ea20018 RDI: 000000000c1c3fb0 [ 2057.523781][T11956] RBP: 00000000fe0921cb R08: 00000000000001cb R09: 00000000fe0921cf [ 2057.531764][T11956] R10: 00007ffce2e5b820 R11: 0000000000000246 R12: 00007f58e89a0000 [ 2057.539740][T11956] R13: 0000000000000001 R14: 0000000000000007 R15: ffffffff874e2c22 [ 2057.547715][T11956] ? __sys_sendmsg+0x82/0x1c0 [ 2057.552422][T11956] [ 2057.575963][T11956] memory: usage 307200kB, limit 307200kB, failcnt 42090 [ 2057.582952][T11956] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2057.590634][T11956] Memory cgroup stats for /syz1: [ 2057.590672][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2057.590857][T11956] anon 118784 [ 2057.590857][T11956] file 389120 [ 2057.590857][T11956] kernel 314064896 [ 2057.590857][T11956] kernel_stack 98304 [ 2057.590857][T11956] pagetables 81920 [ 2057.590857][T11956] percpu 5593216 [ 2057.590857][T11956] sock 0 [ 2057.590857][T11956] vmalloc 0 [ 2057.590857][T11956] shmem 389120 [ 2057.590857][T11956] zswap 0 [ 2057.590857][T11956] zswapped 0 [ 2057.590857][T11956] file_mapped 389120 [ 2057.590857][T11956] file_dirty 0 [ 2057.590857][T11956] file_writeback 0 [ 2057.590857][T11956] swapcached 0 [ 2057.590857][T11956] anon_thp 0 [ 2057.590857][T11956] file_thp 0 [ 2057.590857][T11956] shmem_thp 0 [ 2057.590857][T11956] inactive_anon 208896 [ 2057.590857][T11956] active_anon 299008 [ 2057.590857][T11956] inactive_file 0 03:29:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x2ec2, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1707}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2057.590857][T11956] active_file 0 [ 2057.590857][T11956] unevictable 0 [ 2057.590857][T11956] slab_reclaimable 21832 [ 2057.590857][T11956] slab_unreclaimable 308236032 [ 2057.590857][T11956] slab 308257864 [ 2057.767389][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2057.792219][T11956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11956,uid=0 03:29:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae5a}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2057.809623][T11956] Memory cgroup out of memory: Killed process 11956 (syz-executor.1) total-vm:54724kB, anon-rss:456kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2057.838747][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2057.911511][T11972] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2057.930667][T11972] CPU: 0 PID: 11972 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2057.941135][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2057.951206][T11972] Call Trace: [ 2057.954599][T11972] [ 2057.957549][T11972] dump_stack_lvl+0xcd/0x134 [ 2057.962162][T11972] dump_header+0x10b/0x7f9 [ 2057.966574][T11972] oom_kill_process.cold+0x10/0x15 [ 2057.971693][T11972] out_of_memory+0x358/0x14a0 [ 2057.976376][T11972] ? find_held_lock+0x2d/0x110 [ 2057.981135][T11972] ? oom_killer_disable+0x270/0x270 [ 2057.986345][T11972] ? find_held_lock+0x2d/0x110 [ 2057.991131][T11972] mem_cgroup_out_of_memory+0x206/0x270 [ 2057.996949][T11972] ? mem_cgroup_margin+0x130/0x130 [ 2058.002064][T11972] ? lock_downgrade+0x6e0/0x6e0 [ 2058.006937][T11972] try_charge_memcg+0xf67/0x13f0 [ 2058.011894][T11972] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2058.017893][T11972] ? lock_downgrade+0x6e0/0x6e0 [ 2058.022766][T11972] charge_memcg+0x31/0x320 [ 2058.027204][T11972] __mem_cgroup_charge+0x27/0x90 [ 2058.032150][T11972] ? _compound_head+0x5d/0x150 [ 2058.036923][T11972] wp_page_copy+0x27c/0x1b60 [ 2058.041526][T11972] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2058.047083][T11972] ? lock_downgrade+0x6e0/0x6e0 [ 2058.051941][T11972] ? vm_normal_page+0x146/0x2a0 [ 2058.056808][T11972] do_wp_page+0x1d1/0x1910 [ 2058.061235][T11972] __handle_mm_fault+0x1813/0x39b0 [ 2058.066361][T11972] ? vm_iomap_memory+0x190/0x190 [ 2058.071334][T11972] handle_mm_fault+0x1c8/0x780 [ 2058.076110][T11972] do_user_addr_fault+0x475/0x1210 [ 2058.081248][T11972] exc_page_fault+0x94/0x170 [ 2058.085854][T11972] asm_exc_page_fault+0x22/0x30 [ 2058.090731][T11972] RIP: 0033:0x7f70e7e37970 [ 2058.095154][T11972] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2058.114779][T11972] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2058.120855][T11972] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2058.128832][T11972] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2058.136808][T11972] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2058.144785][T11972] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2058.152763][T11972] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2058.160827][T11972] ? __x64_sys_socket+0xd/0xb0 [ 2058.165619][T11972] [ 2058.175975][T11972] memory: usage 307200kB, limit 307200kB, failcnt 57222 [ 2058.183106][T11972] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2058.195254][T11972] Memory cgroup stats for /syz3: [ 2058.195434][T11972] anon 106496 [ 2058.195434][T11972] file 782336 [ 2058.195434][T11972] kernel 313683968 [ 2058.195434][T11972] kernel_stack 65536 [ 2058.195434][T11972] pagetables 73728 [ 2058.195434][T11972] percpu 5602688 [ 2058.195434][T11972] sock 0 [ 2058.195434][T11972] vmalloc 0 [ 2058.195434][T11972] shmem 778240 [ 2058.195434][T11972] zswap 0 [ 2058.195434][T11972] zswapped 0 [ 2058.195434][T11972] file_mapped 778240 [ 2058.195434][T11972] file_dirty 4096 [ 2058.195434][T11972] file_writeback 0 [ 2058.195434][T11972] swapcached 0 [ 2058.195434][T11972] anon_thp 0 [ 2058.195434][T11972] file_thp 0 [ 2058.195434][T11972] shmem_thp 0 [ 2058.195434][T11972] inactive_anon 577536 [ 2058.195434][T11972] active_anon 307200 [ 2058.195434][T11972] inactive_file 4096 [ 2058.195434][T11972] active_file 0 [ 2058.195434][T11972] unevictable 0 [ 2058.195434][T11972] slab_reclaimable 123352 [ 2058.195434][T11972] slab_unreclaimable 307779472 [ 2058.195434][T11972] slab 307902824 [ 2058.292465][T11972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11972,uid=0 03:29:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000ffffffe40000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1804}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x6000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc029, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae5b}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2058.308324][T11972] Memory cgroup out of memory: Killed process 11972 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1805}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc02a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc02b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae5c}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2058.518342][T11998] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2058.544799][T11998] CPU: 0 PID: 11998 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2058.555276][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2058.565367][T11998] Call Trace: 03:29:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1806}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2058.568671][T11998] [ 2058.571622][T11998] dump_stack_lvl+0xcd/0x134 [ 2058.576249][T11998] dump_header+0x10b/0x7f9 [ 2058.580698][T11998] oom_kill_process.cold+0x10/0x15 [ 2058.585836][T11998] out_of_memory+0x358/0x14a0 [ 2058.590552][T11998] ? find_held_lock+0x2d/0x110 [ 2058.595354][T11998] ? oom_killer_disable+0x270/0x270 [ 2058.601023][T11998] ? find_held_lock+0x2d/0x110 [ 2058.605822][T11998] mem_cgroup_out_of_memory+0x206/0x270 [ 2058.611398][T11998] ? mem_cgroup_margin+0x130/0x130 [ 2058.616535][T11998] ? lock_downgrade+0x6e0/0x6e0 [ 2058.621439][T11998] try_charge_memcg+0xf67/0x13f0 [ 2058.626413][T11998] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2058.632426][T11998] ? lock_downgrade+0x6e0/0x6e0 [ 2058.637324][T11998] charge_memcg+0x31/0x320 [ 2058.641786][T11998] __mem_cgroup_charge+0x27/0x90 [ 2058.646761][T11998] ? _compound_head+0x5d/0x150 [ 2058.651559][T11998] wp_page_copy+0x27c/0x1b60 [ 2058.656187][T11998] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2058.661709][T11998] ? lock_downgrade+0x6e0/0x6e0 [ 2058.666678][T11998] ? vm_normal_page+0x146/0x2a0 [ 2058.671572][T11998] do_wp_page+0x52c/0x1910 [ 2058.676016][T11998] __handle_mm_fault+0x1813/0x39b0 [ 2058.681160][T11998] ? vm_iomap_memory+0x190/0x190 [ 2058.686155][T11998] handle_mm_fault+0x1c8/0x780 [ 2058.690956][T11998] do_user_addr_fault+0x475/0x1210 [ 2058.696209][T11998] exc_page_fault+0x94/0x170 [ 2058.700822][T11998] asm_exc_page_fault+0x22/0x30 [ 2058.705678][T11998] RIP: 0033:0x7f70e7e34a15 [ 2058.710095][T11998] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2058.729708][T11998] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2058.735792][T11998] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2058.743756][T11998] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2058.751721][T11998] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2058.759867][T11998] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001f68cf [ 2058.767830][T11998] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2058.775807][T11998] [ 2058.783420][T11998] memory: usage 307188kB, limit 307200kB, failcnt 57279 [ 2058.791123][T11998] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2058.798214][T11998] Memory cgroup stats for /syz3: [ 2058.798428][T11998] anon 90112 [ 2058.798428][T11998] file 782336 [ 2058.798428][T11998] kernel 313683968 [ 2058.798428][T11998] kernel_stack 65536 [ 2058.798428][T11998] pagetables 73728 [ 2058.798428][T11998] percpu 5602688 [ 2058.798428][T11998] sock 0 [ 2058.798428][T11998] vmalloc 0 [ 2058.798428][T11998] shmem 778240 [ 2058.798428][T11998] zswap 0 [ 2058.798428][T11998] zswapped 0 [ 2058.798428][T11998] file_mapped 778240 [ 2058.798428][T11998] file_dirty 4096 [ 2058.798428][T11998] file_writeback 0 [ 2058.798428][T11998] swapcached 0 [ 2058.798428][T11998] anon_thp 0 [ 2058.798428][T11998] file_thp 0 [ 2058.798428][T11998] shmem_thp 0 [ 2058.798428][T11998] inactive_anon 561152 [ 2058.798428][T11998] active_anon 307200 [ 2058.798428][T11998] inactive_file 0 [ 2058.798428][T11998] active_file 4096 [ 2058.798428][T11998] unevictable 0 [ 2058.798428][T11998] slab_reclaimable 123352 [ 2058.798428][T11998] slab_unreclaimable 307779776 [ 2058.798428][T11998] slab 307903128 [ 2058.903068][T11998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11998,uid=0 03:29:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e50000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xc00e, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc128, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1807}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2058.921740][T11998] Memory cgroup out of memory: Killed process 11998 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc129, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc12a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae5d}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc12b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1904}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xc22e, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc228, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2059.239773][T12027] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2059.252102][T12027] CPU: 1 PID: 12027 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2059.262557][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2059.272638][T12027] Call Trace: [ 2059.275933][T12027] [ 2059.278876][T12027] dump_stack_lvl+0xcd/0x134 [ 2059.283488][T12027] dump_header+0x10b/0x7f9 [ 2059.287932][T12027] oom_kill_process.cold+0x10/0x15 [ 2059.293067][T12027] out_of_memory+0x358/0x14a0 [ 2059.297779][T12027] ? find_held_lock+0x2d/0x110 [ 2059.302573][T12027] ? oom_killer_disable+0x270/0x270 [ 2059.307811][T12027] ? find_held_lock+0x2d/0x110 [ 2059.312602][T12027] mem_cgroup_out_of_memory+0x206/0x270 [ 2059.318176][T12027] ? mem_cgroup_margin+0x130/0x130 [ 2059.323301][T12027] ? lock_downgrade+0x6e0/0x6e0 [ 2059.328173][T12027] try_charge_memcg+0xf67/0x13f0 [ 2059.333133][T12027] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2059.339127][T12027] ? lock_downgrade+0x6e0/0x6e0 [ 2059.344048][T12027] charge_memcg+0x31/0x320 [ 2059.348498][T12027] __mem_cgroup_charge+0x27/0x90 [ 2059.353452][T12027] ? _compound_head+0x5d/0x150 [ 2059.358222][T12027] wp_page_copy+0x27c/0x1b60 [ 2059.362852][T12027] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2059.368434][T12027] ? lock_downgrade+0x6e0/0x6e0 [ 2059.373382][T12027] ? vm_normal_page+0x146/0x2a0 [ 2059.378257][T12027] do_wp_page+0x52c/0x1910 [ 2059.382690][T12027] __handle_mm_fault+0x1813/0x39b0 [ 2059.387820][T12027] ? vm_iomap_memory+0x190/0x190 [ 2059.392811][T12027] handle_mm_fault+0x1c8/0x780 [ 2059.397596][T12027] do_user_addr_fault+0x475/0x1210 [ 2059.402753][T12027] exc_page_fault+0x94/0x170 [ 2059.407368][T12027] asm_exc_page_fault+0x22/0x30 [ 2059.412235][T12027] RIP: 0033:0x7f70e7e34a15 [ 2059.416679][T12027] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2059.436497][T12027] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2059.442582][T12027] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2059.450657][T12027] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2059.458654][T12027] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2059.466652][T12027] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001f6bab [ 2059.474637][T12027] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2059.482615][T12027] [ 2059.500253][T12027] memory: usage 307184kB, limit 307200kB, failcnt 57331 [ 2059.515825][T12027] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2059.522719][T12027] Memory cgroup stats for /syz3: [ 2059.522942][T12027] anon 90112 [ 2059.522942][T12027] file 782336 [ 2059.522942][T12027] kernel 313683968 [ 2059.522942][T12027] kernel_stack 65536 [ 2059.522942][T12027] pagetables 73728 [ 2059.522942][T12027] percpu 5602688 [ 2059.522942][T12027] sock 0 [ 2059.522942][T12027] vmalloc 0 [ 2059.522942][T12027] shmem 778240 [ 2059.522942][T12027] zswap 0 [ 2059.522942][T12027] zswapped 0 [ 2059.522942][T12027] file_mapped 778240 [ 2059.522942][T12027] file_dirty 4096 [ 2059.522942][T12027] file_writeback 0 [ 2059.522942][T12027] swapcached 0 [ 2059.522942][T12027] anon_thp 0 [ 2059.522942][T12027] file_thp 0 [ 2059.522942][T12027] shmem_thp 0 [ 2059.522942][T12027] inactive_anon 561152 [ 2059.522942][T12027] active_anon 307200 [ 2059.522942][T12027] inactive_file 0 [ 2059.522942][T12027] active_file 4096 [ 2059.522942][T12027] unevictable 0 [ 2059.522942][T12027] slab_reclaimable 123352 [ 2059.522942][T12027] slab_unreclaimable 307779776 [ 2059.522942][T12027] slab 307903128 [ 2059.618547][T12027] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12027,uid=0 03:29:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000003e60000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1905}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc229, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xf000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae5e}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2059.634196][T12027] Memory cgroup out of memory: Killed process 12027 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc22a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc22b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1906}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae5f}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x34000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2059.830294][T12047] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2059.873427][T12047] CPU: 1 PID: 12047 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2059.883961][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2059.894040][T12047] Call Trace: [ 2059.897425][T12047] [ 2059.900372][T12047] dump_stack_lvl+0xcd/0x134 [ 2059.905016][T12047] dump_header+0x10b/0x7f9 [ 2059.909464][T12047] oom_kill_process.cold+0x10/0x15 [ 2059.914612][T12047] out_of_memory+0x358/0x14a0 03:29:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2059.919329][T12047] ? find_held_lock+0x2d/0x110 [ 2059.924116][T12047] ? oom_killer_disable+0x270/0x270 [ 2059.929348][T12047] ? find_held_lock+0x2d/0x110 [ 2059.934145][T12047] mem_cgroup_out_of_memory+0x206/0x270 [ 2059.939721][T12047] ? mem_cgroup_margin+0x130/0x130 [ 2059.944881][T12047] ? lock_downgrade+0x6e0/0x6e0 [ 2059.949774][T12047] try_charge_memcg+0xf67/0x13f0 [ 2059.954747][T12047] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2059.960763][T12047] ? lock_downgrade+0x6e0/0x6e0 [ 2059.965664][T12047] charge_memcg+0x31/0x320 [ 2059.970115][T12047] __mem_cgroup_charge+0x27/0x90 [ 2059.975087][T12047] ? _compound_head+0x5d/0x150 [ 2059.979880][T12047] wp_page_copy+0x27c/0x1b60 [ 2059.984509][T12047] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2059.989997][T12047] ? lock_downgrade+0x6e0/0x6e0 [ 2059.994869][T12047] ? vm_normal_page+0x146/0x2a0 [ 2059.999763][T12047] do_wp_page+0x52c/0x1910 [ 2060.004211][T12047] __handle_mm_fault+0x1813/0x39b0 [ 2060.009359][T12047] ? vm_iomap_memory+0x190/0x190 [ 2060.014350][T12047] handle_mm_fault+0x1c8/0x780 [ 2060.019144][T12047] do_user_addr_fault+0x475/0x1210 [ 2060.024298][T12047] exc_page_fault+0x94/0x170 [ 2060.028921][T12047] asm_exc_page_fault+0x22/0x30 [ 2060.033800][T12047] RIP: 0033:0x7f70e7e34a15 [ 2060.038243][T12047] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2060.057884][T12047] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2060.063981][T12047] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2060.071977][T12047] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2060.079971][T12047] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2060.087964][T12047] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001f6de7 [ 2060.095963][T12047] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2060.103976][T12047] [ 2060.127331][T12047] memory: usage 307200kB, limit 307200kB, failcnt 57393 [ 2060.134415][T12047] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2060.141970][T12047] Memory cgroup stats for /syz3: [ 2060.142196][T12047] anon 90112 [ 2060.142196][T12047] file 782336 [ 2060.142196][T12047] kernel 313700352 [ 2060.142196][T12047] kernel_stack 65536 [ 2060.142196][T12047] pagetables 73728 [ 2060.142196][T12047] percpu 5602688 [ 2060.142196][T12047] sock 0 [ 2060.142196][T12047] vmalloc 0 [ 2060.142196][T12047] shmem 778240 [ 2060.142196][T12047] zswap 0 [ 2060.142196][T12047] zswapped 0 [ 2060.142196][T12047] file_mapped 778240 [ 2060.142196][T12047] file_dirty 4096 [ 2060.142196][T12047] file_writeback 0 [ 2060.142196][T12047] swapcached 0 [ 2060.142196][T12047] anon_thp 0 [ 2060.142196][T12047] file_thp 0 [ 2060.142196][T12047] shmem_thp 0 [ 2060.142196][T12047] inactive_anon 561152 [ 2060.142196][T12047] active_anon 307200 [ 2060.142196][T12047] inactive_file 0 [ 2060.142196][T12047] active_file 4096 [ 2060.142196][T12047] unevictable 0 [ 2060.142196][T12047] slab_reclaimable 123352 [ 2060.142196][T12047] slab_unreclaimable 307790872 [ 2060.142196][T12047] slab 307914224 [ 2060.249144][T12047] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12047,uid=0 03:29:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e60000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc328, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x40000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1907}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2060.265254][T12047] Memory cgroup out of memory: Killed process 12047 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc329, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc32a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2060.412429][T12055] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2060.453720][T12055] CPU: 0 PID: 12055 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2060.464202][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2060.474290][T12055] Call Trace: [ 2060.477596][T12055] [ 2060.480549][T12055] dump_stack_lvl+0xcd/0x134 [ 2060.485177][T12055] dump_header+0x10b/0x7f9 [ 2060.489642][T12055] oom_kill_process.cold+0x10/0x15 [ 2060.494793][T12055] out_of_memory+0x358/0x14a0 [ 2060.499514][T12055] ? find_held_lock+0x2d/0x110 [ 2060.504316][T12055] ? oom_killer_disable+0x270/0x270 [ 2060.509550][T12055] ? find_held_lock+0x2d/0x110 [ 2060.514423][T12055] mem_cgroup_out_of_memory+0x206/0x270 [ 2060.519980][T12055] ? mem_cgroup_margin+0x130/0x130 [ 2060.525102][T12055] ? lock_downgrade+0x6e0/0x6e0 [ 2060.529977][T12055] try_charge_memcg+0xf67/0x13f0 [ 2060.534934][T12055] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2060.540927][T12055] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2060.546657][T12055] ? lock_downgrade+0x6e0/0x6e0 [ 2060.551543][T12055] obj_cgroup_charge+0x2ab/0x5e0 [ 2060.556496][T12055] __kmalloc+0xb2/0x340 [ 2060.560661][T12055] ? veth_dev_init+0x1dd/0x3e0 [ 2060.565440][T12055] veth_dev_init+0x1dd/0x3e0 [ 2060.570038][T12055] ? veth_get_num_queues+0x50/0x50 [ 2060.575165][T12055] register_netdevice+0x5e1/0x1680 [ 2060.580295][T12055] ? netdev_change_features+0xb0/0xb0 [ 2060.585685][T12055] ? dev_addr_mod+0x2c9/0x3f0 [ 2060.590378][T12055] veth_newlink+0x338/0x990 [ 2060.594897][T12055] ? veth_set_features+0x190/0x190 [ 2060.600018][T12055] ? mark_held_locks+0x9f/0xe0 [ 2060.604965][T12055] ? lockdep_hardirqs_on+0x79/0x100 [ 2060.610176][T12055] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 2060.615821][T12055] ? veth_set_features+0x190/0x190 [ 2060.620958][T12055] ? veth_set_features+0x190/0x190 [ 2060.626079][T12055] __rtnl_newlink+0x1087/0x17e0 [ 2060.630962][T12055] ? rtnl_link_unregister+0x250/0x250 [ 2060.636348][T12055] ? find_held_lock+0x2d/0x110 [ 2060.641142][T12055] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2060.646700][T12055] ? trace_kmalloc+0x32/0x100 [ 2060.651396][T12055] rtnl_newlink+0x64/0xa0 [ 2060.655743][T12055] ? __rtnl_newlink+0x17e0/0x17e0 [ 2060.660785][T12055] rtnetlink_rcv_msg+0x43a/0xca0 [ 2060.665739][T12055] ? rtnl_getlink+0xae0/0xae0 [ 2060.670431][T12055] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2060.675726][T12055] ? skb_clone+0x16e/0x3c0 [ 2060.680157][T12055] ? ref_tracker_free+0x370/0x6b0 [ 2060.685197][T12055] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2060.690588][T12055] netlink_rcv_skb+0x153/0x420 [ 2060.695375][T12055] ? rtnl_getlink+0xae0/0xae0 [ 2060.700067][T12055] ? netlink_ack+0xd50/0xd50 [ 2060.704674][T12055] ? netlink_deliver_tap+0x1a2/0xc40 [ 2060.709980][T12055] ? netlink_deliver_tap+0x1b1/0xc40 [ 2060.715288][T12055] netlink_unicast+0x543/0x7f0 [ 2060.720088][T12055] ? netlink_attachskb+0x880/0x880 [ 2060.725384][T12055] ? __phys_addr+0xc4/0x140 [ 2060.729899][T12055] ? __phys_addr_symbol+0x2c/0x70 [ 2060.734934][T12055] ? __check_object_size+0x2de/0x700 [ 2060.740238][T12055] netlink_sendmsg+0x917/0xe10 [ 2060.745021][T12055] ? netlink_unicast+0x7f0/0x7f0 [ 2060.749983][T12055] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2060.755280][T12055] ? netlink_unicast+0x7f0/0x7f0 [ 2060.760235][T12055] sock_sendmsg+0xcf/0x120 [ 2060.764666][T12055] ____sys_sendmsg+0x6eb/0x810 [ 2060.769443][T12055] ? copy_msghdr_from_user+0xfc/0x150 [ 2060.774829][T12055] ? kernel_sendmsg+0x50/0x50 [ 2060.779521][T12055] ? futex_unqueue+0xb3/0x120 [ 2060.784236][T12055] ___sys_sendmsg+0x110/0x1b0 [ 2060.788927][T12055] ? do_recvmmsg+0x6e0/0x6e0 [ 2060.793532][T12055] ? __fget_files+0x248/0x440 [ 2060.798219][T12055] ? lock_downgrade+0x6e0/0x6e0 [ 2060.803087][T12055] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2060.809087][T12055] ? __fget_files+0x26a/0x440 [ 2060.813800][T12055] ? __fget_light+0xe5/0x270 [ 2060.818414][T12055] __sys_sendmsg+0xf3/0x1c0 [ 2060.823023][T12055] ? __sys_sendmsg_sock+0x30/0x30 [ 2060.828060][T12055] ? lock_downgrade+0x6e0/0x6e0 [ 2060.832937][T12055] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2060.838857][T12055] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2060.844770][T12055] ? lockdep_hardirqs_on+0x79/0x100 [ 2060.849989][T12055] do_syscall_64+0x35/0xb0 [ 2060.854415][T12055] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2060.860322][T12055] RIP: 0033:0x7f58e888a5a9 [ 2060.864745][T12055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2060.884361][T12055] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2060.892785][T12055] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 03:29:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1a04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1a05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2060.900765][T12055] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2060.908741][T12055] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2060.916722][T12055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2060.924713][T12055] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2060.932863][T12055] [ 2060.938891][T12055] memory: usage 307196kB, limit 307200kB, failcnt 42356 [ 2060.959445][T12055] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2060.966726][T12055] Memory cgroup stats for /syz1: [ 2060.966964][T12055] anon 135168 [ 2060.966964][T12055] file 389120 [ 2060.966964][T12055] kernel 314044416 [ 2060.966964][T12055] kernel_stack 65536 [ 2060.966964][T12055] pagetables 77824 [ 2060.966964][T12055] percpu 5593216 [ 2060.966964][T12055] sock 0 [ 2060.966964][T12055] vmalloc 0 [ 2060.966964][T12055] shmem 389120 [ 2060.966964][T12055] zswap 0 [ 2060.966964][T12055] zswapped 0 [ 2060.966964][T12055] file_mapped 389120 [ 2060.966964][T12055] file_dirty 0 [ 2060.966964][T12055] file_writeback 0 [ 2060.966964][T12055] swapcached 0 [ 2060.966964][T12055] anon_thp 0 [ 2060.966964][T12055] file_thp 0 [ 2060.966964][T12055] shmem_thp 0 [ 2060.966964][T12055] inactive_anon 225280 [ 2060.966964][T12055] active_anon 299008 [ 2060.966964][T12055] inactive_file 0 [ 2060.966964][T12055] active_file 0 [ 2060.966964][T12055] unevictable 0 [ 2060.966964][T12055] slab_reclaimable 21832 [ 2060.966964][T12055] slab_unreclaimable 308249776 [ 2060.966964][T12055] slab 308271608 [ 2061.061993][T12055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12054,uid=0 [ 2061.080542][T12055] Memory cgroup out of memory: Killed process 12055 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2061.111464][T12073] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2061.124275][T12073] CPU: 1 PID: 12073 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2061.134822][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2061.144990][T12073] Call Trace: [ 2061.148289][T12073] [ 2061.151240][T12073] dump_stack_lvl+0xcd/0x134 [ 2061.155863][T12073] dump_header+0x10b/0x7f9 [ 2061.160315][T12073] oom_kill_process.cold+0x10/0x15 [ 2061.165460][T12073] out_of_memory+0x358/0x14a0 [ 2061.170262][T12073] ? find_held_lock+0x2d/0x110 [ 2061.175049][T12073] ? oom_killer_disable+0x270/0x270 [ 2061.180366][T12073] ? find_held_lock+0x2d/0x110 [ 2061.185147][T12073] mem_cgroup_out_of_memory+0x206/0x270 [ 2061.190699][T12073] ? mem_cgroup_margin+0x130/0x130 [ 2061.195826][T12073] ? lock_downgrade+0x6e0/0x6e0 [ 2061.200794][T12073] try_charge_memcg+0xf67/0x13f0 [ 2061.205759][T12073] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2061.211757][T12073] ? lock_downgrade+0x6e0/0x6e0 [ 2061.216629][T12073] charge_memcg+0x31/0x320 [ 2061.221058][T12073] __mem_cgroup_charge+0x27/0x90 [ 2061.226009][T12073] ? _compound_head+0x5d/0x150 [ 2061.230786][T12073] wp_page_copy+0x27c/0x1b60 [ 2061.235392][T12073] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2061.240857][T12073] ? lock_downgrade+0x6e0/0x6e0 [ 2061.245720][T12073] ? vm_normal_page+0x146/0x2a0 [ 2061.250595][T12073] do_wp_page+0x1d1/0x1910 [ 2061.255029][T12073] __handle_mm_fault+0x1813/0x39b0 [ 2061.260155][T12073] ? vm_iomap_memory+0x190/0x190 [ 2061.265124][T12073] handle_mm_fault+0x1c8/0x780 [ 2061.269904][T12073] do_user_addr_fault+0x475/0x1210 [ 2061.275041][T12073] exc_page_fault+0x94/0x170 [ 2061.279647][T12073] asm_exc_page_fault+0x22/0x30 [ 2061.284510][T12073] RIP: 0033:0x7f70e7e37970 [ 2061.288932][T12073] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2061.308633][T12073] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2061.314709][T12073] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2061.322687][T12073] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2061.330660][T12073] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2061.338635][T12073] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2061.346612][T12073] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2061.354589][T12073] ? __x64_sys_socket+0xd/0xb0 [ 2061.359385][T12073] [ 2061.386130][T12073] memory: usage 307200kB, limit 307200kB, failcnt 57490 [ 2061.393347][T12073] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2061.407166][T12073] Memory cgroup stats for /syz3: [ 2061.407374][T12073] anon 106496 [ 2061.407374][T12073] file 782336 [ 2061.407374][T12073] kernel 313683968 [ 2061.407374][T12073] kernel_stack 65536 [ 2061.407374][T12073] pagetables 73728 [ 2061.407374][T12073] percpu 5602688 [ 2061.407374][T12073] sock 0 [ 2061.407374][T12073] vmalloc 0 [ 2061.407374][T12073] shmem 778240 [ 2061.407374][T12073] zswap 0 [ 2061.407374][T12073] zswapped 0 [ 2061.407374][T12073] file_mapped 778240 [ 2061.407374][T12073] file_dirty 4096 [ 2061.407374][T12073] file_writeback 0 [ 2061.407374][T12073] swapcached 0 [ 2061.407374][T12073] anon_thp 0 [ 2061.407374][T12073] file_thp 0 [ 2061.407374][T12073] shmem_thp 0 [ 2061.407374][T12073] inactive_anon 577536 [ 2061.407374][T12073] active_anon 307200 [ 2061.407374][T12073] inactive_file 0 [ 2061.407374][T12073] active_file 4096 03:29:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae60}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x400300, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc32b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2061.407374][T12073] unevictable 0 [ 2061.407374][T12073] slab_reclaimable 123352 [ 2061.407374][T12073] slab_unreclaimable 307779472 [ 2061.407374][T12073] slab 307902824 [ 2061.513712][T12073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12073,uid=0 03:29:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e70000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc428, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1a06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2061.545881][T12073] Memory cgroup out of memory: Killed process 12073 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc429, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2061.611513][T12091] __nla_validate_parse: 20 callbacks suppressed [ 2061.611532][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2061.645927][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1a07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc42a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae61}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2061.768934][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc42b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2061.854561][T12099] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2061.872611][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2061.887895][T12099] CPU: 1 PID: 12099 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 03:29:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2061.898368][T12099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2061.908449][T12099] Call Trace: [ 2061.911775][T12099] [ 2061.914811][T12099] dump_stack_lvl+0xcd/0x134 [ 2061.919433][T12099] dump_header+0x10b/0x7f9 [ 2061.923876][T12099] oom_kill_process.cold+0x10/0x15 [ 2061.929018][T12099] out_of_memory+0x358/0x14a0 [ 2061.933732][T12099] ? find_held_lock+0x2d/0x110 [ 2061.938521][T12099] ? oom_killer_disable+0x270/0x270 [ 2061.943736][T12099] ? find_held_lock+0x2d/0x110 [ 2061.948513][T12099] mem_cgroup_out_of_memory+0x206/0x270 [ 2061.954074][T12099] ? mem_cgroup_margin+0x130/0x130 [ 2061.959191][T12099] ? lock_downgrade+0x6e0/0x6e0 [ 2061.964069][T12099] try_charge_memcg+0xf67/0x13f0 [ 2061.969025][T12099] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2061.975021][T12099] ? lock_downgrade+0x6e0/0x6e0 [ 2061.979895][T12099] charge_memcg+0x31/0x320 [ 2061.984322][T12099] __mem_cgroup_charge+0x27/0x90 [ 2061.989268][T12099] ? _compound_head+0x5d/0x150 [ 2061.994039][T12099] wp_page_copy+0x27c/0x1b60 [ 2061.998645][T12099] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2062.004110][T12099] ? lock_downgrade+0x6e0/0x6e0 [ 2062.008969][T12099] ? vm_normal_page+0x146/0x2a0 [ 2062.013840][T12099] do_wp_page+0x1d1/0x1910 [ 2062.018270][T12099] __handle_mm_fault+0x1813/0x39b0 [ 2062.023395][T12099] ? vm_iomap_memory+0x190/0x190 [ 2062.028361][T12099] handle_mm_fault+0x1c8/0x780 [ 2062.033140][T12099] do_user_addr_fault+0x475/0x1210 [ 2062.038271][T12099] exc_page_fault+0x94/0x170 [ 2062.042871][T12099] asm_exc_page_fault+0x22/0x30 [ 2062.047739][T12099] RIP: 0033:0x7f70e7e37970 [ 2062.052161][T12099] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2062.071861][T12099] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2062.077934][T12099] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2062.086347][T12099] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2062.094413][T12099] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2062.102401][T12099] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2062.110379][T12099] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2062.118355][T12099] ? __x64_sys_socket+0xd/0xb0 [ 2062.123147][T12099] [ 2062.183618][T12099] memory: usage 307200kB, limit 307200kB, failcnt 57546 [ 2062.200663][T12099] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2062.208838][T12099] Memory cgroup stats for /syz3: [ 2062.209018][T12099] anon 106496 [ 2062.209018][T12099] file 782336 [ 2062.209018][T12099] kernel 313683968 [ 2062.209018][T12099] kernel_stack 65536 [ 2062.209018][T12099] pagetables 73728 [ 2062.209018][T12099] percpu 5602688 [ 2062.209018][T12099] sock 0 [ 2062.209018][T12099] vmalloc 0 [ 2062.209018][T12099] shmem 778240 [ 2062.209018][T12099] zswap 0 [ 2062.209018][T12099] zswapped 0 [ 2062.209018][T12099] file_mapped 778240 [ 2062.209018][T12099] file_dirty 4096 [ 2062.209018][T12099] file_writeback 0 [ 2062.209018][T12099] swapcached 0 [ 2062.209018][T12099] anon_thp 0 [ 2062.209018][T12099] file_thp 0 [ 2062.209018][T12099] shmem_thp 0 [ 2062.209018][T12099] inactive_anon 577536 [ 2062.209018][T12099] active_anon 307200 [ 2062.209018][T12099] inactive_file 0 [ 2062.209018][T12099] active_file 4096 [ 2062.209018][T12099] unevictable 0 [ 2062.209018][T12099] slab_reclaimable 123352 [ 2062.209018][T12099] slab_unreclaimable 307779472 [ 2062.209018][T12099] slab 307902824 [ 2062.307717][T12099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12099,uid=0 03:29:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e80000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1b04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x1000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae62}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc528, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc529, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2062.324001][T12099] Memory cgroup out of memory: Killed process 12099 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2062.392705][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc52a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae63}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1b05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x2000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2062.512252][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2062.573903][T12127] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2062.610784][T12127] CPU: 0 PID: 12127 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2062.621268][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2062.631439][T12127] Call Trace: [ 2062.634735][T12127] [ 2062.637685][T12127] dump_stack_lvl+0xcd/0x134 [ 2062.642327][T12127] dump_header+0x10b/0x7f9 [ 2062.646783][T12127] oom_kill_process.cold+0x10/0x15 [ 2062.651931][T12127] out_of_memory+0x358/0x14a0 [ 2062.656655][T12127] ? find_held_lock+0x2d/0x110 [ 2062.661453][T12127] ? oom_killer_disable+0x270/0x270 [ 2062.666686][T12127] ? find_held_lock+0x2d/0x110 [ 2062.671485][T12127] mem_cgroup_out_of_memory+0x206/0x270 [ 2062.677055][T12127] ? mem_cgroup_margin+0x130/0x130 [ 2062.682205][T12127] ? lock_downgrade+0x6e0/0x6e0 [ 2062.687098][T12127] try_charge_memcg+0xf67/0x13f0 [ 2062.692074][T12127] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2062.698099][T12127] ? lock_downgrade+0x6e0/0x6e0 [ 2062.702995][T12127] charge_memcg+0x31/0x320 [ 2062.707446][T12127] __mem_cgroup_charge+0x27/0x90 [ 2062.712413][T12127] ? _compound_head+0x5d/0x150 [ 2062.717204][T12127] wp_page_copy+0x27c/0x1b60 [ 2062.721822][T12127] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2062.727289][T12127] ? lock_downgrade+0x6e0/0x6e0 [ 2062.732148][T12127] ? vm_normal_page+0x146/0x2a0 [ 2062.737021][T12127] do_wp_page+0x1d1/0x1910 [ 2062.741459][T12127] __handle_mm_fault+0x1813/0x39b0 [ 2062.746584][T12127] ? vm_iomap_memory+0x190/0x190 [ 2062.751573][T12127] handle_mm_fault+0x1c8/0x780 [ 2062.756360][T12127] do_user_addr_fault+0x475/0x1210 [ 2062.761493][T12127] exc_page_fault+0x94/0x170 [ 2062.766095][T12127] asm_exc_page_fault+0x22/0x30 [ 2062.770957][T12127] RIP: 0033:0x7f70e7e37970 [ 2062.775376][T12127] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2062.794990][T12127] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2062.801064][T12127] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2062.809041][T12127] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2062.817021][T12127] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2062.825007][T12127] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2062.832992][T12127] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2062.840967][T12127] ? __x64_sys_socket+0xd/0xb0 [ 2062.845761][T12127] [ 2062.873159][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2062.875367][T12127] memory: usage 307200kB, limit 307200kB, failcnt 57599 [ 2062.899076][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2062.910850][T12127] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2062.920898][T12127] Memory cgroup stats for /syz3: [ 2062.921122][T12127] anon 106496 [ 2062.921122][T12127] file 782336 [ 2062.921122][T12127] kernel 313683968 [ 2062.921122][T12127] kernel_stack 65536 [ 2062.921122][T12127] pagetables 73728 [ 2062.921122][T12127] percpu 5602688 [ 2062.921122][T12127] sock 0 [ 2062.921122][T12127] vmalloc 0 [ 2062.921122][T12127] shmem 778240 [ 2062.921122][T12127] zswap 0 [ 2062.921122][T12127] zswapped 0 [ 2062.921122][T12127] file_mapped 778240 [ 2062.921122][T12127] file_dirty 4096 [ 2062.921122][T12127] file_writeback 0 [ 2062.921122][T12127] swapcached 0 [ 2062.921122][T12127] anon_thp 0 [ 2062.921122][T12127] file_thp 0 [ 2062.921122][T12127] shmem_thp 0 [ 2062.921122][T12127] inactive_anon 577536 [ 2062.921122][T12127] active_anon 307200 [ 2062.921122][T12127] inactive_file 0 [ 2062.921122][T12127] active_file 4096 [ 2062.921122][T12127] unevictable 0 [ 2062.921122][T12127] slab_reclaimable 123352 [ 2062.921122][T12127] slab_unreclaimable 307779472 [ 2062.921122][T12127] slab 307902824 03:29:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3e90000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc52b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x3000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x11000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1b06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2063.019484][T12127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12127,uid=0 [ 2063.035296][T12127] Memory cgroup out of memory: Killed process 12127 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc628, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae64}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2063.090993][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc629, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x12000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae65}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x4000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2063.241648][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc62a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2063.299887][T12151] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2063.353581][T12151] CPU: 1 PID: 12151 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2063.364054][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2063.374133][T12151] Call Trace: [ 2063.377430][T12151] [ 2063.380382][T12151] dump_stack_lvl+0xcd/0x134 [ 2063.385000][T12151] dump_header+0x10b/0x7f9 [ 2063.389444][T12151] oom_kill_process.cold+0x10/0x15 [ 2063.394587][T12151] out_of_memory+0x358/0x14a0 [ 2063.399293][T12151] ? find_held_lock+0x2d/0x110 [ 2063.404084][T12151] ? oom_killer_disable+0x270/0x270 [ 2063.409323][T12151] ? find_held_lock+0x2d/0x110 [ 2063.414119][T12151] mem_cgroup_out_of_memory+0x206/0x270 [ 2063.419691][T12151] ? mem_cgroup_margin+0x130/0x130 [ 2063.424832][T12151] ? lock_downgrade+0x6e0/0x6e0 [ 2063.429734][T12151] try_charge_memcg+0xf67/0x13f0 [ 2063.434722][T12151] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2063.440751][T12151] ? lock_downgrade+0x6e0/0x6e0 [ 2063.445655][T12151] charge_memcg+0x31/0x320 [ 2063.450100][T12151] __mem_cgroup_charge+0x27/0x90 [ 2063.455048][T12151] ? _compound_head+0x5d/0x150 [ 2063.459821][T12151] wp_page_copy+0x27c/0x1b60 [ 2063.464425][T12151] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2063.469891][T12151] ? lock_downgrade+0x6e0/0x6e0 [ 2063.474749][T12151] ? vm_normal_page+0x146/0x2a0 [ 2063.479627][T12151] do_wp_page+0x52c/0x1910 [ 2063.484057][T12151] __handle_mm_fault+0x1813/0x39b0 [ 2063.489277][T12151] ? vm_iomap_memory+0x190/0x190 [ 2063.494244][T12151] handle_mm_fault+0x1c8/0x780 [ 2063.499021][T12151] do_user_addr_fault+0x475/0x1210 [ 2063.504153][T12151] exc_page_fault+0x94/0x170 [ 2063.508758][T12151] asm_exc_page_fault+0x22/0x30 [ 2063.513625][T12151] RIP: 0033:0x7f70e7e34a15 [ 2063.518048][T12151] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2063.537662][T12151] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2063.543735][T12151] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2063.551715][T12151] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2063.559692][T12151] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2063.567667][T12151] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001f7b5f [ 2063.575642][T12151] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2063.583642][T12151] [ 2063.590419][T12151] memory: usage 307200kB, limit 307200kB, failcnt 57665 [ 2063.614096][T12151] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2063.631322][T12151] Memory cgroup stats for /syz3: [ 2063.631531][T12151] anon 90112 [ 2063.631531][T12151] file 782336 [ 2063.631531][T12151] kernel 313683968 [ 2063.631531][T12151] kernel_stack 65536 [ 2063.631531][T12151] pagetables 73728 [ 2063.631531][T12151] percpu 5602688 [ 2063.631531][T12151] sock 0 [ 2063.631531][T12151] vmalloc 0 [ 2063.631531][T12151] shmem 778240 [ 2063.631531][T12151] zswap 0 [ 2063.631531][T12151] zswapped 0 [ 2063.631531][T12151] file_mapped 778240 [ 2063.631531][T12151] file_dirty 4096 [ 2063.631531][T12151] file_writeback 0 [ 2063.631531][T12151] swapcached 0 [ 2063.631531][T12151] anon_thp 0 [ 2063.631531][T12151] file_thp 0 [ 2063.631531][T12151] shmem_thp 0 [ 2063.631531][T12151] inactive_anon 561152 [ 2063.631531][T12151] active_anon 307200 [ 2063.631531][T12151] inactive_file 0 [ 2063.631531][T12151] active_file 4096 [ 2063.631531][T12151] unevictable 0 [ 2063.631531][T12151] slab_reclaimable 123352 [ 2063.631531][T12151] slab_unreclaimable 307779472 [ 2063.631531][T12151] slab 307902824 [ 2063.728915][T12151] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12151,uid=0 [ 2063.744576][T12151] Memory cgroup out of memory: Killed process 12151 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000003ea0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1b07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x5000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc62b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1e030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2063.762025][T12167] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2063.775925][T12167] CPU: 0 PID: 12167 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2063.786389][T12167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2063.796473][T12167] Call Trace: [ 2063.799775][T12167] [ 2063.802727][T12167] dump_stack_lvl+0xcd/0x134 [ 2063.807363][T12167] dump_header+0x10b/0x7f9 03:29:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1c04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2063.811815][T12167] oom_kill_process.cold+0x10/0x15 [ 2063.816966][T12167] out_of_memory+0x358/0x14a0 [ 2063.821687][T12167] ? oom_killer_disable+0x270/0x270 [ 2063.826922][T12167] ? find_held_lock+0x2d/0x110 [ 2063.831721][T12167] mem_cgroup_out_of_memory+0x206/0x270 [ 2063.837300][T12167] ? mem_cgroup_margin+0x130/0x130 [ 2063.842439][T12167] ? lock_downgrade+0x6e0/0x6e0 [ 2063.847321][T12167] try_charge_memcg+0xf67/0x13f0 [ 2063.852280][T12167] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2063.858274][T12167] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2063.864003][T12167] ? lock_downgrade+0x6e0/0x6e0 [ 2063.868888][T12167] obj_cgroup_charge+0x2ab/0x5e0 [ 2063.873841][T12167] __kmalloc+0xb2/0x340 [ 2063.878007][T12167] ? veth_dev_init+0x1dd/0x3e0 [ 2063.882901][T12167] veth_dev_init+0x1dd/0x3e0 [ 2063.887501][T12167] ? veth_get_num_queues+0x50/0x50 [ 2063.892626][T12167] register_netdevice+0x5e1/0x1680 [ 2063.897843][T12167] ? netdev_change_features+0xb0/0xb0 [ 2063.903234][T12167] ? dev_addr_mod+0x2c9/0x3f0 [ 2063.907925][T12167] veth_newlink+0x338/0x990 [ 2063.912439][T12167] ? veth_set_features+0x190/0x190 [ 2063.917555][T12167] ? netlink_rcv_skb+0x153/0x420 [ 2063.922505][T12167] ? netlink_unicast+0x543/0x7f0 [ 2063.927450][T12167] ? netlink_sendmsg+0x917/0xe10 [ 2063.932466][T12167] ? dev_addr_mod+0x2c9/0x3f0 [ 2063.937170][T12167] ? rtnl_create_link+0x7e8/0xc00 [ 2063.942225][T12167] ? veth_set_features+0x190/0x190 [ 2063.947355][T12167] __rtnl_newlink+0x1087/0x17e0 [ 2063.952245][T12167] ? rtnl_link_unregister+0x250/0x250 [ 2063.957635][T12167] ? find_held_lock+0x2d/0x110 [ 2063.962407][T12167] ? exc_int3+0xb/0x80 [ 2063.966483][T12167] ? asm_exc_int3+0x35/0x40 [ 2063.971016][T12167] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2063.976567][T12167] ? trace_kmalloc+0x32/0x100 [ 2063.981262][T12167] rtnl_newlink+0x64/0xa0 [ 2063.985601][T12167] ? __rtnl_newlink+0x17e0/0x17e0 [ 2063.990632][T12167] rtnetlink_rcv_msg+0x43a/0xca0 [ 2063.995584][T12167] ? rtnl_getlink+0xae0/0xae0 [ 2064.000270][T12167] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2064.005562][T12167] ? skb_clone+0x16e/0x3c0 [ 2064.009989][T12167] ? ref_tracker_free+0x370/0x6b0 [ 2064.015022][T12167] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2064.020411][T12167] netlink_rcv_skb+0x153/0x420 [ 2064.025189][T12167] ? rtnl_getlink+0xae0/0xae0 [ 2064.029876][T12167] ? netlink_ack+0xd50/0xd50 [ 2064.034472][T12167] ? netlink_deliver_tap+0x1a2/0xc40 [ 2064.039861][T12167] ? netlink_deliver_tap+0x1b1/0xc40 [ 2064.045163][T12167] netlink_unicast+0x543/0x7f0 [ 2064.049946][T12167] ? netlink_attachskb+0x880/0x880 [ 2064.055066][T12167] ? __phys_addr+0xc4/0x140 [ 2064.059577][T12167] ? __phys_addr_symbol+0x2c/0x70 [ 2064.064629][T12167] ? __check_object_size+0x2de/0x700 [ 2064.069956][T12167] netlink_sendmsg+0x917/0xe10 [ 2064.074761][T12167] ? netlink_unicast+0x7f0/0x7f0 [ 2064.079728][T12167] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2064.085026][T12167] ? netlink_unicast+0x7f0/0x7f0 [ 2064.089974][T12167] sock_sendmsg+0xcf/0x120 [ 2064.094403][T12167] ____sys_sendmsg+0x6eb/0x810 [ 2064.099176][T12167] ? copy_msghdr_from_user+0xfc/0x150 [ 2064.104559][T12167] ? kernel_sendmsg+0x50/0x50 [ 2064.109259][T12167] ___sys_sendmsg+0x110/0x1b0 [ 2064.113947][T12167] ? do_recvmmsg+0x6e0/0x6e0 [ 2064.118552][T12167] ? __fget_files+0x248/0x440 [ 2064.123257][T12167] ? lock_downgrade+0x6e0/0x6e0 [ 2064.128142][T12167] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2064.134154][T12167] ? __fget_files+0x26a/0x440 [ 2064.138850][T12167] ? __fget_light+0xe5/0x270 [ 2064.143457][T12167] __sys_sendmsg+0xf3/0x1c0 [ 2064.147973][T12167] ? __sys_sendmsg_sock+0x30/0x30 [ 2064.153006][T12167] ? lock_downgrade+0x6e0/0x6e0 [ 2064.157876][T12167] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2064.163787][T12167] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2064.170039][T12167] ? lockdep_hardirqs_on+0x79/0x100 [ 2064.175253][T12167] do_syscall_64+0x35/0xb0 [ 2064.179685][T12167] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2064.185595][T12167] RIP: 0033:0x7f58e888a5a9 [ 2064.190020][T12167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2064.209634][T12167] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2064.218056][T12167] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2064.226040][T12167] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2064.234018][T12167] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2064.241996][T12167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2064.249972][T12167] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2064.257966][T12167] [ 2064.282721][T12167] memory: usage 307196kB, limit 307200kB, failcnt 42663 [ 2064.310605][T12167] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2064.317989][T12167] Memory cgroup stats for /syz1: [ 2064.318231][T12167] anon 135168 [ 2064.318231][T12167] file 389120 [ 2064.318231][T12167] kernel 314011648 [ 2064.318231][T12167] kernel_stack 32768 [ 2064.318231][T12167] pagetables 77824 [ 2064.318231][T12167] percpu 5593216 [ 2064.318231][T12167] sock 0 [ 2064.318231][T12167] vmalloc 0 [ 2064.318231][T12167] shmem 389120 [ 2064.318231][T12167] zswap 0 [ 2064.318231][T12167] zswapped 0 [ 2064.318231][T12167] file_mapped 389120 [ 2064.318231][T12167] file_dirty 0 [ 2064.318231][T12167] file_writeback 0 [ 2064.318231][T12167] swapcached 0 [ 2064.318231][T12167] anon_thp 0 [ 2064.318231][T12167] file_thp 0 [ 2064.318231][T12167] shmem_thp 0 03:29:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc728, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2064.318231][T12167] inactive_anon 225280 [ 2064.318231][T12167] active_anon 299008 [ 2064.318231][T12167] inactive_file 0 [ 2064.318231][T12167] active_file 0 [ 2064.318231][T12167] unevictable 0 [ 2064.318231][T12167] slab_reclaimable 21832 [ 2064.318231][T12167] slab_unreclaimable 308249776 [ 2064.318231][T12167] slab 308271608 [ 2064.418036][T12167] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12163,uid=0 03:29:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1c05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc729, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2064.435132][T12167] Memory cgroup out of memory: Killed process 12167 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2064.549476][T12171] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2064.578889][T12171] CPU: 1 PID: 12171 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2064.589357][T12171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2064.599431][T12171] Call Trace: [ 2064.602728][T12171] [ 2064.605675][T12171] dump_stack_lvl+0xcd/0x134 [ 2064.610280][T12171] dump_header+0x10b/0x7f9 [ 2064.614698][T12171] oom_kill_process.cold+0x10/0x15 [ 2064.619807][T12171] out_of_memory+0x358/0x14a0 [ 2064.624484][T12171] ? find_held_lock+0x2d/0x110 [ 2064.629250][T12171] ? oom_killer_disable+0x270/0x270 [ 2064.634457][T12171] ? find_held_lock+0x2d/0x110 [ 2064.639226][T12171] mem_cgroup_out_of_memory+0x206/0x270 [ 2064.644766][T12171] ? mem_cgroup_margin+0x130/0x130 [ 2064.649873][T12171] ? lock_downgrade+0x6e0/0x6e0 [ 2064.654729][T12171] try_charge_memcg+0xf67/0x13f0 [ 2064.659676][T12171] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2064.665690][T12171] ? lock_downgrade+0x6e0/0x6e0 [ 2064.670558][T12171] charge_memcg+0x31/0x320 [ 2064.674984][T12171] __mem_cgroup_charge+0x27/0x90 [ 2064.679941][T12171] ? _compound_head+0x5d/0x150 [ 2064.684698][T12171] wp_page_copy+0x27c/0x1b60 [ 2064.689285][T12171] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2064.694737][T12171] ? lock_downgrade+0x6e0/0x6e0 [ 2064.699581][T12171] ? vm_normal_page+0x146/0x2a0 [ 2064.704435][T12171] do_wp_page+0x1d1/0x1910 [ 2064.708848][T12171] __handle_mm_fault+0x1813/0x39b0 [ 2064.713984][T12171] ? vm_iomap_memory+0x190/0x190 [ 2064.718930][T12171] handle_mm_fault+0x1c8/0x780 [ 2064.723688][T12171] do_user_addr_fault+0x475/0x1210 [ 2064.728804][T12171] exc_page_fault+0x94/0x170 [ 2064.733390][T12171] asm_exc_page_fault+0x22/0x30 [ 2064.738233][T12171] RIP: 0033:0x7f70e7e37970 [ 2064.742646][T12171] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2064.762250][T12171] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2064.768310][T12171] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2064.776276][T12171] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2064.784248][T12171] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2064.792214][T12171] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 03:29:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1c06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x6000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae66}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2064.800291][T12171] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2064.808285][T12171] ? __x64_sys_socket+0xd/0xb0 [ 2064.813063][T12171] [ 2064.834412][T12171] memory: usage 307200kB, limit 307200kB, failcnt 57755 [ 2064.870314][T12171] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2064.883903][T12171] Memory cgroup stats for /syz3: [ 2064.884108][T12171] anon 106496 [ 2064.884108][T12171] file 782336 [ 2064.884108][T12171] kernel 313683968 [ 2064.884108][T12171] kernel_stack 65536 [ 2064.884108][T12171] pagetables 73728 [ 2064.884108][T12171] percpu 5602688 [ 2064.884108][T12171] sock 0 [ 2064.884108][T12171] vmalloc 0 [ 2064.884108][T12171] shmem 778240 [ 2064.884108][T12171] zswap 0 [ 2064.884108][T12171] zswapped 0 [ 2064.884108][T12171] file_mapped 778240 [ 2064.884108][T12171] file_dirty 0 [ 2064.884108][T12171] file_writeback 0 [ 2064.884108][T12171] swapcached 0 [ 2064.884108][T12171] anon_thp 0 [ 2064.884108][T12171] file_thp 0 [ 2064.884108][T12171] shmem_thp 0 [ 2064.884108][T12171] inactive_anon 577536 [ 2064.884108][T12171] active_anon 307200 [ 2064.884108][T12171] inactive_file 0 [ 2064.884108][T12171] active_file 4096 [ 2064.884108][T12171] unevictable 0 [ 2064.884108][T12171] slab_reclaimable 123352 03:29:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3ea0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc72a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x1f000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2064.884108][T12171] slab_unreclaimable 307779472 [ 2064.884108][T12171] slab 307902824 [ 2064.984754][T12171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12171,uid=0 [ 2065.002535][T12171] Memory cgroup out of memory: Killed process 12171 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc72b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1c07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x7000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc828, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae67}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1d04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x20000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2065.203522][T12198] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2065.258357][T12198] CPU: 0 PID: 12198 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2065.268829][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2065.278892][T12198] Call Trace: [ 2065.282175][T12198] [ 2065.285111][T12198] dump_stack_lvl+0xcd/0x134 [ 2065.289714][T12198] dump_header+0x10b/0x7f9 [ 2065.294140][T12198] oom_kill_process.cold+0x10/0x15 [ 2065.299265][T12198] out_of_memory+0x358/0x14a0 [ 2065.303956][T12198] ? find_held_lock+0x2d/0x110 [ 2065.308813][T12198] ? oom_killer_disable+0x270/0x270 [ 2065.314027][T12198] ? find_held_lock+0x2d/0x110 [ 2065.318801][T12198] mem_cgroup_out_of_memory+0x206/0x270 [ 2065.324508][T12198] ? mem_cgroup_margin+0x130/0x130 [ 2065.329628][T12198] ? lock_downgrade+0x6e0/0x6e0 [ 2065.334513][T12198] try_charge_memcg+0xf67/0x13f0 [ 2065.339468][T12198] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2065.345465][T12198] ? lock_downgrade+0x6e0/0x6e0 [ 2065.350340][T12198] charge_memcg+0x31/0x320 [ 2065.354773][T12198] __mem_cgroup_charge+0x27/0x90 [ 2065.359718][T12198] ? _compound_head+0x5d/0x150 [ 2065.364492][T12198] wp_page_copy+0x27c/0x1b60 [ 2065.369107][T12198] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2065.374575][T12198] ? lock_downgrade+0x6e0/0x6e0 [ 2065.379433][T12198] ? vm_normal_page+0x146/0x2a0 [ 2065.384304][T12198] do_wp_page+0x1d1/0x1910 [ 2065.388731][T12198] __handle_mm_fault+0x1813/0x39b0 [ 2065.393856][T12198] ? vm_iomap_memory+0x190/0x190 [ 2065.398825][T12198] handle_mm_fault+0x1c8/0x780 [ 2065.403602][T12198] do_user_addr_fault+0x475/0x1210 [ 2065.408736][T12198] exc_page_fault+0x94/0x170 [ 2065.413370][T12198] asm_exc_page_fault+0x22/0x30 [ 2065.418230][T12198] RIP: 0033:0x7f70e7e37970 [ 2065.422648][T12198] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2065.442280][T12198] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2065.448363][T12198] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2065.456341][T12198] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2065.464339][T12198] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2065.472317][T12198] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2065.480294][T12198] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2065.488701][T12198] ? __x64_sys_socket+0xd/0xb0 [ 2065.493490][T12198] [ 2065.506822][T12198] memory: usage 307200kB, limit 307200kB, failcnt 57813 03:29:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc829, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2c000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2065.530349][T12198] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2065.558778][T12198] Memory cgroup stats for /syz3: [ 2065.558940][T12198] anon 106496 [ 2065.558940][T12198] file 782336 [ 2065.558940][T12198] kernel 313683968 [ 2065.558940][T12198] kernel_stack 65536 [ 2065.558940][T12198] pagetables 73728 [ 2065.558940][T12198] percpu 5602688 [ 2065.558940][T12198] sock 0 [ 2065.558940][T12198] vmalloc 0 [ 2065.558940][T12198] shmem 778240 [ 2065.558940][T12198] zswap 0 [ 2065.558940][T12198] zswapped 0 [ 2065.558940][T12198] file_mapped 778240 [ 2065.558940][T12198] file_dirty 0 [ 2065.558940][T12198] file_writeback 0 [ 2065.558940][T12198] swapcached 0 [ 2065.558940][T12198] anon_thp 0 [ 2065.558940][T12198] file_thp 0 [ 2065.558940][T12198] shmem_thp 0 [ 2065.558940][T12198] inactive_anon 577536 [ 2065.558940][T12198] active_anon 307200 [ 2065.558940][T12198] inactive_file 0 [ 2065.558940][T12198] active_file 4096 [ 2065.558940][T12198] unevictable 0 [ 2065.558940][T12198] slab_reclaimable 123352 [ 2065.558940][T12198] slab_unreclaimable 307779472 [ 2065.558940][T12198] slab 307902824 [ 2065.671880][T12198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12198,uid=0 03:29:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3eb0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1d05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc82a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x8000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae68}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2065.751047][T12198] Memory cgroup out of memory: Killed process 12198 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x32020000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc82b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1d06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x9000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc928, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2065.954868][T12227] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2066.008778][T12227] CPU: 1 PID: 12227 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2066.019346][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2066.029429][T12227] Call Trace: [ 2066.032732][T12227] [ 2066.035690][T12227] dump_stack_lvl+0xcd/0x134 [ 2066.040323][T12227] dump_header+0x10b/0x7f9 [ 2066.044780][T12227] oom_kill_process.cold+0x10/0x15 [ 2066.049935][T12227] out_of_memory+0x358/0x14a0 [ 2066.054654][T12227] ? find_held_lock+0x2d/0x110 [ 2066.059449][T12227] ? oom_killer_disable+0x270/0x270 [ 2066.064686][T12227] ? find_held_lock+0x2d/0x110 [ 2066.069489][T12227] mem_cgroup_out_of_memory+0x206/0x270 [ 2066.075074][T12227] ? mem_cgroup_margin+0x130/0x130 [ 2066.080216][T12227] ? lock_downgrade+0x6e0/0x6e0 [ 2066.085120][T12227] try_charge_memcg+0xf67/0x13f0 [ 2066.090101][T12227] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2066.096134][T12227] ? lock_downgrade+0x6e0/0x6e0 [ 2066.101041][T12227] charge_memcg+0x31/0x320 03:29:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3f000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae69}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2066.105498][T12227] __mem_cgroup_charge+0x27/0x90 [ 2066.110550][T12227] ? _compound_head+0x5d/0x150 [ 2066.115349][T12227] wp_page_copy+0x27c/0x1b60 [ 2066.119994][T12227] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2066.125487][T12227] ? lock_downgrade+0x6e0/0x6e0 [ 2066.130370][T12227] ? vm_normal_page+0x146/0x2a0 [ 2066.135339][T12227] do_wp_page+0x1d1/0x1910 [ 2066.139802][T12227] __handle_mm_fault+0x1813/0x39b0 [ 2066.144998][T12227] ? vm_iomap_memory+0x190/0x190 [ 2066.150004][T12227] handle_mm_fault+0x1c8/0x780 [ 2066.154819][T12227] do_user_addr_fault+0x475/0x1210 [ 2066.159989][T12227] exc_page_fault+0x94/0x170 [ 2066.164620][T12227] asm_exc_page_fault+0x22/0x30 [ 2066.169505][T12227] RIP: 0033:0x7f70e7e37970 [ 2066.173946][T12227] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2066.193588][T12227] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2066.199679][T12227] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2066.207676][T12227] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2066.215671][T12227] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2066.223677][T12227] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2066.231680][T12227] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2066.239686][T12227] ? __x64_sys_socket+0xd/0xb0 [ 2066.244489][T12227] [ 2066.259347][T12227] memory: usage 307200kB, limit 307200kB, failcnt 57846 [ 2066.266972][T12227] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2066.273944][T12227] Memory cgroup stats for /syz3: [ 2066.274168][T12227] anon 106496 [ 2066.274168][T12227] file 782336 [ 2066.274168][T12227] kernel 313683968 [ 2066.274168][T12227] kernel_stack 65536 [ 2066.274168][T12227] pagetables 73728 [ 2066.274168][T12227] percpu 5602688 [ 2066.274168][T12227] sock 0 [ 2066.274168][T12227] vmalloc 0 [ 2066.274168][T12227] shmem 778240 [ 2066.274168][T12227] zswap 0 [ 2066.274168][T12227] zswapped 0 [ 2066.274168][T12227] file_mapped 778240 [ 2066.274168][T12227] file_dirty 0 [ 2066.274168][T12227] file_writeback 0 [ 2066.274168][T12227] swapcached 0 [ 2066.274168][T12227] anon_thp 0 [ 2066.274168][T12227] file_thp 0 [ 2066.274168][T12227] shmem_thp 0 [ 2066.274168][T12227] inactive_anon 577536 [ 2066.274168][T12227] active_anon 307200 [ 2066.274168][T12227] inactive_file 0 [ 2066.274168][T12227] active_file 4096 [ 2066.274168][T12227] unevictable 0 [ 2066.274168][T12227] slab_reclaimable 123352 03:29:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3ec0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1d07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc929, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x40000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc92a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2066.274168][T12227] slab_unreclaimable 307779472 [ 2066.274168][T12227] slab 307902824 [ 2066.369742][T12227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12227,uid=0 [ 2066.385389][T12227] Memory cgroup out of memory: Killed process 12227 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xc92b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1e04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xca28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x20000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2066.587010][T12254] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2066.610399][T12254] CPU: 1 PID: 12254 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2066.620879][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2066.630964][T12254] Call Trace: [ 2066.634251][T12254] [ 2066.637184][T12254] dump_stack_lvl+0xcd/0x134 [ 2066.641787][T12254] dump_header+0x10b/0x7f9 [ 2066.646236][T12254] oom_kill_process.cold+0x10/0x15 [ 2066.651360][T12254] out_of_memory+0x358/0x14a0 [ 2066.656059][T12254] ? find_held_lock+0x2d/0x110 [ 2066.660835][T12254] ? oom_killer_disable+0x270/0x270 [ 2066.666046][T12254] ? find_held_lock+0x2d/0x110 [ 2066.670820][T12254] mem_cgroup_out_of_memory+0x206/0x270 [ 2066.676466][T12254] ? mem_cgroup_margin+0x130/0x130 [ 2066.681584][T12254] ? lock_downgrade+0x6e0/0x6e0 [ 2066.686543][T12254] try_charge_memcg+0xf67/0x13f0 [ 2066.691548][T12254] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2066.697546][T12254] ? lock_downgrade+0x6e0/0x6e0 [ 2066.702418][T12254] charge_memcg+0x31/0x320 [ 2066.706855][T12254] __mem_cgroup_charge+0x27/0x90 [ 2066.711807][T12254] ? _compound_head+0x5d/0x150 [ 2066.716581][T12254] wp_page_copy+0x27c/0x1b60 [ 2066.721189][T12254] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2066.726662][T12254] ? lock_downgrade+0x6e0/0x6e0 [ 2066.731522][T12254] ? vm_normal_page+0x146/0x2a0 [ 2066.736395][T12254] do_wp_page+0x52c/0x1910 [ 2066.740837][T12254] __handle_mm_fault+0x1813/0x39b0 [ 2066.745965][T12254] ? vm_iomap_memory+0x190/0x190 [ 2066.750944][T12254] handle_mm_fault+0x1c8/0x780 [ 2066.755726][T12254] do_user_addr_fault+0x475/0x1210 [ 2066.760958][T12254] exc_page_fault+0x94/0x170 [ 2066.765734][T12254] asm_exc_page_fault+0x22/0x30 [ 2066.770595][T12254] RIP: 0033:0x7f70e7e34a15 [ 2066.775020][T12254] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2066.794721][T12254] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2066.800796][T12254] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2066.808773][T12254] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2066.816750][T12254] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2066.824727][T12254] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001f8859 [ 2066.832879][T12254] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2066.840879][T12254] [ 2066.864990][T12265] __nla_validate_parse: 16 callbacks suppressed [ 2066.865010][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xca29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2066.884312][T12254] memory: usage 307200kB, limit 307200kB, failcnt 57901 [ 2066.908919][T12254] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2066.926704][T12254] Memory cgroup stats for /syz3: [ 2066.926941][T12254] anon 90112 [ 2066.926941][T12254] file 782336 [ 2066.926941][T12254] kernel 313700352 [ 2066.926941][T12254] kernel_stack 65536 [ 2066.926941][T12254] pagetables 73728 [ 2066.926941][T12254] percpu 5602688 [ 2066.926941][T12254] sock 0 [ 2066.926941][T12254] vmalloc 0 [ 2066.926941][T12254] shmem 778240 [ 2066.926941][T12254] zswap 0 [ 2066.926941][T12254] zswapped 0 [ 2066.926941][T12254] file_mapped 778240 [ 2066.926941][T12254] file_dirty 0 [ 2066.926941][T12254] file_writeback 0 [ 2066.926941][T12254] swapcached 0 [ 2066.926941][T12254] anon_thp 0 [ 2066.926941][T12254] file_thp 0 [ 2066.926941][T12254] shmem_thp 0 [ 2066.926941][T12254] inactive_anon 561152 [ 2066.926941][T12254] active_anon 307200 [ 2066.926941][T12254] inactive_file 0 [ 2066.926941][T12254] active_file 4096 [ 2066.926941][T12254] unevictable 0 [ 2066.926941][T12254] slab_reclaimable 123352 [ 2066.926941][T12254] slab_unreclaimable 307790872 [ 2066.926941][T12254] slab 307914224 [ 2066.937476][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2067.054277][T12254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12254,uid=0 [ 2067.081256][T12254] Memory cgroup out of memory: Killed process 12254 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae6a}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xca2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x60000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3ed0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1e05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x42030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xca2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2067.214501][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x9effffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2067.312970][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcb28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1e06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x48000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2067.369010][T12282] syz-executor.3 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2067.402270][T12282] CPU: 1 PID: 12282 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2067.412751][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2067.422836][T12282] Call Trace: [ 2067.426142][T12282] [ 2067.429122][T12282] dump_stack_lvl+0xcd/0x134 [ 2067.433840][T12282] dump_header+0x10b/0x7f9 [ 2067.438307][T12282] oom_kill_process.cold+0x10/0x15 [ 2067.443462][T12282] out_of_memory+0x358/0x14a0 [ 2067.448184][T12282] ? find_held_lock+0x2d/0x110 [ 2067.452988][T12282] ? oom_killer_disable+0x270/0x270 [ 2067.454632][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1e07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2067.458216][T12282] ? find_held_lock+0x2d/0x110 [ 2067.458254][T12282] mem_cgroup_out_of_memory+0x206/0x270 [ 2067.458286][T12282] ? mem_cgroup_margin+0x130/0x130 [ 2067.458307][T12282] ? lock_downgrade+0x6e0/0x6e0 [ 2067.458346][T12282] try_charge_memcg+0xf67/0x13f0 [ 2067.458380][T12282] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2067.471042][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2067.472395][T12282] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2067.472437][T12282] ? lock_downgrade+0x6e0/0x6e0 [ 2067.472469][T12282] ? lock_downgrade+0x6e0/0x6e0 [ 2067.521206][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2067.523537][T12282] ? rcu_read_unlock+0x9/0x60 [ 2067.523586][T12282] obj_cgroup_charge+0x2ab/0x5e0 [ 2067.523621][T12282] ? __alloc_file+0x21/0x270 [ 2067.533304][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2067.537570][T12282] kmem_cache_alloc+0x96/0x3b0 [ 2067.537605][T12282] ? d_instantiate+0x75/0x90 [ 2067.537640][T12282] __alloc_file+0x21/0x270 [ 2067.537671][T12282] alloc_empty_file+0x6d/0x170 [ 2067.537700][T12282] alloc_file+0x59/0x800 [ 2067.537732][T12282] alloc_file_pseudo+0x165/0x250 [ 2067.584233][T12282] ? alloc_file+0x800/0x800 [ 2067.588785][T12282] ? alloc_fd+0x2f0/0x6f0 [ 2067.593156][T12282] sock_alloc_file+0x4f/0x190 [ 2067.597875][T12282] __sys_socket+0x1a4/0x240 [ 2067.602429][T12282] ? __sys_socket_file+0x1f0/0x1f0 [ 2067.607580][T12282] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2067.613521][T12282] __x64_sys_socket+0x6f/0xb0 [ 2067.618239][T12282] do_syscall_64+0x35/0xb0 [ 2067.622676][T12282] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2067.628569][T12282] RIP: 0033:0x7f70e7e8a5a9 [ 2067.632978][T12282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2067.652589][T12282] RSP: 002b:00007f70e9053168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2067.661002][T12282] RAX: ffffffffffffffda RBX: 00007f70e7fabf80 RCX: 00007f70e7e8a5a9 [ 2067.668973][T12282] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2067.677051][T12282] RBP: 00007f70e7ee5580 R08: 0000000000000000 R09: 0000000000000000 [ 2067.685038][T12282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2067.693011][T12282] R13: 00007ffcadad7b5f R14: 00007f70e9053300 R15: 0000000000022000 [ 2067.701017][T12282] [ 2067.707450][T12282] memory: usage 307200kB, limit 307200kB, failcnt 57970 [ 2067.714711][T12282] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2067.722514][T12282] Memory cgroup stats for /syz3: [ 2067.722742][T12282] anon 90112 [ 2067.722742][T12282] file 782336 [ 2067.722742][T12282] kernel 313700352 [ 2067.722742][T12282] kernel_stack 65536 [ 2067.722742][T12282] pagetables 73728 [ 2067.722742][T12282] percpu 5602688 [ 2067.722742][T12282] sock 0 [ 2067.722742][T12282] vmalloc 0 [ 2067.722742][T12282] shmem 778240 [ 2067.722742][T12282] zswap 0 [ 2067.722742][T12282] zswapped 0 [ 2067.722742][T12282] file_mapped 778240 [ 2067.722742][T12282] file_dirty 0 [ 2067.722742][T12282] file_writeback 0 [ 2067.722742][T12282] swapcached 0 [ 2067.722742][T12282] anon_thp 0 [ 2067.722742][T12282] file_thp 0 [ 2067.722742][T12282] shmem_thp 0 [ 2067.722742][T12282] inactive_anon 561152 [ 2067.722742][T12282] active_anon 307200 [ 2067.722742][T12282] inactive_file 0 [ 2067.722742][T12282] active_file 4096 [ 2067.722742][T12282] unevictable 0 [ 2067.722742][T12282] slab_reclaimable 123352 [ 2067.722742][T12282] slab_unreclaimable 307790224 [ 2067.722742][T12282] slab 307913576 [ 2067.817632][T12282] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12273,uid=0 [ 2067.835914][T12282] Memory cgroup out of memory: Killed process 12273 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2067.853718][T12279] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2067.868926][T12279] CPU: 1 PID: 12279 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2067.879387][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2067.889452][T12279] Call Trace: [ 2067.892733][T12279] [ 2067.895672][T12279] dump_stack_lvl+0xcd/0x134 [ 2067.900283][T12279] dump_header+0x10b/0x7f9 [ 2067.904717][T12279] oom_kill_process.cold+0x10/0x15 [ 2067.909858][T12279] out_of_memory+0x358/0x14a0 [ 2067.914556][T12279] ? oom_killer_disable+0x270/0x270 [ 2067.919773][T12279] ? find_held_lock+0x2d/0x110 [ 2067.924637][T12279] mem_cgroup_out_of_memory+0x206/0x270 [ 2067.930194][T12279] ? mem_cgroup_margin+0x130/0x130 [ 2067.935313][T12279] ? lock_downgrade+0x6e0/0x6e0 [ 2067.940211][T12279] try_charge_memcg+0xf67/0x13f0 [ 2067.945182][T12279] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2067.951188][T12279] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2067.956929][T12279] ? lock_downgrade+0x6e0/0x6e0 [ 2067.961831][T12279] obj_cgroup_charge+0x2ab/0x5e0 [ 2067.966840][T12279] __kmalloc+0xb2/0x340 [ 2067.971028][T12279] ? veth_dev_init+0x1dd/0x3e0 [ 2067.975822][T12279] veth_dev_init+0x1dd/0x3e0 [ 2067.980431][T12279] ? veth_get_num_queues+0x50/0x50 [ 2067.985560][T12279] register_netdevice+0x5e1/0x1680 [ 2067.990694][T12279] ? netdev_change_features+0xb0/0xb0 [ 2067.996083][T12279] ? dev_addr_mod+0x2c9/0x3f0 [ 2068.000778][T12279] veth_newlink+0x338/0x990 [ 2068.005297][T12279] ? veth_set_features+0x190/0x190 [ 2068.010422][T12279] ? netlink_rcv_skb+0x153/0x420 [ 2068.015369][T12279] ? netlink_unicast+0x543/0x7f0 [ 2068.020322][T12279] ? netlink_sendmsg+0x917/0xe10 [ 2068.025332][T12279] ? dev_addr_mod+0x2c9/0x3f0 [ 2068.030030][T12279] ? rtnl_create_link+0x7e8/0xc00 [ 2068.035068][T12279] ? veth_set_features+0x190/0x190 [ 2068.040191][T12279] __rtnl_newlink+0x1087/0x17e0 [ 2068.045069][T12279] ? rtnl_link_unregister+0x250/0x250 [ 2068.050457][T12279] ? find_held_lock+0x2d/0x110 [ 2068.055251][T12279] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2068.060808][T12279] ? trace_kmalloc+0x32/0x100 [ 2068.065500][T12279] rtnl_newlink+0x64/0xa0 [ 2068.069842][T12279] ? __rtnl_newlink+0x17e0/0x17e0 [ 2068.074879][T12279] rtnetlink_rcv_msg+0x43a/0xca0 [ 2068.079833][T12279] ? rtnl_getlink+0xae0/0xae0 [ 2068.084525][T12279] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2068.089933][T12279] ? ref_tracker_free+0x370/0x6b0 [ 2068.094995][T12279] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2068.100397][T12279] netlink_rcv_skb+0x153/0x420 [ 2068.105188][T12279] ? rtnl_getlink+0xae0/0xae0 [ 2068.109892][T12279] ? netlink_ack+0xd50/0xd50 [ 2068.114504][T12279] ? netlink_deliver_tap+0x1a2/0xc40 [ 2068.119811][T12279] ? netlink_deliver_tap+0x1b1/0xc40 [ 2068.125119][T12279] netlink_unicast+0x543/0x7f0 [ 2068.129903][T12279] ? netlink_attachskb+0x880/0x880 [ 2068.135025][T12279] ? __phys_addr+0xc4/0x140 [ 2068.139555][T12279] ? __phys_addr_symbol+0x2c/0x70 [ 2068.144587][T12279] ? __check_object_size+0x2de/0x700 [ 2068.149979][T12279] netlink_sendmsg+0x917/0xe10 [ 2068.154784][T12279] ? netlink_unicast+0x7f0/0x7f0 [ 2068.159833][T12279] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2068.165248][T12279] ? netlink_unicast+0x7f0/0x7f0 [ 2068.170235][T12279] sock_sendmsg+0xcf/0x120 [ 2068.174677][T12279] ____sys_sendmsg+0x6eb/0x810 [ 2068.179464][T12279] ? copy_msghdr_from_user+0xfc/0x150 [ 2068.184905][T12279] ? kernel_sendmsg+0x50/0x50 [ 2068.189610][T12279] ? futex_unqueue+0xb3/0x120 [ 2068.194310][T12279] ___sys_sendmsg+0x110/0x1b0 [ 2068.199005][T12279] ? do_recvmmsg+0x6e0/0x6e0 [ 2068.203613][T12279] ? __fget_files+0x248/0x440 [ 2068.208300][T12279] ? lock_downgrade+0x6e0/0x6e0 [ 2068.213166][T12279] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2068.219161][T12279] ? __fget_files+0x26a/0x440 [ 2068.223861][T12279] ? __fget_light+0xe5/0x270 [ 2068.228474][T12279] __sys_sendmsg+0xf3/0x1c0 [ 2068.232992][T12279] ? __sys_sendmsg_sock+0x30/0x30 [ 2068.238031][T12279] ? lock_downgrade+0x6e0/0x6e0 [ 2068.242906][T12279] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2068.248813][T12279] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2068.254719][T12279] ? lockdep_hardirqs_on+0x79/0x100 [ 2068.259931][T12279] do_syscall_64+0x35/0xb0 [ 2068.264355][T12279] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2068.270261][T12279] RIP: 0033:0x7f58e888a5a9 [ 2068.274682][T12279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2068.294387][T12279] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2068.302806][T12279] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2068.310791][T12279] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2068.318768][T12279] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2068.326742][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2068.334719][T12279] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2068.342717][T12279] [ 2068.379457][T12279] memory: usage 307196kB, limit 307200kB, failcnt 43003 [ 2068.387092][T12279] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2068.394077][T12279] Memory cgroup stats for /syz1: [ 2068.394286][T12279] anon 135168 [ 2068.394286][T12279] file 389120 [ 2068.394286][T12279] kernel 314011648 [ 2068.394286][T12279] kernel_stack 32768 [ 2068.394286][T12279] pagetables 77824 [ 2068.394286][T12279] percpu 5593216 [ 2068.394286][T12279] sock 0 [ 2068.394286][T12279] vmalloc 0 [ 2068.394286][T12279] shmem 389120 [ 2068.394286][T12279] zswap 0 [ 2068.394286][T12279] zswapped 0 [ 2068.394286][T12279] file_mapped 389120 [ 2068.394286][T12279] file_dirty 0 [ 2068.394286][T12279] file_writeback 0 [ 2068.394286][T12279] swapcached 0 [ 2068.394286][T12279] anon_thp 0 [ 2068.394286][T12279] file_thp 0 [ 2068.394286][T12279] shmem_thp 0 [ 2068.394286][T12279] inactive_anon 225280 [ 2068.394286][T12279] active_anon 299008 [ 2068.394286][T12279] inactive_file 0 [ 2068.394286][T12279] active_file 0 [ 2068.394286][T12279] unevictable 0 [ 2068.394286][T12279] slab_reclaimable 21832 03:29:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae6b}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1f04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcb29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xc00e0000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3ee0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) [ 2068.394286][T12279] slab_unreclaimable 308249776 [ 2068.394286][T12279] slab 308271608 [ 2068.490029][T12279] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12278,uid=0 [ 2068.505747][T12279] Memory cgroup out of memory: Killed process 12279 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcb2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2068.576281][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4a000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcb2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2068.695345][T12302] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2068.711424][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2068.724909][T12302] CPU: 1 PID: 12302 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2068.735407][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcc28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2068.745501][T12302] Call Trace: [ 2068.748798][T12302] [ 2068.751745][T12302] dump_stack_lvl+0xcd/0x134 [ 2068.756369][T12302] dump_header+0x10b/0x7f9 [ 2068.760830][T12302] oom_kill_process.cold+0x10/0x15 [ 2068.765968][T12302] out_of_memory+0x358/0x14a0 [ 2068.770686][T12302] ? find_held_lock+0x2d/0x110 [ 2068.775481][T12302] ? oom_killer_disable+0x270/0x270 [ 2068.780718][T12302] ? find_held_lock+0x2d/0x110 [ 2068.785519][T12302] mem_cgroup_out_of_memory+0x206/0x270 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcc29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2068.791099][T12302] ? mem_cgroup_margin+0x130/0x130 [ 2068.796244][T12302] ? lock_downgrade+0x6e0/0x6e0 [ 2068.801148][T12302] try_charge_memcg+0xf67/0x13f0 [ 2068.806136][T12302] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2068.812157][T12302] ? lock_downgrade+0x6e0/0x6e0 [ 2068.817060][T12302] charge_memcg+0x31/0x320 [ 2068.821512][T12302] __mem_cgroup_charge+0x27/0x90 [ 2068.826481][T12302] ? _compound_head+0x5d/0x150 [ 2068.831277][T12302] wp_page_copy+0x27c/0x1b60 [ 2068.835906][T12302] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2068.841397][T12302] ? lock_downgrade+0x6e0/0x6e0 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcc2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcc2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2068.846279][T12302] ? vm_normal_page+0x146/0x2a0 [ 2068.851174][T12302] do_wp_page+0x1d1/0x1910 [ 2068.855622][T12302] __handle_mm_fault+0x1813/0x39b0 [ 2068.860773][T12302] ? vm_iomap_memory+0x190/0x190 [ 2068.865766][T12302] handle_mm_fault+0x1c8/0x780 [ 2068.870568][T12302] do_user_addr_fault+0x475/0x1210 [ 2068.875720][T12302] exc_page_fault+0x94/0x170 [ 2068.880340][T12302] asm_exc_page_fault+0x22/0x30 [ 2068.885223][T12302] RIP: 0033:0x7f70e7e37970 [ 2068.889665][T12302] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2068.909358][T12302] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2068.915450][T12302] RAX: 000000005b791d71 RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2068.923445][T12302] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 0000000008ec3ccd [ 2068.931418][T12302] RBP: 000000005b791d71 R08: 0000000000001d71 R09: 000000005b791d75 [ 2068.939390][T12302] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2068.947365][T12302] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff81a37cdf [ 2068.955344][T12302] ? trace_user_exit.constprop.0+0x13f/0x210 [ 2068.961903][T12302] [ 2068.972493][T12302] memory: usage 307200kB, limit 307200kB, failcnt 58041 03:29:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae6c}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1f05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcd28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xc22e0000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2068.996912][T12302] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2069.008422][T12302] Memory cgroup stats for /syz3: [ 2069.008636][T12302] anon 102400 [ 2069.008636][T12302] file 782336 [ 2069.008636][T12302] kernel 313688064 [ 2069.008636][T12302] kernel_stack 65536 [ 2069.008636][T12302] pagetables 73728 [ 2069.008636][T12302] percpu 5602688 [ 2069.008636][T12302] sock 0 [ 2069.008636][T12302] vmalloc 0 [ 2069.008636][T12302] shmem 778240 [ 2069.008636][T12302] zswap 0 [ 2069.008636][T12302] zswapped 0 [ 2069.008636][T12302] file_mapped 778240 [ 2069.008636][T12302] file_dirty 0 [ 2069.008636][T12302] file_writeback 0 [ 2069.008636][T12302] swapcached 0 [ 2069.008636][T12302] anon_thp 0 [ 2069.008636][T12302] file_thp 0 [ 2069.008636][T12302] shmem_thp 0 [ 2069.008636][T12302] inactive_anon 573440 [ 2069.008636][T12302] active_anon 307200 [ 2069.008636][T12302] inactive_file 0 [ 2069.008636][T12302] active_file 4096 [ 2069.008636][T12302] unevictable 0 [ 2069.008636][T12302] slab_reclaimable 123352 [ 2069.008636][T12302] slab_unreclaimable 307779472 [ 2069.008636][T12302] slab 307902824 03:29:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3ef0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4a030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcd29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1f06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2069.141086][T12302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12302,uid=0 [ 2069.168253][T12302] Memory cgroup out of memory: Killed process 12302 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xf0ffffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcd2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x1f07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae6d}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcd2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4c000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2004}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xfffff000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2069.416520][T12339] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2069.480073][T12339] CPU: 1 PID: 12339 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2069.490552][T12339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2069.500640][T12339] Call Trace: [ 2069.503942][T12339] [ 2069.506896][T12339] dump_stack_lvl+0xcd/0x134 [ 2069.511524][T12339] dump_header+0x10b/0x7f9 [ 2069.515978][T12339] oom_kill_process.cold+0x10/0x15 [ 2069.521129][T12339] out_of_memory+0x358/0x14a0 [ 2069.525849][T12339] ? find_held_lock+0x2d/0x110 [ 2069.530640][T12339] ? oom_killer_disable+0x270/0x270 [ 2069.535877][T12339] ? find_held_lock+0x2d/0x110 [ 2069.540673][T12339] mem_cgroup_out_of_memory+0x206/0x270 [ 2069.546254][T12339] ? mem_cgroup_margin+0x130/0x130 [ 2069.551395][T12339] ? lock_downgrade+0x6e0/0x6e0 [ 2069.556285][T12339] try_charge_memcg+0xf67/0x13f0 [ 2069.561245][T12339] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2069.567243][T12339] ? lock_downgrade+0x6e0/0x6e0 [ 2069.572118][T12339] charge_memcg+0x31/0x320 [ 2069.576564][T12339] __mem_cgroup_charge+0x27/0x90 [ 2069.581514][T12339] ? _compound_head+0x5d/0x150 [ 2069.586285][T12339] wp_page_copy+0x27c/0x1b60 [ 2069.590947][T12339] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2069.596416][T12339] ? lock_downgrade+0x6e0/0x6e0 [ 2069.601275][T12339] ? vm_normal_page+0x146/0x2a0 [ 2069.606196][T12339] do_wp_page+0x1d1/0x1910 [ 2069.610630][T12339] __handle_mm_fault+0x1813/0x39b0 [ 2069.615759][T12339] ? vm_iomap_memory+0x190/0x190 [ 2069.620730][T12339] handle_mm_fault+0x1c8/0x780 [ 2069.625508][T12339] do_user_addr_fault+0x475/0x1210 [ 2069.630653][T12339] exc_page_fault+0x94/0x170 [ 2069.635256][T12339] asm_exc_page_fault+0x22/0x30 [ 2069.640117][T12339] RIP: 0033:0x7f70e7e37970 [ 2069.644542][T12339] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2069.664159][T12339] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2069.670236][T12339] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2069.678212][T12339] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2069.686189][T12339] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2069.694167][T12339] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2069.702150][T12339] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2069.710130][T12339] ? __x64_sys_socket+0xd/0xb0 [ 2069.714936][T12339] [ 2069.746005][T12339] memory: usage 307200kB, limit 307200kB, failcnt 58083 [ 2069.755875][T12339] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2069.777718][T12339] Memory cgroup stats for /syz3: [ 2069.777892][T12339] anon 106496 [ 2069.777892][T12339] file 782336 [ 2069.777892][T12339] kernel 313683968 [ 2069.777892][T12339] kernel_stack 65536 [ 2069.777892][T12339] pagetables 73728 [ 2069.777892][T12339] percpu 5602688 [ 2069.777892][T12339] sock 0 [ 2069.777892][T12339] vmalloc 0 [ 2069.777892][T12339] shmem 778240 [ 2069.777892][T12339] zswap 0 [ 2069.777892][T12339] zswapped 0 [ 2069.777892][T12339] file_mapped 778240 [ 2069.777892][T12339] file_dirty 4096 [ 2069.777892][T12339] file_writeback 0 [ 2069.777892][T12339] swapcached 0 [ 2069.777892][T12339] anon_thp 0 [ 2069.777892][T12339] file_thp 0 [ 2069.777892][T12339] shmem_thp 0 [ 2069.777892][T12339] inactive_anon 577536 [ 2069.777892][T12339] active_anon 307200 [ 2069.777892][T12339] inactive_file 0 [ 2069.777892][T12339] active_file 4096 [ 2069.777892][T12339] unevictable 0 [ 2069.777892][T12339] slab_reclaimable 123352 [ 2069.777892][T12339] slab_unreclaimable 307779472 [ 2069.777892][T12339] slab 307902824 03:29:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000003f00000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xce28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae6e}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2005}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xffffff7f, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x51030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2069.890938][T12339] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12339,uid=0 [ 2069.921354][T12339] Memory cgroup out of memory: Killed process 12339 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2006}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xce29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2007}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x56010000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xffffff9e, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xce2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2070.195021][T12366] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2070.224866][T12366] CPU: 0 PID: 12366 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2070.235332][T12366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2070.245410][T12366] Call Trace: [ 2070.248710][T12366] [ 2070.251653][T12366] dump_stack_lvl+0xcd/0x134 [ 2070.256270][T12366] dump_header+0x10b/0x7f9 [ 2070.260721][T12366] oom_kill_process.cold+0x10/0x15 [ 2070.265867][T12366] out_of_memory+0x358/0x14a0 [ 2070.270577][T12366] ? find_held_lock+0x2d/0x110 [ 2070.275368][T12366] ? oom_killer_disable+0x270/0x270 [ 2070.280596][T12366] ? find_held_lock+0x2d/0x110 [ 2070.285373][T12366] mem_cgroup_out_of_memory+0x206/0x270 [ 2070.290931][T12366] ? mem_cgroup_margin+0x130/0x130 [ 2070.296045][T12366] ? lock_downgrade+0x6e0/0x6e0 [ 2070.300923][T12366] try_charge_memcg+0xf67/0x13f0 [ 2070.305876][T12366] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2070.311874][T12366] ? lock_downgrade+0x6e0/0x6e0 [ 2070.316747][T12366] charge_memcg+0x31/0x320 [ 2070.321176][T12366] __mem_cgroup_charge+0x27/0x90 [ 2070.326123][T12366] ? _compound_head+0x5d/0x150 [ 2070.330894][T12366] wp_page_copy+0x27c/0x1b60 [ 2070.335499][T12366] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2070.340963][T12366] ? lock_downgrade+0x6e0/0x6e0 [ 2070.345818][T12366] ? vm_normal_page+0x146/0x2a0 [ 2070.350690][T12366] do_wp_page+0x1d1/0x1910 [ 2070.355121][T12366] __handle_mm_fault+0x1813/0x39b0 [ 2070.360248][T12366] ? vm_iomap_memory+0x190/0x190 [ 2070.365216][T12366] handle_mm_fault+0x1c8/0x780 [ 2070.369991][T12366] do_user_addr_fault+0x475/0x1210 [ 2070.375124][T12366] exc_page_fault+0x94/0x170 [ 2070.379727][T12366] asm_exc_page_fault+0x22/0x30 [ 2070.384591][T12366] RIP: 0033:0x7f70e7e37970 [ 2070.389012][T12366] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2070.408625][T12366] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2070.414700][T12366] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2070.422675][T12366] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2070.430652][T12366] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2070.438626][T12366] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2070.446607][T12366] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2070.454590][T12366] ? __x64_sys_socket+0xd/0xb0 [ 2070.459382][T12366] [ 2070.497415][T12366] memory: usage 307200kB, limit 307200kB, failcnt 58144 [ 2070.508289][T12366] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2070.521776][T12366] Memory cgroup stats for /syz3: [ 2070.522006][T12366] anon 106496 [ 2070.522006][T12366] file 782336 [ 2070.522006][T12366] kernel 313683968 [ 2070.522006][T12366] kernel_stack 65536 [ 2070.522006][T12366] pagetables 73728 [ 2070.522006][T12366] percpu 5602688 [ 2070.522006][T12366] sock 0 [ 2070.522006][T12366] vmalloc 0 [ 2070.522006][T12366] shmem 778240 [ 2070.522006][T12366] zswap 0 [ 2070.522006][T12366] zswapped 0 [ 2070.522006][T12366] file_mapped 778240 [ 2070.522006][T12366] file_dirty 4096 [ 2070.522006][T12366] file_writeback 0 [ 2070.522006][T12366] swapcached 0 [ 2070.522006][T12366] anon_thp 0 [ 2070.522006][T12366] file_thp 0 [ 2070.522006][T12366] shmem_thp 0 [ 2070.522006][T12366] inactive_anon 577536 [ 2070.522006][T12366] active_anon 307200 [ 2070.522006][T12366] inactive_file 0 [ 2070.522006][T12366] active_file 4096 [ 2070.522006][T12366] unevictable 0 [ 2070.522006][T12366] slab_reclaimable 123352 [ 2070.522006][T12366] slab_unreclaimable 307779472 [ 2070.522006][T12366] slab 307902824 [ 2070.619290][T12366] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12366,uid=0 03:29:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f00000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae6f}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xce2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xfffffff0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2104}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2070.635647][T12366] Memory cgroup out of memory: Killed process 12366 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcf28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x64010000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcf29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2105}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xffffffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcf2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2070.853112][T12391] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 03:29:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2106}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2070.905423][T12391] CPU: 1 PID: 12391 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2070.915901][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2070.925990][T12391] Call Trace: [ 2070.929314][T12391] [ 2070.932277][T12391] dump_stack_lvl+0xcd/0x134 [ 2070.936905][T12391] dump_header+0x10b/0x7f9 [ 2070.941361][T12391] oom_kill_process.cold+0x10/0x15 [ 2070.946517][T12391] out_of_memory+0x358/0x14a0 [ 2070.951229][T12391] ? find_held_lock+0x2d/0x110 [ 2070.956044][T12391] ? oom_killer_disable+0x270/0x270 [ 2070.961279][T12391] ? find_held_lock+0x2d/0x110 [ 2070.966069][T12391] mem_cgroup_out_of_memory+0x206/0x270 [ 2070.971655][T12391] ? mem_cgroup_margin+0x130/0x130 [ 2070.976800][T12391] ? lock_downgrade+0x6e0/0x6e0 [ 2070.981701][T12391] try_charge_memcg+0xf67/0x13f0 [ 2070.986681][T12391] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2070.992695][T12391] ? lock_downgrade+0x6e0/0x6e0 [ 2070.997597][T12391] charge_memcg+0x31/0x320 [ 2071.002058][T12391] __mem_cgroup_charge+0x27/0x90 [ 2071.007030][T12391] ? _compound_head+0x5d/0x150 [ 2071.011822][T12391] wp_page_copy+0x27c/0x1b60 [ 2071.016452][T12391] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2071.021942][T12391] ? lock_downgrade+0x6e0/0x6e0 [ 2071.026829][T12391] ? vm_normal_page+0x146/0x2a0 [ 2071.031707][T12391] do_wp_page+0x52c/0x1910 [ 2071.036162][T12391] __handle_mm_fault+0x1813/0x39b0 [ 2071.041290][T12391] ? vm_iomap_memory+0x190/0x190 [ 2071.046260][T12391] handle_mm_fault+0x1c8/0x780 [ 2071.051037][T12391] do_user_addr_fault+0x475/0x1210 [ 2071.056169][T12391] exc_page_fault+0x94/0x170 [ 2071.060772][T12391] asm_exc_page_fault+0x22/0x30 [ 2071.065641][T12391] RIP: 0033:0x7f70e7e34a15 [ 2071.070065][T12391] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2071.089680][T12391] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2071.095751][T12391] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2071.103835][T12391] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2071.111832][T12391] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2071.119852][T12391] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001f9914 [ 2071.127826][T12391] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2071.135820][T12391] [ 2071.141628][T12391] memory: usage 307200kB, limit 307200kB, failcnt 58202 [ 2071.154684][T12391] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2071.161733][T12391] Memory cgroup stats for /syz3: [ 2071.161965][T12391] anon 90112 [ 2071.161965][T12391] file 782336 [ 2071.161965][T12391] kernel 313700352 [ 2071.161965][T12391] kernel_stack 65536 [ 2071.161965][T12391] pagetables 73728 [ 2071.161965][T12391] percpu 5602688 [ 2071.161965][T12391] sock 0 [ 2071.161965][T12391] vmalloc 0 [ 2071.161965][T12391] shmem 778240 [ 2071.161965][T12391] zswap 0 [ 2071.161965][T12391] zswapped 0 [ 2071.161965][T12391] file_mapped 778240 [ 2071.161965][T12391] file_dirty 4096 [ 2071.161965][T12391] file_writeback 0 [ 2071.161965][T12391] swapcached 0 [ 2071.161965][T12391] anon_thp 0 [ 2071.161965][T12391] file_thp 0 [ 2071.161965][T12391] shmem_thp 0 [ 2071.161965][T12391] inactive_anon 561152 [ 2071.161965][T12391] active_anon 307200 [ 2071.161965][T12391] inactive_file 0 [ 2071.161965][T12391] active_file 4096 [ 2071.161965][T12391] unevictable 0 [ 2071.161965][T12391] slab_reclaimable 123352 [ 2071.161965][T12391] slab_unreclaimable 307790872 [ 2071.161965][T12391] slab 307914224 [ 2071.258892][T12391] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12391,uid=0 [ 2071.274863][T12391] Memory cgroup out of memory: Killed process 12391 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2071.292891][T12389] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 03:29:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000fffffff00000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) [ 2071.310718][T12389] CPU: 1 PID: 12389 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2071.321183][T12389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2071.331263][T12389] Call Trace: [ 2071.334569][T12389] [ 2071.337518][T12389] dump_stack_lvl+0xcd/0x134 [ 2071.342133][T12389] dump_header+0x10b/0x7f9 [ 2071.346571][T12389] oom_kill_process.cold+0x10/0x15 [ 2071.351705][T12389] out_of_memory+0x358/0x14a0 [ 2071.356419][T12389] ? oom_killer_disable+0x270/0x270 [ 2071.361638][T12389] ? find_held_lock+0x2d/0x110 [ 2071.366414][T12389] mem_cgroup_out_of_memory+0x206/0x270 [ 2071.371995][T12389] ? mem_cgroup_margin+0x130/0x130 [ 2071.377136][T12389] ? lock_downgrade+0x6e0/0x6e0 [ 2071.382012][T12389] try_charge_memcg+0xf67/0x13f0 [ 2071.386969][T12389] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2071.392972][T12389] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2071.398707][T12389] ? lock_downgrade+0x6e0/0x6e0 [ 2071.403590][T12389] obj_cgroup_charge+0x2ab/0x5e0 [ 2071.408550][T12389] __kmalloc+0xb2/0x340 [ 2071.412737][T12389] ? veth_dev_init+0x1dd/0x3e0 [ 2071.417566][T12389] veth_dev_init+0x1dd/0x3e0 [ 2071.422173][T12389] ? veth_get_num_queues+0x50/0x50 [ 2071.427382][T12389] register_netdevice+0x5e1/0x1680 [ 2071.432526][T12389] ? netdev_change_features+0xb0/0xb0 [ 2071.437914][T12389] ? dev_addr_mod+0x2c9/0x3f0 [ 2071.442613][T12389] veth_newlink+0x338/0x990 [ 2071.447131][T12389] ? veth_set_features+0x190/0x190 [ 2071.452260][T12389] ? netlink_rcv_skb+0x153/0x420 [ 2071.457212][T12389] ? netlink_unicast+0x543/0x7f0 [ 2071.462177][T12389] ? netlink_sendmsg+0x917/0xe10 [ 2071.467190][T12389] ? dev_addr_mod+0x2c9/0x3f0 [ 2071.471900][T12389] ? rtnl_create_link+0x7e8/0xc00 [ 2071.476939][T12389] ? veth_set_features+0x190/0x190 [ 2071.482072][T12389] __rtnl_newlink+0x1087/0x17e0 [ 2071.486955][T12389] ? rtnl_link_unregister+0x250/0x250 [ 2071.492350][T12389] ? rtnl_newlink+0x46/0xa0 [ 2071.496974][T12389] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2071.502548][T12389] ? trace_kmalloc+0x32/0x100 [ 2071.507243][T12389] rtnl_newlink+0x64/0xa0 [ 2071.511605][T12389] ? __rtnl_newlink+0x17e0/0x17e0 [ 2071.516830][T12389] rtnetlink_rcv_msg+0x43a/0xca0 [ 2071.521790][T12389] ? rtnl_getlink+0xae0/0xae0 [ 2071.526474][T12389] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2071.531798][T12389] ? ref_tracker_free+0x370/0x6b0 [ 2071.536857][T12389] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2071.542253][T12389] netlink_rcv_skb+0x153/0x420 [ 2071.547031][T12389] ? rtnl_getlink+0xae0/0xae0 [ 2071.551732][T12389] ? netlink_ack+0xd50/0xd50 [ 2071.556327][T12389] ? netlink_deliver_tap+0x1a2/0xc40 [ 2071.561729][T12389] ? netlink_deliver_tap+0x1b1/0xc40 [ 2071.567035][T12389] netlink_unicast+0x543/0x7f0 [ 2071.571821][T12389] ? netlink_attachskb+0x880/0x880 [ 2071.576937][T12389] ? __phys_addr+0xc4/0x140 [ 2071.581468][T12389] ? __phys_addr_symbol+0x2c/0x70 [ 2071.586524][T12389] ? __check_object_size+0x2de/0x700 [ 2071.591856][T12389] netlink_sendmsg+0x917/0xe10 [ 2071.596645][T12389] ? netlink_unicast+0x7f0/0x7f0 [ 2071.601638][T12389] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2071.606933][T12389] ? netlink_unicast+0x7f0/0x7f0 [ 2071.611892][T12389] sock_sendmsg+0xcf/0x120 [ 2071.616320][T12389] ____sys_sendmsg+0x6eb/0x810 [ 2071.621107][T12389] ? copy_msghdr_from_user+0xfc/0x150 [ 2071.626492][T12389] ? kernel_sendmsg+0x50/0x50 [ 2071.631194][T12389] ? futex_unqueue+0xb3/0x120 [ 2071.635888][T12389] ___sys_sendmsg+0x110/0x1b0 [ 2071.640586][T12389] ? do_recvmmsg+0x6e0/0x6e0 [ 2071.645183][T12389] ? __fget_files+0x248/0x440 [ 2071.649857][T12389] ? lock_downgrade+0x6e0/0x6e0 [ 2071.654718][T12389] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2071.660702][T12389] ? __fget_files+0x26a/0x440 [ 2071.665381][T12389] ? __fget_light+0xe5/0x270 [ 2071.669982][T12389] __sys_sendmsg+0xf3/0x1c0 [ 2071.674492][T12389] ? __sys_sendmsg_sock+0x30/0x30 [ 2071.679522][T12389] ? lock_downgrade+0x6e0/0x6e0 [ 2071.684383][T12389] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2071.690278][T12389] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2071.696191][T12389] ? lockdep_hardirqs_on+0x79/0x100 [ 2071.701435][T12389] do_syscall_64+0x35/0xb0 [ 2071.705882][T12389] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2071.711798][T12389] RIP: 0033:0x7f58e888a5a9 [ 2071.716221][T12389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2071.735859][T12389] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2071.744292][T12389] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2071.752265][T12389] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2071.760242][T12389] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2071.768219][T12389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2071.776211][T12389] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2071.784210][T12389] [ 2071.789772][T12389] memory: usage 307164kB, limit 307200kB, failcnt 43238 [ 2071.799936][T12389] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2071.810901][T12389] Memory cgroup stats for /syz1: [ 2071.811124][T12389] anon 135168 [ 2071.811124][T12389] file 389120 [ 2071.811124][T12389] kernel 314011648 [ 2071.811124][T12389] kernel_stack 32768 [ 2071.811124][T12389] pagetables 77824 [ 2071.811124][T12389] percpu 5593216 [ 2071.811124][T12389] sock 0 [ 2071.811124][T12389] vmalloc 0 [ 2071.811124][T12389] shmem 389120 [ 2071.811124][T12389] zswap 0 [ 2071.811124][T12389] zswapped 0 [ 2071.811124][T12389] file_mapped 389120 [ 2071.811124][T12389] file_dirty 0 [ 2071.811124][T12389] file_writeback 0 [ 2071.811124][T12389] swapcached 0 [ 2071.811124][T12389] anon_thp 0 [ 2071.811124][T12389] file_thp 0 [ 2071.811124][T12389] shmem_thp 0 [ 2071.811124][T12389] inactive_anon 225280 [ 2071.811124][T12389] active_anon 299008 [ 2071.811124][T12389] inactive_file 0 [ 2071.811124][T12389] active_file 0 [ 2071.811124][T12389] unevictable 0 [ 2071.811124][T12389] slab_reclaimable 21832 [ 2071.811124][T12389] slab_unreclaimable 308249776 [ 2071.811124][T12389] slab 308271608 [ 2071.904924][T12389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12380,uid=0 [ 2071.922872][T12389] Memory cgroup out of memory: Killed process 12389 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2072.012462][T12407] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2072.022829][T12407] CPU: 0 PID: 12407 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2072.033266][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2072.043313][T12407] Call Trace: [ 2072.046736][T12407] [ 2072.049663][T12407] dump_stack_lvl+0xcd/0x134 [ 2072.054249][T12407] dump_header+0x10b/0x7f9 [ 2072.058669][T12407] oom_kill_process.cold+0x10/0x15 [ 2072.063884][T12407] out_of_memory+0x358/0x14a0 [ 2072.068561][T12407] ? find_held_lock+0x2d/0x110 [ 2072.073323][T12407] ? oom_killer_disable+0x270/0x270 [ 2072.078517][T12407] ? find_held_lock+0x2d/0x110 [ 2072.083272][T12407] mem_cgroup_out_of_memory+0x206/0x270 [ 2072.088812][T12407] ? mem_cgroup_margin+0x130/0x130 [ 2072.093912][T12407] ? lock_downgrade+0x6e0/0x6e0 [ 2072.098765][T12407] try_charge_memcg+0xf67/0x13f0 [ 2072.103787][T12407] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2072.109762][T12407] ? lock_downgrade+0x6e0/0x6e0 [ 2072.114614][T12407] charge_memcg+0x31/0x320 [ 2072.119023][T12407] __mem_cgroup_charge+0x27/0x90 [ 2072.123954][T12407] ? _compound_head+0x5d/0x150 [ 2072.128722][T12407] wp_page_copy+0x27c/0x1b60 [ 2072.133307][T12407] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2072.138754][T12407] ? lock_downgrade+0x6e0/0x6e0 [ 2072.143596][T12407] ? vm_normal_page+0x146/0x2a0 [ 2072.148483][T12407] do_wp_page+0x1d1/0x1910 [ 2072.152895][T12407] __handle_mm_fault+0x1813/0x39b0 [ 2072.158007][T12407] ? vm_iomap_memory+0x190/0x190 [ 2072.162947][T12407] handle_mm_fault+0x1c8/0x780 [ 2072.167717][T12407] do_user_addr_fault+0x475/0x1210 [ 2072.172834][T12407] exc_page_fault+0x94/0x170 [ 2072.177420][T12407] asm_exc_page_fault+0x22/0x30 [ 2072.182265][T12407] RIP: 0033:0x7f70e7e37970 [ 2072.186682][T12407] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2072.206281][T12407] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2072.212337][T12407] RAX: 000000005b791d71 RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2072.220304][T12407] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 0000000008ec3ccd [ 2072.228286][T12407] RBP: 000000005b791d71 R08: 0000000000001d71 R09: 000000005b791d75 [ 2072.236251][T12407] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2072.244216][T12407] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff81a37cdf [ 2072.252178][T12407] ? trace_user_exit.constprop.0+0x13f/0x210 [ 2072.258166][T12407] 03:29:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae70}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2107}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xcf2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2072.273332][T12407] memory: usage 307200kB, limit 307200kB, failcnt 58324 [ 2072.285872][T12407] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2072.308447][T12413] __nla_validate_parse: 18 callbacks suppressed [ 2072.308466][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2072.317673][T12407] Memory cgroup stats for /syz3: [ 2072.336594][T12407] anon 102400 [ 2072.336594][T12407] file 782336 [ 2072.336594][T12407] kernel 313683968 [ 2072.336594][T12407] kernel_stack 65536 [ 2072.336594][T12407] pagetables 73728 [ 2072.336594][T12407] percpu 5602688 [ 2072.336594][T12407] sock 0 [ 2072.336594][T12407] vmalloc 0 [ 2072.336594][T12407] shmem 778240 [ 2072.336594][T12407] zswap 0 [ 2072.336594][T12407] zswapped 0 [ 2072.336594][T12407] file_mapped 778240 [ 2072.336594][T12407] file_dirty 4096 03:29:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd028, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2072.336594][T12407] file_writeback 0 [ 2072.336594][T12407] swapcached 0 [ 2072.336594][T12407] anon_thp 0 [ 2072.336594][T12407] file_thp 0 [ 2072.336594][T12407] shmem_thp 0 [ 2072.336594][T12407] inactive_anon 573440 [ 2072.336594][T12407] active_anon 307200 [ 2072.336594][T12407] inactive_file 0 [ 2072.336594][T12407] active_file 4096 [ 2072.336594][T12407] unevictable 0 [ 2072.336594][T12407] slab_reclaimable 123352 [ 2072.336594][T12407] slab_unreclaimable 307779472 [ 2072.336594][T12407] slab 307902824 03:29:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd029, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2072.437192][T12407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12407,uid=0 03:29:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd02a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x2, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2072.519214][T12407] Memory cgroup out of memory: Killed process 12407 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2072.544746][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2204}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f10000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae71}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd02b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2072.668467][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x69440000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd128, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2072.783576][T12431] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2072.808525][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2072.815904][T12431] CPU: 0 PID: 12431 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 03:29:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2205}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2072.828183][T12431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2072.838263][T12431] Call Trace: [ 2072.841562][T12431] [ 2072.844510][T12431] dump_stack_lvl+0xcd/0x134 [ 2072.849130][T12431] dump_header+0x10b/0x7f9 [ 2072.853594][T12431] oom_kill_process.cold+0x10/0x15 [ 2072.858736][T12431] out_of_memory+0x358/0x14a0 [ 2072.863445][T12431] ? find_held_lock+0x2d/0x110 [ 2072.868240][T12431] ? oom_killer_disable+0x270/0x270 [ 2072.873469][T12431] ? find_held_lock+0x2d/0x110 [ 2072.878259][T12431] mem_cgroup_out_of_memory+0x206/0x270 [ 2072.883832][T12431] ? mem_cgroup_margin+0x130/0x130 [ 2072.888966][T12431] ? lock_downgrade+0x6e0/0x6e0 [ 2072.893875][T12431] try_charge_memcg+0xf67/0x13f0 [ 2072.898866][T12431] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2072.904885][T12431] ? lock_downgrade+0x6e0/0x6e0 [ 2072.909774][T12431] charge_memcg+0x31/0x320 [ 2072.914236][T12431] __mem_cgroup_charge+0x27/0x90 [ 2072.919200][T12431] ? _compound_head+0x5d/0x150 [ 2072.923976][T12431] wp_page_copy+0x27c/0x1b60 [ 2072.928586][T12431] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2072.934052][T12431] ? lock_downgrade+0x6e0/0x6e0 [ 2072.938914][T12431] ? vm_normal_page+0x146/0x2a0 [ 2072.943786][T12431] do_wp_page+0x1d1/0x1910 [ 2072.948222][T12431] __handle_mm_fault+0x1813/0x39b0 [ 2072.953353][T12431] ? vm_iomap_memory+0x190/0x190 [ 2072.958325][T12431] handle_mm_fault+0x1c8/0x780 [ 2072.963103][T12431] do_user_addr_fault+0x475/0x1210 [ 2072.968236][T12431] exc_page_fault+0x94/0x170 [ 2072.972847][T12431] asm_exc_page_fault+0x22/0x30 [ 2072.977881][T12431] RIP: 0033:0x7f70e7e37970 [ 2072.982301][T12431] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2073.001918][T12431] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2073.007990][T12431] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2073.015966][T12431] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2073.023949][T12431] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e 03:29:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae72}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x3, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd129, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2073.031953][T12431] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2073.039949][T12431] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2073.047932][T12431] ? __x64_sys_socket+0xd/0xb0 [ 2073.052735][T12431] [ 2073.062856][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2206}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2073.095865][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2073.123499][T12431] memory: usage 307200kB, limit 307200kB, failcnt 58378 03:29:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2073.141879][T12431] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2073.172737][T12431] Memory cgroup stats for /syz3: [ 2073.172960][T12431] anon 106496 [ 2073.172960][T12431] file 782336 [ 2073.172960][T12431] kernel 313683968 [ 2073.172960][T12431] kernel_stack 65536 [ 2073.172960][T12431] pagetables 73728 [ 2073.172960][T12431] percpu 5602688 [ 2073.172960][T12431] sock 0 [ 2073.172960][T12431] vmalloc 0 [ 2073.172960][T12431] shmem 778240 [ 2073.172960][T12431] zswap 0 [ 2073.172960][T12431] zswapped 0 [ 2073.172960][T12431] file_mapped 778240 [ 2073.172960][T12431] file_dirty 4096 [ 2073.172960][T12431] file_writeback 0 [ 2073.172960][T12431] swapcached 0 [ 2073.172960][T12431] anon_thp 0 [ 2073.172960][T12431] file_thp 0 [ 2073.172960][T12431] shmem_thp 0 [ 2073.172960][T12431] inactive_anon 577536 [ 2073.172960][T12431] active_anon 307200 [ 2073.172960][T12431] inactive_file 0 [ 2073.172960][T12431] active_file 4096 [ 2073.172960][T12431] unevictable 0 [ 2073.172960][T12431] slab_reclaimable 123352 [ 2073.172960][T12431] slab_unreclaimable 307779472 [ 2073.172960][T12431] slab 307902824 03:29:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd12a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2073.212037][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2073.312025][T12431] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12431,uid=0 [ 2073.336336][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2073.370131][T12431] Memory cgroup out of memory: Killed process 12431 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000003f20000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2207}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6ee21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd12b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x4, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd228, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae73}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd229, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2073.521801][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd22a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x5, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2073.609143][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2073.633422][T12467] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2073.647727][T12467] CPU: 0 PID: 12467 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2073.658199][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2073.668280][T12467] Call Trace: [ 2073.671567][T12467] [ 2073.674500][T12467] dump_stack_lvl+0xcd/0x134 [ 2073.679103][T12467] dump_header+0x10b/0x7f9 [ 2073.683541][T12467] oom_kill_process.cold+0x10/0x15 [ 2073.688666][T12467] out_of_memory+0x358/0x14a0 [ 2073.693359][T12467] ? find_held_lock+0x2d/0x110 [ 2073.698137][T12467] ? oom_killer_disable+0x270/0x270 [ 2073.703354][T12467] ? find_held_lock+0x2d/0x110 [ 2073.708130][T12467] mem_cgroup_out_of_memory+0x206/0x270 [ 2073.713690][T12467] ? mem_cgroup_margin+0x130/0x130 [ 2073.718812][T12467] ? lock_downgrade+0x6e0/0x6e0 [ 2073.723685][T12467] try_charge_memcg+0xf67/0x13f0 [ 2073.728648][T12467] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2073.734646][T12467] ? lock_downgrade+0x6e0/0x6e0 [ 2073.739520][T12467] charge_memcg+0x31/0x320 [ 2073.743949][T12467] __mem_cgroup_charge+0x27/0x90 [ 2073.748898][T12467] ? _compound_head+0x5d/0x150 [ 2073.753669][T12467] wp_page_copy+0x27c/0x1b60 [ 2073.758277][T12467] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2073.763743][T12467] ? lock_downgrade+0x6e0/0x6e0 [ 2073.768602][T12467] ? vm_normal_page+0x146/0x2a0 [ 2073.773475][T12467] do_wp_page+0x1d1/0x1910 [ 2073.777916][T12467] __handle_mm_fault+0x1813/0x39b0 [ 2073.783040][T12467] ? vm_iomap_memory+0x190/0x190 [ 2073.788009][T12467] handle_mm_fault+0x1c8/0x780 [ 2073.792786][T12467] do_user_addr_fault+0x475/0x1210 [ 2073.797924][T12467] exc_page_fault+0x94/0x170 [ 2073.802526][T12467] asm_exc_page_fault+0x22/0x30 [ 2073.807386][T12467] RIP: 0033:0x7f70e7e37970 [ 2073.811810][T12467] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2073.831424][T12467] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2073.837496][T12467] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2073.845560][T12467] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec 03:29:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2304}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2073.853628][T12467] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2073.861605][T12467] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2073.869581][T12467] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2073.877556][T12467] ? __x64_sys_socket+0xd/0xb0 [ 2073.882346][T12467] 03:29:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6fe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae74}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2073.945810][T12467] memory: usage 307200kB, limit 307200kB, failcnt 58435 [ 2073.952899][T12467] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2073.976401][T12467] Memory cgroup stats for /syz3: [ 2073.976605][T12467] anon 106496 [ 2073.976605][T12467] file 782336 [ 2073.976605][T12467] kernel 313683968 [ 2073.976605][T12467] kernel_stack 65536 [ 2073.976605][T12467] pagetables 73728 [ 2073.976605][T12467] percpu 5602688 [ 2073.976605][T12467] sock 0 [ 2073.976605][T12467] vmalloc 0 [ 2073.976605][T12467] shmem 778240 [ 2073.976605][T12467] zswap 0 [ 2073.976605][T12467] zswapped 0 [ 2073.976605][T12467] file_mapped 778240 [ 2073.976605][T12467] file_dirty 4096 [ 2073.976605][T12467] file_writeback 0 [ 2073.976605][T12467] swapcached 0 [ 2073.976605][T12467] anon_thp 0 [ 2073.976605][T12467] file_thp 0 [ 2073.976605][T12467] shmem_thp 0 [ 2073.976605][T12467] inactive_anon 577536 [ 2073.976605][T12467] active_anon 307200 [ 2073.976605][T12467] inactive_file 0 [ 2073.976605][T12467] active_file 4096 [ 2073.976605][T12467] unevictable 0 [ 2073.976605][T12467] slab_reclaimable 123352 [ 2073.976605][T12467] slab_unreclaimable 307779472 [ 2073.976605][T12467] slab 307902824 03:29:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f20000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd22b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2305}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x70e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x6, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2074.104064][T12467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12467,uid=0 [ 2074.127253][T12467] Memory cgroup out of memory: Killed process 12467 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd328, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2074.224426][T12485] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2074.254112][T12485] CPU: 0 PID: 12485 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2074.264592][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2074.274681][T12485] Call Trace: [ 2074.277992][T12485] [ 2074.280940][T12485] dump_stack_lvl+0xcd/0x134 [ 2074.285568][T12485] dump_header+0x10b/0x7f9 [ 2074.290020][T12485] oom_kill_process.cold+0x10/0x15 [ 2074.295162][T12485] out_of_memory+0x358/0x14a0 [ 2074.299881][T12485] ? find_held_lock+0x2d/0x110 [ 2074.304659][T12485] ? oom_killer_disable+0x270/0x270 [ 2074.309873][T12485] ? find_held_lock+0x2d/0x110 [ 2074.314652][T12485] mem_cgroup_out_of_memory+0x206/0x270 [ 2074.320211][T12485] ? mem_cgroup_margin+0x130/0x130 [ 2074.325331][T12485] ? lock_downgrade+0x6e0/0x6e0 [ 2074.330214][T12485] try_charge_memcg+0xf67/0x13f0 [ 2074.335168][T12485] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2074.341168][T12485] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2074.346914][T12485] ? lock_downgrade+0x6e0/0x6e0 [ 2074.351795][T12485] obj_cgroup_charge+0x2ab/0x5e0 [ 2074.357099][T12485] __kmalloc+0xb2/0x340 [ 2074.361271][T12485] ? veth_dev_init+0x1dd/0x3e0 [ 2074.366050][T12485] veth_dev_init+0x1dd/0x3e0 [ 2074.370649][T12485] ? veth_get_num_queues+0x50/0x50 [ 2074.375773][T12485] register_netdevice+0x5e1/0x1680 [ 2074.380901][T12485] ? netdev_change_features+0xb0/0xb0 [ 2074.386287][T12485] ? dev_addr_mod+0x2c9/0x3f0 [ 2074.390981][T12485] veth_newlink+0x338/0x990 [ 2074.395501][T12485] ? veth_set_features+0x190/0x190 [ 2074.400624][T12485] ? netlink_rcv_skb+0x153/0x420 [ 2074.405575][T12485] ? netlink_unicast+0x543/0x7f0 [ 2074.410523][T12485] ? netlink_sendmsg+0x917/0xe10 [ 2074.415524][T12485] ? dev_addr_mod+0x2c9/0x3f0 [ 2074.420222][T12485] ? rtnl_create_link+0x7e8/0xc00 [ 2074.425267][T12485] ? veth_set_features+0x190/0x190 [ 2074.430393][T12485] __rtnl_newlink+0x1087/0x17e0 [ 2074.435272][T12485] ? rtnl_link_unregister+0x250/0x250 [ 2074.440658][T12485] ? rtnl_newlink+0x46/0xa0 [ 2074.445192][T12485] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2074.450748][T12485] ? trace_kmalloc+0x32/0x100 [ 2074.455442][T12485] rtnl_newlink+0x64/0xa0 [ 2074.459785][T12485] ? __rtnl_newlink+0x17e0/0x17e0 [ 2074.464817][T12485] rtnetlink_rcv_msg+0x43a/0xca0 [ 2074.469774][T12485] ? rtnl_getlink+0xae0/0xae0 [ 2074.474460][T12485] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2074.479753][T12485] ? skb_clone+0x16e/0x3c0 [ 2074.484188][T12485] ? ref_tracker_free+0x370/0x6b0 [ 2074.489228][T12485] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2074.494615][T12485] netlink_rcv_skb+0x153/0x420 [ 2074.499392][T12485] ? rtnl_getlink+0xae0/0xae0 [ 2074.504080][T12485] ? netlink_ack+0xd50/0xd50 [ 2074.508677][T12485] ? netlink_deliver_tap+0x1a2/0xc40 [ 2074.513981][T12485] ? netlink_deliver_tap+0x1b1/0xc40 [ 2074.519303][T12485] netlink_unicast+0x543/0x7f0 [ 2074.524082][T12485] ? netlink_attachskb+0x880/0x880 [ 2074.529205][T12485] ? __phys_addr+0xc4/0x140 [ 2074.533715][T12485] ? __phys_addr_symbol+0x2c/0x70 [ 2074.538748][T12485] ? __check_object_size+0x2de/0x700 [ 2074.544048][T12485] netlink_sendmsg+0x917/0xe10 [ 2074.548831][T12485] ? netlink_unicast+0x7f0/0x7f0 [ 2074.553786][T12485] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2074.559082][T12485] ? netlink_unicast+0x7f0/0x7f0 [ 2074.564031][T12485] sock_sendmsg+0xcf/0x120 [ 2074.568461][T12485] ____sys_sendmsg+0x6eb/0x810 [ 2074.573235][T12485] ? copy_msghdr_from_user+0xfc/0x150 [ 2074.578617][T12485] ? kernel_sendmsg+0x50/0x50 [ 2074.583312][T12485] ? futex_unqueue+0xb3/0x120 [ 2074.588007][T12485] ___sys_sendmsg+0x110/0x1b0 [ 2074.592696][T12485] ? do_recvmmsg+0x6e0/0x6e0 [ 2074.597303][T12485] ? __fget_files+0x248/0x440 [ 2074.601989][T12485] ? lock_downgrade+0x6e0/0x6e0 [ 2074.606855][T12485] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2074.612851][T12485] ? __fget_files+0x26a/0x440 [ 2074.617542][T12485] ? __fget_light+0xe5/0x270 [ 2074.622148][T12485] __sys_sendmsg+0xf3/0x1c0 [ 2074.626666][T12485] ? __sys_sendmsg_sock+0x30/0x30 [ 2074.631704][T12485] ? lock_downgrade+0x6e0/0x6e0 [ 2074.636573][T12485] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2074.642476][T12485] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2074.648382][T12485] ? lockdep_hardirqs_on+0x79/0x100 [ 2074.653591][T12485] do_syscall_64+0x35/0xb0 [ 2074.658015][T12485] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2074.663924][T12485] RIP: 0033:0x7f58e888a5a9 [ 2074.668342][T12485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2074.687967][T12485] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2074.696392][T12485] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2074.704377][T12485] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2074.712364][T12485] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 03:29:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2306}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2074.720341][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2074.728316][T12485] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2074.736310][T12485] [ 2074.763157][T12485] memory: usage 307196kB, limit 307200kB, failcnt 43495 03:29:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x7, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2074.786010][T12485] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2074.801889][T12485] Memory cgroup stats for /syz1: [ 2074.802138][T12485] anon 135168 [ 2074.802138][T12485] file 389120 [ 2074.802138][T12485] kernel 314044416 [ 2074.802138][T12485] kernel_stack 65536 [ 2074.802138][T12485] pagetables 77824 [ 2074.802138][T12485] percpu 5593216 [ 2074.802138][T12485] sock 0 [ 2074.802138][T12485] vmalloc 0 [ 2074.802138][T12485] shmem 389120 [ 2074.802138][T12485] zswap 0 [ 2074.802138][T12485] zswapped 0 [ 2074.802138][T12485] file_mapped 389120 [ 2074.802138][T12485] file_dirty 0 [ 2074.802138][T12485] file_writeback 0 [ 2074.802138][T12485] swapcached 0 [ 2074.802138][T12485] anon_thp 0 [ 2074.802138][T12485] file_thp 0 [ 2074.802138][T12485] shmem_thp 0 [ 2074.802138][T12485] inactive_anon 225280 [ 2074.802138][T12485] active_anon 299008 [ 2074.802138][T12485] inactive_file 0 [ 2074.802138][T12485] active_file 0 [ 2074.802138][T12485] unevictable 0 03:29:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd329, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2307}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd32a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2074.802138][T12485] slab_reclaimable 21832 [ 2074.802138][T12485] slab_unreclaimable 308249776 [ 2074.802138][T12485] slab 308271608 [ 2074.938148][T12485] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12484,uid=0 [ 2074.970597][T12485] Memory cgroup out of memory: Killed process 12485 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2075.037470][T12495] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2075.064926][T12495] CPU: 0 PID: 12495 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2075.075402][T12495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2075.085484][T12495] Call Trace: [ 2075.088785][T12495] [ 2075.091728][T12495] dump_stack_lvl+0xcd/0x134 [ 2075.096340][T12495] dump_header+0x10b/0x7f9 [ 2075.100776][T12495] oom_kill_process.cold+0x10/0x15 [ 2075.105908][T12495] out_of_memory+0x358/0x14a0 [ 2075.110598][T12495] ? find_held_lock+0x2d/0x110 [ 2075.115378][T12495] ? oom_killer_disable+0x270/0x270 [ 2075.120596][T12495] ? find_held_lock+0x2d/0x110 [ 2075.125391][T12495] mem_cgroup_out_of_memory+0x206/0x270 [ 2075.131138][T12495] ? mem_cgroup_margin+0x130/0x130 [ 2075.136247][T12495] ? lock_downgrade+0x6e0/0x6e0 [ 2075.141107][T12495] try_charge_memcg+0xf67/0x13f0 [ 2075.146063][T12495] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2075.152068][T12495] ? lock_downgrade+0x6e0/0x6e0 [ 2075.156922][T12495] charge_memcg+0x31/0x320 [ 2075.161348][T12495] __mem_cgroup_charge+0x27/0x90 [ 2075.166278][T12495] ? _compound_head+0x5d/0x150 [ 2075.171045][T12495] wp_page_copy+0x27c/0x1b60 [ 2075.175670][T12495] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2075.181138][T12495] ? lock_downgrade+0x6e0/0x6e0 [ 2075.185981][T12495] ? vm_normal_page+0x146/0x2a0 [ 2075.190831][T12495] do_wp_page+0x1d1/0x1910 [ 2075.195246][T12495] __handle_mm_fault+0x1813/0x39b0 [ 2075.200357][T12495] ? vm_iomap_memory+0x190/0x190 [ 2075.205305][T12495] handle_mm_fault+0x1c8/0x780 [ 2075.210089][T12495] do_user_addr_fault+0x475/0x1210 [ 2075.215205][T12495] exc_page_fault+0x94/0x170 [ 2075.219796][T12495] asm_exc_page_fault+0x22/0x30 [ 2075.224647][T12495] RIP: 0033:0x7f70e7e37970 [ 2075.229055][T12495] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2075.248657][T12495] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2075.254726][T12495] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2075.262718][T12495] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2075.270708][T12495] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2075.278672][T12495] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2075.286640][T12495] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2075.294603][T12495] ? __x64_sys_socket+0xd/0xb0 [ 2075.299404][T12495] [ 2075.306230][T12495] memory: usage 307200kB, limit 307200kB, failcnt 58514 [ 2075.313203][T12495] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2075.320132][T12495] Memory cgroup stats for /syz3: [ 2075.320337][T12495] anon 106496 [ 2075.320337][T12495] file 782336 [ 2075.320337][T12495] kernel 313683968 [ 2075.320337][T12495] kernel_stack 65536 [ 2075.320337][T12495] pagetables 73728 [ 2075.320337][T12495] percpu 5602688 [ 2075.320337][T12495] sock 0 [ 2075.320337][T12495] vmalloc 0 [ 2075.320337][T12495] shmem 778240 [ 2075.320337][T12495] zswap 0 [ 2075.320337][T12495] zswapped 0 [ 2075.320337][T12495] file_mapped 778240 [ 2075.320337][T12495] file_dirty 0 [ 2075.320337][T12495] file_writeback 0 [ 2075.320337][T12495] swapcached 0 [ 2075.320337][T12495] anon_thp 0 [ 2075.320337][T12495] file_thp 0 [ 2075.320337][T12495] shmem_thp 0 [ 2075.320337][T12495] inactive_anon 577536 [ 2075.320337][T12495] active_anon 307200 [ 2075.320337][T12495] inactive_file 0 [ 2075.320337][T12495] active_file 4096 [ 2075.320337][T12495] unevictable 0 [ 2075.320337][T12495] slab_reclaimable 123352 [ 2075.320337][T12495] slab_unreclaimable 307779472 [ 2075.320337][T12495] slab 307902824 03:29:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2404}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f30000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd32b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2075.427921][T12495] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12495,uid=0 [ 2075.445978][T12495] Memory cgroup out of memory: Killed process 12495 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae75}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x8, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x71e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd428, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2405}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd429, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x720c0000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2406}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x9, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd42a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2075.711861][T12522] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2075.762807][T12522] CPU: 1 PID: 12522 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2075.773272][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2075.783352][T12522] Call Trace: [ 2075.786652][T12522] [ 2075.789600][T12522] dump_stack_lvl+0xcd/0x134 [ 2075.794218][T12522] dump_header+0x10b/0x7f9 [ 2075.798662][T12522] oom_kill_process.cold+0x10/0x15 [ 2075.803803][T12522] out_of_memory+0x358/0x14a0 [ 2075.808511][T12522] ? find_held_lock+0x2d/0x110 [ 2075.813297][T12522] ? oom_killer_disable+0x270/0x270 [ 2075.818524][T12522] ? find_held_lock+0x2d/0x110 [ 2075.823307][T12522] mem_cgroup_out_of_memory+0x206/0x270 [ 2075.828864][T12522] ? mem_cgroup_margin+0x130/0x130 [ 2075.833989][T12522] ? lock_downgrade+0x6e0/0x6e0 [ 2075.838869][T12522] try_charge_memcg+0xf67/0x13f0 [ 2075.843837][T12522] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2075.849849][T12522] ? lock_downgrade+0x6e0/0x6e0 [ 2075.854739][T12522] charge_memcg+0x31/0x320 [ 2075.859184][T12522] __mem_cgroup_charge+0x27/0x90 [ 2075.864140][T12522] ? _compound_head+0x5d/0x150 [ 2075.868916][T12522] wp_page_copy+0x27c/0x1b60 [ 2075.873520][T12522] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2075.878983][T12522] ? lock_downgrade+0x6e0/0x6e0 [ 2075.883839][T12522] ? vm_normal_page+0x146/0x2a0 [ 2075.888706][T12522] do_wp_page+0x1d1/0x1910 [ 2075.893134][T12522] __handle_mm_fault+0x1813/0x39b0 [ 2075.898256][T12522] ? vm_iomap_memory+0x190/0x190 [ 2075.903220][T12522] handle_mm_fault+0x1c8/0x780 [ 2075.907993][T12522] do_user_addr_fault+0x475/0x1210 [ 2075.913123][T12522] exc_page_fault+0x94/0x170 [ 2075.917722][T12522] asm_exc_page_fault+0x22/0x30 [ 2075.922580][T12522] RIP: 0033:0x7f70e7e37970 [ 2075.927002][T12522] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2075.946615][T12522] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2075.952686][T12522] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2075.960656][T12522] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2075.968632][T12522] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2075.976606][T12522] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2075.984577][T12522] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2075.992552][T12522] ? __x64_sys_socket+0xd/0xb0 [ 2075.997341][T12522] [ 2076.055102][T12522] memory: usage 307200kB, limit 307200kB, failcnt 58570 [ 2076.062265][T12522] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2076.071494][T12522] Memory cgroup stats for /syz3: [ 2076.071639][T12522] anon 106496 [ 2076.071639][T12522] file 782336 [ 2076.071639][T12522] kernel 313683968 [ 2076.071639][T12522] kernel_stack 65536 [ 2076.071639][T12522] pagetables 73728 [ 2076.071639][T12522] percpu 5602688 [ 2076.071639][T12522] sock 0 [ 2076.071639][T12522] vmalloc 0 [ 2076.071639][T12522] shmem 778240 [ 2076.071639][T12522] zswap 0 [ 2076.071639][T12522] zswapped 0 [ 2076.071639][T12522] file_mapped 778240 [ 2076.071639][T12522] file_dirty 0 [ 2076.071639][T12522] file_writeback 0 [ 2076.071639][T12522] swapcached 0 [ 2076.071639][T12522] anon_thp 0 [ 2076.071639][T12522] file_thp 0 [ 2076.071639][T12522] shmem_thp 0 [ 2076.071639][T12522] inactive_anon 577536 [ 2076.071639][T12522] active_anon 307200 [ 2076.071639][T12522] inactive_file 0 [ 2076.071639][T12522] active_file 4096 [ 2076.071639][T12522] unevictable 0 03:29:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f40000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae76}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd42b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2407}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x72e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xe, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2076.071639][T12522] slab_reclaimable 123352 [ 2076.071639][T12522] slab_unreclaimable 307779472 [ 2076.071639][T12522] slab 307902824 [ 2076.167769][T12522] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12522,uid=0 [ 2076.183486][T12522] Memory cgroup out of memory: Killed process 12522 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd528, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2504}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x730c0000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd529, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae77}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x60, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2076.457976][T12551] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2076.487660][T12551] CPU: 1 PID: 12551 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2076.498129][T12551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2076.508203][T12551] Call Trace: [ 2076.511489][T12551] [ 2076.514436][T12551] dump_stack_lvl+0xcd/0x134 [ 2076.519054][T12551] dump_header+0x10b/0x7f9 [ 2076.523496][T12551] oom_kill_process.cold+0x10/0x15 [ 2076.528633][T12551] out_of_memory+0x358/0x14a0 [ 2076.533498][T12551] ? find_held_lock+0x2d/0x110 [ 2076.538269][T12551] ? oom_killer_disable+0x270/0x270 [ 2076.543480][T12551] ? find_held_lock+0x2d/0x110 [ 2076.548250][T12551] mem_cgroup_out_of_memory+0x206/0x270 [ 2076.553801][T12551] ? mem_cgroup_margin+0x130/0x130 [ 2076.558918][T12551] ? lock_downgrade+0x6e0/0x6e0 [ 2076.563790][T12551] try_charge_memcg+0xf67/0x13f0 [ 2076.568743][T12551] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2076.574738][T12551] ? lock_downgrade+0x6e0/0x6e0 [ 2076.579609][T12551] charge_memcg+0x31/0x320 [ 2076.584035][T12551] __mem_cgroup_charge+0x27/0x90 [ 2076.588982][T12551] ? _compound_head+0x5d/0x150 [ 2076.593750][T12551] wp_page_copy+0x27c/0x1b60 [ 2076.598351][T12551] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2076.603813][T12551] ? lock_downgrade+0x6e0/0x6e0 [ 2076.608668][T12551] ? vm_normal_page+0x146/0x2a0 [ 2076.613536][T12551] do_wp_page+0x1d1/0x1910 [ 2076.617963][T12551] __handle_mm_fault+0x1813/0x39b0 [ 2076.623091][T12551] ? vm_iomap_memory+0x190/0x190 [ 2076.628058][T12551] handle_mm_fault+0x1c8/0x780 [ 2076.632836][T12551] do_user_addr_fault+0x475/0x1210 [ 2076.637970][T12551] exc_page_fault+0x94/0x170 [ 2076.642572][T12551] asm_exc_page_fault+0x22/0x30 [ 2076.647431][T12551] RIP: 0033:0x7f70e7e37970 [ 2076.651849][T12551] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2076.671467][T12551] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2076.677539][T12551] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2076.685513][T12551] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2076.693572][T12551] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2076.701546][T12551] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2076.709529][T12551] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2076.717503][T12551] ? __x64_sys_socket+0xd/0xb0 [ 2076.722292][T12551] [ 2076.775887][T12551] memory: usage 307200kB, limit 307200kB, failcnt 58627 [ 2076.782949][T12551] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2076.796945][T12551] Memory cgroup stats for /syz3: [ 2076.797385][T12551] anon 106496 [ 2076.797385][T12551] file 782336 [ 2076.797385][T12551] kernel 313683968 [ 2076.797385][T12551] kernel_stack 65536 [ 2076.797385][T12551] pagetables 73728 [ 2076.797385][T12551] percpu 5602688 [ 2076.797385][T12551] sock 0 [ 2076.797385][T12551] vmalloc 0 [ 2076.797385][T12551] shmem 778240 [ 2076.797385][T12551] zswap 0 [ 2076.797385][T12551] zswapped 0 [ 2076.797385][T12551] file_mapped 778240 [ 2076.797385][T12551] file_dirty 0 [ 2076.797385][T12551] file_writeback 0 [ 2076.797385][T12551] swapcached 0 [ 2076.797385][T12551] anon_thp 0 [ 2076.797385][T12551] file_thp 0 [ 2076.797385][T12551] shmem_thp 0 [ 2076.797385][T12551] inactive_anon 577536 [ 2076.797385][T12551] active_anon 307200 [ 2076.797385][T12551] inactive_file 0 [ 2076.797385][T12551] active_file 4096 [ 2076.797385][T12551] unevictable 0 [ 2076.797385][T12551] slab_reclaimable 123352 [ 2076.797385][T12551] slab_unreclaimable 307779472 [ 2076.797385][T12551] slab 307902824 [ 2076.898260][T12551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12551,uid=0 03:29:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f50000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2505}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd52a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x73e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xf0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae78}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2076.914050][T12551] Memory cgroup out of memory: Killed process 12551 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd52b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2506}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd628, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x74000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2507}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x300, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2077.150855][T12574] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2077.187005][T12574] CPU: 1 PID: 12574 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2077.197473][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2077.207548][T12574] Call Trace: [ 2077.210852][T12574] [ 2077.213802][T12574] dump_stack_lvl+0xcd/0x134 [ 2077.218434][T12574] dump_header+0x10b/0x7f9 [ 2077.222882][T12574] oom_kill_process.cold+0x10/0x15 [ 2077.228026][T12574] out_of_memory+0x358/0x14a0 [ 2077.232747][T12574] ? find_held_lock+0x2d/0x110 [ 2077.237539][T12574] ? oom_killer_disable+0x270/0x270 [ 2077.242768][T12574] ? find_held_lock+0x2d/0x110 [ 2077.247556][T12574] mem_cgroup_out_of_memory+0x206/0x270 [ 2077.253126][T12574] ? mem_cgroup_margin+0x130/0x130 [ 2077.258345][T12574] ? lock_downgrade+0x6e0/0x6e0 [ 2077.263238][T12574] try_charge_memcg+0xf67/0x13f0 [ 2077.268207][T12574] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2077.274224][T12574] ? lock_downgrade+0x6e0/0x6e0 [ 2077.279116][T12574] charge_memcg+0x31/0x320 [ 2077.283565][T12574] __mem_cgroup_charge+0x27/0x90 [ 2077.288526][T12574] ? _compound_head+0x5d/0x150 [ 2077.293311][T12574] wp_page_copy+0x27c/0x1b60 [ 2077.297935][T12574] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2077.303427][T12574] ? lock_downgrade+0x6e0/0x6e0 [ 2077.308306][T12574] ? vm_normal_page+0x146/0x2a0 [ 2077.313199][T12574] do_wp_page+0x52c/0x1910 [ 2077.317732][T12574] __handle_mm_fault+0x1813/0x39b0 [ 2077.322879][T12574] ? vm_iomap_memory+0x190/0x190 [ 2077.327885][T12574] handle_mm_fault+0x1c8/0x780 [ 2077.332680][T12574] do_user_addr_fault+0x475/0x1210 [ 2077.337839][T12574] exc_page_fault+0x94/0x170 [ 2077.342470][T12574] asm_exc_page_fault+0x22/0x30 [ 2077.347357][T12574] RIP: 0033:0x7f70e7e34a15 [ 2077.351799][T12574] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2077.371433][T12574] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2077.377508][T12574] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2077.385490][T12574] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2077.393461][T12574] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2077.401429][T12574] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001fb18f [ 2077.409413][T12574] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2077.417428][T12574] [ 2077.424329][T12574] memory: usage 307200kB, limit 307200kB, failcnt 58680 [ 2077.431680][T12574] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2077.438790][T12574] Memory cgroup stats for /syz3: [ 2077.439000][T12574] anon 90112 [ 2077.439000][T12574] file 782336 [ 2077.439000][T12574] kernel 313700352 [ 2077.439000][T12574] kernel_stack 65536 [ 2077.439000][T12574] pagetables 73728 [ 2077.439000][T12574] percpu 5602688 [ 2077.439000][T12574] sock 0 [ 2077.439000][T12574] vmalloc 0 [ 2077.439000][T12574] shmem 778240 [ 2077.439000][T12574] zswap 0 [ 2077.439000][T12574] zswapped 0 [ 2077.439000][T12574] file_mapped 778240 [ 2077.439000][T12574] file_dirty 0 [ 2077.439000][T12574] file_writeback 0 [ 2077.439000][T12574] swapcached 0 [ 2077.439000][T12574] anon_thp 0 [ 2077.439000][T12574] file_thp 0 [ 2077.439000][T12574] shmem_thp 0 [ 2077.439000][T12574] inactive_anon 561152 [ 2077.439000][T12574] active_anon 307200 [ 2077.439000][T12574] inactive_file 0 [ 2077.439000][T12574] active_file 4096 [ 2077.439000][T12574] unevictable 0 [ 2077.439000][T12574] slab_reclaimable 123352 [ 2077.439000][T12574] slab_unreclaimable 307790872 [ 2077.439000][T12574] slab 307914224 [ 2077.534523][T12574] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12574,uid=0 03:29:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000003f60000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd629, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2604}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x500, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2077.550214][T12574] Memory cgroup out of memory: Killed process 12574 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2077.567776][T12573] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2077.594152][T12593] __nla_validate_parse: 24 callbacks suppressed 03:29:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd62a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2077.594173][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2077.621968][T12573] CPU: 1 PID: 12573 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2077.632447][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2077.642531][T12573] Call Trace: [ 2077.645830][T12573] [ 2077.648768][T12573] dump_stack_lvl+0xcd/0x134 [ 2077.653383][T12573] dump_header+0x10b/0x7f9 [ 2077.657830][T12573] oom_kill_process.cold+0x10/0x15 [ 2077.663047][T12573] out_of_memory+0x358/0x14a0 [ 2077.667748][T12573] ? oom_killer_disable+0x270/0x270 [ 2077.672967][T12573] ? find_held_lock+0x2d/0x110 [ 2077.677743][T12573] mem_cgroup_out_of_memory+0x206/0x270 [ 2077.683305][T12573] ? mem_cgroup_margin+0x130/0x130 [ 2077.688423][T12573] ? lock_downgrade+0x6e0/0x6e0 [ 2077.693299][T12573] try_charge_memcg+0xf67/0x13f0 [ 2077.698258][T12573] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2077.704253][T12573] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2077.709988][T12573] ? lock_downgrade+0x6e0/0x6e0 [ 2077.714870][T12573] obj_cgroup_charge+0x2ab/0x5e0 [ 2077.719830][T12573] __kmalloc+0xb2/0x340 [ 2077.723995][T12573] ? veth_dev_init+0x1dd/0x3e0 [ 2077.728777][T12573] veth_dev_init+0x1dd/0x3e0 [ 2077.733389][T12573] ? veth_get_num_queues+0x50/0x50 [ 2077.738512][T12573] register_netdevice+0x5e1/0x1680 [ 2077.743642][T12573] ? netdev_change_features+0xb0/0xb0 [ 2077.749027][T12573] ? dev_addr_mod+0x2c9/0x3f0 [ 2077.753822][T12573] veth_newlink+0x338/0x990 [ 2077.758342][T12573] ? veth_set_features+0x190/0x190 [ 2077.763486][T12573] ? netlink_rcv_skb+0x153/0x420 [ 2077.768437][T12573] ? netlink_unicast+0x543/0x7f0 [ 2077.773474][T12573] ? netlink_sendmsg+0x917/0xe10 [ 2077.778480][T12573] ? dev_addr_mod+0x2c9/0x3f0 [ 2077.783175][T12573] ? rtnl_create_link+0x7e8/0xc00 [ 2077.788211][T12573] ? veth_set_features+0x190/0x190 [ 2077.793334][T12573] __rtnl_newlink+0x1087/0x17e0 [ 2077.798214][T12573] ? rtnl_link_unregister+0x250/0x250 [ 2077.803599][T12573] ? find_held_lock+0x2d/0x110 [ 2077.808395][T12573] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2077.813951][T12573] ? trace_kmalloc+0x32/0x100 [ 2077.818647][T12573] rtnl_newlink+0x64/0xa0 [ 2077.823077][T12573] ? __rtnl_newlink+0x17e0/0x17e0 [ 2077.828144][T12573] rtnetlink_rcv_msg+0x43a/0xca0 [ 2077.833097][T12573] ? rtnl_getlink+0xae0/0xae0 [ 2077.837787][T12573] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2077.843083][T12573] ? skb_clone+0x16e/0x3c0 [ 2077.847514][T12573] ? ref_tracker_free+0x370/0x6b0 [ 2077.852551][T12573] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2077.857941][T12573] netlink_rcv_skb+0x153/0x420 [ 2077.862721][T12573] ? rtnl_getlink+0xae0/0xae0 [ 2077.867414][T12573] ? netlink_ack+0xd50/0xd50 [ 2077.872017][T12573] ? netlink_deliver_tap+0x1a2/0xc40 [ 2077.877322][T12573] ? netlink_deliver_tap+0x1b1/0xc40 [ 2077.882635][T12573] netlink_unicast+0x543/0x7f0 [ 2077.887418][T12573] ? netlink_attachskb+0x880/0x880 [ 2077.892539][T12573] ? __phys_addr+0xc4/0x140 [ 2077.897051][T12573] ? __phys_addr_symbol+0x2c/0x70 [ 2077.902086][T12573] ? __check_object_size+0x2de/0x700 [ 2077.907388][T12573] netlink_sendmsg+0x917/0xe10 [ 2077.912170][T12573] ? netlink_unicast+0x7f0/0x7f0 [ 2077.917129][T12573] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2077.922429][T12573] ? netlink_unicast+0x7f0/0x7f0 [ 2077.927381][T12573] sock_sendmsg+0xcf/0x120 [ 2077.931812][T12573] ____sys_sendmsg+0x6eb/0x810 [ 2077.936623][T12573] ? copy_msghdr_from_user+0xfc/0x150 [ 2077.942011][T12573] ? kernel_sendmsg+0x50/0x50 [ 2077.946712][T12573] ? futex_unqueue+0xb3/0x120 [ 2077.951411][T12573] ___sys_sendmsg+0x110/0x1b0 [ 2077.956104][T12573] ? do_recvmmsg+0x6e0/0x6e0 [ 2077.960711][T12573] ? __fget_files+0x248/0x440 [ 2077.965412][T12573] ? lock_downgrade+0x6e0/0x6e0 [ 2077.970279][T12573] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2077.976276][T12573] ? __fget_files+0x26a/0x440 [ 2077.980970][T12573] ? __fget_light+0xe5/0x270 [ 2077.985576][T12573] __sys_sendmsg+0xf3/0x1c0 [ 2077.990099][T12573] ? __sys_sendmsg_sock+0x30/0x30 [ 2077.995229][T12573] ? lock_downgrade+0x6e0/0x6e0 [ 2078.000330][T12573] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2078.006244][T12573] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2078.012149][T12573] ? lockdep_hardirqs_on+0x79/0x100 [ 2078.017363][T12573] do_syscall_64+0x35/0xb0 [ 2078.021791][T12573] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2078.027697][T12573] RIP: 0033:0x7f58e888a5a9 [ 2078.032122][T12573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2078.051740][T12573] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2078.060170][T12573] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2078.068150][T12573] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2078.076128][T12573] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2078.084112][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2078.092096][T12573] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2078.100090][T12573] [ 2078.125798][T12573] memory: usage 307196kB, limit 307200kB, failcnt 43694 [ 2078.144197][T12573] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2078.179649][T12573] Memory cgroup stats for /syz1: [ 2078.179855][T12573] anon 135168 [ 2078.179855][T12573] file 389120 [ 2078.179855][T12573] kernel 314011648 [ 2078.179855][T12573] kernel_stack 32768 [ 2078.179855][T12573] pagetables 77824 [ 2078.179855][T12573] percpu 5593216 [ 2078.179855][T12573] sock 0 [ 2078.179855][T12573] vmalloc 0 [ 2078.179855][T12573] shmem 389120 [ 2078.179855][T12573] zswap 0 [ 2078.179855][T12573] zswapped 0 [ 2078.179855][T12573] file_mapped 389120 [ 2078.179855][T12573] file_dirty 0 [ 2078.179855][T12573] file_writeback 0 [ 2078.179855][T12573] swapcached 0 [ 2078.179855][T12573] anon_thp 0 [ 2078.179855][T12573] file_thp 0 [ 2078.179855][T12573] shmem_thp 0 [ 2078.179855][T12573] inactive_anon 225280 [ 2078.179855][T12573] active_anon 299008 [ 2078.179855][T12573] inactive_file 0 [ 2078.179855][T12573] active_file 0 [ 2078.179855][T12573] unevictable 0 [ 2078.179855][T12573] slab_reclaimable 21832 [ 2078.179855][T12573] slab_unreclaimable 308249776 [ 2078.179855][T12573] slab 308271608 [ 2078.293993][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2078.294016][T12573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12569,uid=0 [ 2078.338498][T12573] Memory cgroup out of memory: Killed process 12573 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2078.378632][T12595] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2078.389269][T12595] CPU: 1 PID: 12595 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2078.399719][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2078.409808][T12595] Call Trace: [ 2078.413099][T12595] [ 2078.416056][T12595] dump_stack_lvl+0xcd/0x134 [ 2078.420695][T12595] dump_header+0x10b/0x7f9 [ 2078.425144][T12595] oom_kill_process.cold+0x10/0x15 [ 2078.430285][T12595] out_of_memory+0x358/0x14a0 [ 2078.435017][T12595] ? find_held_lock+0x2d/0x110 [ 2078.445080][T12595] ? oom_killer_disable+0x270/0x270 [ 2078.450485][T12595] ? find_held_lock+0x2d/0x110 [ 2078.455252][T12595] mem_cgroup_out_of_memory+0x206/0x270 [ 2078.460803][T12595] ? mem_cgroup_margin+0x130/0x130 [ 2078.465920][T12595] ? lock_downgrade+0x6e0/0x6e0 [ 2078.470820][T12595] try_charge_memcg+0xf67/0x13f0 [ 2078.475796][T12595] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2078.481803][T12595] ? lock_downgrade+0x6e0/0x6e0 [ 2078.486776][T12595] charge_memcg+0x31/0x320 [ 2078.491368][T12595] __mem_cgroup_charge+0x27/0x90 [ 2078.496333][T12595] ? _compound_head+0x5d/0x150 [ 2078.501120][T12595] wp_page_copy+0x27c/0x1b60 [ 2078.505748][T12595] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2078.511228][T12595] ? lock_downgrade+0x6e0/0x6e0 [ 2078.516083][T12595] ? vm_normal_page+0x146/0x2a0 [ 2078.520956][T12595] do_wp_page+0x1d1/0x1910 [ 2078.525369][T12595] __handle_mm_fault+0x1813/0x39b0 [ 2078.530499][T12595] ? vm_iomap_memory+0x190/0x190 [ 2078.535527][T12595] handle_mm_fault+0x1c8/0x780 [ 2078.540302][T12595] do_user_addr_fault+0x475/0x1210 [ 2078.545445][T12595] exc_page_fault+0x94/0x170 [ 2078.550053][T12595] asm_exc_page_fault+0x22/0x30 [ 2078.554932][T12595] RIP: 0033:0x7f70e7e37970 [ 2078.559349][T12595] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2078.578987][T12595] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2078.585068][T12595] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2078.593045][T12595] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2078.601024][T12595] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2078.609020][T12595] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2078.617016][T12595] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2078.624999][T12595] ? __x64_sys_socket+0xd/0xb0 [ 2078.629799][T12595] [ 2078.641654][T12595] memory: usage 307200kB, limit 307200kB, failcnt 58789 [ 2078.648850][T12595] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2078.655931][T12595] Memory cgroup stats for /syz3: [ 2078.656115][T12595] anon 106496 [ 2078.656115][T12595] file 782336 [ 2078.656115][T12595] kernel 313683968 [ 2078.656115][T12595] kernel_stack 65536 [ 2078.656115][T12595] pagetables 73728 [ 2078.656115][T12595] percpu 5602688 [ 2078.656115][T12595] sock 0 [ 2078.656115][T12595] vmalloc 0 [ 2078.656115][T12595] shmem 778240 [ 2078.656115][T12595] zswap 0 [ 2078.656115][T12595] zswapped 0 [ 2078.656115][T12595] file_mapped 778240 [ 2078.656115][T12595] file_dirty 0 [ 2078.656115][T12595] file_writeback 0 [ 2078.656115][T12595] swapcached 0 [ 2078.656115][T12595] anon_thp 0 [ 2078.656115][T12595] file_thp 0 [ 2078.656115][T12595] shmem_thp 0 [ 2078.656115][T12595] inactive_anon 577536 [ 2078.656115][T12595] active_anon 307200 [ 2078.656115][T12595] inactive_file 0 [ 2078.656115][T12595] active_file 4096 [ 2078.656115][T12595] unevictable 0 [ 2078.656115][T12595] slab_reclaimable 123352 [ 2078.656115][T12595] slab_unreclaimable 307779472 03:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae79}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd62b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x600, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2605}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x74e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2078.656115][T12595] slab 307902824 [ 2078.751959][T12595] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12595,uid=0 [ 2078.767935][T12595] Memory cgroup out of memory: Killed process 12595 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f60000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd728, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2078.806980][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd729, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2078.903120][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x700, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x75e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd72a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2606}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae7a}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd72b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2079.067191][T12611] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2079.067811][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2079.106921][T12611] CPU: 1 PID: 12611 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2079.117398][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2079.127567][T12611] Call Trace: [ 2079.130871][T12611] [ 2079.133918][T12611] dump_stack_lvl+0xcd/0x134 [ 2079.138545][T12611] dump_header+0x10b/0x7f9 [ 2079.142996][T12611] oom_kill_process.cold+0x10/0x15 [ 2079.148144][T12611] out_of_memory+0x358/0x14a0 [ 2079.152857][T12611] ? find_held_lock+0x2d/0x110 [ 2079.157660][T12611] ? oom_killer_disable+0x270/0x270 [ 2079.162996][T12611] ? find_held_lock+0x2d/0x110 [ 2079.167802][T12611] mem_cgroup_out_of_memory+0x206/0x270 [ 2079.173383][T12611] ? mem_cgroup_margin+0x130/0x130 [ 2079.178524][T12611] ? lock_downgrade+0x6e0/0x6e0 [ 2079.183425][T12611] try_charge_memcg+0xf67/0x13f0 [ 2079.188405][T12611] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2079.194430][T12611] ? lock_downgrade+0x6e0/0x6e0 [ 2079.199319][T12611] charge_memcg+0x31/0x320 [ 2079.203753][T12611] __mem_cgroup_charge+0x27/0x90 [ 2079.208703][T12611] ? _compound_head+0x5d/0x150 [ 2079.213487][T12611] wp_page_copy+0x27c/0x1b60 [ 2079.218102][T12611] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2079.223569][T12611] ? lock_downgrade+0x6e0/0x6e0 [ 2079.228434][T12611] ? vm_normal_page+0x146/0x2a0 [ 2079.233305][T12611] do_wp_page+0x1d1/0x1910 [ 2079.237748][T12611] __handle_mm_fault+0x1813/0x39b0 [ 2079.242877][T12611] ? vm_iomap_memory+0x190/0x190 [ 2079.247851][T12611] handle_mm_fault+0x1c8/0x780 [ 2079.252627][T12611] do_user_addr_fault+0x475/0x1210 [ 2079.257765][T12611] exc_page_fault+0x94/0x170 [ 2079.262367][T12611] asm_exc_page_fault+0x22/0x30 [ 2079.267232][T12611] RIP: 0033:0x7f70e7e37970 [ 2079.271653][T12611] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2079.291371][T12611] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2079.297443][T12611] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2079.305418][T12611] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec 03:29:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd828, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2079.313411][T12611] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2079.321388][T12611] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2079.329362][T12611] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2079.337335][T12611] ? __x64_sys_socket+0xd/0xb0 [ 2079.342126][T12611] 03:29:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd829, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd82a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2079.369551][T12611] memory: usage 307200kB, limit 307200kB, failcnt 58844 [ 2079.395277][T12611] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2079.429552][T12611] Memory cgroup stats for /syz3: [ 2079.429805][T12611] anon 106496 [ 2079.429805][T12611] file 782336 [ 2079.429805][T12611] kernel 313683968 [ 2079.429805][T12611] kernel_stack 65536 [ 2079.429805][T12611] pagetables 73728 [ 2079.429805][T12611] percpu 5602688 [ 2079.429805][T12611] sock 0 [ 2079.429805][T12611] vmalloc 0 [ 2079.429805][T12611] shmem 778240 [ 2079.429805][T12611] zswap 0 [ 2079.429805][T12611] zswapped 0 [ 2079.429805][T12611] file_mapped 778240 [ 2079.429805][T12611] file_dirty 0 [ 2079.429805][T12611] file_writeback 0 [ 2079.429805][T12611] swapcached 0 [ 2079.429805][T12611] anon_thp 0 [ 2079.429805][T12611] file_thp 0 [ 2079.429805][T12611] shmem_thp 0 [ 2079.429805][T12611] inactive_anon 577536 [ 2079.429805][T12611] active_anon 307200 [ 2079.429805][T12611] inactive_file 0 [ 2079.429805][T12611] active_file 4096 [ 2079.429805][T12611] unevictable 0 [ 2079.429805][T12611] slab_reclaimable 123352 [ 2079.429805][T12611] slab_unreclaimable 307779472 [ 2079.429805][T12611] slab 307902824 03:29:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f70000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x900, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x76e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd82b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2607}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2079.502888][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2079.538675][T12611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12611,uid=0 [ 2079.554574][T12611] Memory cgroup out of memory: Killed process 12611 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd928, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae7b}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2079.631774][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd929, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x77e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xe00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2079.733497][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd92a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2704}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2079.807673][T12643] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2079.850291][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2079.864970][T12643] CPU: 1 PID: 12643 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2079.875441][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2079.885516][T12643] Call Trace: [ 2079.888803][T12643] [ 2079.891747][T12643] dump_stack_lvl+0xcd/0x134 [ 2079.896378][T12643] dump_header+0x10b/0x7f9 [ 2079.900843][T12643] oom_kill_process.cold+0x10/0x15 [ 2079.905989][T12643] out_of_memory+0x358/0x14a0 [ 2079.910696][T12643] ? find_held_lock+0x2d/0x110 [ 2079.915490][T12643] ? oom_killer_disable+0x270/0x270 [ 2079.920728][T12643] ? find_held_lock+0x2d/0x110 [ 2079.925524][T12643] mem_cgroup_out_of_memory+0x206/0x270 [ 2079.931108][T12643] ? mem_cgroup_margin+0x130/0x130 [ 2079.936248][T12643] ? lock_downgrade+0x6e0/0x6e0 [ 2079.941141][T12643] try_charge_memcg+0xf67/0x13f0 [ 2079.946119][T12643] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2079.950273][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2079.952115][T12643] ? lock_downgrade+0x6e0/0x6e0 [ 2079.952164][T12643] charge_memcg+0x31/0x320 [ 2079.952196][T12643] __mem_cgroup_charge+0x27/0x90 [ 2079.975561][T12643] ? _compound_head+0x5d/0x150 [ 2079.980338][T12643] wp_page_copy+0x27c/0x1b60 [ 2079.984945][T12643] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2079.990411][T12643] ? lock_downgrade+0x6e0/0x6e0 [ 2079.995357][T12643] ? vm_normal_page+0x146/0x2a0 [ 2080.000229][T12643] do_wp_page+0x1d1/0x1910 [ 2080.004662][T12643] __handle_mm_fault+0x1813/0x39b0 [ 2080.009789][T12643] ? vm_iomap_memory+0x190/0x190 [ 2080.014758][T12643] handle_mm_fault+0x1c8/0x780 [ 2080.019630][T12643] do_user_addr_fault+0x475/0x1210 [ 2080.024766][T12643] exc_page_fault+0x94/0x170 [ 2080.029368][T12643] asm_exc_page_fault+0x22/0x30 [ 2080.034228][T12643] RIP: 0033:0x7f70e7e37970 [ 2080.038650][T12643] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2080.058264][T12643] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2080.064337][T12643] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2080.072313][T12643] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2080.080292][T12643] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2080.088266][T12643] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2080.096244][T12643] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2080.104221][T12643] ? __x64_sys_socket+0xd/0xb0 [ 2080.109015][T12643] [ 2080.116584][T12643] memory: usage 307200kB, limit 307200kB, failcnt 58893 [ 2080.143437][T12643] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2080.151305][T12643] Memory cgroup stats for /syz3: [ 2080.151516][T12643] anon 106496 [ 2080.151516][T12643] file 782336 [ 2080.151516][T12643] kernel 313683968 [ 2080.151516][T12643] kernel_stack 65536 [ 2080.151516][T12643] pagetables 73728 [ 2080.151516][T12643] percpu 5602688 [ 2080.151516][T12643] sock 0 [ 2080.151516][T12643] vmalloc 0 [ 2080.151516][T12643] shmem 778240 [ 2080.151516][T12643] zswap 0 [ 2080.151516][T12643] zswapped 0 [ 2080.151516][T12643] file_mapped 778240 [ 2080.151516][T12643] file_dirty 0 [ 2080.151516][T12643] file_writeback 0 [ 2080.151516][T12643] swapcached 0 [ 2080.151516][T12643] anon_thp 0 [ 2080.151516][T12643] file_thp 0 [ 2080.151516][T12643] shmem_thp 0 [ 2080.151516][T12643] inactive_anon 577536 [ 2080.151516][T12643] active_anon 307200 [ 2080.151516][T12643] inactive_file 0 [ 2080.151516][T12643] active_file 4096 [ 2080.151516][T12643] unevictable 0 [ 2080.151516][T12643] slab_reclaimable 123352 [ 2080.151516][T12643] slab_unreclaimable 307779472 03:29:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f80000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xd92b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x78e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae7c}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2705}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xec0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2080.151516][T12643] slab 307902824 [ 2080.248409][T12643] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12643,uid=0 [ 2080.264082][T12643] Memory cgroup out of memory: Killed process 12643 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2706}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xda28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x79e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xda29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2080.465047][T12671] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2080.499825][T12671] CPU: 1 PID: 12671 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2080.510295][T12671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2080.520375][T12671] Call Trace: [ 2080.523670][T12671] [ 2080.526622][T12671] dump_stack_lvl+0xcd/0x134 [ 2080.531245][T12671] dump_header+0x10b/0x7f9 [ 2080.535692][T12671] oom_kill_process.cold+0x10/0x15 [ 2080.540832][T12671] out_of_memory+0x358/0x14a0 [ 2080.545544][T12671] ? find_held_lock+0x2d/0x110 [ 2080.550332][T12671] ? oom_killer_disable+0x270/0x270 [ 2080.555560][T12671] ? find_held_lock+0x2d/0x110 [ 2080.560352][T12671] mem_cgroup_out_of_memory+0x206/0x270 [ 2080.565929][T12671] ? mem_cgroup_margin+0x130/0x130 [ 2080.571068][T12671] ? lock_downgrade+0x6e0/0x6e0 [ 2080.575965][T12671] try_charge_memcg+0xf67/0x13f0 [ 2080.580940][T12671] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2080.586957][T12671] ? lock_downgrade+0x6e0/0x6e0 [ 2080.591853][T12671] charge_memcg+0x31/0x320 [ 2080.596304][T12671] __mem_cgroup_charge+0x27/0x90 [ 2080.601270][T12671] ? _compound_head+0x5d/0x150 [ 2080.606068][T12671] wp_page_copy+0x27c/0x1b60 [ 2080.610695][T12671] ? restore_exclusive_pte+0x8b0/0x8b0 03:29:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xda2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xda2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2080.616178][T12671] ? lock_downgrade+0x6e0/0x6e0 [ 2080.621054][T12671] ? vm_normal_page+0x146/0x2a0 [ 2080.625943][T12671] do_wp_page+0x52c/0x1910 [ 2080.630392][T12671] __handle_mm_fault+0x1813/0x39b0 [ 2080.635540][T12671] ? vm_iomap_memory+0x190/0x190 [ 2080.640542][T12671] handle_mm_fault+0x1c8/0x780 [ 2080.645340][T12671] do_user_addr_fault+0x475/0x1210 [ 2080.650505][T12671] exc_page_fault+0x94/0x170 [ 2080.655131][T12671] asm_exc_page_fault+0x22/0x30 [ 2080.660010][T12671] RIP: 0033:0x7f70e7e34a15 03:29:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdb28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2080.664446][T12671] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2080.684091][T12671] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2080.690188][T12671] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2080.698184][T12671] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2080.706190][T12671] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2080.714189][T12671] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001fbe97 [ 2080.722192][T12671] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2080.730221][T12671] [ 2080.753256][T12671] memory: usage 307200kB, limit 307200kB, failcnt 58981 [ 2080.782501][T12671] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2080.793092][T12671] Memory cgroup stats for /syz3: [ 2080.793364][T12671] anon 90112 [ 2080.793364][T12671] file 782336 [ 2080.793364][T12671] kernel 313700352 [ 2080.793364][T12671] kernel_stack 65536 [ 2080.793364][T12671] pagetables 73728 [ 2080.793364][T12671] percpu 5602688 [ 2080.793364][T12671] sock 0 [ 2080.793364][T12671] vmalloc 0 [ 2080.793364][T12671] shmem 778240 [ 2080.793364][T12671] zswap 0 [ 2080.793364][T12671] zswapped 0 [ 2080.793364][T12671] file_mapped 778240 [ 2080.793364][T12671] file_dirty 0 [ 2080.793364][T12671] file_writeback 0 [ 2080.793364][T12671] swapcached 0 [ 2080.793364][T12671] anon_thp 0 [ 2080.793364][T12671] file_thp 0 [ 2080.793364][T12671] shmem_thp 0 [ 2080.793364][T12671] inactive_anon 561152 [ 2080.793364][T12671] active_anon 307200 [ 2080.793364][T12671] inactive_file 0 [ 2080.793364][T12671] active_file 4096 [ 2080.793364][T12671] unevictable 0 [ 2080.793364][T12671] slab_reclaimable 123352 [ 2080.793364][T12671] slab_unreclaimable 307790872 [ 2080.793364][T12671] slab 307914224 [ 2080.890466][T12671] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12671,uid=0 [ 2080.908119][T12671] Memory cgroup out of memory: Killed process 12671 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000003f90000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2707}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x2000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2080.926096][T12668] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2080.950519][T12668] CPU: 0 PID: 12668 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2080.960993][T12668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2080.971077][T12668] Call Trace: [ 2080.974448][T12668] [ 2080.977403][T12668] dump_stack_lvl+0xcd/0x134 [ 2080.982028][T12668] dump_header+0x10b/0x7f9 [ 2080.986560][T12668] oom_kill_process.cold+0x10/0x15 [ 2080.991701][T12668] out_of_memory+0x358/0x14a0 [ 2080.996416][T12668] ? oom_killer_disable+0x270/0x270 [ 2081.001658][T12668] ? find_held_lock+0x2d/0x110 [ 2081.006466][T12668] mem_cgroup_out_of_memory+0x206/0x270 [ 2081.012040][T12668] ? mem_cgroup_margin+0x130/0x130 [ 2081.017177][T12668] ? lock_downgrade+0x6e0/0x6e0 [ 2081.022080][T12668] try_charge_memcg+0xf67/0x13f0 [ 2081.027066][T12668] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2081.033075][T12668] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2081.038827][T12668] ? lock_downgrade+0x6e0/0x6e0 [ 2081.043735][T12668] obj_cgroup_charge+0x2ab/0x5e0 [ 2081.048719][T12668] __kmalloc+0xb2/0x340 [ 2081.052904][T12668] ? veth_dev_init+0x1dd/0x3e0 [ 2081.057705][T12668] veth_dev_init+0x1dd/0x3e0 [ 2081.062319][T12668] ? veth_get_num_queues+0x50/0x50 [ 2081.067474][T12668] register_netdevice+0x5e1/0x1680 [ 2081.072632][T12668] ? netdev_change_features+0xb0/0xb0 [ 2081.078050][T12668] ? dev_addr_mod+0x2c9/0x3f0 [ 2081.082775][T12668] veth_newlink+0x338/0x990 [ 2081.087313][T12668] ? veth_set_features+0x190/0x190 [ 2081.092471][T12668] ? netlink_rcv_skb+0x153/0x420 [ 2081.097428][T12668] ? netlink_unicast+0x543/0x7f0 [ 2081.102364][T12668] ? netlink_sendmsg+0x917/0xe10 [ 2081.107387][T12668] ? dev_addr_mod+0x2c9/0x3f0 [ 2081.112104][T12668] ? rtnl_create_link+0x7e8/0xc00 [ 2081.117257][T12668] ? veth_set_features+0x190/0x190 [ 2081.122388][T12668] __rtnl_newlink+0x1087/0x17e0 [ 2081.127249][T12668] ? rtnl_link_unregister+0x250/0x250 [ 2081.132617][T12668] ? find_held_lock+0x2d/0x110 [ 2081.137407][T12668] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2081.143060][T12668] ? trace_kmalloc+0x32/0x100 [ 2081.147737][T12668] rtnl_newlink+0x64/0xa0 [ 2081.152062][T12668] ? __rtnl_newlink+0x17e0/0x17e0 [ 2081.157097][T12668] rtnetlink_rcv_msg+0x43a/0xca0 [ 2081.162073][T12668] ? rtnl_getlink+0xae0/0xae0 [ 2081.166772][T12668] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2081.172082][T12668] ? ref_tracker_free+0x370/0x6b0 [ 2081.177105][T12668] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2081.182476][T12668] netlink_rcv_skb+0x153/0x420 [ 2081.187238][T12668] ? rtnl_getlink+0xae0/0xae0 [ 2081.191925][T12668] ? netlink_ack+0xd50/0xd50 [ 2081.196703][T12668] ? netlink_deliver_tap+0x1a2/0xc40 [ 2081.201988][T12668] ? netlink_deliver_tap+0x1b1/0xc40 [ 2081.207291][T12668] netlink_unicast+0x543/0x7f0 [ 2081.212093][T12668] ? netlink_attachskb+0x880/0x880 [ 2081.217224][T12668] ? __phys_addr+0xc4/0x140 [ 2081.221721][T12668] ? __phys_addr_symbol+0x2c/0x70 [ 2081.226736][T12668] ? __check_object_size+0x2de/0x700 [ 2081.232024][T12668] netlink_sendmsg+0x917/0xe10 [ 2081.236789][T12668] ? netlink_unicast+0x7f0/0x7f0 [ 2081.241727][T12668] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2081.247009][T12668] ? netlink_unicast+0x7f0/0x7f0 [ 2081.251952][T12668] sock_sendmsg+0xcf/0x120 [ 2081.256381][T12668] ____sys_sendmsg+0x6eb/0x810 [ 2081.261267][T12668] ? copy_msghdr_from_user+0xfc/0x150 [ 2081.266662][T12668] ? kernel_sendmsg+0x50/0x50 [ 2081.271337][T12668] ? futex_unqueue+0xb3/0x120 [ 2081.276013][T12668] ___sys_sendmsg+0x110/0x1b0 [ 2081.280692][T12668] ? do_recvmmsg+0x6e0/0x6e0 [ 2081.285289][T12668] ? __fget_files+0x248/0x440 [ 2081.289962][T12668] ? lock_downgrade+0x6e0/0x6e0 [ 2081.294809][T12668] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2081.300793][T12668] ? __fget_files+0x26a/0x440 [ 2081.305622][T12668] ? __fget_light+0xe5/0x270 [ 2081.310252][T12668] __sys_sendmsg+0xf3/0x1c0 [ 2081.314790][T12668] ? __sys_sendmsg_sock+0x30/0x30 [ 2081.319839][T12668] ? lock_downgrade+0x6e0/0x6e0 [ 2081.324707][T12668] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2081.330688][T12668] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2081.336581][T12668] ? lockdep_hardirqs_on+0x79/0x100 [ 2081.341777][T12668] do_syscall_64+0x35/0xb0 [ 2081.346195][T12668] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2081.352097][T12668] RIP: 0033:0x7f58e888a5a9 [ 2081.356524][T12668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2081.376169][T12668] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2081.384578][T12668] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2081.392542][T12668] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2081.400503][T12668] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2081.408474][T12668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2081.416465][T12668] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2081.424451][T12668] [ 2081.436496][T12668] memory: usage 307196kB, limit 307200kB, failcnt 43940 [ 2081.443618][T12668] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2081.450817][T12668] Memory cgroup stats for /syz1: [ 2081.451017][T12668] anon 135168 [ 2081.451017][T12668] file 389120 [ 2081.451017][T12668] kernel 314011648 [ 2081.451017][T12668] kernel_stack 32768 [ 2081.451017][T12668] pagetables 77824 [ 2081.451017][T12668] percpu 5593216 [ 2081.451017][T12668] sock 0 [ 2081.451017][T12668] vmalloc 0 [ 2081.451017][T12668] shmem 389120 [ 2081.451017][T12668] zswap 0 [ 2081.451017][T12668] zswapped 0 [ 2081.451017][T12668] file_mapped 389120 [ 2081.451017][T12668] file_dirty 0 [ 2081.451017][T12668] file_writeback 0 [ 2081.451017][T12668] swapcached 0 [ 2081.451017][T12668] anon_thp 0 [ 2081.451017][T12668] file_thp 0 [ 2081.451017][T12668] shmem_thp 0 [ 2081.451017][T12668] inactive_anon 225280 [ 2081.451017][T12668] active_anon 299008 [ 2081.451017][T12668] inactive_file 0 [ 2081.451017][T12668] active_file 0 [ 2081.451017][T12668] unevictable 0 [ 2081.451017][T12668] slab_reclaimable 21832 [ 2081.451017][T12668] slab_unreclaimable 308249776 [ 2081.451017][T12668] slab 308271608 [ 2081.547963][T12668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12665,uid=0 [ 2081.564050][T12668] Memory cgroup out of memory: Killed process 12668 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2081.602890][T12692] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2081.620520][T12692] CPU: 0 PID: 12692 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2081.630984][T12692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2081.641057][T12692] Call Trace: [ 2081.644350][T12692] [ 2081.647294][T12692] dump_stack_lvl+0xcd/0x134 [ 2081.651896][T12692] dump_header+0x10b/0x7f9 [ 2081.656308][T12692] oom_kill_process.cold+0x10/0x15 [ 2081.661414][T12692] out_of_memory+0x358/0x14a0 [ 2081.666092][T12692] ? find_held_lock+0x2d/0x110 [ 2081.670847][T12692] ? oom_killer_disable+0x270/0x270 [ 2081.676056][T12692] ? find_held_lock+0x2d/0x110 [ 2081.680843][T12692] mem_cgroup_out_of_memory+0x206/0x270 [ 2081.686413][T12692] ? mem_cgroup_margin+0x130/0x130 [ 2081.691536][T12692] ? lock_downgrade+0x6e0/0x6e0 [ 2081.696390][T12692] try_charge_memcg+0xf67/0x13f0 [ 2081.701327][T12692] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2081.707305][T12692] ? lock_downgrade+0x6e0/0x6e0 [ 2081.712156][T12692] charge_memcg+0x31/0x320 [ 2081.716567][T12692] __mem_cgroup_charge+0x27/0x90 [ 2081.721502][T12692] ? _compound_head+0x5d/0x150 [ 2081.726268][T12692] wp_page_copy+0x27c/0x1b60 [ 2081.730889][T12692] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2081.736365][T12692] ? lock_downgrade+0x6e0/0x6e0 [ 2081.741222][T12692] ? vm_normal_page+0x146/0x2a0 [ 2081.746090][T12692] do_wp_page+0x52c/0x1910 [ 2081.750519][T12692] __handle_mm_fault+0x1813/0x39b0 [ 2081.755643][T12692] ? vm_iomap_memory+0x190/0x190 [ 2081.760617][T12692] handle_mm_fault+0x1c8/0x780 [ 2081.765393][T12692] do_user_addr_fault+0x475/0x1210 [ 2081.770526][T12692] exc_page_fault+0x94/0x170 [ 2081.775136][T12692] asm_exc_page_fault+0x22/0x30 [ 2081.779995][T12692] RIP: 0033:0x7f70e7e34a15 [ 2081.784436][T12692] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2081.804063][T12692] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2081.810136][T12692] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2081.818108][T12692] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2081.826080][T12692] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2081.834057][T12692] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001fc31d [ 2081.842030][T12692] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2081.850021][T12692] [ 2081.859487][T12692] memory: usage 307200kB, limit 307200kB, failcnt 59057 [ 2081.866677][T12692] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2081.873653][T12692] Memory cgroup stats for /syz3: [ 2081.873854][T12692] anon 90112 [ 2081.873854][T12692] file 782336 [ 2081.873854][T12692] kernel 313683968 [ 2081.873854][T12692] kernel_stack 65536 [ 2081.873854][T12692] pagetables 73728 [ 2081.873854][T12692] percpu 5602688 [ 2081.873854][T12692] sock 0 [ 2081.873854][T12692] vmalloc 0 [ 2081.873854][T12692] shmem 778240 [ 2081.873854][T12692] zswap 0 [ 2081.873854][T12692] zswapped 0 [ 2081.873854][T12692] file_mapped 778240 [ 2081.873854][T12692] file_dirty 0 [ 2081.873854][T12692] file_writeback 0 [ 2081.873854][T12692] swapcached 0 [ 2081.873854][T12692] anon_thp 0 [ 2081.873854][T12692] file_thp 0 [ 2081.873854][T12692] shmem_thp 0 [ 2081.873854][T12692] inactive_anon 561152 [ 2081.873854][T12692] active_anon 307200 [ 2081.873854][T12692] inactive_file 0 [ 2081.873854][T12692] active_file 4096 [ 2081.873854][T12692] unevictable 0 [ 2081.873854][T12692] slab_reclaimable 123352 03:29:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae7d}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdb29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x2ec2, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2804}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdb2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2081.873854][T12692] slab_unreclaimable 307781576 [ 2081.873854][T12692] slab 307904928 [ 2081.972054][T12692] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12692,uid=0 [ 2082.054304][T12692] Memory cgroup out of memory: Killed process 12692 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2805}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3f90000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x6000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdb2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2806}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7ae21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae7e}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdc28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdc29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7be21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdc2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae7f}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2082.382764][T12707] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 03:29:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2807}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2082.456639][T12707] CPU: 0 PID: 12707 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2082.467117][T12707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2082.477199][T12707] Call Trace: [ 2082.480503][T12707] [ 2082.483452][T12707] dump_stack_lvl+0xcd/0x134 [ 2082.488082][T12707] dump_header+0x10b/0x7f9 [ 2082.492530][T12707] oom_kill_process.cold+0x10/0x15 [ 2082.497679][T12707] out_of_memory+0x358/0x14a0 [ 2082.502406][T12707] ? find_held_lock+0x2d/0x110 [ 2082.507197][T12707] ? oom_killer_disable+0x270/0x270 [ 2082.512428][T12707] ? find_held_lock+0x2d/0x110 [ 2082.517227][T12707] mem_cgroup_out_of_memory+0x206/0x270 [ 2082.522803][T12707] ? mem_cgroup_margin+0x130/0x130 [ 2082.527929][T12707] ? lock_downgrade+0x6e0/0x6e0 [ 2082.532801][T12707] try_charge_memcg+0xf67/0x13f0 [ 2082.537759][T12707] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2082.543755][T12707] ? lock_downgrade+0x6e0/0x6e0 [ 2082.548630][T12707] charge_memcg+0x31/0x320 [ 2082.553058][T12707] __mem_cgroup_charge+0x27/0x90 [ 2082.558003][T12707] ? _compound_head+0x5d/0x150 [ 2082.562775][T12707] wp_page_copy+0x27c/0x1b60 [ 2082.567382][T12707] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2082.572845][T12707] ? lock_downgrade+0x6e0/0x6e0 [ 2082.577700][T12707] ? vm_normal_page+0x146/0x2a0 [ 2082.582570][T12707] do_wp_page+0x1d1/0x1910 [ 2082.586998][T12707] __handle_mm_fault+0x1813/0x39b0 [ 2082.592122][T12707] ? vm_iomap_memory+0x190/0x190 [ 2082.597087][T12707] handle_mm_fault+0x1c8/0x780 [ 2082.601865][T12707] do_user_addr_fault+0x475/0x1210 [ 2082.606997][T12707] exc_page_fault+0x94/0x170 [ 2082.611597][T12707] asm_exc_page_fault+0x22/0x30 [ 2082.616455][T12707] RIP: 0033:0x7f70e7e37970 [ 2082.620875][T12707] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2082.640490][T12707] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2082.646562][T12707] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2082.654539][T12707] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2082.662514][T12707] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2082.670489][T12707] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2082.678464][T12707] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2082.686435][T12707] ? __x64_sys_socket+0xd/0xb0 [ 2082.691228][T12707] [ 2082.728755][T12707] memory: usage 307200kB, limit 307200kB, failcnt 59120 [ 2082.752999][T12707] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2082.769367][T12707] Memory cgroup stats for /syz3: [ 2082.769543][T12707] anon 106496 [ 2082.769543][T12707] file 782336 [ 2082.769543][T12707] kernel 313683968 [ 2082.769543][T12707] kernel_stack 65536 [ 2082.769543][T12707] pagetables 73728 [ 2082.769543][T12707] percpu 5602688 [ 2082.769543][T12707] sock 0 [ 2082.769543][T12707] vmalloc 0 [ 2082.769543][T12707] shmem 778240 [ 2082.769543][T12707] zswap 0 [ 2082.769543][T12707] zswapped 0 [ 2082.769543][T12707] file_mapped 778240 [ 2082.769543][T12707] file_dirty 0 [ 2082.769543][T12707] file_writeback 0 [ 2082.769543][T12707] swapcached 0 [ 2082.769543][T12707] anon_thp 0 [ 2082.769543][T12707] file_thp 0 [ 2082.769543][T12707] shmem_thp 0 [ 2082.769543][T12707] inactive_anon 577536 [ 2082.769543][T12707] active_anon 307200 [ 2082.769543][T12707] inactive_file 0 [ 2082.769543][T12707] active_file 4096 [ 2082.769543][T12707] unevictable 0 [ 2082.769543][T12707] slab_reclaimable 123352 [ 2082.769543][T12707] slab_unreclaimable 307779472 [ 2082.769543][T12707] slab 307902824 [ 2082.863799][T12707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12707,uid=0 03:29:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000003fa0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2904}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdc2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xc00e, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7ce21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae80}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2082.880250][T12707] Memory cgroup out of memory: Killed process 12707 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdd28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2082.944177][T12737] __nla_validate_parse: 14 callbacks suppressed [ 2082.944198][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdd29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5ae81}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2083.052216][T12744] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2083.066973][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2083.078301][T12744] CPU: 0 PID: 12744 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2083.088754][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2083.098840][T12744] Call Trace: [ 2083.102147][T12744] [ 2083.105092][T12744] dump_stack_lvl+0xcd/0x134 [ 2083.109711][T12744] dump_header+0x10b/0x7f9 [ 2083.114166][T12744] oom_kill_process.cold+0x10/0x15 [ 2083.119310][T12744] out_of_memory+0x358/0x14a0 [ 2083.124630][T12744] ? find_held_lock+0x2d/0x110 [ 2083.129424][T12744] ? oom_killer_disable+0x270/0x270 [ 2083.134663][T12744] ? find_held_lock+0x2d/0x110 [ 2083.139459][T12744] mem_cgroup_out_of_memory+0x206/0x270 [ 2083.145031][T12744] ? mem_cgroup_margin+0x130/0x130 [ 2083.150165][T12744] ? lock_downgrade+0x6e0/0x6e0 [ 2083.155061][T12744] try_charge_memcg+0xf67/0x13f0 [ 2083.160032][T12744] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2083.166041][T12744] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2083.171789][T12744] ? lock_downgrade+0x6e0/0x6e0 [ 2083.176672][T12744] ? lock_downgrade+0x6e0/0x6e0 [ 2083.181560][T12744] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2083.187136][T12744] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2083.193351][T12744] copy_process+0x15f3/0x7090 [ 2083.198071][T12744] ? __lock_acquire+0xbc3/0x56d0 [ 2083.203052][T12744] ? __cleanup_sighand+0xb0/0xb0 [ 2083.208044][T12744] kernel_clone+0xe7/0xab0 [ 2083.212494][T12744] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2083.218504][T12744] ? create_io_thread+0xe0/0xe0 [ 2083.223398][T12744] ? find_held_lock+0x2d/0x110 [ 2083.228200][T12744] ? __ct_user_exit+0xff/0x150 [ 2083.233867][T12744] __do_sys_clone+0xba/0x100 [ 2083.238490][T12744] ? kernel_clone+0xab0/0xab0 [ 2083.243217][T12744] ? syscall_enter_from_user_mode+0x22/0xb0 03:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdd2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdd2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xde28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2083.249142][T12744] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2083.255077][T12744] do_syscall_64+0x35/0xb0 [ 2083.259521][T12744] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2083.265449][T12744] RIP: 0033:0x7f70e7e8b9d1 [ 2083.269879][T12744] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2083.289491][T12744] RSP: 002b:00007ffcadad7aa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2083.297915][T12744] RAX: ffffffffffffffda RBX: 00007f70e9053700 RCX: 00007f70e7e8b9d1 [ 2083.305906][T12744] RDX: 00007f70e90539d0 RSI: 00007f70e90532f0 RDI: 00000000003d0f00 [ 2083.313885][T12744] RBP: 00007ffcadad7cf0 R08: 00007f70e9053700 R09: 00007f70e9053700 [ 2083.321846][T12744] R10: 00007f70e90539d0 R11: 0000000000000206 R12: 00007ffcadad7b5e [ 2083.329804][T12744] R13: 00007ffcadad7b5f R14: 00007f70e9053300 R15: 0000000000022000 [ 2083.337804][T12744] [ 2083.365105][T12744] memory: usage 307156kB, limit 307200kB, failcnt 59185 [ 2083.384263][T12744] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2083.394048][T12744] Memory cgroup stats for /syz3: [ 2083.394270][T12744] anon 81920 [ 2083.394270][T12744] file 782336 [ 2083.394270][T12744] kernel 313663488 [ 2083.394270][T12744] kernel_stack 32768 [ 2083.394270][T12744] pagetables 69632 [ 2083.394270][T12744] percpu 5602688 [ 2083.394270][T12744] sock 0 [ 2083.394270][T12744] vmalloc 0 [ 2083.394270][T12744] shmem 778240 [ 2083.394270][T12744] zswap 0 [ 2083.394270][T12744] zswapped 0 [ 2083.394270][T12744] file_mapped 778240 [ 2083.394270][T12744] file_dirty 0 [ 2083.394270][T12744] file_writeback 0 [ 2083.394270][T12744] swapcached 0 [ 2083.394270][T12744] anon_thp 0 [ 2083.394270][T12744] file_thp 0 [ 2083.394270][T12744] shmem_thp 0 [ 2083.394270][T12744] inactive_anon 552960 [ 2083.394270][T12744] active_anon 307200 [ 2083.394270][T12744] inactive_file 0 [ 2083.394270][T12744] active_file 4096 [ 2083.394270][T12744] unevictable 0 [ 2083.394270][T12744] slab_reclaimable 121424 [ 2083.394270][T12744] slab_unreclaimable 307778360 [ 2083.394270][T12744] slab 307899784 [ 2083.490344][T12744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12744,uid=0 03:29:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3fa0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2905}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:29:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7de21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xde29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xc22e, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2083.506098][T12744] Memory cgroup out of memory: Killed process 12744 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:29:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xde2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2083.562434][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2083.634354][T12750] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2083.663765][T12750] CPU: 0 PID: 12750 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2083.674231][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2083.684308][T12750] Call Trace: [ 2083.687595][T12750] [ 2083.690537][T12750] dump_stack_lvl+0xcd/0x134 [ 2083.695141][T12750] dump_header+0x10b/0x7f9 [ 2083.699573][T12750] oom_kill_process.cold+0x10/0x15 [ 2083.704699][T12750] out_of_memory+0x358/0x14a0 [ 2083.709400][T12750] ? find_held_lock+0x2d/0x110 [ 2083.714176][T12750] ? oom_killer_disable+0x270/0x270 [ 2083.719402][T12750] ? find_held_lock+0x2d/0x110 [ 2083.724181][T12750] mem_cgroup_out_of_memory+0x206/0x270 [ 2083.729744][T12750] ? mem_cgroup_margin+0x130/0x130 [ 2083.734865][T12750] ? lock_downgrade+0x6e0/0x6e0 [ 2083.739743][T12750] try_charge_memcg+0xf67/0x13f0 [ 2083.744701][T12750] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2083.750697][T12750] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2083.756433][T12750] ? lock_downgrade+0x6e0/0x6e0 [ 2083.761313][T12750] obj_cgroup_charge+0x2ab/0x5e0 [ 2083.766270][T12750] __kmalloc+0xb2/0x340 [ 2083.771135][T12750] ? veth_dev_init+0x1dd/0x3e0 [ 2083.775918][T12750] veth_dev_init+0x1dd/0x3e0 [ 2083.780519][T12750] ? veth_get_num_queues+0x50/0x50 [ 2083.785652][T12750] register_netdevice+0x5e1/0x1680 [ 2083.790789][T12750] ? netdev_change_features+0xb0/0xb0 [ 2083.796179][T12750] ? dev_addr_mod+0x2c9/0x3f0 [ 2083.800876][T12750] veth_newlink+0x338/0x990 [ 2083.805393][T12750] ? veth_set_features+0x190/0x190 [ 2083.810519][T12750] ? netlink_rcv_skb+0x153/0x420 [ 2083.815466][T12750] ? netlink_unicast+0x543/0x7f0 [ 2083.820413][T12750] ? netlink_sendmsg+0x917/0xe10 [ 2083.825417][T12750] ? dev_addr_mod+0x2c9/0x3f0 [ 2083.830114][T12750] ? rtnl_create_link+0x7e8/0xc00 [ 2083.835157][T12750] ? veth_set_features+0x190/0x190 [ 2083.840283][T12750] __rtnl_newlink+0x1087/0x17e0 [ 2083.845163][T12750] ? rtnl_link_unregister+0x250/0x250 [ 2083.850551][T12750] ? rtnl_newlink+0x46/0xa0 [ 2083.855083][T12750] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2083.860641][T12750] ? trace_kmalloc+0x32/0x100 [ 2083.865337][T12750] rtnl_newlink+0x64/0xa0 [ 2083.869680][T12750] ? __rtnl_newlink+0x17e0/0x17e0 [ 2083.874727][T12750] rtnetlink_rcv_msg+0x43a/0xca0 [ 2083.879685][T12750] ? rtnl_getlink+0xae0/0xae0 [ 2083.884372][T12750] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2083.889669][T12750] ? skb_clone+0x16e/0x3c0 [ 2083.894120][T12750] ? ref_tracker_free+0x370/0x6b0 [ 2083.899177][T12750] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2083.904593][T12750] netlink_rcv_skb+0x153/0x420 [ 2083.909385][T12750] ? rtnl_getlink+0xae0/0xae0 [ 2083.914083][T12750] ? netlink_ack+0xd50/0xd50 [ 2083.918684][T12750] ? netlink_deliver_tap+0x1a2/0xc40 [ 2083.923985][T12750] ? netlink_deliver_tap+0x1b1/0xc40 [ 2083.929289][T12750] netlink_unicast+0x543/0x7f0 [ 2083.934071][T12750] ? netlink_attachskb+0x880/0x880 [ 2083.939193][T12750] ? __phys_addr+0xc4/0x140 [ 2083.943703][T12750] ? __phys_addr_symbol+0x2c/0x70 [ 2083.948735][T12750] ? __check_object_size+0x2de/0x700 [ 2083.954039][T12750] netlink_sendmsg+0x917/0xe10 [ 2083.958820][T12750] ? netlink_unicast+0x7f0/0x7f0 [ 2083.963775][T12750] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2083.969082][T12750] ? netlink_unicast+0x7f0/0x7f0 [ 2083.974039][T12750] sock_sendmsg+0xcf/0x120 [ 2083.978474][T12750] ____sys_sendmsg+0x6eb/0x810 [ 2083.983250][T12750] ? copy_msghdr_from_user+0xfc/0x150 [ 2083.988637][T12750] ? kernel_sendmsg+0x50/0x50 [ 2083.993343][T12750] ? futex_unqueue+0xb3/0x120 [ 2083.998042][T12750] ___sys_sendmsg+0x110/0x1b0 [ 2084.002736][T12750] ? do_recvmmsg+0x6e0/0x6e0 [ 2084.007344][T12750] ? __fget_files+0x248/0x440 [ 2084.012036][T12750] ? lock_downgrade+0x6e0/0x6e0 [ 2084.016902][T12750] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2084.022899][T12750] ? __fget_files+0x26a/0x440 [ 2084.027598][T12750] ? __fget_light+0xe5/0x270 [ 2084.032211][T12750] __sys_sendmsg+0xf3/0x1c0 [ 2084.036727][T12750] ? __sys_sendmsg_sock+0x30/0x30 [ 2084.041766][T12750] ? lock_downgrade+0x6e0/0x6e0 [ 2084.046640][T12750] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2084.052549][T12750] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2084.058459][T12750] ? lockdep_hardirqs_on+0x79/0x100 [ 2084.063672][T12750] do_syscall_64+0x35/0xb0 [ 2084.068103][T12750] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2084.074011][T12750] RIP: 0033:0x7f58e888a5a9 [ 2084.078435][T12750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2084.098050][T12750] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2084.106505][T12750] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2084.114487][T12750] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2084.122467][T12750] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 03:29:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xde2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2084.130445][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2084.138419][T12750] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2084.146485][T12750] [ 2084.171452][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2906}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2084.227578][T12750] memory: usage 307164kB, limit 307200kB, failcnt 44192 [ 2084.259770][T12750] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2084.276643][T12750] Memory cgroup stats for /syz1: [ 2084.276851][T12750] anon 135168 [ 2084.276851][T12750] file 389120 [ 2084.276851][T12750] kernel 314011648 [ 2084.276851][T12750] kernel_stack 32768 [ 2084.276851][T12750] pagetables 77824 [ 2084.276851][T12750] percpu 5593216 [ 2084.276851][T12750] sock 0 [ 2084.276851][T12750] vmalloc 0 [ 2084.276851][T12750] shmem 389120 [ 2084.276851][T12750] zswap 0 [ 2084.276851][T12750] zswapped 0 [ 2084.276851][T12750] file_mapped 389120 [ 2084.276851][T12750] file_dirty 0 [ 2084.276851][T12750] file_writeback 0 [ 2084.276851][T12750] swapcached 0 [ 2084.276851][T12750] anon_thp 0 [ 2084.276851][T12750] file_thp 0 [ 2084.276851][T12750] shmem_thp 0 [ 2084.276851][T12750] inactive_anon 225280 [ 2084.276851][T12750] active_anon 299008 [ 2084.276851][T12750] inactive_file 0 [ 2084.276851][T12750] active_file 0 [ 2084.276851][T12750] unevictable 0 [ 2084.276851][T12750] slab_reclaimable 21832 [ 2084.276851][T12750] slab_unreclaimable 308249776 [ 2084.276851][T12750] slab 308271608 [ 2084.283921][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2084.381753][T12750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12748,uid=0 [ 2084.386757][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2084.407668][T12750] Memory cgroup out of memory: Killed process 12750 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2084.437090][T12768] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2084.447876][T12768] CPU: 1 PID: 12768 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2084.458320][T12768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2084.468483][T12768] Call Trace: [ 2084.471775][T12768] [ 2084.474718][T12768] dump_stack_lvl+0xcd/0x134 [ 2084.479338][T12768] dump_header+0x10b/0x7f9 [ 2084.483783][T12768] oom_kill_process.cold+0x10/0x15 [ 2084.488927][T12768] out_of_memory+0x358/0x14a0 [ 2084.493643][T12768] ? oom_killer_disable+0x270/0x270 [ 2084.498872][T12768] ? find_held_lock+0x2d/0x110 [ 2084.503657][T12768] mem_cgroup_out_of_memory+0x206/0x270 [ 2084.509213][T12768] ? mem_cgroup_margin+0x130/0x130 [ 2084.514343][T12768] ? lock_downgrade+0x6e0/0x6e0 [ 2084.519373][T12768] try_charge_memcg+0xf67/0x13f0 [ 2084.524314][T12768] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2084.530307][T12768] ? lock_downgrade+0x6e0/0x6e0 [ 2084.535201][T12768] charge_memcg+0x31/0x320 [ 2084.539643][T12768] __mem_cgroup_charge+0x27/0x90 [ 2084.544594][T12768] ? _compound_head+0x5d/0x150 [ 2084.549364][T12768] wp_page_copy+0x27c/0x1b60 [ 2084.553968][T12768] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2084.559433][T12768] ? lock_downgrade+0x6e0/0x6e0 [ 2084.564290][T12768] ? vm_normal_page+0x146/0x2a0 [ 2084.569162][T12768] do_wp_page+0x1d1/0x1910 [ 2084.573597][T12768] __handle_mm_fault+0x1813/0x39b0 [ 2084.578724][T12768] ? vm_iomap_memory+0x190/0x190 [ 2084.583691][T12768] handle_mm_fault+0x1c8/0x780 [ 2084.588468][T12768] do_user_addr_fault+0x475/0x1210 [ 2084.593607][T12768] exc_page_fault+0x94/0x170 [ 2084.598211][T12768] asm_exc_page_fault+0x22/0x30 [ 2084.603071][T12768] RIP: 0033:0x7f70e7e37970 [ 2084.607496][T12768] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2084.627195][T12768] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2084.633269][T12768] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2084.641249][T12768] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2084.649250][T12768] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2084.657352][T12768] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2084.665327][T12768] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2084.673304][T12768] ? __x64_sys_socket+0xd/0xb0 [ 2084.678097][T12768] [ 2084.690052][T12768] memory: usage 307200kB, limit 307200kB, failcnt 59254 [ 2084.703531][T12768] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2084.714259][T12768] Memory cgroup stats for /syz3: [ 2084.714480][T12768] anon 106496 [ 2084.714480][T12768] file 782336 [ 2084.714480][T12768] kernel 313683968 [ 2084.714480][T12768] kernel_stack 65536 [ 2084.714480][T12768] pagetables 73728 [ 2084.714480][T12768] percpu 5602688 [ 2084.714480][T12768] sock 0 [ 2084.714480][T12768] vmalloc 0 [ 2084.714480][T12768] shmem 778240 [ 2084.714480][T12768] zswap 0 [ 2084.714480][T12768] zswapped 0 [ 2084.714480][T12768] file_mapped 778240 [ 2084.714480][T12768] file_dirty 0 [ 2084.714480][T12768] file_writeback 0 [ 2084.714480][T12768] swapcached 0 [ 2084.714480][T12768] anon_thp 0 [ 2084.714480][T12768] file_thp 0 [ 2084.714480][T12768] shmem_thp 0 [ 2084.714480][T12768] inactive_anon 577536 [ 2084.714480][T12768] active_anon 307200 [ 2084.714480][T12768] inactive_file 0 03:29:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xf000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdf28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2907}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2084.714480][T12768] active_file 4096 [ 2084.714480][T12768] unevictable 0 [ 2084.714480][T12768] slab_reclaimable 123352 [ 2084.714480][T12768] slab_unreclaimable 307779472 [ 2084.714480][T12768] slab 307902824 [ 2084.819141][T12768] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12768,uid=0 03:29:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7e030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3fb0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:29:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdf29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2084.848238][T12768] Memory cgroup out of memory: Killed process 12768 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2084.869309][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdf2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2a04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2084.981253][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x34000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:29:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7ee21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:29:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xdf2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2085.083126][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:29:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:29:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe028, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2085.219107][T12790] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2085.257934][T12790] CPU: 1 PID: 12790 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2085.268398][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2085.278462][T12790] Call Trace: [ 2085.281741][T12790] [ 2085.284678][T12790] dump_stack_lvl+0xcd/0x134 [ 2085.289456][T12790] dump_header+0x10b/0x7f9 [ 2085.293970][T12790] oom_kill_process.cold+0x10/0x15 [ 2085.299095][T12790] out_of_memory+0x358/0x14a0 [ 2085.303791][T12790] ? find_held_lock+0x2d/0x110 [ 2085.308653][T12790] ? oom_killer_disable+0x270/0x270 [ 2085.313862][T12790] ? find_held_lock+0x2d/0x110 [ 2085.318635][T12790] mem_cgroup_out_of_memory+0x206/0x270 [ 2085.324193][T12790] ? mem_cgroup_margin+0x130/0x130 [ 2085.329309][T12790] ? lock_downgrade+0x6e0/0x6e0 [ 2085.334182][T12790] try_charge_memcg+0xf67/0x13f0 [ 2085.339137][T12790] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2085.345134][T12790] ? lock_downgrade+0x6e0/0x6e0 [ 2085.350005][T12790] charge_memcg+0x31/0x320 [ 2085.354430][T12790] __mem_cgroup_charge+0x27/0x90 [ 2085.359378][T12790] ? _compound_head+0x5d/0x150 [ 2085.364149][T12790] wp_page_copy+0x27c/0x1b60 [ 2085.368775][T12790] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2085.374241][T12790] ? lock_downgrade+0x6e0/0x6e0 [ 2085.379100][T12790] ? vm_normal_page+0x146/0x2a0 [ 2085.383971][T12790] do_wp_page+0x1d1/0x1910 [ 2085.388400][T12790] __handle_mm_fault+0x1813/0x39b0 [ 2085.393530][T12790] ? vm_iomap_memory+0x190/0x190 [ 2085.398500][T12790] handle_mm_fault+0x1c8/0x780 [ 2085.403276][T12790] do_user_addr_fault+0x475/0x1210 [ 2085.408408][T12790] exc_page_fault+0x94/0x170 [ 2085.413009][T12790] asm_exc_page_fault+0x22/0x30 [ 2085.417867][T12790] RIP: 0033:0x7f70e7e37970 [ 2085.422286][T12790] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2085.441986][T12790] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2085.448059][T12790] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2085.456038][T12790] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec 03:29:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe029, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:29:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x40000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2085.464012][T12790] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2085.471989][T12790] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2085.479976][T12790] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2085.487949][T12790] ? __x64_sys_socket+0xd/0xb0 [ 2085.492743][T12790] [ 2085.505272][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7fe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2085.642758][T12790] memory: usage 307184kB, limit 307200kB, failcnt 59319 [ 2085.655121][T12790] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2085.668818][T12790] Memory cgroup stats for /syz3: [ 2085.668982][T12790] anon 106496 [ 2085.668982][T12790] file 782336 [ 2085.668982][T12790] kernel 313667584 [ 2085.668982][T12790] kernel_stack 65536 [ 2085.668982][T12790] pagetables 73728 [ 2085.668982][T12790] percpu 5602688 [ 2085.668982][T12790] sock 0 [ 2085.668982][T12790] vmalloc 0 [ 2085.668982][T12790] shmem 778240 [ 2085.668982][T12790] zswap 0 [ 2085.668982][T12790] zswapped 0 [ 2085.668982][T12790] file_mapped 778240 [ 2085.668982][T12790] file_dirty 4096 [ 2085.668982][T12790] file_writeback 0 [ 2085.668982][T12790] swapcached 0 [ 2085.668982][T12790] anon_thp 0 [ 2085.668982][T12790] file_thp 0 [ 2085.668982][T12790] shmem_thp 0 [ 2085.668982][T12790] inactive_anon 577536 [ 2085.668982][T12790] active_anon 307200 [ 2085.668982][T12790] inactive_file 0 [ 2085.668982][T12790] active_file 4096 [ 2085.668982][T12790] unevictable 0 [ 2085.668982][T12790] slab_reclaimable 123352 [ 2085.668982][T12790] slab_unreclaimable 307768072 [ 2085.668982][T12790] slab 307891424 [ 2085.765723][T12790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12790,uid=0 03:30:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000003fc0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2a05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe02a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x400300, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x80e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2085.781540][T12790] Memory cgroup out of memory: Killed process 12790 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe02b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe128, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2a06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2086.036576][T12823] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2086.065818][T12823] CPU: 0 PID: 12823 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2086.076290][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2086.086384][T12823] Call Trace: [ 2086.089683][T12823] [ 2086.092640][T12823] dump_stack_lvl+0xcd/0x134 [ 2086.097263][T12823] dump_header+0x10b/0x7f9 [ 2086.101718][T12823] oom_kill_process.cold+0x10/0x15 [ 2086.106867][T12823] out_of_memory+0x358/0x14a0 [ 2086.111586][T12823] ? find_held_lock+0x2d/0x110 [ 2086.116378][T12823] ? oom_killer_disable+0x270/0x270 [ 2086.121614][T12823] ? find_held_lock+0x2d/0x110 [ 2086.126420][T12823] mem_cgroup_out_of_memory+0x206/0x270 [ 2086.131994][T12823] ? mem_cgroup_margin+0x130/0x130 [ 2086.137128][T12823] ? lock_downgrade+0x6e0/0x6e0 [ 2086.142042][T12823] try_charge_memcg+0xf67/0x13f0 [ 2086.147017][T12823] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2086.153021][T12823] ? lock_downgrade+0x6e0/0x6e0 [ 2086.157893][T12823] charge_memcg+0x31/0x320 [ 2086.162329][T12823] __mem_cgroup_charge+0x27/0x90 [ 2086.167290][T12823] ? _compound_head+0x5d/0x150 [ 2086.172145][T12823] wp_page_copy+0x27c/0x1b60 [ 2086.176749][T12823] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2086.182211][T12823] ? lock_downgrade+0x6e0/0x6e0 [ 2086.187066][T12823] ? vm_normal_page+0x146/0x2a0 [ 2086.191941][T12823] do_wp_page+0x1d1/0x1910 [ 2086.196368][T12823] __handle_mm_fault+0x1813/0x39b0 [ 2086.201492][T12823] ? vm_iomap_memory+0x190/0x190 [ 2086.206465][T12823] handle_mm_fault+0x1c8/0x780 [ 2086.211238][T12823] do_user_addr_fault+0x475/0x1210 [ 2086.216372][T12823] exc_page_fault+0x94/0x170 [ 2086.220972][T12823] asm_exc_page_fault+0x22/0x30 [ 2086.225828][T12823] RIP: 0033:0x7f70e7e37970 [ 2086.230246][T12823] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2086.250550][T12823] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2086.256618][T12823] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2086.264594][T12823] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2086.272564][T12823] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2086.280538][T12823] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2086.288510][T12823] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2086.296483][T12823] ? __x64_sys_socket+0xd/0xb0 [ 2086.301272][T12823] [ 2086.308191][T12823] memory: usage 307200kB, limit 307200kB, failcnt 59372 [ 2086.330770][T12823] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2086.347598][T12823] Memory cgroup stats for /syz3: [ 2086.355175][T12823] anon 106496 [ 2086.355175][T12823] file 782336 [ 2086.355175][T12823] kernel 313683968 [ 2086.355175][T12823] kernel_stack 65536 [ 2086.355175][T12823] pagetables 73728 [ 2086.355175][T12823] percpu 5602688 [ 2086.355175][T12823] sock 0 [ 2086.355175][T12823] vmalloc 0 [ 2086.355175][T12823] shmem 778240 [ 2086.355175][T12823] zswap 0 [ 2086.355175][T12823] zswapped 0 [ 2086.355175][T12823] file_mapped 778240 [ 2086.355175][T12823] file_dirty 4096 [ 2086.355175][T12823] file_writeback 0 [ 2086.355175][T12823] swapcached 0 [ 2086.355175][T12823] anon_thp 0 [ 2086.355175][T12823] file_thp 0 [ 2086.355175][T12823] shmem_thp 0 [ 2086.355175][T12823] inactive_anon 577536 [ 2086.355175][T12823] active_anon 307200 [ 2086.355175][T12823] inactive_file 0 [ 2086.355175][T12823] active_file 4096 [ 2086.355175][T12823] unevictable 0 [ 2086.355175][T12823] slab_reclaimable 123352 [ 2086.355175][T12823] slab_unreclaimable 307779472 [ 2086.355175][T12823] slab 307902824 03:30:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3fc0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe129, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2a07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x81e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x1000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2086.453703][T12823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12823,uid=0 [ 2086.470087][T12823] Memory cgroup out of memory: Killed process 12823 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe12a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2086.582295][T12836] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2086.609881][T12836] CPU: 1 PID: 12836 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2086.620362][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2086.630442][T12836] Call Trace: [ 2086.633740][T12836] [ 2086.636689][T12836] dump_stack_lvl+0xcd/0x134 [ 2086.641316][T12836] dump_header+0x10b/0x7f9 [ 2086.645766][T12836] oom_kill_process.cold+0x10/0x15 [ 2086.650918][T12836] out_of_memory+0x358/0x14a0 [ 2086.655636][T12836] ? find_held_lock+0x2d/0x110 [ 2086.660429][T12836] ? oom_killer_disable+0x270/0x270 [ 2086.665662][T12836] ? find_held_lock+0x2d/0x110 [ 2086.670477][T12836] mem_cgroup_out_of_memory+0x206/0x270 [ 2086.676054][T12836] ? mem_cgroup_margin+0x130/0x130 [ 2086.681192][T12836] ? lock_downgrade+0x6e0/0x6e0 [ 2086.686088][T12836] try_charge_memcg+0xf67/0x13f0 [ 2086.691064][T12836] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2086.697074][T12836] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2086.702816][T12836] ? lock_downgrade+0x6e0/0x6e0 [ 2086.707707][T12836] obj_cgroup_charge+0x2ab/0x5e0 [ 2086.712666][T12836] __kmalloc+0xb2/0x340 [ 2086.716829][T12836] ? veth_dev_init+0x1dd/0x3e0 [ 2086.721605][T12836] veth_dev_init+0x1dd/0x3e0 [ 2086.726200][T12836] ? veth_get_num_queues+0x50/0x50 [ 2086.731323][T12836] register_netdevice+0x5e1/0x1680 [ 2086.736448][T12836] ? netdev_change_features+0xb0/0xb0 [ 2086.741830][T12836] ? dev_addr_mod+0x2c9/0x3f0 [ 2086.746522][T12836] veth_newlink+0x338/0x990 [ 2086.751036][T12836] ? veth_set_features+0x190/0x190 [ 2086.756153][T12836] ? netlink_rcv_skb+0x153/0x420 [ 2086.761104][T12836] ? netlink_unicast+0x543/0x7f0 [ 2086.766050][T12836] ? netlink_sendmsg+0x917/0xe10 [ 2086.771050][T12836] ? dev_addr_mod+0x2c9/0x3f0 [ 2086.775746][T12836] ? rtnl_create_link+0x7e8/0xc00 [ 2086.780784][T12836] ? veth_set_features+0x190/0x190 [ 2086.785906][T12836] __rtnl_newlink+0x1087/0x17e0 [ 2086.790781][T12836] ? rtnl_link_unregister+0x250/0x250 [ 2086.796165][T12836] ? rtnl_newlink+0x46/0xa0 [ 2086.800692][T12836] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2086.806249][T12836] ? trace_kmalloc+0x32/0x100 [ 2086.810941][T12836] rtnl_newlink+0x64/0xa0 [ 2086.815281][T12836] ? __rtnl_newlink+0x17e0/0x17e0 [ 2086.820313][T12836] rtnetlink_rcv_msg+0x43a/0xca0 [ 2086.825264][T12836] ? rtnl_getlink+0xae0/0xae0 [ 2086.829950][T12836] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2086.835249][T12836] ? ref_tracker_free+0x370/0x6b0 [ 2086.840284][T12836] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2086.845670][T12836] netlink_rcv_skb+0x153/0x420 [ 2086.850458][T12836] ? rtnl_getlink+0xae0/0xae0 [ 2086.855144][T12836] ? netlink_ack+0xd50/0xd50 [ 2086.859768][T12836] ? netlink_deliver_tap+0x1a2/0xc40 [ 2086.865076][T12836] ? netlink_deliver_tap+0x1b1/0xc40 [ 2086.870389][T12836] netlink_unicast+0x543/0x7f0 [ 2086.875168][T12836] ? netlink_attachskb+0x880/0x880 [ 2086.880287][T12836] ? __phys_addr+0xc4/0x140 [ 2086.884801][T12836] ? __phys_addr_symbol+0x2c/0x70 [ 2086.889828][T12836] ? __check_object_size+0x2de/0x700 [ 2086.895130][T12836] netlink_sendmsg+0x917/0xe10 [ 2086.899912][T12836] ? netlink_unicast+0x7f0/0x7f0 [ 2086.904868][T12836] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2086.910169][T12836] ? netlink_unicast+0x7f0/0x7f0 [ 2086.915202][T12836] sock_sendmsg+0xcf/0x120 [ 2086.919639][T12836] ____sys_sendmsg+0x6eb/0x810 [ 2086.924411][T12836] ? copy_msghdr_from_user+0xfc/0x150 [ 2086.929792][T12836] ? kernel_sendmsg+0x50/0x50 [ 2086.934483][T12836] ? futex_unqueue+0xb3/0x120 [ 2086.939175][T12836] ___sys_sendmsg+0x110/0x1b0 [ 2086.943866][T12836] ? do_recvmmsg+0x6e0/0x6e0 [ 2086.948475][T12836] ? __fget_files+0x248/0x440 [ 2086.953160][T12836] ? lock_downgrade+0x6e0/0x6e0 [ 2086.958021][T12836] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2086.964016][T12836] ? __fget_files+0x26a/0x440 [ 2086.968731][T12836] ? __fget_light+0xe5/0x270 [ 2086.973356][T12836] __sys_sendmsg+0xf3/0x1c0 [ 2086.977885][T12836] ? __sys_sendmsg_sock+0x30/0x30 [ 2086.982933][T12836] ? lock_downgrade+0x6e0/0x6e0 [ 2086.987820][T12836] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2086.993731][T12836] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2086.999635][T12836] ? lockdep_hardirqs_on+0x79/0x100 [ 2087.004848][T12836] do_syscall_64+0x35/0xb0 [ 2087.009270][T12836] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2087.015174][T12836] RIP: 0033:0x7f58e888a5a9 [ 2087.019600][T12836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2087.039214][T12836] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2087.047632][T12836] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2087.055606][T12836] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2087.063579][T12836] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2087.071550][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 03:30:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe12b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2b04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe228, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2087.079521][T12836] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2087.087512][T12836] [ 2087.181168][T12836] memory: usage 307164kB, limit 307200kB, failcnt 44432 [ 2087.196621][T12836] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2087.203611][T12836] Memory cgroup stats for /syz1: [ 2087.203848][T12836] anon 135168 [ 2087.203848][T12836] file 389120 [ 2087.203848][T12836] kernel 314011648 [ 2087.203848][T12836] kernel_stack 32768 [ 2087.203848][T12836] pagetables 77824 [ 2087.203848][T12836] percpu 5593216 [ 2087.203848][T12836] sock 0 [ 2087.203848][T12836] vmalloc 0 [ 2087.203848][T12836] shmem 389120 [ 2087.203848][T12836] zswap 0 [ 2087.203848][T12836] zswapped 0 [ 2087.203848][T12836] file_mapped 389120 [ 2087.203848][T12836] file_dirty 0 [ 2087.203848][T12836] file_writeback 0 [ 2087.203848][T12836] swapcached 0 [ 2087.203848][T12836] anon_thp 0 [ 2087.203848][T12836] file_thp 0 [ 2087.203848][T12836] shmem_thp 0 [ 2087.203848][T12836] inactive_anon 225280 [ 2087.203848][T12836] active_anon 299008 [ 2087.203848][T12836] inactive_file 0 [ 2087.203848][T12836] active_file 0 [ 2087.203848][T12836] unevictable 0 [ 2087.203848][T12836] slab_reclaimable 21832 [ 2087.203848][T12836] slab_unreclaimable 308249776 [ 2087.203848][T12836] slab 308271608 [ 2087.297908][T12836] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12832,uid=0 [ 2087.314167][T12836] Memory cgroup out of memory: Killed process 12836 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2087.366581][T12847] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2087.377011][T12847] CPU: 1 PID: 12847 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2087.387453][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2087.397529][T12847] Call Trace: [ 2087.400819][T12847] [ 2087.403753][T12847] dump_stack_lvl+0xcd/0x134 [ 2087.408346][T12847] dump_header+0x10b/0x7f9 [ 2087.412776][T12847] oom_kill_process.cold+0x10/0x15 [ 2087.417896][T12847] out_of_memory+0x358/0x14a0 [ 2087.422586][T12847] ? find_held_lock+0x2d/0x110 [ 2087.427354][T12847] ? oom_killer_disable+0x270/0x270 [ 2087.432562][T12847] ? find_held_lock+0x2d/0x110 [ 2087.437337][T12847] mem_cgroup_out_of_memory+0x206/0x270 [ 2087.442892][T12847] ? mem_cgroup_margin+0x130/0x130 [ 2087.448005][T12847] ? lock_downgrade+0x6e0/0x6e0 [ 2087.452875][T12847] try_charge_memcg+0xf67/0x13f0 [ 2087.457830][T12847] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2087.463825][T12847] ? lock_downgrade+0x6e0/0x6e0 [ 2087.468694][T12847] charge_memcg+0x31/0x320 [ 2087.473123][T12847] __mem_cgroup_charge+0x27/0x90 [ 2087.478064][T12847] ? _compound_head+0x5d/0x150 [ 2087.482835][T12847] wp_page_copy+0x27c/0x1b60 [ 2087.487437][T12847] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2087.492899][T12847] ? lock_downgrade+0x6e0/0x6e0 [ 2087.497752][T12847] ? vm_normal_page+0x146/0x2a0 [ 2087.502636][T12847] do_wp_page+0x1d1/0x1910 [ 2087.507060][T12847] __handle_mm_fault+0x1813/0x39b0 [ 2087.512185][T12847] ? vm_iomap_memory+0x190/0x190 [ 2087.517159][T12847] handle_mm_fault+0x1c8/0x780 [ 2087.521933][T12847] do_user_addr_fault+0x475/0x1210 [ 2087.527061][T12847] exc_page_fault+0x94/0x170 [ 2087.531748][T12847] asm_exc_page_fault+0x22/0x30 [ 2087.536607][T12847] RIP: 0033:0x7f70e7e37970 [ 2087.541021][T12847] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2087.560635][T12847] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2087.566707][T12847] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2087.574684][T12847] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2087.582655][T12847] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2087.590627][T12847] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2087.598688][T12847] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2087.606659][T12847] ? __x64_sys_socket+0xd/0xb0 [ 2087.611453][T12847] [ 2087.623358][T12847] memory: usage 307200kB, limit 307200kB, failcnt 59447 [ 2087.638536][T12847] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2087.653437][T12847] Memory cgroup stats for /syz3: [ 2087.653636][T12847] anon 106496 [ 2087.653636][T12847] file 782336 [ 2087.653636][T12847] kernel 313683968 [ 2087.653636][T12847] kernel_stack 65536 [ 2087.653636][T12847] pagetables 73728 [ 2087.653636][T12847] percpu 5602688 [ 2087.653636][T12847] sock 0 [ 2087.653636][T12847] vmalloc 0 [ 2087.653636][T12847] shmem 778240 [ 2087.653636][T12847] zswap 0 [ 2087.653636][T12847] zswapped 0 [ 2087.653636][T12847] file_mapped 778240 [ 2087.653636][T12847] file_dirty 4096 [ 2087.653636][T12847] file_writeback 0 [ 2087.653636][T12847] swapcached 0 [ 2087.653636][T12847] anon_thp 0 [ 2087.653636][T12847] file_thp 0 [ 2087.653636][T12847] shmem_thp 0 [ 2087.653636][T12847] inactive_anon 577536 03:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x2000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2b05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2087.653636][T12847] active_anon 307200 [ 2087.653636][T12847] inactive_file 4096 [ 2087.653636][T12847] active_file 0 [ 2087.653636][T12847] unevictable 0 [ 2087.653636][T12847] slab_reclaimable 123352 [ 2087.653636][T12847] slab_unreclaimable 307779472 [ 2087.653636][T12847] slab 307902824 [ 2087.757955][T12847] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12847,uid=0 03:30:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3fd0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe229, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x82030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2b06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2087.802543][T12847] Memory cgroup out of memory: Killed process 12847 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2b07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x3000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe22a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2087.959242][T12874] __nla_validate_parse: 10 callbacks suppressed [ 2087.959260][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe22b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x82e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2088.053877][T12870] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2088.080648][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x4000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe328, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2088.097375][T12870] CPU: 0 PID: 12870 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2088.107838][T12870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2088.117918][T12870] Call Trace: [ 2088.121216][T12870] [ 2088.124172][T12870] dump_stack_lvl+0xcd/0x134 [ 2088.128794][T12870] dump_header+0x10b/0x7f9 [ 2088.133247][T12870] oom_kill_process.cold+0x10/0x15 [ 2088.138399][T12870] out_of_memory+0x358/0x14a0 [ 2088.143116][T12870] ? find_held_lock+0x2d/0x110 [ 2088.147912][T12870] ? oom_killer_disable+0x270/0x270 [ 2088.153146][T12870] ? find_held_lock+0x2d/0x110 [ 2088.157937][T12870] mem_cgroup_out_of_memory+0x206/0x270 [ 2088.163499][T12870] ? mem_cgroup_margin+0x130/0x130 [ 2088.168616][T12870] ? lock_downgrade+0x6e0/0x6e0 [ 2088.173494][T12870] try_charge_memcg+0xf67/0x13f0 [ 2088.178453][T12870] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2088.184456][T12870] ? lock_downgrade+0x6e0/0x6e0 [ 2088.189339][T12870] charge_memcg+0x31/0x320 [ 2088.193774][T12870] __mem_cgroup_charge+0x27/0x90 [ 2088.198723][T12870] ? _compound_head+0x5d/0x150 [ 2088.203499][T12870] wp_page_copy+0x27c/0x1b60 [ 2088.208100][T12870] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2088.213563][T12870] ? lock_downgrade+0x6e0/0x6e0 [ 2088.218416][T12870] ? vm_normal_page+0x146/0x2a0 [ 2088.223297][T12870] do_wp_page+0x1d1/0x1910 [ 2088.227722][T12870] __handle_mm_fault+0x1813/0x39b0 [ 2088.232846][T12870] ? vm_iomap_memory+0x190/0x190 [ 2088.237816][T12870] handle_mm_fault+0x1c8/0x780 [ 2088.242600][T12870] do_user_addr_fault+0x475/0x1210 [ 2088.247818][T12870] exc_page_fault+0x94/0x170 [ 2088.252417][T12870] asm_exc_page_fault+0x22/0x30 [ 2088.257276][T12870] RIP: 0033:0x7f70e7e37970 [ 2088.261692][T12870] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2088.281300][T12870] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2088.287368][T12870] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2088.295348][T12870] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2088.303320][T12870] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2088.311293][T12870] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2088.319268][T12870] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2088.327239][T12870] ? __x64_sys_socket+0xd/0xb0 [ 2088.332031][T12870] [ 2088.383154][T12870] memory: usage 307200kB, limit 307200kB, failcnt 59510 [ 2088.392737][T12870] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2088.399745][T12870] Memory cgroup stats for /syz3: [ 2088.399930][T12870] anon 106496 [ 2088.399930][T12870] file 782336 [ 2088.399930][T12870] kernel 313683968 [ 2088.399930][T12870] kernel_stack 65536 [ 2088.399930][T12870] pagetables 73728 [ 2088.399930][T12870] percpu 5602688 [ 2088.399930][T12870] sock 0 [ 2088.399930][T12870] vmalloc 0 [ 2088.399930][T12870] shmem 778240 [ 2088.399930][T12870] zswap 0 [ 2088.399930][T12870] zswapped 0 [ 2088.399930][T12870] file_mapped 778240 [ 2088.399930][T12870] file_dirty 4096 [ 2088.399930][T12870] file_writeback 0 [ 2088.399930][T12870] swapcached 0 [ 2088.399930][T12870] anon_thp 0 [ 2088.399930][T12870] file_thp 0 [ 2088.399930][T12870] shmem_thp 0 [ 2088.399930][T12870] inactive_anon 577536 [ 2088.399930][T12870] active_anon 307200 [ 2088.399930][T12870] inactive_file 0 [ 2088.399930][T12870] active_file 4096 [ 2088.399930][T12870] unevictable 0 03:30:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3fe0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe329, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x5000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2c04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2088.399930][T12870] slab_reclaimable 123352 [ 2088.399930][T12870] slab_unreclaimable 307779472 [ 2088.399930][T12870] slab 307902824 [ 2088.495794][T12870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12870,uid=0 [ 2088.511636][T12870] Memory cgroup out of memory: Killed process 12870 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe32a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2088.558458][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x83e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2088.666414][T12895] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2088.691676][T12895] CPU: 1 PID: 12895 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2088.702155][T12895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2088.712234][T12895] Call Trace: [ 2088.715527][T12895] [ 2088.718480][T12895] dump_stack_lvl+0xcd/0x134 [ 2088.723099][T12895] dump_header+0x10b/0x7f9 [ 2088.727547][T12895] oom_kill_process.cold+0x10/0x15 [ 2088.732692][T12895] out_of_memory+0x358/0x14a0 [ 2088.737408][T12895] ? find_held_lock+0x2d/0x110 [ 2088.742202][T12895] ? oom_killer_disable+0x270/0x270 [ 2088.747435][T12895] ? find_held_lock+0x2d/0x110 [ 2088.752229][T12895] mem_cgroup_out_of_memory+0x206/0x270 [ 2088.757803][T12895] ? mem_cgroup_margin+0x130/0x130 [ 2088.762938][T12895] ? lock_downgrade+0x6e0/0x6e0 [ 2088.767835][T12895] try_charge_memcg+0xf67/0x13f0 [ 2088.772810][T12895] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2088.778828][T12895] ? lock_downgrade+0x6e0/0x6e0 [ 2088.783725][T12895] charge_memcg+0x31/0x320 [ 2088.788171][T12895] __mem_cgroup_charge+0x27/0x90 [ 2088.793136][T12895] ? _compound_head+0x5d/0x150 [ 2088.797926][T12895] wp_page_copy+0x27c/0x1b60 [ 2088.802551][T12895] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2088.808036][T12895] ? lock_downgrade+0x6e0/0x6e0 [ 2088.812914][T12895] ? vm_normal_page+0x146/0x2a0 [ 2088.817804][T12895] do_wp_page+0x1d1/0x1910 [ 2088.822256][T12895] __handle_mm_fault+0x1813/0x39b0 [ 2088.827403][T12895] ? vm_iomap_memory+0x190/0x190 [ 2088.832397][T12895] handle_mm_fault+0x1c8/0x780 [ 2088.837196][T12895] do_user_addr_fault+0x475/0x1210 [ 2088.842351][T12895] exc_page_fault+0x94/0x170 [ 2088.846970][T12895] asm_exc_page_fault+0x22/0x30 [ 2088.851847][T12895] RIP: 0033:0x7f70e7e37970 [ 2088.856282][T12895] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2088.875916][T12895] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2088.882014][T12895] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2088.890013][T12895] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2088.898013][T12895] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2088.906008][T12895] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 03:30:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe32b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe428, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe429, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe42a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2088.914003][T12895] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2088.921999][T12895] ? __x64_sys_socket+0xd/0xb0 [ 2088.926816][T12895] [ 2088.953921][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2088.982440][T12895] memory: usage 307200kB, limit 307200kB, failcnt 59566 [ 2089.011402][T12895] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2089.022185][T12895] Memory cgroup stats for /syz3: [ 2089.022416][T12895] anon 106496 [ 2089.022416][T12895] file 782336 [ 2089.022416][T12895] kernel 313683968 [ 2089.022416][T12895] kernel_stack 65536 [ 2089.022416][T12895] pagetables 73728 [ 2089.022416][T12895] percpu 5602688 [ 2089.022416][T12895] sock 0 [ 2089.022416][T12895] vmalloc 0 [ 2089.022416][T12895] shmem 778240 [ 2089.022416][T12895] zswap 0 [ 2089.022416][T12895] zswapped 0 [ 2089.022416][T12895] file_mapped 778240 [ 2089.022416][T12895] file_dirty 4096 [ 2089.022416][T12895] file_writeback 0 [ 2089.022416][T12895] swapcached 0 [ 2089.022416][T12895] anon_thp 0 [ 2089.022416][T12895] file_thp 0 [ 2089.022416][T12895] shmem_thp 0 [ 2089.022416][T12895] inactive_anon 577536 [ 2089.022416][T12895] active_anon 307200 [ 2089.022416][T12895] inactive_file 0 [ 2089.022416][T12895] active_file 4096 [ 2089.022416][T12895] unevictable 0 [ 2089.022416][T12895] slab_reclaimable 123352 [ 2089.022416][T12895] slab_unreclaimable 307779472 [ 2089.022416][T12895] slab 307902824 03:30:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000fffffffe0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2c05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x6000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x84e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe42b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2089.128285][T12895] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12895,uid=0 [ 2089.144185][T12895] Memory cgroup out of memory: Killed process 12895 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe528, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2089.198075][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x7000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2089.261771][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe529, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2c06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe52a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2089.390281][T12922] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2089.417488][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2089.426136][T12922] CPU: 1 PID: 12922 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 03:30:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x85e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2089.437149][T12922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2089.447230][T12922] Call Trace: [ 2089.450527][T12922] [ 2089.453575][T12922] dump_stack_lvl+0xcd/0x134 [ 2089.458199][T12922] dump_header+0x10b/0x7f9 [ 2089.462654][T12922] oom_kill_process.cold+0x10/0x15 [ 2089.467799][T12922] out_of_memory+0x358/0x14a0 [ 2089.472511][T12922] ? find_held_lock+0x2d/0x110 [ 2089.477314][T12922] ? oom_killer_disable+0x270/0x270 [ 2089.482552][T12922] ? find_held_lock+0x2d/0x110 [ 2089.487347][T12922] mem_cgroup_out_of_memory+0x206/0x270 [ 2089.493012][T12922] ? mem_cgroup_margin+0x130/0x130 [ 2089.498148][T12922] ? lock_downgrade+0x6e0/0x6e0 [ 2089.503046][T12922] try_charge_memcg+0xf67/0x13f0 [ 2089.508026][T12922] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2089.514040][T12922] ? lock_downgrade+0x6e0/0x6e0 [ 2089.519028][T12922] charge_memcg+0x31/0x320 [ 2089.523483][T12922] __mem_cgroup_charge+0x27/0x90 [ 2089.528535][T12922] ? _compound_head+0x5d/0x150 [ 2089.533329][T12922] wp_page_copy+0x27c/0x1b60 [ 2089.537960][T12922] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2089.543447][T12922] ? lock_downgrade+0x6e0/0x6e0 [ 2089.548316][T12922] ? vm_normal_page+0x146/0x2a0 [ 2089.553214][T12922] do_wp_page+0x52c/0x1910 [ 2089.557669][T12922] __handle_mm_fault+0x1813/0x39b0 [ 2089.562816][T12922] ? vm_iomap_memory+0x190/0x190 [ 2089.567804][T12922] handle_mm_fault+0x1c8/0x780 [ 2089.572605][T12922] do_user_addr_fault+0x475/0x1210 [ 2089.577759][T12922] exc_page_fault+0x94/0x170 [ 2089.582373][T12922] asm_exc_page_fault+0x22/0x30 [ 2089.587239][T12922] RIP: 0033:0x7f70e7e34a15 [ 2089.591682][T12922] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2089.611346][T12922] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2089.617439][T12922] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2089.625429][T12922] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2089.633422][T12922] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2089.641419][T12922] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001fe14b [ 2089.649415][T12922] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2089.657437][T12922] [ 2089.686818][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2089.706846][T12922] memory: usage 307200kB, limit 307200kB, failcnt 59621 [ 2089.713931][T12922] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2089.728136][T12922] Memory cgroup stats for /syz3: [ 2089.728361][T12922] anon 90112 [ 2089.728361][T12922] file 782336 [ 2089.728361][T12922] kernel 313700352 [ 2089.728361][T12922] kernel_stack 65536 [ 2089.728361][T12922] pagetables 73728 [ 2089.728361][T12922] percpu 5602688 [ 2089.728361][T12922] sock 0 [ 2089.728361][T12922] vmalloc 0 [ 2089.728361][T12922] shmem 778240 [ 2089.728361][T12922] zswap 0 [ 2089.728361][T12922] zswapped 0 [ 2089.728361][T12922] file_mapped 778240 [ 2089.728361][T12922] file_dirty 4096 [ 2089.728361][T12922] file_writeback 0 [ 2089.728361][T12922] swapcached 0 [ 2089.728361][T12922] anon_thp 0 [ 2089.728361][T12922] file_thp 0 [ 2089.728361][T12922] shmem_thp 0 [ 2089.728361][T12922] inactive_anon 561152 [ 2089.728361][T12922] active_anon 307200 [ 2089.728361][T12922] inactive_file 0 [ 2089.728361][T12922] active_file 4096 [ 2089.728361][T12922] unevictable 0 [ 2089.728361][T12922] slab_reclaimable 123352 [ 2089.728361][T12922] slab_unreclaimable 307790872 [ 2089.728361][T12922] slab 307914224 03:30:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400000000000000007fff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe52b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x86010000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2c07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x8000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2089.837289][T12922] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12922,uid=0 [ 2089.853084][T12922] Memory cgroup out of memory: Killed process 12922 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2089.871046][T12934] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2089.901721][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2089.906377][T12934] CPU: 1 PID: 12934 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2089.921402][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2089.931488][T12934] Call Trace: [ 2089.934787][T12934] [ 2089.937750][T12934] dump_stack_lvl+0xcd/0x134 [ 2089.941034][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe628, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2089.942354][T12934] dump_header+0x10b/0x7f9 [ 2089.942391][T12934] oom_kill_process.cold+0x10/0x15 [ 2089.961132][T12934] out_of_memory+0x358/0x14a0 [ 2089.965858][T12934] ? oom_killer_disable+0x270/0x270 [ 2089.971093][T12934] ? find_held_lock+0x2d/0x110 [ 2089.976161][T12934] mem_cgroup_out_of_memory+0x206/0x270 [ 2089.981743][T12934] ? mem_cgroup_margin+0x130/0x130 [ 2089.986886][T12934] ? lock_downgrade+0x6e0/0x6e0 [ 2089.991789][T12934] try_charge_memcg+0xf67/0x13f0 03:30:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2d04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2089.996791][T12934] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2090.002807][T12934] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2090.008583][T12934] ? lock_downgrade+0x6e0/0x6e0 [ 2090.013491][T12934] obj_cgroup_charge+0x2ab/0x5e0 [ 2090.018463][T12934] __kmalloc+0xb2/0x340 [ 2090.022645][T12934] ? veth_dev_init+0x1dd/0x3e0 [ 2090.027451][T12934] veth_dev_init+0x1dd/0x3e0 [ 2090.032091][T12934] ? veth_get_num_queues+0x50/0x50 [ 2090.037241][T12934] register_netdevice+0x5e1/0x1680 [ 2090.042397][T12934] ? netdev_change_features+0xb0/0xb0 [ 2090.047807][T12934] ? dev_addr_mod+0x2c9/0x3f0 [ 2090.052533][T12934] veth_newlink+0x338/0x990 [ 2090.057073][T12934] ? veth_set_features+0x190/0x190 [ 2090.062209][T12934] ? netlink_rcv_skb+0x153/0x420 [ 2090.067180][T12934] ? netlink_unicast+0x543/0x7f0 [ 2090.072147][T12934] ? netlink_sendmsg+0x917/0xe10 [ 2090.077187][T12934] ? dev_addr_mod+0x2c9/0x3f0 [ 2090.081901][T12934] ? rtnl_create_link+0x7e8/0xc00 [ 2090.086958][T12934] ? veth_set_features+0x190/0x190 [ 2090.092096][T12934] __rtnl_newlink+0x1087/0x17e0 [ 2090.096997][T12934] ? rtnl_link_unregister+0x250/0x250 03:30:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2d05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2090.102401][T12934] ? find_held_lock+0x2d/0x110 [ 2090.107221][T12934] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2090.112799][T12934] ? trace_kmalloc+0x32/0x100 [ 2090.117513][T12934] rtnl_newlink+0x64/0xa0 [ 2090.121878][T12934] ? __rtnl_newlink+0x17e0/0x17e0 [ 2090.126944][T12934] rtnetlink_rcv_msg+0x43a/0xca0 [ 2090.131924][T12934] ? rtnl_getlink+0xae0/0xae0 [ 2090.136653][T12934] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2090.141971][T12934] ? skb_clone+0x16e/0x3c0 [ 2090.146428][T12934] ? ref_tracker_free+0x370/0x6b0 [ 2090.151483][T12934] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2090.156891][T12934] netlink_rcv_skb+0x153/0x420 [ 2090.161693][T12934] ? rtnl_getlink+0xae0/0xae0 [ 2090.166403][T12934] ? netlink_ack+0xd50/0xd50 [ 2090.171031][T12934] ? netlink_deliver_tap+0x1a2/0xc40 [ 2090.176358][T12934] ? netlink_deliver_tap+0x1b1/0xc40 [ 2090.181695][T12934] netlink_unicast+0x543/0x7f0 [ 2090.186499][T12934] ? netlink_attachskb+0x880/0x880 [ 2090.191636][T12934] ? __phys_addr+0xc4/0x140 [ 2090.196172][T12934] ? __phys_addr_symbol+0x2c/0x70 [ 2090.201231][T12934] ? __check_object_size+0x2de/0x700 [ 2090.206562][T12934] netlink_sendmsg+0x917/0xe10 [ 2090.211387][T12934] ? netlink_unicast+0x7f0/0x7f0 [ 2090.216385][T12934] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2090.221708][T12934] ? netlink_unicast+0x7f0/0x7f0 [ 2090.226689][T12934] sock_sendmsg+0xcf/0x120 [ 2090.231145][T12934] ____sys_sendmsg+0x6eb/0x810 [ 2090.235942][T12934] ? copy_msghdr_from_user+0xfc/0x150 [ 2090.241354][T12934] ? kernel_sendmsg+0x50/0x50 [ 2090.246074][T12934] ? futex_unqueue+0xb3/0x120 [ 2090.250790][T12934] ___sys_sendmsg+0x110/0x1b0 [ 2090.255503][T12934] ? do_recvmmsg+0x6e0/0x6e0 [ 2090.260138][T12934] ? __fget_files+0x248/0x440 [ 2090.264846][T12934] ? lock_downgrade+0x6e0/0x6e0 [ 2090.269738][T12934] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2090.275769][T12934] ? __fget_files+0x26a/0x440 [ 2090.280487][T12934] ? __fget_light+0xe5/0x270 [ 2090.285114][T12934] __sys_sendmsg+0xf3/0x1c0 [ 2090.289653][T12934] ? __sys_sendmsg_sock+0x30/0x30 [ 2090.294725][T12934] ? lock_downgrade+0x6e0/0x6e0 [ 2090.299630][T12934] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2090.305551][T12934] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2090.311444][T12934] ? lockdep_hardirqs_on+0x79/0x100 [ 2090.316660][T12934] do_syscall_64+0x35/0xb0 [ 2090.321159][T12934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2090.327064][T12934] RIP: 0033:0x7f58e888a5a9 [ 2090.331490][T12934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2090.351102][T12934] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2090.359526][T12934] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2090.367526][T12934] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2090.375509][T12934] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2090.383473][T12934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2090.391450][T12934] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2090.399484][T12934] [ 2090.418615][T12934] memory: usage 307196kB, limit 307200kB, failcnt 44717 [ 2090.425784][T12934] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2090.432738][T12934] Memory cgroup stats for /syz1: [ 2090.432872][T12934] anon 135168 [ 2090.432872][T12934] file 389120 [ 2090.432872][T12934] kernel 314011648 [ 2090.432872][T12934] kernel_stack 32768 [ 2090.432872][T12934] pagetables 77824 [ 2090.432872][T12934] percpu 5593216 [ 2090.432872][T12934] sock 0 [ 2090.432872][T12934] vmalloc 0 [ 2090.432872][T12934] shmem 389120 [ 2090.432872][T12934] zswap 0 [ 2090.432872][T12934] zswapped 0 [ 2090.432872][T12934] file_mapped 389120 [ 2090.432872][T12934] file_dirty 0 [ 2090.432872][T12934] file_writeback 0 [ 2090.432872][T12934] swapcached 0 [ 2090.432872][T12934] anon_thp 0 [ 2090.432872][T12934] file_thp 0 [ 2090.432872][T12934] shmem_thp 0 [ 2090.432872][T12934] inactive_anon 225280 [ 2090.432872][T12934] active_anon 299008 [ 2090.432872][T12934] inactive_file 0 [ 2090.432872][T12934] active_file 0 [ 2090.432872][T12934] unevictable 0 [ 2090.432872][T12934] slab_reclaimable 21832 [ 2090.432872][T12934] slab_unreclaimable 308249776 [ 2090.432872][T12934] slab 308271608 [ 2090.527829][T12934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12933,uid=0 [ 2090.546371][T12934] Memory cgroup out of memory: Killed process 12934 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2090.609706][T12948] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2090.627702][T12948] CPU: 0 PID: 12948 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2090.638172][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2090.648255][T12948] Call Trace: [ 2090.651550][T12948] [ 2090.654517][T12948] dump_stack_lvl+0xcd/0x134 03:30:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2d06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe629, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x9000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2090.659142][T12948] dump_header+0x10b/0x7f9 [ 2090.663598][T12948] oom_kill_process.cold+0x10/0x15 [ 2090.668749][T12948] out_of_memory+0x358/0x14a0 [ 2090.673473][T12948] ? find_held_lock+0x2d/0x110 [ 2090.678274][T12948] ? oom_killer_disable+0x270/0x270 [ 2090.683515][T12948] ? find_held_lock+0x2d/0x110 [ 2090.688310][T12948] mem_cgroup_out_of_memory+0x206/0x270 [ 2090.693883][T12948] ? mem_cgroup_margin+0x130/0x130 [ 2090.699022][T12948] ? lock_downgrade+0x6e0/0x6e0 [ 2090.703923][T12948] try_charge_memcg+0xf67/0x13f0 [ 2090.708903][T12948] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2090.714927][T12948] ? lock_downgrade+0x6e0/0x6e0 [ 2090.719831][T12948] charge_memcg+0x31/0x320 [ 2090.724273][T12948] __mem_cgroup_charge+0x27/0x90 [ 2090.729225][T12948] ? _compound_head+0x5d/0x150 [ 2090.734009][T12948] wp_page_copy+0x27c/0x1b60 [ 2090.738639][T12948] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2090.744119][T12948] ? lock_downgrade+0x6e0/0x6e0 [ 2090.748993][T12948] ? vm_normal_page+0x146/0x2a0 [ 2090.753884][T12948] do_wp_page+0x1d1/0x1910 [ 2090.758328][T12948] __handle_mm_fault+0x1813/0x39b0 [ 2090.763478][T12948] ? vm_iomap_memory+0x190/0x190 [ 2090.768476][T12948] handle_mm_fault+0x1c8/0x780 [ 2090.773275][T12948] do_user_addr_fault+0x475/0x1210 [ 2090.778434][T12948] exc_page_fault+0x94/0x170 [ 2090.783060][T12948] asm_exc_page_fault+0x22/0x30 [ 2090.787945][T12948] RIP: 0033:0x7f70e7e37970 [ 2090.792381][T12948] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2090.812020][T12948] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2090.818105][T12948] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2090.826072][T12948] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2090.834034][T12948] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2090.842002][T12948] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2090.849979][T12948] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2090.857959][T12948] ? __x64_sys_socket+0xd/0xb0 [ 2090.862729][T12948] [ 2090.870051][T12948] memory: usage 307200kB, limit 307200kB, failcnt 59698 [ 2090.877125][T12948] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2090.883998][T12948] Memory cgroup stats for /syz3: [ 2090.884198][T12948] anon 106496 [ 2090.884198][T12948] file 782336 [ 2090.884198][T12948] kernel 313683968 [ 2090.884198][T12948] kernel_stack 65536 [ 2090.884198][T12948] pagetables 73728 [ 2090.884198][T12948] percpu 5602688 [ 2090.884198][T12948] sock 0 [ 2090.884198][T12948] vmalloc 0 [ 2090.884198][T12948] shmem 778240 [ 2090.884198][T12948] zswap 0 [ 2090.884198][T12948] zswapped 0 [ 2090.884198][T12948] file_mapped 778240 [ 2090.884198][T12948] file_dirty 4096 [ 2090.884198][T12948] file_writeback 0 [ 2090.884198][T12948] swapcached 0 [ 2090.884198][T12948] anon_thp 0 [ 2090.884198][T12948] file_thp 0 [ 2090.884198][T12948] shmem_thp 0 [ 2090.884198][T12948] inactive_anon 577536 [ 2090.884198][T12948] active_anon 307200 [ 2090.884198][T12948] inactive_file 0 [ 2090.884198][T12948] active_file 4096 [ 2090.884198][T12948] unevictable 0 [ 2090.884198][T12948] slab_reclaimable 123352 [ 2090.884198][T12948] slab_unreclaimable 307779472 [ 2090.884198][T12948] slab 307902824 [ 2090.983500][T12948] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12948,uid=0 03:30:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003c3ff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe62a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xe000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2d07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x86e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2091.000362][T12948] Memory cgroup out of memory: Killed process 12948 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe62b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2e04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe728, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x87e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2e05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x20000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2091.309788][T12974] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2091.352820][T12974] CPU: 1 PID: 12974 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2091.363291][T12974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2091.373372][T12974] Call Trace: [ 2091.376675][T12974] [ 2091.379625][T12974] dump_stack_lvl+0xcd/0x134 [ 2091.384248][T12974] dump_header+0x10b/0x7f9 [ 2091.388693][T12974] oom_kill_process.cold+0x10/0x15 [ 2091.393834][T12974] out_of_memory+0x358/0x14a0 [ 2091.398549][T12974] ? find_held_lock+0x2d/0x110 [ 2091.403336][T12974] ? oom_killer_disable+0x270/0x270 [ 2091.408568][T12974] ? find_held_lock+0x2d/0x110 [ 2091.413352][T12974] mem_cgroup_out_of_memory+0x206/0x270 [ 2091.418907][T12974] ? mem_cgroup_margin+0x130/0x130 [ 2091.424040][T12974] ? lock_downgrade+0x6e0/0x6e0 [ 2091.428929][T12974] try_charge_memcg+0xf67/0x13f0 [ 2091.433896][T12974] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2091.439896][T12974] ? lock_downgrade+0x6e0/0x6e0 [ 2091.444769][T12974] charge_memcg+0x31/0x320 [ 2091.449197][T12974] __mem_cgroup_charge+0x27/0x90 [ 2091.454143][T12974] ? _compound_head+0x5d/0x150 [ 2091.458913][T12974] wp_page_copy+0x27c/0x1b60 [ 2091.463524][T12974] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2091.468995][T12974] ? lock_downgrade+0x6e0/0x6e0 [ 2091.473856][T12974] ? vm_normal_page+0x146/0x2a0 [ 2091.478738][T12974] do_wp_page+0x1d1/0x1910 [ 2091.483171][T12974] __handle_mm_fault+0x1813/0x39b0 [ 2091.488318][T12974] ? vm_iomap_memory+0x190/0x190 [ 2091.493287][T12974] handle_mm_fault+0x1c8/0x780 [ 2091.498072][T12974] do_user_addr_fault+0x475/0x1210 [ 2091.503204][T12974] exc_page_fault+0x94/0x170 [ 2091.507807][T12974] asm_exc_page_fault+0x22/0x30 [ 2091.512670][T12974] RIP: 0033:0x7f70e7e37970 [ 2091.517095][T12974] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2091.536711][T12974] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2091.542789][T12974] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2091.550766][T12974] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2091.558739][T12974] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2091.566714][T12974] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2091.574689][T12974] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2091.582664][T12974] ? __x64_sys_socket+0xd/0xb0 [ 2091.587458][T12974] [ 2091.594526][T12974] memory: usage 307200kB, limit 307200kB, failcnt 59754 [ 2091.601952][T12974] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2091.610654][T12974] Memory cgroup stats for /syz3: [ 2091.610930][T12974] anon 106496 [ 2091.610930][T12974] file 782336 [ 2091.610930][T12974] kernel 313683968 [ 2091.610930][T12974] kernel_stack 65536 [ 2091.610930][T12974] pagetables 73728 [ 2091.610930][T12974] percpu 5602688 [ 2091.610930][T12974] sock 0 [ 2091.610930][T12974] vmalloc 0 [ 2091.610930][T12974] shmem 778240 [ 2091.610930][T12974] zswap 0 [ 2091.610930][T12974] zswapped 0 [ 2091.610930][T12974] file_mapped 778240 [ 2091.610930][T12974] file_dirty 4096 [ 2091.610930][T12974] file_writeback 0 [ 2091.610930][T12974] swapcached 0 [ 2091.610930][T12974] anon_thp 0 [ 2091.610930][T12974] file_thp 0 [ 2091.610930][T12974] shmem_thp 0 [ 2091.610930][T12974] inactive_anon 577536 [ 2091.610930][T12974] active_anon 307200 [ 2091.610930][T12974] inactive_file 0 [ 2091.610930][T12974] active_file 4096 [ 2091.610930][T12974] unevictable 0 [ 2091.610930][T12974] slab_reclaimable 123352 [ 2091.610930][T12974] slab_unreclaimable 307779472 03:30:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000000003ffff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe729, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2e06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x88a8ffff, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x60000000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2091.610930][T12974] slab 307902824 [ 2091.708736][T12974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12974,uid=0 [ 2091.725452][T12974] Memory cgroup out of memory: Killed process 12974 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe72a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x88e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe72b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2e07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe828, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x9effffff, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2092.062565][T13003] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2092.101447][T13003] CPU: 1 PID: 13003 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2092.111920][T13003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2092.122100][T13003] Call Trace: [ 2092.125397][T13003] [ 2092.128339][T13003] dump_stack_lvl+0xcd/0x134 [ 2092.132929][T13003] dump_header+0x10b/0x7f9 [ 2092.137346][T13003] oom_kill_process.cold+0x10/0x15 [ 2092.142458][T13003] out_of_memory+0x358/0x14a0 [ 2092.147153][T13003] ? find_held_lock+0x2d/0x110 [ 2092.151950][T13003] ? oom_killer_disable+0x270/0x270 [ 2092.157171][T13003] ? find_held_lock+0x2d/0x110 [ 2092.161930][T13003] mem_cgroup_out_of_memory+0x206/0x270 [ 2092.167503][T13003] ? mem_cgroup_margin+0x130/0x130 [ 2092.172611][T13003] ? lock_downgrade+0x6e0/0x6e0 [ 2092.177469][T13003] try_charge_memcg+0xf67/0x13f0 [ 2092.182480][T13003] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2092.188471][T13003] ? lock_downgrade+0x6e0/0x6e0 [ 2092.193346][T13003] charge_memcg+0x31/0x320 [ 2092.197776][T13003] __mem_cgroup_charge+0x27/0x90 [ 2092.202728][T13003] ? _compound_head+0x5d/0x150 [ 2092.207501][T13003] wp_page_copy+0x27c/0x1b60 [ 2092.212110][T13003] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2092.217583][T13003] ? lock_downgrade+0x6e0/0x6e0 [ 2092.222463][T13003] ? vm_normal_page+0x146/0x2a0 [ 2092.227335][T13003] do_wp_page+0x1d1/0x1910 [ 2092.231789][T13003] __handle_mm_fault+0x1813/0x39b0 [ 2092.236922][T13003] ? vm_iomap_memory+0x190/0x190 [ 2092.241889][T13003] handle_mm_fault+0x1c8/0x780 [ 2092.246760][T13003] do_user_addr_fault+0x475/0x1210 [ 2092.251896][T13003] exc_page_fault+0x94/0x170 [ 2092.256499][T13003] asm_exc_page_fault+0x22/0x30 [ 2092.261449][T13003] RIP: 0033:0x7f70e7e37970 [ 2092.265881][T13003] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2092.285592][T13003] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2092.291671][T13003] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2092.299649][T13003] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2092.307621][T13003] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2092.315594][T13003] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2092.323568][T13003] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2092.331540][T13003] ? __x64_sys_socket+0xd/0xb0 [ 2092.336332][T13003] [ 2092.353506][T13003] memory: usage 307200kB, limit 307200kB, failcnt 59811 [ 2092.360846][T13003] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2092.368916][T13003] Memory cgroup stats for /syz3: [ 2092.369144][T13003] anon 106496 [ 2092.369144][T13003] file 782336 [ 2092.369144][T13003] kernel 313683968 [ 2092.369144][T13003] kernel_stack 65536 [ 2092.369144][T13003] pagetables 73728 [ 2092.369144][T13003] percpu 5602688 [ 2092.369144][T13003] sock 0 [ 2092.369144][T13003] vmalloc 0 [ 2092.369144][T13003] shmem 778240 [ 2092.369144][T13003] zswap 0 [ 2092.369144][T13003] zswapped 0 [ 2092.369144][T13003] file_mapped 778240 [ 2092.369144][T13003] file_dirty 4096 [ 2092.369144][T13003] file_writeback 0 [ 2092.369144][T13003] swapcached 0 [ 2092.369144][T13003] anon_thp 0 [ 2092.369144][T13003] file_thp 0 [ 2092.369144][T13003] shmem_thp 0 [ 2092.369144][T13003] inactive_anon 577536 [ 2092.369144][T13003] active_anon 307200 [ 2092.369144][T13003] inactive_file 0 [ 2092.369144][T13003] active_file 4096 [ 2092.369144][T13003] unevictable 0 [ 2092.369144][T13003] slab_reclaimable 123352 [ 2092.369144][T13003] slab_unreclaimable 307779472 [ 2092.369144][T13003] slab 307902824 03:30:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000000007fffffff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2f04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe829, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x89e00000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xc00e0000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2092.464625][T13003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13003,uid=0 [ 2092.480434][T13003] Memory cgroup out of memory: Killed process 13003 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe82a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe82b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x89e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2f05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xc22e0000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2092.722713][T13025] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2092.763037][T13025] CPU: 1 PID: 13025 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2092.773603][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2092.783683][T13025] Call Trace: [ 2092.786990][T13025] [ 2092.789939][T13025] dump_stack_lvl+0xcd/0x134 [ 2092.794556][T13025] dump_header+0x10b/0x7f9 [ 2092.798999][T13025] oom_kill_process.cold+0x10/0x15 [ 2092.804136][T13025] out_of_memory+0x358/0x14a0 [ 2092.808850][T13025] ? find_held_lock+0x2d/0x110 [ 2092.813638][T13025] ? oom_killer_disable+0x270/0x270 [ 2092.818877][T13025] ? find_held_lock+0x2d/0x110 [ 2092.823679][T13025] mem_cgroup_out_of_memory+0x206/0x270 [ 2092.829262][T13025] ? mem_cgroup_margin+0x130/0x130 [ 2092.834486][T13025] ? lock_downgrade+0x6e0/0x6e0 [ 2092.839382][T13025] try_charge_memcg+0xf67/0x13f0 [ 2092.844362][T13025] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2092.850375][T13025] ? lock_downgrade+0x6e0/0x6e0 [ 2092.855252][T13025] charge_memcg+0x31/0x320 [ 2092.859684][T13025] __mem_cgroup_charge+0x27/0x90 [ 2092.864635][T13025] ? _compound_head+0x5d/0x150 [ 2092.869406][T13025] wp_page_copy+0x27c/0x1b60 [ 2092.874012][T13025] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2092.879476][T13025] ? lock_downgrade+0x6e0/0x6e0 [ 2092.884332][T13025] ? vm_normal_page+0x146/0x2a0 [ 2092.889201][T13025] do_wp_page+0x52c/0x1910 [ 2092.893630][T13025] __handle_mm_fault+0x1813/0x39b0 [ 2092.898761][T13025] ? vm_iomap_memory+0x190/0x190 [ 2092.903735][T13025] handle_mm_fault+0x1c8/0x780 [ 2092.908514][T13025] do_user_addr_fault+0x475/0x1210 [ 2092.913646][T13025] exc_page_fault+0x94/0x170 [ 2092.918253][T13025] asm_exc_page_fault+0x22/0x30 [ 2092.923121][T13025] RIP: 0033:0x7f70e7e34a15 [ 2092.927541][T13025] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2092.947154][T13025] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2092.953225][T13025] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2092.961200][T13025] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2092.969176][T13025] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2092.977149][T13025] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001fee57 [ 2092.985139][T13025] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2092.993143][T13025] [ 2093.020765][T13025] memory: usage 307200kB, limit 307200kB, failcnt 59876 [ 2093.045099][T13025] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2093.057119][T13025] Memory cgroup stats for /syz3: [ 2093.057462][T13025] anon 90112 [ 2093.057462][T13025] file 782336 [ 2093.057462][T13025] kernel 313683968 [ 2093.057462][T13025] kernel_stack 65536 [ 2093.057462][T13025] pagetables 73728 [ 2093.057462][T13025] percpu 5602688 [ 2093.057462][T13025] sock 0 [ 2093.057462][T13025] vmalloc 0 [ 2093.057462][T13025] shmem 778240 [ 2093.057462][T13025] zswap 0 [ 2093.057462][T13025] zswapped 0 [ 2093.057462][T13025] file_mapped 778240 [ 2093.057462][T13025] file_dirty 4096 [ 2093.057462][T13025] file_writeback 0 [ 2093.057462][T13025] swapcached 0 [ 2093.057462][T13025] anon_thp 0 [ 2093.057462][T13025] file_thp 0 [ 2093.057462][T13025] shmem_thp 0 [ 2093.057462][T13025] inactive_anon 561152 [ 2093.057462][T13025] active_anon 307200 [ 2093.057462][T13025] inactive_file 0 [ 2093.057462][T13025] active_file 4096 [ 2093.057462][T13025] unevictable 0 [ 2093.057462][T13025] slab_reclaimable 123352 [ 2093.057462][T13025] slab_unreclaimable 307779776 [ 2093.057462][T13025] slab 307903128 [ 2093.154062][T13025] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13025,uid=0 03:30:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000ffffffff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe928, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2f06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8ae21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf180000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xf0ffffff, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2093.175580][T13025] Memory cgroup out of memory: Killed process 13025 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe929, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2093.228822][T13048] __nla_validate_parse: 20 callbacks suppressed [ 2093.228843][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe92a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8be21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xfffff000, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2093.352917][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x2f07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xe92b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2093.440906][T13046] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2093.452660][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2093.480019][T13046] CPU: 0 PID: 13046 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2093.490493][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2093.500576][T13046] Call Trace: [ 2093.503873][T13046] [ 2093.506820][T13046] dump_stack_lvl+0xcd/0x134 [ 2093.511443][T13046] dump_header+0x10b/0x7f9 [ 2093.515885][T13046] oom_kill_process.cold+0x10/0x15 [ 2093.521055][T13046] out_of_memory+0x358/0x14a0 [ 2093.522684][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2093.525747][T13046] ? find_held_lock+0x2d/0x110 [ 2093.525780][T13046] ? oom_killer_disable+0x270/0x270 [ 2093.525814][T13046] ? find_held_lock+0x2d/0x110 [ 2093.525843][T13046] mem_cgroup_out_of_memory+0x206/0x270 [ 2093.555293][T13046] ? mem_cgroup_margin+0x130/0x130 [ 2093.560436][T13046] ? lock_downgrade+0x6e0/0x6e0 [ 2093.565344][T13046] try_charge_memcg+0xf67/0x13f0 [ 2093.570329][T13046] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2093.576348][T13046] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2093.582106][T13046] ? lock_downgrade+0x6e0/0x6e0 [ 2093.587009][T13046] obj_cgroup_charge+0x2ab/0x5e0 [ 2093.591971][T13046] __kmalloc+0xb2/0x340 [ 2093.596133][T13046] ? veth_dev_init+0x1dd/0x3e0 [ 2093.600913][T13046] veth_dev_init+0x1dd/0x3e0 [ 2093.605518][T13046] ? veth_get_num_queues+0x50/0x50 [ 2093.610642][T13046] register_netdevice+0x5e1/0x1680 [ 2093.615773][T13046] ? netdev_change_features+0xb0/0xb0 [ 2093.621166][T13046] ? dev_addr_mod+0x2c9/0x3f0 [ 2093.625873][T13046] veth_newlink+0x338/0x990 [ 2093.630392][T13046] ? veth_set_features+0x190/0x190 [ 2093.635514][T13046] ? netlink_rcv_skb+0x153/0x420 [ 2093.640495][T13046] ? netlink_unicast+0x543/0x7f0 [ 2093.645444][T13046] ? netlink_sendmsg+0x917/0xe10 [ 2093.650446][T13046] ? dev_addr_mod+0x2c9/0x3f0 [ 2093.655140][T13046] ? rtnl_create_link+0x7e8/0xc00 [ 2093.660179][T13046] ? veth_set_features+0x190/0x190 [ 2093.665309][T13046] __rtnl_newlink+0x1087/0x17e0 [ 2093.670188][T13046] ? rtnl_link_unregister+0x250/0x250 [ 2093.675574][T13046] ? find_held_lock+0x2d/0x110 [ 2093.680384][T13046] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2093.685951][T13046] ? trace_kmalloc+0x32/0x100 [ 2093.690648][T13046] rtnl_newlink+0x64/0xa0 [ 2093.694987][T13046] ? __rtnl_newlink+0x17e0/0x17e0 [ 2093.700021][T13046] rtnetlink_rcv_msg+0x43a/0xca0 [ 2093.704972][T13046] ? rtnl_getlink+0xae0/0xae0 [ 2093.709657][T13046] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2093.714958][T13046] ? ref_tracker_free+0x370/0x6b0 [ 2093.719997][T13046] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2093.725385][T13046] netlink_rcv_skb+0x153/0x420 [ 2093.730161][T13046] ? rtnl_getlink+0xae0/0xae0 [ 2093.734859][T13046] ? netlink_ack+0xd50/0xd50 [ 2093.739459][T13046] ? netlink_deliver_tap+0x1a2/0xc40 [ 2093.744762][T13046] ? netlink_deliver_tap+0x1b1/0xc40 [ 2093.750066][T13046] netlink_unicast+0x543/0x7f0 [ 2093.754848][T13046] ? netlink_attachskb+0x880/0x880 [ 2093.760058][T13046] ? __phys_addr+0xc4/0x140 [ 2093.764606][T13046] ? __phys_addr_symbol+0x2c/0x70 [ 2093.769637][T13046] ? __check_object_size+0x2de/0x700 [ 2093.774940][T13046] netlink_sendmsg+0x917/0xe10 [ 2093.779724][T13046] ? netlink_unicast+0x7f0/0x7f0 [ 2093.784680][T13046] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2093.789982][T13046] ? netlink_unicast+0x7f0/0x7f0 [ 2093.794929][T13046] sock_sendmsg+0xcf/0x120 [ 2093.799357][T13046] ____sys_sendmsg+0x6eb/0x810 [ 2093.804133][T13046] ? copy_msghdr_from_user+0xfc/0x150 [ 2093.809517][T13046] ? kernel_sendmsg+0x50/0x50 [ 2093.814217][T13046] ? futex_unqueue+0xb3/0x120 [ 2093.819055][T13046] ___sys_sendmsg+0x110/0x1b0 [ 2093.823755][T13046] ? do_recvmmsg+0x6e0/0x6e0 [ 2093.828362][T13046] ? __fget_files+0x248/0x440 [ 2093.833047][T13046] ? lock_downgrade+0x6e0/0x6e0 [ 2093.837939][T13046] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2093.843933][T13046] ? __fget_files+0x26a/0x440 [ 2093.848629][T13046] ? __fget_light+0xe5/0x270 [ 2093.853237][T13046] __sys_sendmsg+0xf3/0x1c0 [ 2093.857753][T13046] ? __sys_sendmsg_sock+0x30/0x30 [ 2093.862791][T13046] ? lock_downgrade+0x6e0/0x6e0 [ 2093.867664][T13046] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2093.873579][T13046] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2093.879535][T13046] ? lockdep_hardirqs_on+0x79/0x100 [ 2093.884756][T13046] do_syscall_64+0x35/0xb0 [ 2093.889185][T13046] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2093.895090][T13046] RIP: 0033:0x7f58e888a5a9 [ 2093.899513][T13046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2093.919128][T13046] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2093.927551][T13046] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2093.935529][T13046] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2093.943522][T13046] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2093.951524][T13046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2093.959508][T13046] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2093.967508][T13046] [ 2093.986607][T13046] memory: usage 307196kB, limit 307200kB, failcnt 45002 [ 2094.009981][T13046] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2094.017868][T13046] Memory cgroup stats for /syz1: [ 2094.018114][T13046] anon 135168 [ 2094.018114][T13046] file 389120 [ 2094.018114][T13046] kernel 314044416 [ 2094.018114][T13046] kernel_stack 65536 [ 2094.018114][T13046] pagetables 77824 [ 2094.018114][T13046] percpu 5593216 [ 2094.018114][T13046] sock 0 [ 2094.018114][T13046] vmalloc 0 [ 2094.018114][T13046] shmem 389120 [ 2094.018114][T13046] zswap 0 [ 2094.018114][T13046] zswapped 0 [ 2094.018114][T13046] file_mapped 389120 [ 2094.018114][T13046] file_dirty 0 [ 2094.018114][T13046] file_writeback 0 [ 2094.018114][T13046] swapcached 0 [ 2094.018114][T13046] anon_thp 0 [ 2094.018114][T13046] file_thp 0 [ 2094.018114][T13046] shmem_thp 0 [ 2094.018114][T13046] inactive_anon 225280 [ 2094.018114][T13046] active_anon 299008 [ 2094.018114][T13046] inactive_file 0 [ 2094.018114][T13046] active_file 0 [ 2094.018114][T13046] unevictable 0 [ 2094.018114][T13046] slab_reclaimable 21832 [ 2094.018114][T13046] slab_unreclaimable 308249776 [ 2094.018114][T13046] slab 308271608 [ 2094.117694][T13046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13044,uid=0 [ 2094.133622][T13046] Memory cgroup out of memory: Killed process 13046 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2094.183140][T13053] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2094.193480][T13053] CPU: 1 PID: 13053 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2094.203923][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2094.213999][T13053] Call Trace: [ 2094.217284][T13053] [ 2094.220220][T13053] dump_stack_lvl+0xcd/0x134 [ 2094.224810][T13053] dump_header+0x10b/0x7f9 [ 2094.229235][T13053] oom_kill_process.cold+0x10/0x15 [ 2094.234366][T13053] out_of_memory+0x358/0x14a0 [ 2094.239074][T13053] ? find_held_lock+0x2d/0x110 [ 2094.243856][T13053] ? oom_killer_disable+0x270/0x270 [ 2094.249065][T13053] ? find_held_lock+0x2d/0x110 [ 2094.253851][T13053] mem_cgroup_out_of_memory+0x206/0x270 [ 2094.259402][T13053] ? mem_cgroup_margin+0x130/0x130 [ 2094.264524][T13053] ? lock_downgrade+0x6e0/0x6e0 [ 2094.269408][T13053] try_charge_memcg+0xf67/0x13f0 [ 2094.274380][T13053] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2094.280393][T13053] ? lock_downgrade+0x6e0/0x6e0 [ 2094.285249][T13053] charge_memcg+0x31/0x320 [ 2094.289678][T13053] __mem_cgroup_charge+0x27/0x90 [ 2094.294628][T13053] ? _compound_head+0x5d/0x150 [ 2094.299394][T13053] wp_page_copy+0x27c/0x1b60 [ 2094.304001][T13053] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2094.309465][T13053] ? lock_downgrade+0x6e0/0x6e0 [ 2094.314339][T13053] ? vm_normal_page+0x146/0x2a0 [ 2094.319231][T13053] do_wp_page+0x1d1/0x1910 [ 2094.323675][T13053] __handle_mm_fault+0x1813/0x39b0 [ 2094.328816][T13053] ? vm_iomap_memory+0x190/0x190 [ 2094.333777][T13053] handle_mm_fault+0x1c8/0x780 [ 2094.338562][T13053] do_user_addr_fault+0x475/0x1210 [ 2094.343722][T13053] exc_page_fault+0x94/0x170 [ 2094.348336][T13053] asm_exc_page_fault+0x22/0x30 [ 2094.353194][T13053] RIP: 0033:0x7f70e7e37970 [ 2094.357614][T13053] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2094.377337][T13053] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2094.383432][T13053] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2094.391418][T13053] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2094.399394][T13053] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2094.407375][T13053] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2094.415338][T13053] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2094.423402][T13053] ? __x64_sys_socket+0xd/0xb0 [ 2094.428225][T13053] [ 2094.433198][T13053] memory: usage 307200kB, limit 307200kB, failcnt 59954 [ 2094.440246][T13053] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2094.447248][T13053] Memory cgroup stats for /syz3: [ 2094.447434][T13053] anon 106496 [ 2094.447434][T13053] file 782336 [ 2094.447434][T13053] kernel 313683968 [ 2094.447434][T13053] kernel_stack 65536 [ 2094.447434][T13053] pagetables 73728 [ 2094.447434][T13053] percpu 5602688 [ 2094.447434][T13053] sock 0 [ 2094.447434][T13053] vmalloc 0 [ 2094.447434][T13053] shmem 778240 [ 2094.447434][T13053] zswap 0 [ 2094.447434][T13053] zswapped 0 [ 2094.447434][T13053] file_mapped 778240 [ 2094.447434][T13053] file_dirty 4096 [ 2094.447434][T13053] file_writeback 0 [ 2094.447434][T13053] swapcached 0 [ 2094.447434][T13053] anon_thp 0 [ 2094.447434][T13053] file_thp 0 [ 2094.447434][T13053] shmem_thp 0 [ 2094.447434][T13053] inactive_anon 577536 [ 2094.447434][T13053] active_anon 307200 [ 2094.447434][T13053] inactive_file 0 [ 2094.447434][T13053] active_file 4096 [ 2094.447434][T13053] unevictable 0 [ 2094.447434][T13053] slab_reclaimable 123352 [ 2094.447434][T13053] slab_unreclaimable 307779472 [ 2094.447434][T13053] slab 307902824 03:30:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400000000e089ffffffff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xffffff7f, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xea28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3004}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2094.544208][T13053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13053,uid=0 [ 2094.569911][T13053] Memory cgroup out of memory: Killed process 13053 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8ce21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xea29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2094.612983][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8de21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xea2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3005}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2094.755289][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xffffff9e, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xea2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2094.849749][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2094.878857][T13079] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2094.921827][T13079] CPU: 1 PID: 13079 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2094.932338][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2094.942428][T13079] Call Trace: [ 2094.945723][T13079] [ 2094.948667][T13079] dump_stack_lvl+0xcd/0x134 [ 2094.953286][T13079] dump_header+0x10b/0x7f9 [ 2094.957729][T13079] oom_kill_process.cold+0x10/0x15 [ 2094.962854][T13079] out_of_memory+0x358/0x14a0 [ 2094.967567][T13079] ? find_held_lock+0x2d/0x110 [ 2094.972365][T13079] ? oom_killer_disable+0x270/0x270 [ 2094.977596][T13079] ? find_held_lock+0x2d/0x110 [ 2094.982378][T13079] mem_cgroup_out_of_memory+0x206/0x270 [ 2094.987936][T13079] ? mem_cgroup_margin+0x130/0x130 [ 2094.993055][T13079] ? lock_downgrade+0x6e0/0x6e0 [ 2094.997931][T13079] try_charge_memcg+0xf67/0x13f0 [ 2095.002886][T13079] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2095.008884][T13079] ? lock_downgrade+0x6e0/0x6e0 [ 2095.013770][T13079] charge_memcg+0x31/0x320 [ 2095.018206][T13079] __mem_cgroup_charge+0x27/0x90 [ 2095.023156][T13079] ? _compound_head+0x5d/0x150 [ 2095.027941][T13079] wp_page_copy+0x27c/0x1b60 [ 2095.032565][T13079] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2095.038035][T13079] ? lock_downgrade+0x6e0/0x6e0 [ 2095.042908][T13079] ? vm_normal_page+0x146/0x2a0 [ 2095.047781][T13079] do_wp_page+0x1d1/0x1910 [ 2095.052210][T13079] __handle_mm_fault+0x1813/0x39b0 [ 2095.057337][T13079] ? vm_iomap_memory+0x190/0x190 [ 2095.062309][T13079] handle_mm_fault+0x1c8/0x780 [ 2095.067084][T13079] do_user_addr_fault+0x475/0x1210 [ 2095.072325][T13079] exc_page_fault+0x94/0x170 [ 2095.076929][T13079] asm_exc_page_fault+0x22/0x30 [ 2095.081791][T13079] RIP: 0033:0x7f70e7e37970 [ 2095.086210][T13079] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2095.105852][T13079] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2095.111930][T13079] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2095.119914][T13079] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2095.127886][T13079] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2095.135867][T13079] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2095.143843][T13079] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2095.151907][T13079] ? __x64_sys_socket+0xd/0xb0 [ 2095.156719][T13079] [ 2095.223275][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2095.223282][T13079] memory: usage 307200kB, limit 307200kB, failcnt 60012 [ 2095.223303][T13079] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2095.258520][T13079] Memory cgroup stats for /syz3: [ 2095.258740][T13079] anon 106496 [ 2095.258740][T13079] file 782336 [ 2095.258740][T13079] kernel 313683968 [ 2095.258740][T13079] kernel_stack 65536 [ 2095.258740][T13079] pagetables 73728 [ 2095.258740][T13079] percpu 5602688 [ 2095.258740][T13079] sock 0 [ 2095.258740][T13079] vmalloc 0 [ 2095.258740][T13079] shmem 778240 [ 2095.258740][T13079] zswap 0 [ 2095.258740][T13079] zswapped 0 [ 2095.258740][T13079] file_mapped 778240 [ 2095.258740][T13079] file_dirty 4096 [ 2095.258740][T13079] file_writeback 0 [ 2095.258740][T13079] swapcached 0 [ 2095.258740][T13079] anon_thp 0 [ 2095.258740][T13079] file_thp 0 [ 2095.258740][T13079] shmem_thp 0 [ 2095.258740][T13079] inactive_anon 577536 [ 2095.258740][T13079] active_anon 307200 [ 2095.258740][T13079] inactive_file 0 [ 2095.258740][T13079] active_file 4096 [ 2095.258740][T13079] unevictable 0 [ 2095.258740][T13079] slab_reclaimable 123352 [ 2095.258740][T13079] slab_unreclaimable 307779472 [ 2095.258740][T13079] slab 307902824 03:30:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000f0ffffffffffff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8e010000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xfffffff0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3006}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xeb28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2095.362272][T13079] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13079,uid=0 [ 2095.378340][T13079] Memory cgroup out of memory: Killed process 13079 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xeb29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2095.426931][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xeb2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8ee21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2095.563379][T13103] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2095.599851][T13103] CPU: 1 PID: 13103 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2095.610324][T13103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2095.620402][T13103] Call Trace: [ 2095.623694][T13103] [ 2095.626641][T13103] dump_stack_lvl+0xcd/0x134 [ 2095.631270][T13103] dump_header+0x10b/0x7f9 [ 2095.635720][T13103] oom_kill_process.cold+0x10/0x15 [ 2095.640862][T13103] out_of_memory+0x358/0x14a0 [ 2095.645564][T13103] ? find_held_lock+0x2d/0x110 [ 2095.650354][T13103] ? oom_killer_disable+0x270/0x270 [ 2095.655586][T13103] ? find_held_lock+0x2d/0x110 [ 2095.660384][T13103] mem_cgroup_out_of_memory+0x206/0x270 [ 2095.665975][T13103] ? mem_cgroup_margin+0x130/0x130 [ 2095.671114][T13103] ? lock_downgrade+0x6e0/0x6e0 [ 2095.676015][T13103] try_charge_memcg+0xf67/0x13f0 [ 2095.680998][T13103] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2095.687017][T13103] ? lock_downgrade+0x6e0/0x6e0 [ 2095.691903][T13103] charge_memcg+0x31/0x320 [ 2095.696339][T13103] __mem_cgroup_charge+0x27/0x90 [ 2095.701289][T13103] ? _compound_head+0x5d/0x150 [ 2095.706062][T13103] wp_page_copy+0x27c/0x1b60 [ 2095.710671][T13103] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2095.716135][T13103] ? lock_downgrade+0x6e0/0x6e0 [ 2095.720996][T13103] ? vm_normal_page+0x146/0x2a0 [ 2095.725872][T13103] do_wp_page+0x1d1/0x1910 [ 2095.730301][T13103] __handle_mm_fault+0x1813/0x39b0 [ 2095.735427][T13103] ? vm_iomap_memory+0x190/0x190 [ 2095.740394][T13103] handle_mm_fault+0x1c8/0x780 [ 2095.745174][T13103] do_user_addr_fault+0x475/0x1210 [ 2095.750304][T13103] exc_page_fault+0x94/0x170 [ 2095.754914][T13103] asm_exc_page_fault+0x22/0x30 [ 2095.759783][T13103] RIP: 0033:0x7f70e7e37970 [ 2095.764202][T13103] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2095.783818][T13103] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2095.789891][T13103] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2095.797870][T13103] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2095.805854][T13103] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e 03:30:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xeb2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2095.813830][T13103] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2095.821806][T13103] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2095.829786][T13103] ? __x64_sys_socket+0xd/0xb0 [ 2095.834578][T13103] 03:30:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xec28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8fe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2095.866288][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2095.950431][T13103] memory: usage 307200kB, limit 307200kB, failcnt 60086 [ 2095.966303][T13103] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2095.992924][T13103] Memory cgroup stats for /syz3: [ 2095.993129][T13103] anon 106496 [ 2095.993129][T13103] file 782336 [ 2095.993129][T13103] kernel 313683968 [ 2095.993129][T13103] kernel_stack 65536 [ 2095.993129][T13103] pagetables 73728 [ 2095.993129][T13103] percpu 5602688 [ 2095.993129][T13103] sock 0 [ 2095.993129][T13103] vmalloc 0 [ 2095.993129][T13103] shmem 778240 [ 2095.993129][T13103] zswap 0 [ 2095.993129][T13103] zswapped 0 [ 2095.993129][T13103] file_mapped 778240 [ 2095.993129][T13103] file_dirty 4096 [ 2095.993129][T13103] file_writeback 0 [ 2095.993129][T13103] swapcached 0 [ 2095.993129][T13103] anon_thp 0 [ 2095.993129][T13103] file_thp 0 [ 2095.993129][T13103] shmem_thp 0 [ 2095.993129][T13103] inactive_anon 577536 [ 2095.993129][T13103] active_anon 307200 [ 2095.993129][T13103] inactive_file 0 [ 2095.993129][T13103] active_file 4096 [ 2095.993129][T13103] unevictable 0 [ 2095.993129][T13103] slab_reclaimable 123352 [ 2095.993129][T13103] slab_unreclaimable 307779472 [ 2095.993129][T13103] slab 307902824 03:30:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3007}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0xffffffff, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xec29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18010000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x90e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2096.091410][T13103] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13103,uid=0 [ 2096.107596][T13103] Memory cgroup out of memory: Killed process 13103 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xec2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xec2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3104}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xed28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2096.323847][T13130] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2096.368863][T13130] CPU: 0 PID: 13130 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2096.379335][T13130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2096.389427][T13130] Call Trace: [ 2096.392729][T13130] [ 2096.395679][T13130] dump_stack_lvl+0xcd/0x134 [ 2096.400386][T13130] dump_header+0x10b/0x7f9 [ 2096.404847][T13130] oom_kill_process.cold+0x10/0x15 [ 2096.410084][T13130] out_of_memory+0x358/0x14a0 [ 2096.414801][T13130] ? find_held_lock+0x2d/0x110 [ 2096.419682][T13130] ? oom_killer_disable+0x270/0x270 [ 2096.424922][T13130] ? find_held_lock+0x2d/0x110 [ 2096.429719][T13130] mem_cgroup_out_of_memory+0x206/0x270 [ 2096.435295][T13130] ? mem_cgroup_margin+0x130/0x130 [ 2096.440436][T13130] ? lock_downgrade+0x6e0/0x6e0 [ 2096.445342][T13130] try_charge_memcg+0xf67/0x13f0 [ 2096.450328][T13130] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2096.456353][T13130] ? lock_downgrade+0x6e0/0x6e0 [ 2096.461256][T13130] charge_memcg+0x31/0x320 03:30:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3105}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2096.465709][T13130] __mem_cgroup_charge+0x27/0x90 [ 2096.470680][T13130] ? _compound_head+0x5d/0x150 [ 2096.475476][T13130] wp_page_copy+0x27c/0x1b60 [ 2096.480108][T13130] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2096.485589][T13130] ? lock_downgrade+0x6e0/0x6e0 [ 2096.490461][T13130] ? vm_normal_page+0x146/0x2a0 [ 2096.495368][T13130] do_wp_page+0x52c/0x1910 [ 2096.499827][T13130] __handle_mm_fault+0x1813/0x39b0 [ 2096.504983][T13130] ? vm_iomap_memory+0x190/0x190 [ 2096.509982][T13130] handle_mm_fault+0x1c8/0x780 [ 2096.514787][T13130] do_user_addr_fault+0x475/0x1210 [ 2096.519948][T13130] exc_page_fault+0x94/0x170 [ 2096.524579][T13130] asm_exc_page_fault+0x22/0x30 [ 2096.529465][T13130] RIP: 0033:0x7f70e7e34a15 [ 2096.533903][T13130] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2096.553541][T13130] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2096.559635][T13130] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2096.567720][T13130] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2096.575717][T13130] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2096.583892][T13130] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000001ffc9e [ 2096.592402][T13130] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2096.600384][T13130] [ 2096.604361][T13130] memory: usage 307200kB, limit 307200kB, failcnt 60154 [ 2096.612452][T13130] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2096.623229][T13130] Memory cgroup stats for /syz3: [ 2096.623449][T13130] anon 90112 [ 2096.623449][T13130] file 782336 [ 2096.623449][T13130] kernel 313700352 [ 2096.623449][T13130] kernel_stack 65536 [ 2096.623449][T13130] pagetables 73728 [ 2096.623449][T13130] percpu 5602688 [ 2096.623449][T13130] sock 0 [ 2096.623449][T13130] vmalloc 0 [ 2096.623449][T13130] shmem 778240 [ 2096.623449][T13130] zswap 0 [ 2096.623449][T13130] zswapped 0 [ 2096.623449][T13130] file_mapped 778240 [ 2096.623449][T13130] file_dirty 4096 [ 2096.623449][T13130] file_writeback 0 [ 2096.623449][T13130] swapcached 0 [ 2096.623449][T13130] anon_thp 0 [ 2096.623449][T13130] file_thp 0 [ 2096.623449][T13130] shmem_thp 0 [ 2096.623449][T13130] inactive_anon 561152 [ 2096.623449][T13130] active_anon 307200 [ 2096.623449][T13130] inactive_file 0 [ 2096.623449][T13130] active_file 4096 [ 2096.623449][T13130] unevictable 0 [ 2096.623449][T13130] slab_reclaimable 123352 [ 2096.623449][T13130] slab_unreclaimable 307790872 [ 2096.623449][T13130] slab 307914224 [ 2096.718907][T13130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13130,uid=0 [ 2096.734564][T13130] Memory cgroup out of memory: Killed process 13130 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2096.752065][T13128] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2096.770844][T13128] CPU: 1 PID: 13128 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2096.781314][T13128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2096.791407][T13128] Call Trace: [ 2096.794709][T13128] [ 2096.797661][T13128] dump_stack_lvl+0xcd/0x134 [ 2096.802284][T13128] dump_header+0x10b/0x7f9 [ 2096.806735][T13128] oom_kill_process.cold+0x10/0x15 [ 2096.811910][T13128] out_of_memory+0x358/0x14a0 [ 2096.816639][T13128] ? oom_killer_disable+0x270/0x270 03:30:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x91e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3106}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xed29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2096.821875][T13128] ? find_held_lock+0x2d/0x110 [ 2096.826674][T13128] mem_cgroup_out_of_memory+0x206/0x270 [ 2096.832252][T13128] ? mem_cgroup_margin+0x130/0x130 [ 2096.837389][T13128] ? lock_downgrade+0x6e0/0x6e0 [ 2096.842283][T13128] try_charge_memcg+0xf67/0x13f0 [ 2096.847264][T13128] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2096.853282][T13128] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2096.859038][T13128] ? lock_downgrade+0x6e0/0x6e0 [ 2096.863944][T13128] obj_cgroup_charge+0x2ab/0x5e0 [ 2096.868981][T13128] __kmalloc+0xb2/0x340 [ 2096.873159][T13128] ? veth_dev_init+0x1dd/0x3e0 [ 2096.877943][T13128] veth_dev_init+0x1dd/0x3e0 [ 2096.882541][T13128] ? veth_get_num_queues+0x50/0x50 [ 2096.887668][T13128] register_netdevice+0x5e1/0x1680 [ 2096.892803][T13128] ? netdev_change_features+0xb0/0xb0 [ 2096.898189][T13128] ? dev_addr_mod+0x2c9/0x3f0 [ 2096.902885][T13128] veth_newlink+0x338/0x990 [ 2096.907402][T13128] ? veth_set_features+0x190/0x190 [ 2096.912523][T13128] ? netlink_rcv_skb+0x153/0x420 [ 2096.917472][T13128] ? netlink_unicast+0x543/0x7f0 [ 2096.922417][T13128] ? netlink_sendmsg+0x917/0xe10 [ 2096.927420][T13128] ? dev_addr_mod+0x2c9/0x3f0 [ 2096.932113][T13128] ? rtnl_create_link+0x7e8/0xc00 [ 2096.937151][T13128] ? veth_set_features+0x190/0x190 [ 2096.942460][T13128] __rtnl_newlink+0x1087/0x17e0 [ 2096.947342][T13128] ? rtnl_link_unregister+0x250/0x250 [ 2096.952845][T13128] ? find_held_lock+0x2d/0x110 [ 2096.957653][T13128] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2096.963232][T13128] ? trace_kmalloc+0x32/0x100 [ 2096.967936][T13128] rtnl_newlink+0x64/0xa0 [ 2096.972285][T13128] ? __rtnl_newlink+0x17e0/0x17e0 [ 2096.977321][T13128] rtnetlink_rcv_msg+0x43a/0xca0 [ 2096.982277][T13128] ? rtnl_getlink+0xae0/0xae0 [ 2096.987049][T13128] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2096.992341][T13128] ? skb_clone+0x16e/0x3c0 [ 2096.996774][T13128] ? ref_tracker_free+0x370/0x6b0 [ 2097.001827][T13128] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2097.007227][T13128] netlink_rcv_skb+0x153/0x420 [ 2097.012091][T13128] ? rtnl_getlink+0xae0/0xae0 [ 2097.016784][T13128] ? netlink_ack+0xd50/0xd50 [ 2097.021381][T13128] ? netlink_deliver_tap+0x1a2/0xc40 [ 2097.026682][T13128] ? netlink_deliver_tap+0x1b1/0xc40 [ 2097.031989][T13128] netlink_unicast+0x543/0x7f0 [ 2097.036775][T13128] ? netlink_attachskb+0x880/0x880 [ 2097.041896][T13128] ? __phys_addr+0xc4/0x140 [ 2097.046405][T13128] ? __phys_addr_symbol+0x2c/0x70 [ 2097.051435][T13128] ? __check_object_size+0x2de/0x700 [ 2097.056738][T13128] netlink_sendmsg+0x917/0xe10 [ 2097.061524][T13128] ? netlink_unicast+0x7f0/0x7f0 [ 2097.066475][T13128] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2097.071775][T13128] ? netlink_unicast+0x7f0/0x7f0 [ 2097.076725][T13128] sock_sendmsg+0xcf/0x120 [ 2097.081264][T13128] ____sys_sendmsg+0x6eb/0x810 [ 2097.086048][T13128] ? copy_msghdr_from_user+0xfc/0x150 [ 2097.091451][T13128] ? kernel_sendmsg+0x50/0x50 [ 2097.096169][T13128] ? futex_unqueue+0xb3/0x120 [ 2097.100876][T13128] ___sys_sendmsg+0x110/0x1b0 [ 2097.105575][T13128] ? do_recvmmsg+0x6e0/0x6e0 [ 2097.110183][T13128] ? __fget_files+0x248/0x440 [ 2097.114879][T13128] ? lock_downgrade+0x6e0/0x6e0 [ 2097.119748][T13128] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2097.125758][T13128] ? __fget_files+0x26a/0x440 [ 2097.130464][T13128] ? __fget_light+0xe5/0x270 [ 2097.135069][T13128] __sys_sendmsg+0xf3/0x1c0 [ 2097.139583][T13128] ? __sys_sendmsg_sock+0x30/0x30 [ 2097.144639][T13128] ? lock_downgrade+0x6e0/0x6e0 [ 2097.149532][T13128] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2097.155456][T13128] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2097.161376][T13128] ? lockdep_hardirqs_on+0x79/0x100 [ 2097.166592][T13128] do_syscall_64+0x35/0xb0 [ 2097.171014][T13128] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2097.176921][T13128] RIP: 0033:0x7f58e888a5a9 [ 2097.181340][T13128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2097.200959][T13128] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2097.209399][T13128] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2097.217401][T13128] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2097.225387][T13128] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2097.233369][T13128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2097.241342][T13128] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2097.249343][T13128] [ 2097.257203][T13128] memory: usage 307196kB, limit 307200kB, failcnt 45196 [ 2097.284345][T13128] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2097.303865][T13128] Memory cgroup stats for /syz1: [ 2097.304166][T13128] anon 135168 [ 2097.304166][T13128] file 389120 [ 2097.304166][T13128] kernel 314044416 [ 2097.304166][T13128] kernel_stack 65536 [ 2097.304166][T13128] pagetables 77824 [ 2097.304166][T13128] percpu 5593216 [ 2097.304166][T13128] sock 0 [ 2097.304166][T13128] vmalloc 0 [ 2097.304166][T13128] shmem 389120 [ 2097.304166][T13128] zswap 0 [ 2097.304166][T13128] zswapped 0 [ 2097.304166][T13128] file_mapped 389120 [ 2097.304166][T13128] file_dirty 0 [ 2097.304166][T13128] file_writeback 0 [ 2097.304166][T13128] swapcached 0 [ 2097.304166][T13128] anon_thp 0 [ 2097.304166][T13128] file_thp 0 [ 2097.304166][T13128] shmem_thp 0 [ 2097.304166][T13128] inactive_anon 225280 [ 2097.304166][T13128] active_anon 299008 [ 2097.304166][T13128] inactive_file 0 [ 2097.304166][T13128] active_file 0 [ 2097.304166][T13128] unevictable 0 [ 2097.304166][T13128] slab_reclaimable 21832 [ 2097.304166][T13128] slab_unreclaimable 308249776 [ 2097.304166][T13128] slab 308271608 [ 2097.405324][T13128] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13122,uid=0 [ 2097.426399][T13128] Memory cgroup out of memory: Killed process 13128 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2097.496402][T13145] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2097.508644][T13145] CPU: 1 PID: 13145 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2097.519111][T13145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2097.529163][T13145] Call Trace: [ 2097.532452][T13145] [ 2097.535417][T13145] dump_stack_lvl+0xcd/0x134 [ 2097.540021][T13145] dump_header+0x10b/0x7f9 [ 2097.544466][T13145] oom_kill_process.cold+0x10/0x15 [ 2097.549600][T13145] out_of_memory+0x358/0x14a0 [ 2097.554281][T13145] ? find_held_lock+0x2d/0x110 [ 2097.559050][T13145] ? oom_killer_disable+0x270/0x270 [ 2097.564243][T13145] ? find_held_lock+0x2d/0x110 [ 2097.569009][T13145] mem_cgroup_out_of_memory+0x206/0x270 [ 2097.574565][T13145] ? mem_cgroup_margin+0x130/0x130 [ 2097.579677][T13145] ? lock_downgrade+0x6e0/0x6e0 [ 2097.584527][T13145] try_charge_memcg+0xf67/0x13f0 [ 2097.589473][T13145] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2097.595458][T13145] ? lock_downgrade+0x6e0/0x6e0 [ 2097.600308][T13145] charge_memcg+0x31/0x320 [ 2097.604740][T13145] __mem_cgroup_charge+0x27/0x90 [ 2097.609676][T13145] ? _compound_head+0x5d/0x150 [ 2097.614434][T13145] wp_page_copy+0x27c/0x1b60 [ 2097.619028][T13145] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2097.624478][T13145] ? lock_downgrade+0x6e0/0x6e0 [ 2097.629327][T13145] ? vm_normal_page+0x146/0x2a0 [ 2097.634191][T13145] do_wp_page+0x1d1/0x1910 [ 2097.638616][T13145] __handle_mm_fault+0x1813/0x39b0 [ 2097.643725][T13145] ? vm_iomap_memory+0x190/0x190 [ 2097.648677][T13145] handle_mm_fault+0x1c8/0x780 [ 2097.653433][T13145] do_user_addr_fault+0x475/0x1210 [ 2097.658558][T13145] exc_page_fault+0x94/0x170 [ 2097.663160][T13145] asm_exc_page_fault+0x22/0x30 [ 2097.668007][T13145] RIP: 0033:0x7f70e7e37970 [ 2097.672412][T13145] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2097.692186][T13145] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2097.698242][T13145] RAX: 000000005b791d71 RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2097.706203][T13145] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 0000000008ec3ccd [ 2097.714166][T13145] RBP: 000000005b791d71 R08: 0000000000001d71 R09: 000000005b791d75 [ 2097.722140][T13145] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2097.730126][T13145] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff81a37cdf [ 2097.738178][T13145] ? trace_user_exit.constprop.0+0x13f/0x210 [ 2097.744396][T13145] [ 2097.750184][T13145] memory: usage 307200kB, limit 307200kB, failcnt 60234 [ 2097.761070][T13145] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2097.768514][T13145] Memory cgroup stats for /syz3: [ 2097.768639][T13145] anon 102400 [ 2097.768639][T13145] file 782336 [ 2097.768639][T13145] kernel 313683968 [ 2097.768639][T13145] kernel_stack 65536 [ 2097.768639][T13145] pagetables 73728 [ 2097.768639][T13145] percpu 5602688 [ 2097.768639][T13145] sock 0 [ 2097.768639][T13145] vmalloc 0 [ 2097.768639][T13145] shmem 778240 [ 2097.768639][T13145] zswap 0 [ 2097.768639][T13145] zswapped 0 [ 2097.768639][T13145] file_mapped 778240 [ 2097.768639][T13145] file_dirty 4096 [ 2097.768639][T13145] file_writeback 0 [ 2097.768639][T13145] swapcached 0 [ 2097.768639][T13145] anon_thp 0 [ 2097.768639][T13145] file_thp 0 [ 2097.768639][T13145] shmem_thp 0 [ 2097.768639][T13145] inactive_anon 573440 [ 2097.768639][T13145] active_anon 307200 [ 2097.768639][T13145] inactive_file 4096 [ 2097.768639][T13145] active_file 0 [ 2097.768639][T13145] unevictable 0 [ 2097.768639][T13145] slab_reclaimable 123352 [ 2097.768639][T13145] slab_unreclaimable 307780120 [ 2097.768639][T13145] slab 307903472 [ 2097.862964][T13145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13145,uid=0 03:30:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xed2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x92e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3107}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2097.885882][T13145] Memory cgroup out of memory: Killed process 13145 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xed2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3204}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x93e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xee28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3205}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xee29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2098.142707][T13163] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2098.189946][T13163] CPU: 0 PID: 13163 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2098.200417][T13163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2098.210498][T13163] Call Trace: [ 2098.213797][T13163] [ 2098.216749][T13163] dump_stack_lvl+0xcd/0x134 [ 2098.221376][T13163] dump_header+0x10b/0x7f9 [ 2098.225828][T13163] oom_kill_process.cold+0x10/0x15 [ 2098.230973][T13163] out_of_memory+0x358/0x14a0 [ 2098.235683][T13163] ? find_held_lock+0x2d/0x110 03:30:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3206}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2098.240473][T13163] ? oom_killer_disable+0x270/0x270 [ 2098.245704][T13163] ? find_held_lock+0x2d/0x110 [ 2098.251191][T13163] mem_cgroup_out_of_memory+0x206/0x270 [ 2098.256793][T13163] ? mem_cgroup_margin+0x130/0x130 [ 2098.261806][T13182] __nla_validate_parse: 14 callbacks suppressed [ 2098.261825][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2098.261910][T13163] ? lock_downgrade+0x6e0/0x6e0 [ 2098.282316][T13163] try_charge_memcg+0xf67/0x13f0 [ 2098.287296][T13163] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2098.293318][T13163] ? lock_downgrade+0x6e0/0x6e0 [ 2098.298224][T13163] charge_memcg+0x31/0x320 [ 2098.302670][T13163] __mem_cgroup_charge+0x27/0x90 [ 2098.307628][T13163] ? _compound_head+0x5d/0x150 [ 2098.312419][T13163] wp_page_copy+0x27c/0x1b60 [ 2098.313021][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2098.317028][T13163] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2098.317059][T13163] ? lock_downgrade+0x6e0/0x6e0 03:30:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2098.317082][T13163] ? vm_normal_page+0x146/0x2a0 [ 2098.317119][T13163] do_wp_page+0x52c/0x1910 [ 2098.345861][T13163] __handle_mm_fault+0x1813/0x39b0 [ 2098.351009][T13163] ? vm_iomap_memory+0x190/0x190 [ 2098.356000][T13163] handle_mm_fault+0x1c8/0x780 [ 2098.360797][T13163] do_user_addr_fault+0x475/0x1210 [ 2098.365945][T13163] exc_page_fault+0x94/0x170 [ 2098.370573][T13163] asm_exc_page_fault+0x22/0x30 [ 2098.375451][T13163] RIP: 0033:0x7f70e7e34a15 [ 2098.379887][T13163] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2098.399532][T13163] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2098.405620][T13163] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2098.413611][T13163] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2098.421609][T13163] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2098.429605][T13163] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 000000000020039f 03:30:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xee2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2098.437597][T13163] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2098.445614][T13163] [ 2098.531148][T13163] memory: usage 307184kB, limit 307200kB, failcnt 60292 [ 2098.570284][T13163] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2098.581947][T13163] Memory cgroup stats for /syz3: [ 2098.582158][T13163] anon 90112 [ 2098.582158][T13163] file 782336 [ 2098.582158][T13163] kernel 313683968 [ 2098.582158][T13163] kernel_stack 65536 [ 2098.582158][T13163] pagetables 73728 [ 2098.582158][T13163] percpu 5602688 [ 2098.582158][T13163] sock 0 [ 2098.582158][T13163] vmalloc 0 [ 2098.582158][T13163] shmem 778240 [ 2098.582158][T13163] zswap 0 [ 2098.582158][T13163] zswapped 0 [ 2098.582158][T13163] file_mapped 778240 [ 2098.582158][T13163] file_dirty 4096 [ 2098.582158][T13163] file_writeback 0 [ 2098.582158][T13163] swapcached 0 [ 2098.582158][T13163] anon_thp 0 [ 2098.582158][T13163] file_thp 0 [ 2098.582158][T13163] shmem_thp 0 [ 2098.582158][T13163] inactive_anon 561152 [ 2098.582158][T13163] active_anon 307200 [ 2098.582158][T13163] inactive_file 0 [ 2098.582158][T13163] active_file 4096 [ 2098.582158][T13163] unevictable 0 [ 2098.582158][T13163] slab_reclaimable 123352 [ 2098.582158][T13163] slab_unreclaimable 307779472 [ 2098.582158][T13163] slab 307902824 03:30:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000050000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3207}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x94030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xee2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2098.676346][T13163] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13163,uid=0 [ 2098.678285][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.701541][T13163] Memory cgroup out of memory: Killed process 13163 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xef28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2098.787669][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xef29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2098.856326][T13198] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2098.888690][T13198] CPU: 1 PID: 13198 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2098.899173][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2098.909256][T13198] Call Trace: [ 2098.912558][T13198] [ 2098.915510][T13198] dump_stack_lvl+0xcd/0x134 [ 2098.920135][T13198] dump_header+0x10b/0x7f9 [ 2098.924598][T13198] oom_kill_process.cold+0x10/0x15 [ 2098.929745][T13198] out_of_memory+0x358/0x14a0 [ 2098.934467][T13198] ? find_held_lock+0x2d/0x110 [ 2098.939263][T13198] ? oom_killer_disable+0x270/0x270 [ 2098.944499][T13198] ? find_held_lock+0x2d/0x110 [ 2098.949299][T13198] mem_cgroup_out_of_memory+0x206/0x270 [ 2098.954875][T13198] ? mem_cgroup_margin+0x130/0x130 [ 2098.960012][T13198] ? lock_downgrade+0x6e0/0x6e0 [ 2098.964906][T13198] try_charge_memcg+0xf67/0x13f0 [ 2098.969885][T13198] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2098.975903][T13198] ? lock_downgrade+0x6e0/0x6e0 [ 2098.980794][T13198] charge_memcg+0x31/0x320 [ 2098.985242][T13198] __mem_cgroup_charge+0x27/0x90 [ 2098.985850][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2098.990192][T13198] ? _compound_head+0x5d/0x150 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xef2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2098.990222][T13198] wp_page_copy+0x27c/0x1b60 [ 2098.990256][T13198] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2099.014270][T13198] ? lock_downgrade+0x6e0/0x6e0 [ 2099.019153][T13198] ? vm_normal_page+0x146/0x2a0 [ 2099.024047][T13198] do_wp_page+0x1d1/0x1910 [ 2099.028499][T13198] __handle_mm_fault+0x1813/0x39b0 [ 2099.033668][T13198] ? vm_iomap_memory+0x190/0x190 [ 2099.038665][T13198] handle_mm_fault+0x1c8/0x780 [ 2099.043459][T13198] do_user_addr_fault+0x475/0x1210 [ 2099.048612][T13198] exc_page_fault+0x94/0x170 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xef2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2099.053231][T13198] asm_exc_page_fault+0x22/0x30 [ 2099.058124][T13198] RIP: 0033:0x7f70e7e37970 [ 2099.062565][T13198] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2099.082206][T13198] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2099.088651][T13198] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2099.096674][T13198] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf028, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3304}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2099.104673][T13198] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2099.112670][T13198] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2099.120672][T13198] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2099.128678][T13198] ? __x64_sys_socket+0xd/0xb0 [ 2099.133500][T13198] [ 2099.164465][T13198] memory: usage 307200kB, limit 307200kB, failcnt 60344 [ 2099.176036][T13198] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2099.186212][T13198] Memory cgroup stats for /syz3: [ 2099.186440][T13198] anon 106496 [ 2099.186440][T13198] file 782336 [ 2099.186440][T13198] kernel 313683968 [ 2099.186440][T13198] kernel_stack 65536 [ 2099.186440][T13198] pagetables 73728 [ 2099.186440][T13198] percpu 5602688 [ 2099.186440][T13198] sock 0 [ 2099.186440][T13198] vmalloc 0 [ 2099.186440][T13198] shmem 778240 [ 2099.186440][T13198] zswap 0 [ 2099.186440][T13198] zswapped 0 [ 2099.186440][T13198] file_mapped 778240 [ 2099.186440][T13198] file_dirty 4096 [ 2099.186440][T13198] file_writeback 0 [ 2099.186440][T13198] swapcached 0 [ 2099.186440][T13198] anon_thp 0 [ 2099.186440][T13198] file_thp 0 [ 2099.186440][T13198] shmem_thp 0 [ 2099.186440][T13198] inactive_anon 577536 [ 2099.186440][T13198] active_anon 307200 [ 2099.186440][T13198] inactive_file 0 [ 2099.186440][T13198] active_file 4096 [ 2099.186440][T13198] unevictable 0 [ 2099.186440][T13198] slab_reclaimable 123352 [ 2099.186440][T13198] slab_unreclaimable 307779472 [ 2099.186440][T13198] slab 307902824 [ 2099.202111][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2099.285135][T13198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13198,uid=0 03:30:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x94e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x21ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf029, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf02a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2099.308828][T13198] Memory cgroup out of memory: Killed process 13198 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2099.334311][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf02b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3305}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf128, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x95e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x22ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2099.552178][T13224] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2099.565202][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2099.589707][T13224] CPU: 1 PID: 13224 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2099.600176][T13224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2099.610260][T13224] Call Trace: [ 2099.613551][T13224] [ 2099.616498][T13224] dump_stack_lvl+0xcd/0x134 [ 2099.621116][T13224] dump_header+0x10b/0x7f9 [ 2099.625587][T13224] oom_kill_process.cold+0x10/0x15 [ 2099.630733][T13224] out_of_memory+0x358/0x14a0 [ 2099.635445][T13224] ? find_held_lock+0x2d/0x110 [ 2099.640236][T13224] ? oom_killer_disable+0x270/0x270 [ 2099.642596][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2099.645449][T13224] ? find_held_lock+0x2d/0x110 [ 2099.659422][T13224] mem_cgroup_out_of_memory+0x206/0x270 [ 2099.664990][T13224] ? mem_cgroup_margin+0x130/0x130 [ 2099.670128][T13224] ? lock_downgrade+0x6e0/0x6e0 [ 2099.675017][T13224] try_charge_memcg+0xf67/0x13f0 [ 2099.679987][T13224] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2099.686007][T13224] ? lock_downgrade+0x6e0/0x6e0 [ 2099.690905][T13224] charge_memcg+0x31/0x320 [ 2099.695355][T13224] __mem_cgroup_charge+0x27/0x90 [ 2099.700315][T13224] ? _compound_head+0x5d/0x150 [ 2099.705085][T13224] wp_page_copy+0x27c/0x1b60 [ 2099.709692][T13224] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2099.715158][T13224] ? lock_downgrade+0x6e0/0x6e0 [ 2099.720016][T13224] ? vm_normal_page+0x146/0x2a0 [ 2099.724886][T13224] do_wp_page+0x52c/0x1910 [ 2099.729315][T13224] __handle_mm_fault+0x1813/0x39b0 [ 2099.734440][T13224] ? vm_iomap_memory+0x190/0x190 [ 2099.739425][T13224] handle_mm_fault+0x1c8/0x780 [ 2099.744202][T13224] do_user_addr_fault+0x475/0x1210 [ 2099.749336][T13224] exc_page_fault+0x94/0x170 [ 2099.753934][T13224] asm_exc_page_fault+0x22/0x30 [ 2099.758791][T13224] RIP: 0033:0x7f70e7e34a15 [ 2099.763213][T13224] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2099.782825][T13224] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2099.788904][T13224] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 03:30:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2099.796875][T13224] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2099.804847][T13224] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2099.812820][T13224] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000002008ed [ 2099.820791][T13224] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2099.828782][T13224] [ 2099.873497][T13224] memory: usage 307200kB, limit 307200kB, failcnt 60393 [ 2099.894925][T13224] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2099.903757][T13224] Memory cgroup stats for /syz3: [ 2099.903982][T13224] anon 90112 [ 2099.903982][T13224] file 782336 [ 2099.903982][T13224] kernel 313700352 [ 2099.903982][T13224] kernel_stack 65536 [ 2099.903982][T13224] pagetables 73728 [ 2099.903982][T13224] percpu 5602688 [ 2099.903982][T13224] sock 0 [ 2099.903982][T13224] vmalloc 0 [ 2099.903982][T13224] shmem 778240 [ 2099.903982][T13224] zswap 0 [ 2099.903982][T13224] zswapped 0 [ 2099.903982][T13224] file_mapped 778240 [ 2099.903982][T13224] file_dirty 4096 [ 2099.903982][T13224] file_writeback 0 [ 2099.903982][T13224] swapcached 0 [ 2099.903982][T13224] anon_thp 0 [ 2099.903982][T13224] file_thp 0 [ 2099.903982][T13224] shmem_thp 0 [ 2099.903982][T13224] inactive_anon 561152 [ 2099.903982][T13224] active_anon 307200 [ 2099.903982][T13224] inactive_file 0 [ 2099.903982][T13224] active_file 4096 [ 2099.903982][T13224] unevictable 0 [ 2099.903982][T13224] slab_reclaimable 123352 [ 2099.903982][T13224] slab_unreclaimable 307790872 [ 2099.903982][T13224] slab 307914224 [ 2100.006146][T13224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13224,uid=0 03:30:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3306}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x96e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf129, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2100.037911][T13224] Memory cgroup out of memory: Killed process 13224 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2100.058867][T13237] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 03:30:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf12a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2100.098118][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2100.116051][T13237] CPU: 0 PID: 13237 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2100.126546][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2100.136635][T13237] Call Trace: [ 2100.139939][T13237] [ 2100.142895][T13237] dump_stack_lvl+0xcd/0x134 03:30:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf12b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2100.147531][T13237] dump_header+0x10b/0x7f9 [ 2100.151988][T13237] oom_kill_process.cold+0x10/0x15 [ 2100.157145][T13237] out_of_memory+0x358/0x14a0 [ 2100.161867][T13237] ? oom_killer_disable+0x270/0x270 [ 2100.167115][T13237] ? find_held_lock+0x2d/0x110 [ 2100.171916][T13237] mem_cgroup_out_of_memory+0x206/0x270 [ 2100.177498][T13237] ? mem_cgroup_margin+0x130/0x130 [ 2100.182629][T13237] ? lock_downgrade+0x6e0/0x6e0 [ 2100.187506][T13237] try_charge_memcg+0xf67/0x13f0 [ 2100.192462][T13237] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2100.198463][T13237] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2100.204192][T13237] ? lock_downgrade+0x6e0/0x6e0 [ 2100.209067][T13237] obj_cgroup_charge+0x2ab/0x5e0 [ 2100.214026][T13237] __kmalloc+0xb2/0x340 [ 2100.218187][T13237] ? veth_dev_init+0x1dd/0x3e0 [ 2100.222966][T13237] veth_dev_init+0x1dd/0x3e0 [ 2100.227564][T13237] ? veth_get_num_queues+0x50/0x50 [ 2100.232688][T13237] register_netdevice+0x5e1/0x1680 [ 2100.237817][T13237] ? netdev_change_features+0xb0/0xb0 [ 2100.243200][T13237] ? dev_addr_mod+0x2c9/0x3f0 [ 2100.247895][T13237] veth_newlink+0x338/0x990 [ 2100.252410][T13237] ? veth_set_features+0x190/0x190 [ 2100.257529][T13237] ? netlink_rcv_skb+0x153/0x420 [ 2100.262476][T13237] ? netlink_unicast+0x543/0x7f0 [ 2100.267420][T13237] ? netlink_sendmsg+0x917/0xe10 [ 2100.272419][T13237] ? dev_addr_mod+0x2c9/0x3f0 [ 2100.277115][T13237] ? rtnl_create_link+0x7e8/0xc00 [ 2100.282204][T13237] ? veth_set_features+0x190/0x190 [ 2100.287353][T13237] __rtnl_newlink+0x1087/0x17e0 [ 2100.292247][T13237] ? rtnl_link_unregister+0x250/0x250 [ 2100.297633][T13237] ? find_held_lock+0x2d/0x110 [ 2100.302781][T13237] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2100.308338][T13237] ? trace_kmalloc+0x32/0x100 [ 2100.313114][T13237] rtnl_newlink+0x64/0xa0 [ 2100.317450][T13237] ? __rtnl_newlink+0x17e0/0x17e0 [ 2100.322485][T13237] rtnetlink_rcv_msg+0x43a/0xca0 [ 2100.327438][T13237] ? rtnl_getlink+0xae0/0xae0 [ 2100.332120][T13237] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2100.337413][T13237] ? skb_clone+0x16e/0x3c0 [ 2100.341838][T13237] ? ref_tracker_free+0x370/0x6b0 [ 2100.346957][T13237] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2100.352348][T13237] netlink_rcv_skb+0x153/0x420 [ 2100.357123][T13237] ? rtnl_getlink+0xae0/0xae0 [ 2100.361810][T13237] ? netlink_ack+0xd50/0xd50 [ 2100.366409][T13237] ? netlink_deliver_tap+0x1a2/0xc40 [ 2100.371708][T13237] ? netlink_deliver_tap+0x1b1/0xc40 [ 2100.377010][T13237] netlink_unicast+0x543/0x7f0 [ 2100.381792][T13237] ? netlink_attachskb+0x880/0x880 [ 2100.386912][T13237] ? __phys_addr+0xc4/0x140 [ 2100.391419][T13237] ? __phys_addr_symbol+0x2c/0x70 [ 2100.396542][T13237] ? __check_object_size+0x2de/0x700 [ 2100.401847][T13237] netlink_sendmsg+0x917/0xe10 [ 2100.406627][T13237] ? netlink_unicast+0x7f0/0x7f0 [ 2100.411579][T13237] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2100.417047][T13237] ? netlink_unicast+0x7f0/0x7f0 [ 2100.421995][T13237] sock_sendmsg+0xcf/0x120 [ 2100.426425][T13237] ____sys_sendmsg+0x6eb/0x810 [ 2100.431197][T13237] ? copy_msghdr_from_user+0xfc/0x150 [ 2100.436580][T13237] ? kernel_sendmsg+0x50/0x50 [ 2100.441272][T13237] ? futex_unqueue+0xb3/0x120 [ 2100.445963][T13237] ___sys_sendmsg+0x110/0x1b0 [ 2100.450650][T13237] ? do_recvmmsg+0x6e0/0x6e0 [ 2100.455250][T13237] ? __fget_files+0x248/0x440 [ 2100.459935][T13237] ? lock_downgrade+0x6e0/0x6e0 [ 2100.464797][T13237] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2100.470792][T13237] ? __fget_files+0x26a/0x440 [ 2100.475505][T13237] ? __fget_light+0xe5/0x270 [ 2100.480112][T13237] __sys_sendmsg+0xf3/0x1c0 [ 2100.484625][T13237] ? __sys_sendmsg_sock+0x30/0x30 [ 2100.489659][T13237] ? lock_downgrade+0x6e0/0x6e0 [ 2100.494535][T13237] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2100.500441][T13237] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2100.506342][T13237] ? lockdep_hardirqs_on+0x79/0x100 [ 2100.511551][T13237] do_syscall_64+0x35/0xb0 [ 2100.515974][T13237] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2100.521877][T13237] RIP: 0033:0x7f58e888a5a9 [ 2100.526298][T13237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2100.545910][T13237] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2100.554330][T13237] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2100.562306][T13237] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2100.570279][T13237] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2100.578251][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2100.586224][T13237] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2100.594217][T13237] [ 2100.607018][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2100.616805][T13237] memory: usage 307196kB, limit 307200kB, failcnt 45392 [ 2100.645147][T13237] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2100.653894][T13237] Memory cgroup stats for /syz1: [ 2100.654264][T13237] anon 135168 [ 2100.654264][T13237] file 389120 [ 2100.654264][T13237] kernel 314044416 [ 2100.654264][T13237] kernel_stack 65536 [ 2100.654264][T13237] pagetables 77824 [ 2100.654264][T13237] percpu 5593216 [ 2100.654264][T13237] sock 0 [ 2100.654264][T13237] vmalloc 0 [ 2100.654264][T13237] shmem 389120 [ 2100.654264][T13237] zswap 0 [ 2100.654264][T13237] zswapped 0 [ 2100.654264][T13237] file_mapped 389120 [ 2100.654264][T13237] file_dirty 0 [ 2100.654264][T13237] file_writeback 0 03:30:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf228, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3307}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2100.654264][T13237] swapcached 0 [ 2100.654264][T13237] anon_thp 0 [ 2100.654264][T13237] file_thp 0 [ 2100.654264][T13237] shmem_thp 0 [ 2100.654264][T13237] inactive_anon 225280 [ 2100.654264][T13237] active_anon 299008 [ 2100.654264][T13237] inactive_file 0 [ 2100.654264][T13237] active_file 0 [ 2100.654264][T13237] unevictable 0 [ 2100.654264][T13237] slab_reclaimable 21832 [ 2100.654264][T13237] slab_unreclaimable 308249776 [ 2100.654264][T13237] slab 308271608 03:30:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3404}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2100.804627][T13237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13236,uid=0 [ 2100.858580][T13237] Memory cgroup out of memory: Killed process 13236 (syz-executor.1) total-vm:54592kB, anon-rss:456kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2100.903183][T13249] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2100.914705][T13249] CPU: 1 PID: 13249 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2100.925156][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2100.935220][T13249] Call Trace: [ 2100.938505][T13249] [ 2100.941440][T13249] dump_stack_lvl+0xcd/0x134 [ 2100.946044][T13249] dump_header+0x10b/0x7f9 [ 2100.950471][T13249] oom_kill_process.cold+0x10/0x15 [ 2100.955594][T13249] out_of_memory+0x358/0x14a0 [ 2100.960285][T13249] ? find_held_lock+0x2d/0x110 [ 2100.965058][T13249] ? oom_killer_disable+0x270/0x270 [ 2100.970273][T13249] ? find_held_lock+0x2d/0x110 [ 2100.975046][T13249] mem_cgroup_out_of_memory+0x206/0x270 [ 2100.980601][T13249] ? mem_cgroup_margin+0x130/0x130 [ 2100.985719][T13249] ? lock_downgrade+0x6e0/0x6e0 [ 2100.990592][T13249] try_charge_memcg+0xf67/0x13f0 [ 2100.995555][T13249] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2101.001553][T13249] ? lock_downgrade+0x6e0/0x6e0 [ 2101.006425][T13249] charge_memcg+0x31/0x320 [ 2101.010858][T13249] __mem_cgroup_charge+0x27/0x90 [ 2101.015803][T13249] ? _compound_head+0x5d/0x150 [ 2101.020574][T13249] wp_page_copy+0x27c/0x1b60 [ 2101.025180][T13249] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2101.030645][T13249] ? lock_downgrade+0x6e0/0x6e0 [ 2101.035508][T13249] ? vm_normal_page+0x146/0x2a0 [ 2101.040383][T13249] do_wp_page+0x1d1/0x1910 [ 2101.044811][T13249] __handle_mm_fault+0x1813/0x39b0 [ 2101.049943][T13249] ? vm_iomap_memory+0x190/0x190 [ 2101.054927][T13249] handle_mm_fault+0x1c8/0x780 [ 2101.059724][T13249] do_user_addr_fault+0x475/0x1210 [ 2101.064855][T13249] exc_page_fault+0x94/0x170 [ 2101.069456][T13249] asm_exc_page_fault+0x22/0x30 [ 2101.074318][T13249] RIP: 0033:0x7f70e7e37970 [ 2101.078739][T13249] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2101.098438][T13249] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2101.104511][T13249] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2101.112502][T13249] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2101.120514][T13249] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2101.128492][T13249] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2101.136469][T13249] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2101.144457][T13249] ? __x64_sys_socket+0xd/0xb0 [ 2101.149248][T13249] [ 2101.155469][T13249] memory: usage 307200kB, limit 307200kB, failcnt 60471 [ 2101.162700][T13249] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2101.169958][T13249] Memory cgroup stats for /syz3: [ 2101.170126][T13249] anon 106496 [ 2101.170126][T13249] file 782336 [ 2101.170126][T13249] kernel 313683968 [ 2101.170126][T13249] kernel_stack 65536 [ 2101.170126][T13249] pagetables 73728 [ 2101.170126][T13249] percpu 5602688 [ 2101.170126][T13249] sock 0 [ 2101.170126][T13249] vmalloc 0 [ 2101.170126][T13249] shmem 778240 [ 2101.170126][T13249] zswap 0 [ 2101.170126][T13249] zswapped 0 [ 2101.170126][T13249] file_mapped 778240 [ 2101.170126][T13249] file_dirty 4096 [ 2101.170126][T13249] file_writeback 0 [ 2101.170126][T13249] swapcached 0 [ 2101.170126][T13249] anon_thp 0 [ 2101.170126][T13249] file_thp 0 [ 2101.170126][T13249] shmem_thp 0 [ 2101.170126][T13249] inactive_anon 577536 [ 2101.170126][T13249] active_anon 307200 [ 2101.170126][T13249] inactive_file 0 [ 2101.170126][T13249] active_file 4096 [ 2101.170126][T13249] unevictable 0 [ 2101.170126][T13249] slab_reclaimable 123352 [ 2101.170126][T13249] slab_unreclaimable 307779472 [ 2101.170126][T13249] slab 307902824 [ 2101.270279][T13249] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13249,uid=0 [ 2101.286437][T13249] Memory cgroup out of memory: Killed process 13249 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x23ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf229, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3405}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x97e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf22a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf22b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x98020000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3406}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2101.550105][T13262] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2101.580513][T13262] CPU: 1 PID: 13262 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2101.591078][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2101.601169][T13262] Call Trace: [ 2101.604472][T13262] [ 2101.607426][T13262] dump_stack_lvl+0xcd/0x134 [ 2101.612054][T13262] dump_header+0x10b/0x7f9 [ 2101.616509][T13262] oom_kill_process.cold+0x10/0x15 [ 2101.621744][T13262] out_of_memory+0x358/0x14a0 [ 2101.626641][T13262] ? find_held_lock+0x2d/0x110 [ 2101.631454][T13262] ? oom_killer_disable+0x270/0x270 [ 2101.636690][T13262] ? find_held_lock+0x2d/0x110 [ 2101.641492][T13262] mem_cgroup_out_of_memory+0x206/0x270 [ 2101.647083][T13262] ? mem_cgroup_margin+0x130/0x130 [ 2101.652233][T13262] ? lock_downgrade+0x6e0/0x6e0 [ 2101.657145][T13262] try_charge_memcg+0xf67/0x13f0 [ 2101.662131][T13262] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2101.668256][T13262] ? lock_downgrade+0x6e0/0x6e0 [ 2101.673164][T13262] charge_memcg+0x31/0x320 [ 2101.677624][T13262] __mem_cgroup_charge+0x27/0x90 [ 2101.682603][T13262] ? _compound_head+0x5d/0x150 [ 2101.687411][T13262] wp_page_copy+0x27c/0x1b60 [ 2101.692056][T13262] ? restore_exclusive_pte+0x8b0/0x8b0 03:30:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0xe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2101.697554][T13262] ? lock_downgrade+0x6e0/0x6e0 [ 2101.702792][T13262] ? vm_normal_page+0x146/0x2a0 [ 2101.707721][T13262] do_wp_page+0x1d1/0x1910 [ 2101.712180][T13262] __handle_mm_fault+0x1813/0x39b0 [ 2101.717337][T13262] ? vm_iomap_memory+0x190/0x190 [ 2101.722346][T13262] handle_mm_fault+0x1c8/0x780 [ 2101.727149][T13262] do_user_addr_fault+0x475/0x1210 [ 2101.732315][T13262] exc_page_fault+0x94/0x170 [ 2101.736951][T13262] asm_exc_page_fault+0x22/0x30 [ 2101.741849][T13262] RIP: 0033:0x7f70e7e37970 03:30:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3407}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2101.746294][T13262] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2101.765936][T13262] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2101.772042][T13262] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2101.780074][T13262] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2101.788087][T13262] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e 03:30:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf328, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2101.796098][T13262] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2101.804105][T13262] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2101.812142][T13262] ? __x64_sys_socket+0xd/0xb0 [ 2101.817009][T13262] 03:30:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x98e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3504}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2101.862979][T13262] memory: usage 307200kB, limit 307200kB, failcnt 60530 [ 2101.886034][T13262] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2101.913964][T13262] Memory cgroup stats for /syz3: [ 2101.915414][T13262] anon 106496 [ 2101.915414][T13262] file 782336 [ 2101.915414][T13262] kernel 313683968 [ 2101.915414][T13262] kernel_stack 65536 [ 2101.915414][T13262] pagetables 73728 [ 2101.915414][T13262] percpu 5602688 [ 2101.915414][T13262] sock 0 [ 2101.915414][T13262] vmalloc 0 [ 2101.915414][T13262] shmem 778240 [ 2101.915414][T13262] zswap 0 [ 2101.915414][T13262] zswapped 0 [ 2101.915414][T13262] file_mapped 778240 [ 2101.915414][T13262] file_dirty 4096 [ 2101.915414][T13262] file_writeback 0 [ 2101.915414][T13262] swapcached 0 [ 2101.915414][T13262] anon_thp 0 [ 2101.915414][T13262] file_thp 0 [ 2101.915414][T13262] shmem_thp 0 [ 2101.915414][T13262] inactive_anon 577536 [ 2101.915414][T13262] active_anon 307200 [ 2101.915414][T13262] inactive_file 0 [ 2101.915414][T13262] active_file 4096 [ 2101.915414][T13262] unevictable 0 [ 2101.915414][T13262] slab_reclaimable 123352 [ 2101.915414][T13262] slab_unreclaimable 307779472 [ 2101.915414][T13262] slab 307902824 03:30:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf329, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x60}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3505}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x99e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2102.013093][T13262] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13262,uid=0 [ 2102.029453][T13262] Memory cgroup out of memory: Killed process 13262 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x24ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf32a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3506}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf32b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3507}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9a000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2102.380309][T13307] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2102.404340][T13307] CPU: 1 PID: 13307 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2102.414822][T13307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2102.424898][T13307] Call Trace: [ 2102.428191][T13307] [ 2102.431125][T13307] dump_stack_lvl+0xcd/0x134 [ 2102.435732][T13307] dump_header+0x10b/0x7f9 [ 2102.440223][T13307] oom_kill_process.cold+0x10/0x15 [ 2102.445368][T13307] out_of_memory+0x358/0x14a0 [ 2102.450059][T13307] ? find_held_lock+0x2d/0x110 [ 2102.454826][T13307] ? oom_killer_disable+0x270/0x270 [ 2102.460043][T13307] ? find_held_lock+0x2d/0x110 [ 2102.464838][T13307] mem_cgroup_out_of_memory+0x206/0x270 [ 2102.470415][T13307] ? mem_cgroup_margin+0x130/0x130 [ 2102.475540][T13307] ? lock_downgrade+0x6e0/0x6e0 [ 2102.480421][T13307] try_charge_memcg+0xf67/0x13f0 [ 2102.485382][T13307] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2102.491384][T13307] ? lock_downgrade+0x6e0/0x6e0 [ 2102.496262][T13307] charge_memcg+0x31/0x320 [ 2102.500699][T13307] __mem_cgroup_charge+0x27/0x90 [ 2102.505657][T13307] ? _compound_head+0x5d/0x150 [ 2102.510438][T13307] wp_page_copy+0x27c/0x1b60 [ 2102.515048][T13307] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2102.520531][T13307] ? lock_downgrade+0x6e0/0x6e0 [ 2102.525394][T13307] ? vm_normal_page+0x146/0x2a0 [ 2102.530267][T13307] do_wp_page+0x1d1/0x1910 [ 2102.534990][T13307] __handle_mm_fault+0x1813/0x39b0 [ 2102.540120][T13307] ? vm_iomap_memory+0x190/0x190 [ 2102.545093][T13307] handle_mm_fault+0x1c8/0x780 [ 2102.549873][T13307] do_user_addr_fault+0x475/0x1210 [ 2102.555019][T13307] exc_page_fault+0x94/0x170 [ 2102.559632][T13307] asm_exc_page_fault+0x22/0x30 [ 2102.564497][T13307] RIP: 0033:0x7f70e7e37970 [ 2102.568924][T13307] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2102.588553][T13307] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2102.594636][T13307] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2102.602622][T13307] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2102.610603][T13307] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2102.618580][T13307] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2102.626560][T13307] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2102.634540][T13307] ? __x64_sys_socket+0xd/0xb0 [ 2102.639337][T13307] [ 2102.649206][T13307] memory: usage 307200kB, limit 307200kB, failcnt 60596 [ 2102.660808][T13307] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2102.668630][T13307] Memory cgroup stats for /syz3: [ 2102.668842][T13307] anon 106496 [ 2102.668842][T13307] file 782336 [ 2102.668842][T13307] kernel 313683968 [ 2102.668842][T13307] kernel_stack 65536 [ 2102.668842][T13307] pagetables 73728 [ 2102.668842][T13307] percpu 5602688 [ 2102.668842][T13307] sock 0 [ 2102.668842][T13307] vmalloc 0 [ 2102.668842][T13307] shmem 778240 [ 2102.668842][T13307] zswap 0 [ 2102.668842][T13307] zswapped 0 [ 2102.668842][T13307] file_mapped 778240 [ 2102.668842][T13307] file_dirty 4096 [ 2102.668842][T13307] file_writeback 0 [ 2102.668842][T13307] swapcached 0 [ 2102.668842][T13307] anon_thp 0 [ 2102.668842][T13307] file_thp 0 [ 2102.668842][T13307] shmem_thp 0 [ 2102.668842][T13307] inactive_anon 577536 [ 2102.668842][T13307] active_anon 307200 [ 2102.668842][T13307] inactive_file 0 [ 2102.668842][T13307] active_file 4096 [ 2102.668842][T13307] unevictable 0 [ 2102.668842][T13307] slab_reclaimable 123352 [ 2102.668842][T13307] slab_unreclaimable 307779472 [ 2102.668842][T13307] slab 307902824 03:30:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000a0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf428, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3604}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x25ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9ae21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2102.767258][T13307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13307,uid=0 [ 2102.783164][T13307] Memory cgroup out of memory: Killed process 13307 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf429, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf42a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9be21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3605}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf42b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2103.009887][T13329] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2103.058368][T13329] CPU: 1 PID: 13329 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2103.068852][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2103.078940][T13329] Call Trace: [ 2103.082247][T13329] [ 2103.085197][T13329] dump_stack_lvl+0xcd/0x134 [ 2103.089828][T13329] dump_header+0x10b/0x7f9 [ 2103.094306][T13329] oom_kill_process.cold+0x10/0x15 [ 2103.099461][T13329] out_of_memory+0x358/0x14a0 [ 2103.104183][T13329] ? find_held_lock+0x2d/0x110 [ 2103.108985][T13329] ? oom_killer_disable+0x270/0x270 [ 2103.114228][T13329] ? find_held_lock+0x2d/0x110 [ 2103.119038][T13329] mem_cgroup_out_of_memory+0x206/0x270 [ 2103.124622][T13329] ? mem_cgroup_margin+0x130/0x130 [ 2103.129762][T13329] ? lock_downgrade+0x6e0/0x6e0 [ 2103.135098][T13329] try_charge_memcg+0xf67/0x13f0 [ 2103.140078][T13329] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2103.146111][T13329] ? lock_downgrade+0x6e0/0x6e0 [ 2103.151000][T13329] charge_memcg+0x31/0x320 [ 2103.155434][T13329] __mem_cgroup_charge+0x27/0x90 [ 2103.160416][T13329] ? _compound_head+0x5d/0x150 [ 2103.165201][T13329] wp_page_copy+0x27c/0x1b60 [ 2103.169819][T13329] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2103.175306][T13329] ? lock_downgrade+0x6e0/0x6e0 [ 2103.180175][T13329] ? vm_normal_page+0x146/0x2a0 [ 2103.185047][T13329] do_wp_page+0x52c/0x1910 [ 2103.189488][T13329] __handle_mm_fault+0x1813/0x39b0 [ 2103.194615][T13329] ? vm_iomap_memory+0x190/0x190 [ 2103.199587][T13329] handle_mm_fault+0x1c8/0x780 [ 2103.204363][T13329] do_user_addr_fault+0x475/0x1210 [ 2103.209518][T13329] exc_page_fault+0x94/0x170 [ 2103.214134][T13329] asm_exc_page_fault+0x22/0x30 [ 2103.219022][T13329] RIP: 0033:0x7f70e7e34a15 [ 2103.223444][T13329] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2103.243065][T13329] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2103.249157][T13329] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2103.257181][T13329] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2103.265170][T13329] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2103.273146][T13329] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 0000000000201687 [ 2103.281121][T13329] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2103.289117][T13329] [ 2103.309916][T13329] memory: usage 307200kB, limit 307200kB, failcnt 60662 [ 2103.324093][T13329] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2103.340537][T13329] Memory cgroup stats for /syz3: [ 2103.340766][T13329] anon 90112 [ 2103.340766][T13329] file 782336 [ 2103.340766][T13329] kernel 313700352 [ 2103.340766][T13329] kernel_stack 65536 [ 2103.340766][T13329] pagetables 73728 [ 2103.340766][T13329] percpu 5602688 [ 2103.340766][T13329] sock 0 [ 2103.340766][T13329] vmalloc 0 [ 2103.340766][T13329] shmem 778240 [ 2103.340766][T13329] zswap 0 [ 2103.340766][T13329] zswapped 0 [ 2103.340766][T13329] file_mapped 778240 [ 2103.340766][T13329] file_dirty 4096 [ 2103.340766][T13329] file_writeback 0 [ 2103.340766][T13329] swapcached 0 [ 2103.340766][T13329] anon_thp 0 [ 2103.340766][T13329] file_thp 0 [ 2103.340766][T13329] shmem_thp 0 [ 2103.340766][T13329] inactive_anon 561152 [ 2103.340766][T13329] active_anon 307200 [ 2103.340766][T13329] inactive_file 0 [ 2103.340766][T13329] active_file 4096 [ 2103.340766][T13329] unevictable 0 [ 2103.340766][T13329] slab_reclaimable 123352 [ 2103.340766][T13329] slab_unreclaimable 307790872 [ 2103.340766][T13329] slab 307914224 [ 2103.438496][T13329] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13329,uid=0 03:30:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000b0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf528, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3606}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2103.454344][T13329] Memory cgroup out of memory: Killed process 13329 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2103.472010][T13326] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2103.495542][T13326] CPU: 0 PID: 13326 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2103.506063][T13326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2103.516151][T13326] Call Trace: [ 2103.519468][T13326] [ 2103.522456][T13326] dump_stack_lvl+0xcd/0x134 [ 2103.527088][T13326] dump_header+0x10b/0x7f9 [ 2103.531546][T13326] oom_kill_process.cold+0x10/0x15 [ 2103.536707][T13326] out_of_memory+0x358/0x14a0 [ 2103.541443][T13326] ? oom_killer_disable+0x270/0x270 [ 2103.546684][T13326] ? find_held_lock+0x2d/0x110 [ 2103.551499][T13326] mem_cgroup_out_of_memory+0x206/0x270 [ 2103.555930][T13348] __nla_validate_parse: 22 callbacks suppressed [ 2103.555948][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2103.557127][T13326] ? mem_cgroup_margin+0x130/0x130 [ 2103.557158][T13326] ? lock_downgrade+0x6e0/0x6e0 [ 2103.563568][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2103.572613][T13326] try_charge_memcg+0xf67/0x13f0 [ 2103.572659][T13326] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2103.572685][T13326] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2103.572712][T13326] ? lock_downgrade+0x6e0/0x6e0 [ 2103.613360][T13326] obj_cgroup_charge+0x2ab/0x5e0 [ 2103.618329][T13326] __kmalloc+0xb2/0x340 [ 2103.622495][T13326] ? veth_dev_init+0x1dd/0x3e0 [ 2103.627287][T13326] veth_dev_init+0x1dd/0x3e0 [ 2103.631889][T13326] ? veth_get_num_queues+0x50/0x50 [ 2103.637018][T13326] register_netdevice+0x5e1/0x1680 [ 2103.642155][T13326] ? netdev_change_features+0xb0/0xb0 [ 2103.647544][T13326] ? dev_addr_mod+0x2c9/0x3f0 [ 2103.652243][T13326] veth_newlink+0x338/0x990 [ 2103.656766][T13326] ? veth_set_features+0x190/0x190 [ 2103.661976][T13326] ? netlink_rcv_skb+0x153/0x420 [ 2103.667015][T13326] ? netlink_unicast+0x543/0x7f0 [ 2103.671967][T13326] ? netlink_sendmsg+0x917/0xe10 [ 2103.676989][T13326] ? dev_addr_mod+0x2c9/0x3f0 [ 2103.681689][T13326] ? rtnl_create_link+0x7e8/0xc00 [ 2103.686745][T13326] ? veth_set_features+0x190/0x190 [ 2103.691871][T13326] __rtnl_newlink+0x1087/0x17e0 [ 2103.696761][T13326] ? rtnl_link_unregister+0x250/0x250 [ 2103.702152][T13326] ? rtnl_newlink+0x46/0xa0 [ 2103.706731][T13326] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2103.712291][T13326] ? trace_kmalloc+0x32/0x100 [ 2103.716985][T13326] rtnl_newlink+0x64/0xa0 [ 2103.721444][T13326] ? __rtnl_newlink+0x17e0/0x17e0 [ 2103.726481][T13326] rtnetlink_rcv_msg+0x43a/0xca0 [ 2103.731439][T13326] ? rtnl_getlink+0xae0/0xae0 [ 2103.736126][T13326] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2103.741429][T13326] ? ref_tracker_free+0x370/0x6b0 [ 2103.746475][T13326] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2103.751884][T13326] netlink_rcv_skb+0x153/0x420 [ 2103.756668][T13326] ? rtnl_getlink+0xae0/0xae0 [ 2103.761367][T13326] ? netlink_ack+0xd50/0xd50 [ 2103.765968][T13326] ? netlink_deliver_tap+0x1a2/0xc40 [ 2103.771275][T13326] ? netlink_deliver_tap+0x1b1/0xc40 [ 2103.776581][T13326] netlink_unicast+0x543/0x7f0 [ 2103.781465][T13326] ? netlink_attachskb+0x880/0x880 [ 2103.786590][T13326] ? __phys_addr+0xc4/0x140 [ 2103.791109][T13326] ? __phys_addr_symbol+0x2c/0x70 [ 2103.796143][T13326] ? __check_object_size+0x2de/0x700 [ 2103.801451][T13326] netlink_sendmsg+0x917/0xe10 [ 2103.806249][T13326] ? netlink_unicast+0x7f0/0x7f0 [ 2103.811210][T13326] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2103.816514][T13326] ? netlink_unicast+0x7f0/0x7f0 [ 2103.821468][T13326] sock_sendmsg+0xcf/0x120 [ 2103.825902][T13326] ____sys_sendmsg+0x6eb/0x810 [ 2103.830678][T13326] ? copy_msghdr_from_user+0xfc/0x150 [ 2103.836067][T13326] ? kernel_sendmsg+0x50/0x50 [ 2103.840766][T13326] ? futex_unqueue+0xb3/0x120 [ 2103.845986][T13326] ___sys_sendmsg+0x110/0x1b0 [ 2103.850684][T13326] ? do_recvmmsg+0x6e0/0x6e0 [ 2103.855302][T13326] ? __fget_files+0x248/0x440 [ 2103.859994][T13326] ? lock_downgrade+0x6e0/0x6e0 [ 2103.865039][T13326] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2103.871040][T13326] ? __fget_files+0x26a/0x440 [ 2103.875746][T13326] ? __fget_light+0xe5/0x270 [ 2103.880361][T13326] __sys_sendmsg+0xf3/0x1c0 [ 2103.884881][T13326] ? __sys_sendmsg_sock+0x30/0x30 [ 2103.889920][T13326] ? lock_downgrade+0x6e0/0x6e0 [ 2103.894797][T13326] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2103.900713][T13326] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2103.906625][T13326] ? lockdep_hardirqs_on+0x79/0x100 [ 2103.911842][T13326] do_syscall_64+0x35/0xb0 [ 2103.916355][T13326] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2103.922355][T13326] RIP: 0033:0x7f58e888a5a9 [ 2103.926782][T13326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2103.946495][T13326] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2103.954922][T13326] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2103.962903][T13326] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2103.970885][T13326] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2103.978957][T13326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2103.986938][T13326] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2103.994938][T13326] [ 2104.017212][T13326] memory: usage 307196kB, limit 307200kB, failcnt 45648 [ 2104.052831][T13326] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2104.067980][T13326] Memory cgroup stats for /syz1: [ 2104.068230][T13326] anon 135168 [ 2104.068230][T13326] file 389120 [ 2104.068230][T13326] kernel 314011648 [ 2104.068230][T13326] kernel_stack 32768 [ 2104.068230][T13326] pagetables 77824 [ 2104.068230][T13326] percpu 5593216 [ 2104.068230][T13326] sock 0 [ 2104.068230][T13326] vmalloc 0 [ 2104.068230][T13326] shmem 389120 [ 2104.068230][T13326] zswap 0 [ 2104.068230][T13326] zswapped 0 [ 2104.068230][T13326] file_mapped 389120 [ 2104.068230][T13326] file_dirty 0 [ 2104.068230][T13326] file_writeback 0 [ 2104.068230][T13326] swapcached 0 [ 2104.068230][T13326] anon_thp 0 [ 2104.068230][T13326] file_thp 0 [ 2104.068230][T13326] shmem_thp 0 [ 2104.068230][T13326] inactive_anon 225280 [ 2104.068230][T13326] active_anon 299008 [ 2104.068230][T13326] inactive_file 0 [ 2104.068230][T13326] active_file 0 [ 2104.068230][T13326] unevictable 0 [ 2104.068230][T13326] slab_reclaimable 21832 [ 2104.068230][T13326] slab_unreclaimable 308249776 [ 2104.068230][T13326] slab 308271608 [ 2104.202237][T13326] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13320,uid=0 [ 2104.225822][T13326] Memory cgroup out of memory: Killed process 13326 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2104.363728][T13347] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2104.374638][T13347] CPU: 1 PID: 13347 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2104.385096][T13347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2104.395179][T13347] Call Trace: [ 2104.398480][T13347] [ 2104.401431][T13347] dump_stack_lvl+0xcd/0x134 [ 2104.406052][T13347] dump_header+0x10b/0x7f9 [ 2104.410497][T13347] oom_kill_process.cold+0x10/0x15 [ 2104.415641][T13347] out_of_memory+0x358/0x14a0 [ 2104.420356][T13347] ? find_held_lock+0x2d/0x110 [ 2104.425172][T13347] ? oom_killer_disable+0x270/0x270 [ 2104.430401][T13347] ? find_held_lock+0x2d/0x110 [ 2104.435203][T13347] mem_cgroup_out_of_memory+0x206/0x270 [ 2104.440862][T13347] ? mem_cgroup_margin+0x130/0x130 [ 2104.446002][T13347] ? lock_downgrade+0x6e0/0x6e0 [ 2104.450895][T13347] try_charge_memcg+0xf67/0x13f0 [ 2104.455869][T13347] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2104.461884][T13347] ? lock_downgrade+0x6e0/0x6e0 [ 2104.466775][T13347] charge_memcg+0x31/0x320 [ 2104.471221][T13347] __mem_cgroup_charge+0x27/0x90 [ 2104.476191][T13347] ? _compound_head+0x5d/0x150 [ 2104.480983][T13347] wp_page_copy+0x27c/0x1b60 [ 2104.485695][T13347] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2104.491179][T13347] ? lock_downgrade+0x6e0/0x6e0 [ 2104.496058][T13347] ? vm_normal_page+0x146/0x2a0 [ 2104.500947][T13347] do_wp_page+0x1d1/0x1910 [ 2104.505398][T13347] __handle_mm_fault+0x1813/0x39b0 [ 2104.510541][T13347] ? vm_iomap_memory+0x190/0x190 [ 2104.515532][T13347] handle_mm_fault+0x1c8/0x780 [ 2104.520340][T13347] do_user_addr_fault+0x475/0x1210 [ 2104.525522][T13347] exc_page_fault+0x94/0x170 [ 2104.530157][T13347] asm_exc_page_fault+0x22/0x30 [ 2104.535030][T13347] RIP: 0033:0x7f70e7e37970 [ 2104.539462][T13347] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2104.559095][T13347] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2104.565274][T13347] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2104.573244][T13347] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2104.581215][T13347] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2104.589186][T13347] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2104.597163][T13347] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2104.605129][T13347] ? __x64_sys_socket+0xd/0xb0 [ 2104.609913][T13347] [ 2104.625491][T13347] memory: usage 307200kB, limit 307200kB, failcnt 60745 [ 2104.642972][T13347] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2104.650168][T13347] Memory cgroup stats for /syz3: [ 2104.650360][T13347] anon 106496 [ 2104.650360][T13347] file 782336 [ 2104.650360][T13347] kernel 313683968 [ 2104.650360][T13347] kernel_stack 65536 [ 2104.650360][T13347] pagetables 73728 [ 2104.650360][T13347] percpu 5602688 [ 2104.650360][T13347] sock 0 [ 2104.650360][T13347] vmalloc 0 [ 2104.650360][T13347] shmem 778240 [ 2104.650360][T13347] zswap 0 [ 2104.650360][T13347] zswapped 0 [ 2104.650360][T13347] file_mapped 778240 [ 2104.650360][T13347] file_dirty 4096 [ 2104.650360][T13347] file_writeback 0 [ 2104.650360][T13347] swapcached 0 [ 2104.650360][T13347] anon_thp 0 [ 2104.650360][T13347] file_thp 0 [ 2104.650360][T13347] shmem_thp 0 [ 2104.650360][T13347] inactive_anon 577536 [ 2104.650360][T13347] active_anon 307200 [ 2104.650360][T13347] inactive_file 0 [ 2104.650360][T13347] active_file 4096 [ 2104.650360][T13347] unevictable 0 [ 2104.650360][T13347] slab_reclaimable 123352 [ 2104.650360][T13347] slab_unreclaimable 307779472 [ 2104.650360][T13347] slab 307902824 [ 2104.751189][T13347] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13347,uid=0 03:30:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x26010000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf529, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3607}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9ce21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf52a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2104.767286][T13347] Memory cgroup out of memory: Killed process 13347 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000c0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) [ 2104.817784][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf52b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf628, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3704}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2104.942966][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9d0b0000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2105.029656][T13357] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2105.051540][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2105.061728][T13357] CPU: 1 PID: 13357 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2105.072191][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2105.082272][T13357] Call Trace: [ 2105.085569][T13357] [ 2105.088520][T13357] dump_stack_lvl+0xcd/0x134 [ 2105.093143][T13357] dump_header+0x10b/0x7f9 [ 2105.097592][T13357] oom_kill_process.cold+0x10/0x15 [ 2105.102740][T13357] out_of_memory+0x358/0x14a0 [ 2105.107459][T13357] ? find_held_lock+0x2d/0x110 [ 2105.112249][T13357] ? oom_killer_disable+0x270/0x270 [ 2105.117478][T13357] ? find_held_lock+0x2d/0x110 [ 2105.122271][T13357] mem_cgroup_out_of_memory+0x206/0x270 [ 2105.127855][T13357] ? mem_cgroup_margin+0x130/0x130 [ 2105.132995][T13357] ? lock_downgrade+0x6e0/0x6e0 [ 2105.137892][T13357] try_charge_memcg+0xf67/0x13f0 [ 2105.142892][T13357] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2105.149099][T13357] ? lock_downgrade+0x6e0/0x6e0 [ 2105.154004][T13357] charge_memcg+0x31/0x320 [ 2105.158458][T13357] __mem_cgroup_charge+0x27/0x90 [ 2105.163431][T13357] ? _compound_head+0x5d/0x150 [ 2105.168235][T13357] wp_page_copy+0x27c/0x1b60 [ 2105.170434][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2105.172850][T13357] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2105.172881][T13357] ? lock_downgrade+0x6e0/0x6e0 [ 2105.172906][T13357] ? vm_normal_page+0x146/0x2a0 [ 2105.197317][T13357] do_wp_page+0x1d1/0x1910 [ 2105.201775][T13357] __handle_mm_fault+0x1813/0x39b0 [ 2105.206928][T13357] ? vm_iomap_memory+0x190/0x190 [ 2105.212011][T13357] handle_mm_fault+0x1c8/0x780 [ 2105.216812][T13357] do_user_addr_fault+0x475/0x1210 [ 2105.221982][T13357] exc_page_fault+0x94/0x170 03:30:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x26ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf629, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3705}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2105.226606][T13357] asm_exc_page_fault+0x22/0x30 [ 2105.231486][T13357] RIP: 0033:0x7f70e7e37970 [ 2105.235928][T13357] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2105.255567][T13357] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2105.261633][T13357] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2105.269619][T13357] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec 03:30:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2105.277617][T13357] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2105.285608][T13357] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2105.293593][T13357] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2105.301587][T13357] ? __x64_sys_socket+0xd/0xb0 [ 2105.306411][T13357] [ 2105.311491][T13357] memory: usage 307200kB, limit 307200kB, failcnt 60800 [ 2105.319052][T13357] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2105.350560][T13357] Memory cgroup stats for /syz3: [ 2105.350763][T13357] anon 106496 [ 2105.350763][T13357] file 782336 [ 2105.350763][T13357] kernel 313683968 [ 2105.350763][T13357] kernel_stack 65536 [ 2105.350763][T13357] pagetables 73728 [ 2105.350763][T13357] percpu 5602688 [ 2105.350763][T13357] sock 0 [ 2105.350763][T13357] vmalloc 0 [ 2105.350763][T13357] shmem 778240 [ 2105.350763][T13357] zswap 0 [ 2105.350763][T13357] zswapped 0 [ 2105.350763][T13357] file_mapped 778240 [ 2105.350763][T13357] file_dirty 4096 03:30:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf62a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2105.350763][T13357] file_writeback 0 [ 2105.350763][T13357] swapcached 0 [ 2105.350763][T13357] anon_thp 0 [ 2105.350763][T13357] file_thp 0 [ 2105.350763][T13357] shmem_thp 0 [ 2105.350763][T13357] inactive_anon 577536 [ 2105.350763][T13357] active_anon 307200 [ 2105.350763][T13357] inactive_file 0 [ 2105.350763][T13357] active_file 4096 [ 2105.350763][T13357] unevictable 0 [ 2105.350763][T13357] slab_reclaimable 123352 [ 2105.350763][T13357] slab_unreclaimable 307779472 [ 2105.350763][T13357] slab 307902824 03:30:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf62b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2105.471613][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2105.544347][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000e0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9de21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf728, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3706}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x27ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2105.583880][T13357] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13357,uid=0 [ 2105.605426][T13357] Memory cgroup out of memory: Killed process 13357 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf729, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2105.686749][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9ee21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf72a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2105.818512][T13399] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2105.833154][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2105.842920][T13399] CPU: 0 PID: 13399 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2105.853390][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2105.863474][T13399] Call Trace: 03:30:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2105.866777][T13399] [ 2105.869733][T13399] dump_stack_lvl+0xcd/0x134 [ 2105.874361][T13399] dump_header+0x10b/0x7f9 [ 2105.878806][T13399] oom_kill_process.cold+0x10/0x15 [ 2105.883947][T13399] out_of_memory+0x358/0x14a0 [ 2105.888663][T13399] ? find_held_lock+0x2d/0x110 [ 2105.893451][T13399] ? oom_killer_disable+0x270/0x270 [ 2105.898691][T13399] ? find_held_lock+0x2d/0x110 [ 2105.903488][T13399] mem_cgroup_out_of_memory+0x206/0x270 [ 2105.909064][T13399] ? mem_cgroup_margin+0x130/0x130 [ 2105.914209][T13399] ? lock_downgrade+0x6e0/0x6e0 [ 2105.919114][T13399] try_charge_memcg+0xf67/0x13f0 [ 2105.924103][T13399] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2105.930134][T13399] ? lock_downgrade+0x6e0/0x6e0 [ 2105.935039][T13399] charge_memcg+0x31/0x320 [ 2105.939534][T13399] __mem_cgroup_charge+0x27/0x90 [ 2105.944527][T13399] ? _compound_head+0x5d/0x150 [ 2105.949422][T13399] wp_page_copy+0x27c/0x1b60 [ 2105.954071][T13399] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2105.959574][T13399] ? lock_downgrade+0x6e0/0x6e0 03:30:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf72b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2105.964458][T13399] ? vm_normal_page+0x146/0x2a0 [ 2105.969613][T13399] do_wp_page+0x1d1/0x1910 [ 2105.974069][T13399] __handle_mm_fault+0x1813/0x39b0 [ 2105.979220][T13399] ? vm_iomap_memory+0x190/0x190 [ 2105.984246][T13399] handle_mm_fault+0x1c8/0x780 [ 2105.989041][T13399] do_user_addr_fault+0x475/0x1210 [ 2105.994202][T13399] exc_page_fault+0x94/0x170 [ 2105.998829][T13399] asm_exc_page_fault+0x22/0x30 [ 2106.003709][T13399] RIP: 0033:0x7f70e7e37970 03:30:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2106.008147][T13399] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2106.027787][T13399] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2106.033888][T13399] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2106.042017][T13399] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2106.050024][T13399] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2106.058022][T13399] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2106.066050][T13399] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2106.074054][T13399] ? __x64_sys_socket+0xd/0xb0 [ 2106.078877][T13399] [ 2106.091716][T13399] memory: usage 307200kB, limit 307200kB, failcnt 60863 [ 2106.124150][T13399] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2106.142692][T13399] Memory cgroup stats for /syz3: [ 2106.142929][T13399] anon 106496 [ 2106.142929][T13399] file 782336 [ 2106.142929][T13399] kernel 313683968 [ 2106.142929][T13399] kernel_stack 65536 [ 2106.142929][T13399] pagetables 73728 [ 2106.142929][T13399] percpu 5602688 [ 2106.142929][T13399] sock 0 [ 2106.142929][T13399] vmalloc 0 [ 2106.142929][T13399] shmem 778240 [ 2106.142929][T13399] zswap 0 [ 2106.142929][T13399] zswapped 0 [ 2106.142929][T13399] file_mapped 778240 [ 2106.142929][T13399] file_dirty 4096 [ 2106.142929][T13399] file_writeback 0 [ 2106.142929][T13399] swapcached 0 [ 2106.142929][T13399] anon_thp 0 [ 2106.142929][T13399] file_thp 0 [ 2106.142929][T13399] shmem_thp 0 [ 2106.142929][T13399] inactive_anon 577536 [ 2106.142929][T13399] active_anon 307200 [ 2106.142929][T13399] inactive_file 0 [ 2106.142929][T13399] active_file 4096 03:30:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf828, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x28ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3707}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0xe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2106.142929][T13399] unevictable 0 [ 2106.142929][T13399] slab_reclaimable 123352 [ 2106.142929][T13399] slab_unreclaimable 307779472 [ 2106.142929][T13399] slab 307902824 [ 2106.239298][T13399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13399,uid=0 [ 2106.255008][T13399] Memory cgroup out of memory: Killed process 13399 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3804}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf829, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf82a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9fe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2106.460477][T13425] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2106.488244][T13425] CPU: 1 PID: 13425 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2106.498733][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2106.508826][T13425] Call Trace: [ 2106.512132][T13425] [ 2106.515087][T13425] dump_stack_lvl+0xcd/0x134 [ 2106.519728][T13425] dump_header+0x10b/0x7f9 [ 2106.524186][T13425] oom_kill_process.cold+0x10/0x15 [ 2106.529341][T13425] out_of_memory+0x358/0x14a0 [ 2106.534075][T13425] ? find_held_lock+0x2d/0x110 [ 2106.538869][T13425] ? oom_killer_disable+0x270/0x270 [ 2106.544106][T13425] ? find_held_lock+0x2d/0x110 [ 2106.548906][T13425] mem_cgroup_out_of_memory+0x206/0x270 [ 2106.554490][T13425] ? mem_cgroup_margin+0x130/0x130 [ 2106.559635][T13425] ? lock_downgrade+0x6e0/0x6e0 [ 2106.564541][T13425] try_charge_memcg+0xf67/0x13f0 [ 2106.569521][T13425] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2106.575521][T13425] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2106.581260][T13425] ? lock_downgrade+0x6e0/0x6e0 [ 2106.586144][T13425] obj_cgroup_charge+0x2ab/0x5e0 [ 2106.591114][T13425] __kmalloc+0xb2/0x340 [ 2106.595282][T13425] ? veth_dev_init+0x1dd/0x3e0 [ 2106.600070][T13425] veth_dev_init+0x1dd/0x3e0 [ 2106.604672][T13425] ? veth_get_num_queues+0x50/0x50 [ 2106.609797][T13425] register_netdevice+0x5e1/0x1680 [ 2106.614930][T13425] ? netdev_change_features+0xb0/0xb0 [ 2106.620320][T13425] ? dev_addr_mod+0x2c9/0x3f0 [ 2106.625102][T13425] veth_newlink+0x338/0x990 [ 2106.629625][T13425] ? veth_set_features+0x190/0x190 [ 2106.634758][T13425] ? netlink_rcv_skb+0x153/0x420 [ 2106.639710][T13425] ? netlink_unicast+0x543/0x7f0 [ 2106.644675][T13425] ? netlink_sendmsg+0x917/0xe10 [ 2106.649689][T13425] ? dev_addr_mod+0x2c9/0x3f0 [ 2106.654398][T13425] ? rtnl_create_link+0x7e8/0xc00 [ 2106.659455][T13425] ? veth_set_features+0x190/0x190 [ 2106.664598][T13425] __rtnl_newlink+0x1087/0x17e0 [ 2106.669482][T13425] ? rtnl_link_unregister+0x250/0x250 [ 2106.674870][T13425] ? find_held_lock+0x2d/0x110 [ 2106.679674][T13425] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2106.685233][T13425] ? trace_kmalloc+0x32/0x100 [ 2106.689930][T13425] rtnl_newlink+0x64/0xa0 [ 2106.694274][T13425] ? __rtnl_newlink+0x17e0/0x17e0 [ 2106.699319][T13425] rtnetlink_rcv_msg+0x43a/0xca0 [ 2106.704275][T13425] ? rtnl_getlink+0xae0/0xae0 [ 2106.708971][T13425] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2106.714273][T13425] ? ref_tracker_free+0x370/0x6b0 [ 2106.719322][T13425] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2106.724712][T13425] netlink_rcv_skb+0x153/0x420 [ 2106.729495][T13425] ? rtnl_getlink+0xae0/0xae0 [ 2106.734188][T13425] ? netlink_ack+0xd50/0xd50 [ 2106.738793][T13425] ? netlink_deliver_tap+0x1a2/0xc40 [ 2106.744104][T13425] ? netlink_deliver_tap+0x1b1/0xc40 [ 2106.749410][T13425] netlink_unicast+0x543/0x7f0 [ 2106.754197][T13425] ? netlink_attachskb+0x880/0x880 [ 2106.759323][T13425] ? __phys_addr+0xc4/0x140 [ 2106.763841][T13425] ? __phys_addr_symbol+0x2c/0x70 [ 2106.768877][T13425] ? __check_object_size+0x2de/0x700 [ 2106.774183][T13425] netlink_sendmsg+0x917/0xe10 [ 2106.778970][T13425] ? netlink_unicast+0x7f0/0x7f0 [ 2106.783930][T13425] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2106.789233][T13425] ? netlink_unicast+0x7f0/0x7f0 [ 2106.794190][T13425] sock_sendmsg+0xcf/0x120 [ 2106.798628][T13425] ____sys_sendmsg+0x6eb/0x810 [ 2106.803407][T13425] ? copy_msghdr_from_user+0xfc/0x150 [ 2106.808883][T13425] ? kernel_sendmsg+0x50/0x50 [ 2106.813599][T13425] ___sys_sendmsg+0x110/0x1b0 [ 2106.818292][T13425] ? do_recvmmsg+0x6e0/0x6e0 [ 2106.822908][T13425] ? __fget_files+0x248/0x440 [ 2106.827597][T13425] ? lock_downgrade+0x6e0/0x6e0 [ 2106.832464][T13425] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2106.838463][T13425] ? __fget_files+0x26a/0x440 [ 2106.843160][T13425] ? __fget_light+0xe5/0x270 [ 2106.847858][T13425] __sys_sendmsg+0xf3/0x1c0 [ 2106.852375][T13425] ? __sys_sendmsg_sock+0x30/0x30 [ 2106.857451][T13425] ? lock_downgrade+0x6e0/0x6e0 [ 2106.862330][T13425] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2106.868239][T13425] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2106.874148][T13425] ? lockdep_hardirqs_on+0x79/0x100 [ 2106.879365][T13425] do_syscall_64+0x35/0xb0 [ 2106.884659][T13425] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2106.890567][T13425] RIP: 0033:0x7f58e888a5a9 [ 2106.894998][T13425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2106.914617][T13425] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2106.923049][T13425] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2106.931028][T13425] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2106.939005][T13425] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2106.946983][T13425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2106.954960][T13425] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 03:30:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x60}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3805}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2106.962960][T13425] [ 2107.017390][T13425] memory: usage 307196kB, limit 307200kB, failcnt 45858 [ 2107.024675][T13425] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2107.043597][T13425] Memory cgroup stats for /syz1: [ 2107.043841][T13425] anon 135168 [ 2107.043841][T13425] file 389120 [ 2107.043841][T13425] kernel 314044416 [ 2107.043841][T13425] kernel_stack 65536 [ 2107.043841][T13425] pagetables 77824 [ 2107.043841][T13425] percpu 5593216 [ 2107.043841][T13425] sock 0 [ 2107.043841][T13425] vmalloc 0 [ 2107.043841][T13425] shmem 389120 [ 2107.043841][T13425] zswap 0 [ 2107.043841][T13425] zswapped 0 [ 2107.043841][T13425] file_mapped 389120 [ 2107.043841][T13425] file_dirty 0 [ 2107.043841][T13425] file_writeback 0 [ 2107.043841][T13425] swapcached 0 [ 2107.043841][T13425] anon_thp 0 [ 2107.043841][T13425] file_thp 0 [ 2107.043841][T13425] shmem_thp 0 [ 2107.043841][T13425] inactive_anon 225280 [ 2107.043841][T13425] active_anon 299008 [ 2107.043841][T13425] inactive_file 0 [ 2107.043841][T13425] active_file 0 [ 2107.043841][T13425] unevictable 0 [ 2107.043841][T13425] slab_reclaimable 21832 [ 2107.043841][T13425] slab_unreclaimable 308249776 [ 2107.043841][T13425] slab 308271608 [ 2107.168489][T13425] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13415,uid=0 [ 2107.185502][T13425] Memory cgroup out of memory: Killed process 13425 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2107.220457][T13424] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2107.231838][T13424] CPU: 0 PID: 13424 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2107.242299][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2107.252469][T13424] Call Trace: [ 2107.255761][T13424] [ 2107.258689][T13424] dump_stack_lvl+0xcd/0x134 [ 2107.263282][T13424] dump_header+0x10b/0x7f9 [ 2107.267699][T13424] oom_kill_process.cold+0x10/0x15 [ 2107.272812][T13424] out_of_memory+0x358/0x14a0 [ 2107.277597][T13424] ? find_held_lock+0x2d/0x110 [ 2107.282370][T13424] ? oom_killer_disable+0x270/0x270 [ 2107.287592][T13424] ? find_held_lock+0x2d/0x110 [ 2107.292398][T13424] mem_cgroup_out_of_memory+0x206/0x270 [ 2107.298290][T13424] ? mem_cgroup_margin+0x130/0x130 [ 2107.303429][T13424] ? lock_downgrade+0x6e0/0x6e0 [ 2107.308315][T13424] try_charge_memcg+0xf67/0x13f0 [ 2107.313278][T13424] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2107.319280][T13424] ? lock_downgrade+0x6e0/0x6e0 [ 2107.324155][T13424] charge_memcg+0x31/0x320 [ 2107.328588][T13424] __mem_cgroup_charge+0x27/0x90 [ 2107.333534][T13424] ? _compound_head+0x5d/0x150 [ 2107.338311][T13424] wp_page_copy+0x27c/0x1b60 [ 2107.342921][T13424] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2107.348388][T13424] ? lock_downgrade+0x6e0/0x6e0 [ 2107.353249][T13424] ? vm_normal_page+0x146/0x2a0 [ 2107.358127][T13424] do_wp_page+0x1d1/0x1910 [ 2107.362559][T13424] __handle_mm_fault+0x1813/0x39b0 [ 2107.367693][T13424] ? vm_iomap_memory+0x190/0x190 [ 2107.372669][T13424] handle_mm_fault+0x1c8/0x780 [ 2107.377535][T13424] do_user_addr_fault+0x475/0x1210 [ 2107.382672][T13424] exc_page_fault+0x94/0x170 [ 2107.387307][T13424] asm_exc_page_fault+0x22/0x30 [ 2107.392173][T13424] RIP: 0033:0x7f70e7e37970 [ 2107.396601][T13424] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2107.416220][T13424] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2107.422299][T13424] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2107.430275][T13424] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2107.438257][T13424] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2107.446237][T13424] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2107.454216][T13424] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2107.462194][T13424] ? __x64_sys_socket+0xd/0xb0 [ 2107.467250][T13424] [ 2107.477959][T13424] memory: usage 307200kB, limit 307200kB, failcnt 60946 [ 2107.484939][T13424] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2107.524240][T13424] Memory cgroup stats for /syz3: [ 2107.524417][T13424] anon 106496 [ 2107.524417][T13424] file 782336 [ 2107.524417][T13424] kernel 313683968 [ 2107.524417][T13424] kernel_stack 65536 [ 2107.524417][T13424] pagetables 73728 [ 2107.524417][T13424] percpu 5602688 [ 2107.524417][T13424] sock 0 [ 2107.524417][T13424] vmalloc 0 [ 2107.524417][T13424] shmem 778240 [ 2107.524417][T13424] zswap 0 [ 2107.524417][T13424] zswapped 0 [ 2107.524417][T13424] file_mapped 778240 [ 2107.524417][T13424] file_dirty 4096 [ 2107.524417][T13424] file_writeback 0 [ 2107.524417][T13424] swapcached 0 [ 2107.524417][T13424] anon_thp 0 [ 2107.524417][T13424] file_thp 0 [ 2107.524417][T13424] shmem_thp 0 [ 2107.524417][T13424] inactive_anon 577536 [ 2107.524417][T13424] active_anon 307200 [ 2107.524417][T13424] inactive_file 0 [ 2107.524417][T13424] active_file 4096 [ 2107.524417][T13424] unevictable 0 [ 2107.524417][T13424] slab_reclaimable 123352 [ 2107.524417][T13424] slab_unreclaimable 307779472 [ 2107.524417][T13424] slab 307902824 03:30:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000110000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf82b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3806}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x29ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa0e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf928, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2107.639545][T13424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13424,uid=0 [ 2107.655896][T13424] Memory cgroup out of memory: Killed process 13424 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf929, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa1e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3807}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2aae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2107.919880][T13452] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2107.960955][T13452] CPU: 0 PID: 13452 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2107.971456][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2107.981531][T13452] Call Trace: [ 2107.984825][T13452] [ 2107.987777][T13452] dump_stack_lvl+0xcd/0x134 [ 2107.992405][T13452] dump_header+0x10b/0x7f9 [ 2107.996851][T13452] oom_kill_process.cold+0x10/0x15 [ 2108.001988][T13452] out_of_memory+0x358/0x14a0 [ 2108.006713][T13452] ? find_held_lock+0x2d/0x110 [ 2108.011512][T13452] ? oom_killer_disable+0x270/0x270 [ 2108.016764][T13452] ? find_held_lock+0x2d/0x110 [ 2108.021584][T13452] mem_cgroup_out_of_memory+0x206/0x270 [ 2108.027162][T13452] ? mem_cgroup_margin+0x130/0x130 [ 2108.032304][T13452] ? lock_downgrade+0x6e0/0x6e0 [ 2108.037205][T13452] try_charge_memcg+0xf67/0x13f0 [ 2108.042192][T13452] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2108.048233][T13452] ? lock_downgrade+0x6e0/0x6e0 [ 2108.053133][T13452] charge_memcg+0x31/0x320 [ 2108.057669][T13452] __mem_cgroup_charge+0x27/0x90 [ 2108.062611][T13452] ? _compound_head+0x5d/0x150 [ 2108.067383][T13452] wp_page_copy+0x27c/0x1b60 [ 2108.072110][T13452] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2108.077586][T13452] ? lock_downgrade+0x6e0/0x6e0 [ 2108.082449][T13452] ? vm_normal_page+0x146/0x2a0 [ 2108.087316][T13452] do_wp_page+0x1d1/0x1910 [ 2108.091743][T13452] __handle_mm_fault+0x1813/0x39b0 [ 2108.096872][T13452] ? vm_iomap_memory+0x190/0x190 [ 2108.101830][T13452] handle_mm_fault+0x1c8/0x780 [ 2108.106596][T13452] do_user_addr_fault+0x475/0x1210 [ 2108.111889][T13452] exc_page_fault+0x94/0x170 [ 2108.116522][T13452] asm_exc_page_fault+0x22/0x30 [ 2108.121396][T13452] RIP: 0033:0x7f70e7e37970 [ 2108.125811][T13452] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2108.145514][T13452] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2108.151598][T13452] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2108.159577][T13452] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2108.167563][T13452] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2108.175551][T13452] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2108.183530][T13452] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2108.191523][T13452] ? __x64_sys_socket+0xd/0xb0 [ 2108.196304][T13452] [ 2108.202977][T13452] memory: usage 307200kB, limit 307200kB, failcnt 61001 [ 2108.215857][T13452] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2108.222831][T13452] Memory cgroup stats for /syz3: [ 2108.223046][T13452] anon 106496 [ 2108.223046][T13452] file 782336 [ 2108.223046][T13452] kernel 313683968 [ 2108.223046][T13452] kernel_stack 65536 [ 2108.223046][T13452] pagetables 73728 [ 2108.223046][T13452] percpu 5602688 [ 2108.223046][T13452] sock 0 [ 2108.223046][T13452] vmalloc 0 [ 2108.223046][T13452] shmem 778240 [ 2108.223046][T13452] zswap 0 [ 2108.223046][T13452] zswapped 0 [ 2108.223046][T13452] file_mapped 778240 [ 2108.223046][T13452] file_dirty 4096 [ 2108.223046][T13452] file_writeback 0 [ 2108.223046][T13452] swapcached 0 [ 2108.223046][T13452] anon_thp 0 [ 2108.223046][T13452] file_thp 0 [ 2108.223046][T13452] shmem_thp 0 [ 2108.223046][T13452] inactive_anon 577536 [ 2108.223046][T13452] active_anon 307200 [ 2108.223046][T13452] inactive_file 0 [ 2108.223046][T13452] active_file 4096 [ 2108.223046][T13452] unevictable 0 [ 2108.223046][T13452] slab_reclaimable 123352 [ 2108.223046][T13452] slab_unreclaimable 307779472 03:30:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000120000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf92a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3904}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa2e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2108.223046][T13452] slab 307902824 [ 2108.317808][T13452] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13452,uid=0 [ 2108.335970][T13452] Memory cgroup out of memory: Killed process 13452 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xf92b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2bae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfa28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa3e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3905}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2108.541439][T13474] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2108.593582][T13474] CPU: 1 PID: 13474 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2108.604057][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2108.614146][T13474] Call Trace: [ 2108.617447][T13474] [ 2108.620400][T13474] dump_stack_lvl+0xcd/0x134 [ 2108.625025][T13474] dump_header+0x10b/0x7f9 [ 2108.629472][T13474] oom_kill_process.cold+0x10/0x15 [ 2108.634623][T13474] out_of_memory+0x358/0x14a0 [ 2108.639346][T13474] ? find_held_lock+0x2d/0x110 [ 2108.644145][T13474] ? oom_killer_disable+0x270/0x270 [ 2108.649381][T13474] ? find_held_lock+0x2d/0x110 [ 2108.654172][T13474] mem_cgroup_out_of_memory+0x206/0x270 [ 2108.659747][T13474] ? mem_cgroup_margin+0x130/0x130 [ 2108.664888][T13474] ? lock_downgrade+0x6e0/0x6e0 [ 2108.669792][T13474] try_charge_memcg+0xf67/0x13f0 [ 2108.674778][T13474] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2108.680811][T13474] ? lock_downgrade+0x6e0/0x6e0 [ 2108.685717][T13474] charge_memcg+0x31/0x320 [ 2108.690263][T13474] __mem_cgroup_charge+0x27/0x90 [ 2108.695240][T13474] ? _compound_head+0x5d/0x150 [ 2108.700038][T13474] wp_page_copy+0x27c/0x1b60 [ 2108.704668][T13474] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2108.710157][T13474] ? lock_downgrade+0x6e0/0x6e0 [ 2108.715039][T13474] ? vm_normal_page+0x146/0x2a0 [ 2108.719942][T13474] do_wp_page+0x1d1/0x1910 [ 2108.724388][T13474] __handle_mm_fault+0x1813/0x39b0 [ 2108.729528][T13474] ? vm_iomap_memory+0x190/0x190 [ 2108.734532][T13474] handle_mm_fault+0x1c8/0x780 [ 2108.739354][T13474] do_user_addr_fault+0x475/0x1210 03:30:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3906}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2108.744512][T13474] exc_page_fault+0x94/0x170 [ 2108.749139][T13474] asm_exc_page_fault+0x22/0x30 [ 2108.754025][T13474] RIP: 0033:0x7f70e7e37970 [ 2108.758463][T13474] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2108.778278][T13474] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2108.784392][T13474] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2108.792395][T13474] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2108.795468][T13492] __nla_validate_parse: 12 callbacks suppressed [ 2108.795487][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2108.800377][T13474] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2108.800398][T13474] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2108.800413][T13474] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2108.800428][T13474] ? __x64_sys_socket+0xd/0xb0 [ 2108.800480][T13474] [ 2108.859031][T13474] memory: usage 307200kB, limit 307200kB, failcnt 61067 [ 2108.864455][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2108.868371][T13474] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2108.888109][T13474] Memory cgroup stats for /syz3: [ 2108.888343][T13474] anon 106496 [ 2108.888343][T13474] file 782336 [ 2108.888343][T13474] kernel 313683968 [ 2108.888343][T13474] kernel_stack 65536 [ 2108.888343][T13474] pagetables 73728 [ 2108.888343][T13474] percpu 5602688 [ 2108.888343][T13474] sock 0 [ 2108.888343][T13474] vmalloc 0 [ 2108.888343][T13474] shmem 778240 [ 2108.888343][T13474] zswap 0 [ 2108.888343][T13474] zswapped 0 [ 2108.888343][T13474] file_mapped 778240 [ 2108.888343][T13474] file_dirty 4096 [ 2108.888343][T13474] file_writeback 0 [ 2108.888343][T13474] swapcached 0 [ 2108.888343][T13474] anon_thp 0 [ 2108.888343][T13474] file_thp 0 [ 2108.888343][T13474] shmem_thp 0 [ 2108.888343][T13474] inactive_anon 577536 [ 2108.888343][T13474] active_anon 307200 [ 2108.888343][T13474] inactive_file 0 [ 2108.888343][T13474] active_file 4096 [ 2108.888343][T13474] unevictable 0 [ 2108.888343][T13474] slab_reclaimable 123352 [ 2108.888343][T13474] slab_unreclaimable 307779472 [ 2108.888343][T13474] slab 307902824 03:30:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000180000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfa29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3907}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa4e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2108.982936][T13474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13474,uid=0 [ 2109.001803][T13474] Memory cgroup out of memory: Killed process 13474 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2cae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfa2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2109.049454][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfa2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa5e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2109.209790][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfb28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3a04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2109.294789][T13503] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2109.324805][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2109.334428][T13503] CPU: 1 PID: 13503 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2109.344880][T13503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2109.354961][T13503] Call Trace: [ 2109.358268][T13503] [ 2109.361243][T13503] dump_stack_lvl+0xcd/0x134 [ 2109.365870][T13503] dump_header+0x10b/0x7f9 [ 2109.370313][T13503] oom_kill_process.cold+0x10/0x15 [ 2109.375455][T13503] out_of_memory+0x358/0x14a0 [ 2109.380163][T13503] ? find_held_lock+0x2d/0x110 [ 2109.384949][T13503] ? oom_killer_disable+0x270/0x270 [ 2109.390174][T13503] ? find_held_lock+0x2d/0x110 [ 2109.394955][T13503] mem_cgroup_out_of_memory+0x206/0x270 [ 2109.400511][T13503] ? mem_cgroup_margin+0x130/0x130 [ 2109.405631][T13503] ? lock_downgrade+0x6e0/0x6e0 [ 2109.410508][T13503] try_charge_memcg+0xf67/0x13f0 [ 2109.415464][T13503] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2109.421462][T13503] ? lock_downgrade+0x6e0/0x6e0 [ 2109.426334][T13503] charge_memcg+0x31/0x320 [ 2109.430762][T13503] __mem_cgroup_charge+0x27/0x90 [ 2109.435712][T13503] ? _compound_head+0x5d/0x150 [ 2109.440491][T13503] wp_page_copy+0x27c/0x1b60 [ 2109.445097][T13503] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2109.450566][T13503] ? lock_downgrade+0x6e0/0x6e0 [ 2109.455439][T13503] ? vm_normal_page+0x146/0x2a0 [ 2109.460312][T13503] do_wp_page+0x52c/0x1910 [ 2109.464740][T13503] __handle_mm_fault+0x1813/0x39b0 [ 2109.469866][T13503] ? vm_iomap_memory+0x190/0x190 [ 2109.474834][T13503] handle_mm_fault+0x1c8/0x780 [ 2109.479614][T13503] do_user_addr_fault+0x475/0x1210 [ 2109.484748][T13503] exc_page_fault+0x94/0x170 [ 2109.489356][T13503] asm_exc_page_fault+0x22/0x30 [ 2109.494219][T13503] RIP: 0033:0x7f70e7e34a15 [ 2109.498642][T13503] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2109.518340][T13503] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2109.524412][T13503] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2109.532390][T13503] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2109.540366][T13503] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2109.548351][T13503] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 0000000000202f11 [ 2109.556326][T13503] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2109.564350][T13503] [ 2109.572532][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2109.629537][T13503] memory: usage 307200kB, limit 307200kB, failcnt 61122 [ 2109.636617][T13503] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2109.643475][T13503] Memory cgroup stats for /syz3: [ 2109.643619][T13503] anon 90112 [ 2109.643619][T13503] file 782336 [ 2109.643619][T13503] kernel 313700352 [ 2109.643619][T13503] kernel_stack 65536 [ 2109.643619][T13503] pagetables 73728 [ 2109.643619][T13503] percpu 5602688 [ 2109.643619][T13503] sock 0 [ 2109.643619][T13503] vmalloc 0 [ 2109.643619][T13503] shmem 778240 [ 2109.643619][T13503] zswap 0 [ 2109.643619][T13503] zswapped 0 [ 2109.643619][T13503] file_mapped 778240 [ 2109.643619][T13503] file_dirty 0 [ 2109.643619][T13503] file_writeback 0 [ 2109.643619][T13503] swapcached 0 [ 2109.643619][T13503] anon_thp 0 [ 2109.643619][T13503] file_thp 0 [ 2109.643619][T13503] shmem_thp 0 [ 2109.643619][T13503] inactive_anon 561152 [ 2109.643619][T13503] active_anon 307200 [ 2109.643619][T13503] inactive_file 0 [ 2109.643619][T13503] active_file 4096 [ 2109.643619][T13503] unevictable 0 [ 2109.643619][T13503] slab_reclaimable 123352 03:30:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000240000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2dae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfb29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa6000000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3a05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2109.643619][T13503] slab_unreclaimable 307790872 [ 2109.643619][T13503] slab 307914224 [ 2109.740007][T13503] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13503,uid=0 [ 2109.756417][T13503] Memory cgroup out of memory: Killed process 13503 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfb2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2109.802589][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfb2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa6e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2109.929394][T13529] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2109.955032][T13529] CPU: 1 PID: 13529 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2109.965554][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2109.975637][T13529] Call Trace: 03:30:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2109.978935][T13529] [ 2109.981884][T13529] dump_stack_lvl+0xcd/0x134 [ 2109.986510][T13529] dump_header+0x10b/0x7f9 [ 2109.990961][T13529] oom_kill_process.cold+0x10/0x15 [ 2109.996105][T13529] out_of_memory+0x358/0x14a0 [ 2110.000818][T13529] ? find_held_lock+0x2d/0x110 [ 2110.005363][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2110.005675][T13529] ? oom_killer_disable+0x270/0x270 [ 2110.005708][T13529] ? find_held_lock+0x2d/0x110 [ 2110.024967][T13529] mem_cgroup_out_of_memory+0x206/0x270 [ 2110.030564][T13529] ? mem_cgroup_margin+0x130/0x130 [ 2110.035703][T13529] ? lock_downgrade+0x6e0/0x6e0 [ 2110.040605][T13529] try_charge_memcg+0xf67/0x13f0 [ 2110.045587][T13529] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2110.051616][T13529] ? lock_downgrade+0x6e0/0x6e0 [ 2110.056511][T13529] charge_memcg+0x31/0x320 [ 2110.060961][T13529] __mem_cgroup_charge+0x27/0x90 [ 2110.065928][T13529] ? _compound_head+0x5d/0x150 [ 2110.070718][T13529] wp_page_copy+0x27c/0x1b60 [ 2110.075344][T13529] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2110.080830][T13529] ? lock_downgrade+0x6e0/0x6e0 [ 2110.085702][T13529] ? vm_normal_page+0x146/0x2a0 [ 2110.090595][T13529] do_wp_page+0x52c/0x1910 [ 2110.095040][T13529] __handle_mm_fault+0x1813/0x39b0 [ 2110.100187][T13529] ? vm_iomap_memory+0x190/0x190 [ 2110.105177][T13529] handle_mm_fault+0x1c8/0x780 [ 2110.109969][T13529] do_user_addr_fault+0x475/0x1210 [ 2110.116170][T13529] exc_page_fault+0x94/0x170 [ 2110.120797][T13529] asm_exc_page_fault+0x22/0x30 [ 2110.125680][T13529] RIP: 0033:0x7f70e7e34a15 03:30:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2110.130125][T13529] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2110.149769][T13529] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2110.155871][T13529] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2110.163876][T13529] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2110.171882][T13529] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2110.179884][T13529] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000002031ad [ 2110.187885][T13529] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2110.195910][T13529] 03:30:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa7e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2110.223517][T13529] memory: usage 307200kB, limit 307200kB, failcnt 61195 [ 2110.230977][T13529] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2110.238064][T13529] Memory cgroup stats for /syz3: [ 2110.238284][T13529] anon 90112 [ 2110.238284][T13529] file 782336 [ 2110.238284][T13529] kernel 313700352 [ 2110.238284][T13529] kernel_stack 65536 [ 2110.238284][T13529] pagetables 73728 [ 2110.238284][T13529] percpu 5602688 [ 2110.238284][T13529] sock 0 [ 2110.238284][T13529] vmalloc 0 [ 2110.238284][T13529] shmem 778240 [ 2110.238284][T13529] zswap 0 [ 2110.238284][T13529] zswapped 0 [ 2110.238284][T13529] file_mapped 778240 [ 2110.238284][T13529] file_dirty 0 [ 2110.238284][T13529] file_writeback 0 [ 2110.238284][T13529] swapcached 0 [ 2110.238284][T13529] anon_thp 0 [ 2110.238284][T13529] file_thp 0 [ 2110.238284][T13529] shmem_thp 0 [ 2110.238284][T13529] inactive_anon 561152 [ 2110.238284][T13529] active_anon 307200 [ 2110.238284][T13529] inactive_file 0 [ 2110.238284][T13529] active_file 4096 [ 2110.238284][T13529] unevictable 0 [ 2110.238284][T13529] slab_reclaimable 123352 [ 2110.238284][T13529] slab_unreclaimable 307790872 [ 2110.238284][T13529] slab 307914224 [ 2110.333187][T13529] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13529,uid=0 [ 2110.351910][T13529] Memory cgroup out of memory: Killed process 13529 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000002c0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) [ 2110.369776][T13521] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2110.392104][T13521] CPU: 1 PID: 13521 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2110.402752][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2110.412839][T13521] Call Trace: [ 2110.416148][T13521] [ 2110.419109][T13521] dump_stack_lvl+0xcd/0x134 [ 2110.423747][T13521] dump_header+0x10b/0x7f9 [ 2110.428201][T13521] oom_kill_process.cold+0x10/0x15 [ 2110.433340][T13521] out_of_memory+0x358/0x14a0 [ 2110.438025][T13521] ? oom_killer_disable+0x270/0x270 [ 2110.443230][T13521] ? find_held_lock+0x2d/0x110 [ 2110.448257][T13521] mem_cgroup_out_of_memory+0x206/0x270 [ 2110.453840][T13521] ? mem_cgroup_margin+0x130/0x130 [ 2110.458951][T13521] ? lock_downgrade+0x6e0/0x6e0 [ 2110.463809][T13521] try_charge_memcg+0xf67/0x13f0 [ 2110.468769][T13521] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2110.474776][T13521] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2110.480593][T13521] ? lock_downgrade+0x6e0/0x6e0 [ 2110.485486][T13521] obj_cgroup_charge+0x2ab/0x5e0 [ 2110.490455][T13521] __kmalloc+0xb2/0x340 [ 2110.494614][T13521] ? veth_dev_init+0x1dd/0x3e0 [ 2110.499487][T13521] veth_dev_init+0x1dd/0x3e0 [ 2110.504211][T13521] ? veth_get_num_queues+0x50/0x50 [ 2110.509429][T13521] register_netdevice+0x5e1/0x1680 [ 2110.514568][T13521] ? netdev_change_features+0xb0/0xb0 [ 2110.519962][T13521] ? dev_addr_mod+0x2c9/0x3f0 [ 2110.524672][T13521] veth_newlink+0x338/0x990 [ 2110.529193][T13521] ? veth_set_features+0x190/0x190 [ 2110.534315][T13521] ? netlink_rcv_skb+0x153/0x420 [ 2110.539269][T13521] ? netlink_unicast+0x543/0x7f0 [ 2110.544218][T13521] ? netlink_sendmsg+0x917/0xe10 [ 2110.549223][T13521] ? dev_addr_mod+0x2c9/0x3f0 [ 2110.553920][T13521] ? rtnl_create_link+0x7e8/0xc00 [ 2110.559055][T13521] ? veth_set_features+0x190/0x190 [ 2110.564182][T13521] __rtnl_newlink+0x1087/0x17e0 [ 2110.569064][T13521] ? rtnl_link_unregister+0x250/0x250 [ 2110.574454][T13521] ? find_held_lock+0x2d/0x110 [ 2110.579258][T13521] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2110.584817][T13521] ? trace_kmalloc+0x32/0x100 [ 2110.589519][T13521] rtnl_newlink+0x64/0xa0 [ 2110.593861][T13521] ? __rtnl_newlink+0x17e0/0x17e0 [ 2110.598904][T13521] rtnetlink_rcv_msg+0x43a/0xca0 [ 2110.603865][T13521] ? rtnl_getlink+0xae0/0xae0 [ 2110.608554][T13521] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2110.613923][T13521] ? ref_tracker_free+0x370/0x6b0 [ 2110.619021][T13521] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2110.624431][T13521] netlink_rcv_skb+0x153/0x420 [ 2110.629216][T13521] ? rtnl_getlink+0xae0/0xae0 [ 2110.633945][T13521] ? netlink_ack+0xd50/0xd50 [ 2110.638549][T13521] ? netlink_deliver_tap+0x1a2/0xc40 [ 2110.643857][T13521] ? netlink_deliver_tap+0x1b1/0xc40 [ 2110.649168][T13521] netlink_unicast+0x543/0x7f0 [ 2110.653953][T13521] ? netlink_attachskb+0x880/0x880 [ 2110.659080][T13521] ? __phys_addr+0xc4/0x140 [ 2110.663622][T13521] ? __phys_addr_symbol+0x2c/0x70 [ 2110.668675][T13521] ? __check_object_size+0x2de/0x700 [ 2110.673998][T13521] netlink_sendmsg+0x917/0xe10 [ 2110.678795][T13521] ? netlink_unicast+0x7f0/0x7f0 [ 2110.683768][T13521] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2110.689095][T13521] ? netlink_unicast+0x7f0/0x7f0 [ 2110.694064][T13521] sock_sendmsg+0xcf/0x120 [ 2110.698503][T13521] ____sys_sendmsg+0x6eb/0x810 [ 2110.703286][T13521] ? copy_msghdr_from_user+0xfc/0x150 [ 2110.708677][T13521] ? kernel_sendmsg+0x50/0x50 [ 2110.713373][T13521] ? futex_unqueue+0xb3/0x120 [ 2110.718163][T13521] ___sys_sendmsg+0x110/0x1b0 [ 2110.722859][T13521] ? do_recvmmsg+0x6e0/0x6e0 [ 2110.727471][T13521] ? __fget_files+0x248/0x440 [ 2110.732162][T13521] ? lock_downgrade+0x6e0/0x6e0 [ 2110.737030][T13521] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2110.743030][T13521] ? __fget_files+0x26a/0x440 [ 2110.747727][T13521] ? __fget_light+0xe5/0x270 [ 2110.752341][T13521] __sys_sendmsg+0xf3/0x1c0 [ 2110.756860][T13521] ? __sys_sendmsg_sock+0x30/0x30 [ 2110.761899][T13521] ? lock_downgrade+0x6e0/0x6e0 [ 2110.766777][T13521] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2110.772707][T13521] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2110.778621][T13521] ? lockdep_hardirqs_on+0x79/0x100 [ 2110.783837][T13521] do_syscall_64+0x35/0xb0 [ 2110.788267][T13521] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2110.794347][T13521] RIP: 0033:0x7f58e888a5a9 [ 2110.798860][T13521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2110.818483][T13521] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2110.826908][T13521] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2110.834893][T13521] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2110.842902][T13521] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2110.851016][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2110.859031][T13521] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2110.867045][T13521] [ 2110.873075][T13521] memory: usage 307196kB, limit 307200kB, failcnt 46148 [ 2110.892888][T13521] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2110.901854][T13521] Memory cgroup stats for /syz1: [ 2110.902103][T13521] anon 135168 [ 2110.902103][T13521] file 389120 [ 2110.902103][T13521] kernel 314011648 [ 2110.902103][T13521] kernel_stack 32768 [ 2110.902103][T13521] pagetables 77824 [ 2110.902103][T13521] percpu 5593216 [ 2110.902103][T13521] sock 0 [ 2110.902103][T13521] vmalloc 0 [ 2110.902103][T13521] shmem 389120 [ 2110.902103][T13521] zswap 0 [ 2110.902103][T13521] zswapped 0 [ 2110.902103][T13521] file_mapped 389120 [ 2110.902103][T13521] file_dirty 0 [ 2110.902103][T13521] file_writeback 0 [ 2110.902103][T13521] swapcached 0 [ 2110.902103][T13521] anon_thp 0 [ 2110.902103][T13521] file_thp 0 [ 2110.902103][T13521] shmem_thp 0 [ 2110.902103][T13521] inactive_anon 225280 [ 2110.902103][T13521] active_anon 299008 [ 2110.902103][T13521] inactive_file 0 [ 2110.902103][T13521] active_file 0 [ 2110.902103][T13521] unevictable 0 [ 2110.902103][T13521] slab_reclaimable 21832 [ 2110.902103][T13521] slab_unreclaimable 308249776 [ 2110.902103][T13521] slab 308271608 [ 2111.002070][T13521] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13519,uid=0 [ 2111.018406][T13521] Memory cgroup out of memory: Killed process 13521 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2111.070087][T13546] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2111.086973][T13546] CPU: 0 PID: 13546 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2111.097450][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2111.107980][T13546] Call Trace: [ 2111.111271][T13546] [ 2111.114199][T13546] dump_stack_lvl+0xcd/0x134 [ 2111.118808][T13546] dump_header+0x10b/0x7f9 [ 2111.123251][T13546] oom_kill_process.cold+0x10/0x15 [ 2111.128388][T13546] out_of_memory+0x358/0x14a0 [ 2111.133089][T13546] ? find_held_lock+0x2d/0x110 [ 2111.137871][T13546] ? oom_killer_disable+0x270/0x270 [ 2111.143091][T13546] ? find_held_lock+0x2d/0x110 [ 2111.147863][T13546] mem_cgroup_out_of_memory+0x206/0x270 [ 2111.153428][T13546] ? mem_cgroup_margin+0x130/0x130 [ 2111.158551][T13546] ? lock_downgrade+0x6e0/0x6e0 [ 2111.163433][T13546] try_charge_memcg+0xf67/0x13f0 [ 2111.168395][T13546] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2111.174444][T13546] ? lock_downgrade+0x6e0/0x6e0 [ 2111.179410][T13546] charge_memcg+0x31/0x320 [ 2111.183842][T13546] __mem_cgroup_charge+0x27/0x90 [ 2111.188789][T13546] ? _compound_head+0x5d/0x150 [ 2111.193566][T13546] wp_page_copy+0x27c/0x1b60 [ 2111.198174][T13546] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2111.203641][T13546] ? lock_downgrade+0x6e0/0x6e0 [ 2111.208504][T13546] ? vm_normal_page+0x146/0x2a0 [ 2111.213385][T13546] do_wp_page+0x1d1/0x1910 [ 2111.217816][T13546] __handle_mm_fault+0x1813/0x39b0 [ 2111.222944][T13546] ? vm_iomap_memory+0x190/0x190 [ 2111.227918][T13546] handle_mm_fault+0x1c8/0x780 [ 2111.232697][T13546] do_user_addr_fault+0x475/0x1210 [ 2111.237890][T13546] exc_page_fault+0x94/0x170 [ 2111.242497][T13546] asm_exc_page_fault+0x22/0x30 [ 2111.247358][T13546] RIP: 0033:0x7f70e7e37970 [ 2111.251786][T13546] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2111.271403][T13546] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2111.277480][T13546] RAX: 000000005b791d71 RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2111.285462][T13546] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 0000000008ec3ccd [ 2111.293443][T13546] RBP: 000000005b791d71 R08: 0000000000001d71 R09: 000000005b791d75 [ 2111.301421][T13546] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2111.309398][T13546] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff81a37cdf [ 2111.317382][T13546] ? trace_user_exit.constprop.0+0x13f/0x210 [ 2111.323402][T13546] [ 2111.327997][T13546] memory: usage 307196kB, limit 307200kB, failcnt 61263 [ 2111.335929][T13546] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2111.342978][T13546] Memory cgroup stats for /syz3: [ 2111.343172][T13546] anon 102400 [ 2111.343172][T13546] file 782336 [ 2111.343172][T13546] kernel 313683968 [ 2111.343172][T13546] kernel_stack 65536 [ 2111.343172][T13546] pagetables 73728 [ 2111.343172][T13546] percpu 5602688 [ 2111.343172][T13546] sock 0 03:30:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2eae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3a06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfc28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2111.343172][T13546] vmalloc 0 [ 2111.343172][T13546] shmem 778240 [ 2111.343172][T13546] zswap 0 [ 2111.343172][T13546] zswapped 0 [ 2111.343172][T13546] file_mapped 778240 [ 2111.343172][T13546] file_dirty 0 [ 2111.343172][T13546] file_writeback 0 [ 2111.343172][T13546] swapcached 0 [ 2111.343172][T13546] anon_thp 0 [ 2111.343172][T13546] file_thp 0 [ 2111.343172][T13546] shmem_thp 0 [ 2111.343172][T13546] inactive_anon 569344 [ 2111.343172][T13546] active_anon 307200 [ 2111.343172][T13546] inactive_file 0 [ 2111.343172][T13546] active_file 4096 03:30:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfc29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa8e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2111.343172][T13546] unevictable 0 [ 2111.343172][T13546] slab_reclaimable 123352 [ 2111.343172][T13546] slab_unreclaimable 307779472 [ 2111.343172][T13546] slab 307902824 [ 2111.456656][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2111.495173][T13546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13546,uid=0 [ 2111.511639][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3a07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfc2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2111.529949][T13546] Memory cgroup out of memory: Killed process 13546 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2fae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfc2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa9e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3b04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfd28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x30ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfd29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xaae21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2111.896162][T13568] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2111.931592][T13568] CPU: 1 PID: 13568 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2111.942067][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2111.952147][T13568] Call Trace: [ 2111.955446][T13568] [ 2111.958401][T13568] dump_stack_lvl+0xcd/0x134 [ 2111.963027][T13568] dump_header+0x10b/0x7f9 [ 2111.967475][T13568] oom_kill_process.cold+0x10/0x15 [ 2111.972629][T13568] out_of_memory+0x358/0x14a0 [ 2111.977346][T13568] ? find_held_lock+0x2d/0x110 [ 2111.982143][T13568] ? oom_killer_disable+0x270/0x270 [ 2111.987463][T13568] ? find_held_lock+0x2d/0x110 03:30:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfd2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x31ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2111.992262][T13568] mem_cgroup_out_of_memory+0x206/0x270 [ 2111.997845][T13568] ? mem_cgroup_margin+0x130/0x130 [ 2112.002987][T13568] ? lock_downgrade+0x6e0/0x6e0 [ 2112.007884][T13568] try_charge_memcg+0xf67/0x13f0 [ 2112.012859][T13568] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2112.018877][T13568] ? lock_downgrade+0x6e0/0x6e0 [ 2112.023775][T13568] charge_memcg+0x31/0x320 [ 2112.028231][T13568] __mem_cgroup_charge+0x27/0x90 [ 2112.033198][T13568] ? _compound_head+0x5d/0x150 [ 2112.037988][T13568] wp_page_copy+0x27c/0x1b60 [ 2112.042605][T13568] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2112.048078][T13568] ? lock_downgrade+0x6e0/0x6e0 [ 2112.052939][T13568] ? vm_normal_page+0x146/0x2a0 [ 2112.057810][T13568] do_wp_page+0x1d1/0x1910 [ 2112.062242][T13568] __handle_mm_fault+0x1813/0x39b0 [ 2112.067370][T13568] ? vm_iomap_memory+0x190/0x190 [ 2112.072425][T13568] handle_mm_fault+0x1c8/0x780 [ 2112.077204][T13568] do_user_addr_fault+0x475/0x1210 [ 2112.082348][T13568] exc_page_fault+0x94/0x170 [ 2112.086952][T13568] asm_exc_page_fault+0x22/0x30 [ 2112.091818][T13568] RIP: 0033:0x7f70e7e37970 [ 2112.096239][T13568] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2112.115865][T13568] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2112.121952][T13568] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2112.129948][T13568] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2112.137933][T13568] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2112.145913][T13568] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2112.153893][T13568] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2112.161876][T13568] ? __x64_sys_socket+0xd/0xb0 [ 2112.166671][T13568] [ 2112.314700][T13568] memory: usage 307200kB, limit 307200kB, failcnt 61340 [ 2112.322060][T13568] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2112.329663][T13568] Memory cgroup stats for /syz3: [ 2112.329788][T13568] anon 106496 [ 2112.329788][T13568] file 782336 [ 2112.329788][T13568] kernel 313683968 [ 2112.329788][T13568] kernel_stack 65536 [ 2112.329788][T13568] pagetables 73728 [ 2112.329788][T13568] percpu 5602688 [ 2112.329788][T13568] sock 0 [ 2112.329788][T13568] vmalloc 0 [ 2112.329788][T13568] shmem 778240 [ 2112.329788][T13568] zswap 0 [ 2112.329788][T13568] zswapped 0 [ 2112.329788][T13568] file_mapped 778240 [ 2112.329788][T13568] file_dirty 0 [ 2112.329788][T13568] file_writeback 0 [ 2112.329788][T13568] swapcached 0 [ 2112.329788][T13568] anon_thp 0 [ 2112.329788][T13568] file_thp 0 [ 2112.329788][T13568] shmem_thp 0 [ 2112.329788][T13568] inactive_anon 577536 [ 2112.329788][T13568] active_anon 307200 [ 2112.329788][T13568] inactive_file 0 [ 2112.329788][T13568] active_file 4096 [ 2112.329788][T13568] unevictable 0 [ 2112.329788][T13568] slab_reclaimable 123352 03:30:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000004a0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3b05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfd2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xabe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x32030000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2112.329788][T13568] slab_unreclaimable 307779472 [ 2112.329788][T13568] slab 307902824 [ 2112.425848][T13568] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13568,uid=0 [ 2112.441683][T13568] Memory cgroup out of memory: Killed process 13568 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfe28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfe29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xace21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x32ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfe2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3b06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2112.707254][T13604] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2112.740534][T13604] CPU: 0 PID: 13604 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2112.751020][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2112.761103][T13604] Call Trace: [ 2112.764410][T13604] [ 2112.767367][T13604] dump_stack_lvl+0xcd/0x134 [ 2112.771994][T13604] dump_header+0x10b/0x7f9 [ 2112.776467][T13604] oom_kill_process.cold+0x10/0x15 [ 2112.781616][T13604] out_of_memory+0x358/0x14a0 [ 2112.786335][T13604] ? find_held_lock+0x2d/0x110 [ 2112.791138][T13604] ? oom_killer_disable+0x270/0x270 [ 2112.796377][T13604] ? find_held_lock+0x2d/0x110 [ 2112.801178][T13604] mem_cgroup_out_of_memory+0x206/0x270 [ 2112.806755][T13604] ? mem_cgroup_margin+0x130/0x130 [ 2112.811890][T13604] ? lock_downgrade+0x6e0/0x6e0 [ 2112.816783][T13604] try_charge_memcg+0xf67/0x13f0 [ 2112.821755][T13604] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2112.827763][T13604] ? lock_downgrade+0x6e0/0x6e0 [ 2112.832639][T13604] charge_memcg+0x31/0x320 [ 2112.837068][T13604] __mem_cgroup_charge+0x27/0x90 [ 2112.842014][T13604] ? _compound_head+0x5d/0x150 [ 2112.846783][T13604] wp_page_copy+0x27c/0x1b60 [ 2112.851390][T13604] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2112.856854][T13604] ? lock_downgrade+0x6e0/0x6e0 [ 2112.861719][T13604] ? vm_normal_page+0x146/0x2a0 [ 2112.866589][T13604] do_wp_page+0x1d1/0x1910 [ 2112.871020][T13604] __handle_mm_fault+0x1813/0x39b0 [ 2112.876154][T13604] ? vm_iomap_memory+0x190/0x190 [ 2112.881121][T13604] handle_mm_fault+0x1c8/0x780 [ 2112.885905][T13604] do_user_addr_fault+0x475/0x1210 [ 2112.891047][T13604] exc_page_fault+0x94/0x170 [ 2112.895655][T13604] asm_exc_page_fault+0x22/0x30 [ 2112.900524][T13604] RIP: 0033:0x7f70e7e37970 [ 2112.904946][T13604] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2112.924568][T13604] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2112.930646][T13604] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2112.938622][T13604] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2112.946598][T13604] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2112.954595][T13604] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2112.962580][T13604] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2112.970578][T13604] ? __x64_sys_socket+0xd/0xb0 [ 2112.975394][T13604] [ 2112.991352][T13604] memory: usage 307200kB, limit 307200kB, failcnt 61393 [ 2113.027480][T13604] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2113.043313][T13604] Memory cgroup stats for /syz3: [ 2113.043482][T13604] anon 106496 [ 2113.043482][T13604] file 782336 [ 2113.043482][T13604] kernel 313683968 [ 2113.043482][T13604] kernel_stack 65536 [ 2113.043482][T13604] pagetables 73728 [ 2113.043482][T13604] percpu 5602688 [ 2113.043482][T13604] sock 0 [ 2113.043482][T13604] vmalloc 0 [ 2113.043482][T13604] shmem 778240 [ 2113.043482][T13604] zswap 0 [ 2113.043482][T13604] zswapped 0 [ 2113.043482][T13604] file_mapped 778240 [ 2113.043482][T13604] file_dirty 0 [ 2113.043482][T13604] file_writeback 0 [ 2113.043482][T13604] swapcached 0 [ 2113.043482][T13604] anon_thp 0 [ 2113.043482][T13604] file_thp 0 [ 2113.043482][T13604] shmem_thp 0 [ 2113.043482][T13604] inactive_anon 577536 [ 2113.043482][T13604] active_anon 307200 [ 2113.043482][T13604] inactive_file 0 [ 2113.043482][T13604] active_file 4096 [ 2113.043482][T13604] unevictable 0 03:30:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000004c0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3b07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xfe2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x500}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xade21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x33ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2113.043482][T13604] slab_reclaimable 123352 [ 2113.043482][T13604] slab_unreclaimable 307779472 [ 2113.043482][T13604] slab 307902824 [ 2113.143966][T13604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13604,uid=0 [ 2113.160248][T13604] Memory cgroup out of memory: Killed process 13604 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xff28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xff29, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3c04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xaee21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xff2a, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2113.426124][T13629] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2113.466443][T13629] CPU: 1 PID: 13629 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2113.476925][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2113.487009][T13629] Call Trace: [ 2113.490325][T13629] [ 2113.493287][T13629] dump_stack_lvl+0xcd/0x134 [ 2113.497919][T13629] dump_header+0x10b/0x7f9 [ 2113.502373][T13629] oom_kill_process.cold+0x10/0x15 [ 2113.507517][T13629] out_of_memory+0x358/0x14a0 [ 2113.512233][T13629] ? find_held_lock+0x2d/0x110 [ 2113.517025][T13629] ? oom_killer_disable+0x270/0x270 [ 2113.522279][T13629] ? find_held_lock+0x2d/0x110 [ 2113.527084][T13629] mem_cgroup_out_of_memory+0x206/0x270 [ 2113.532668][T13629] ? mem_cgroup_margin+0x130/0x130 [ 2113.537787][T13629] ? lock_downgrade+0x6e0/0x6e0 [ 2113.542665][T13629] try_charge_memcg+0xf67/0x13f0 [ 2113.547622][T13629] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2113.553614][T13629] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2113.559352][T13629] ? lock_downgrade+0x6e0/0x6e0 [ 2113.564242][T13629] obj_cgroup_charge+0x2ab/0x5e0 [ 2113.569198][T13629] __kmalloc+0xb2/0x340 [ 2113.573363][T13629] ? veth_dev_init+0x1dd/0x3e0 [ 2113.578145][T13629] veth_dev_init+0x1dd/0x3e0 [ 2113.582748][T13629] ? veth_get_num_queues+0x50/0x50 [ 2113.587878][T13629] register_netdevice+0x5e1/0x1680 [ 2113.593012][T13629] ? netdev_change_features+0xb0/0xb0 [ 2113.598401][T13629] ? dev_addr_mod+0x2c9/0x3f0 [ 2113.603098][T13629] veth_newlink+0x338/0x990 [ 2113.607618][T13629] ? veth_set_features+0x190/0x190 [ 2113.612739][T13629] ? netlink_rcv_skb+0x153/0x420 [ 2113.617689][T13629] ? netlink_unicast+0x543/0x7f0 [ 2113.622640][T13629] ? netlink_sendmsg+0x917/0xe10 [ 2113.627644][T13629] ? dev_addr_mod+0x2c9/0x3f0 [ 2113.632342][T13629] ? rtnl_create_link+0x7e8/0xc00 [ 2113.637383][T13629] ? veth_set_features+0x190/0x190 [ 2113.642507][T13629] __rtnl_newlink+0x1087/0x17e0 [ 2113.647396][T13629] ? rtnl_link_unregister+0x250/0x250 [ 2113.652783][T13629] ? find_held_lock+0x2d/0x110 [ 2113.657579][T13629] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2113.663134][T13629] ? trace_kmalloc+0x32/0x100 [ 2113.667832][T13629] rtnl_newlink+0x64/0xa0 [ 2113.672174][T13629] ? __rtnl_newlink+0x17e0/0x17e0 [ 2113.677300][T13629] rtnetlink_rcv_msg+0x43a/0xca0 [ 2113.682259][T13629] ? rtnl_getlink+0xae0/0xae0 [ 2113.686953][T13629] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2113.692254][T13629] ? ref_tracker_free+0x370/0x6b0 [ 2113.697307][T13629] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2113.702697][T13629] netlink_rcv_skb+0x153/0x420 [ 2113.707473][T13629] ? rtnl_getlink+0xae0/0xae0 [ 2113.712164][T13629] ? netlink_ack+0xd50/0xd50 [ 2113.716766][T13629] ? netlink_deliver_tap+0x1a2/0xc40 [ 2113.722068][T13629] ? netlink_deliver_tap+0x1b1/0xc40 [ 2113.727374][T13629] netlink_unicast+0x543/0x7f0 [ 2113.732156][T13629] ? netlink_attachskb+0x880/0x880 [ 2113.737287][T13629] ? __phys_addr+0xc4/0x140 [ 2113.741803][T13629] ? __phys_addr_symbol+0x2c/0x70 [ 2113.746835][T13629] ? __check_object_size+0x2de/0x700 [ 2113.752140][T13629] netlink_sendmsg+0x917/0xe10 [ 2113.756922][T13629] ? netlink_unicast+0x7f0/0x7f0 [ 2113.761886][T13629] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2113.767185][T13629] ? netlink_unicast+0x7f0/0x7f0 [ 2113.772137][T13629] sock_sendmsg+0xcf/0x120 [ 2113.776567][T13629] ____sys_sendmsg+0x6eb/0x810 [ 2113.781348][T13629] ? copy_msghdr_from_user+0xfc/0x150 [ 2113.786741][T13629] ? kernel_sendmsg+0x50/0x50 [ 2113.791437][T13629] ? futex_unqueue+0xb3/0x120 [ 2113.796132][T13629] ___sys_sendmsg+0x110/0x1b0 [ 2113.800823][T13629] ? do_recvmmsg+0x6e0/0x6e0 [ 2113.805432][T13629] ? __fget_files+0x248/0x440 [ 2113.810129][T13629] ? lock_downgrade+0x6e0/0x6e0 [ 2113.814997][T13629] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2113.820998][T13629] ? __fget_files+0x26a/0x440 [ 2113.825698][T13629] ? __fget_light+0xe5/0x270 [ 2113.830373][T13629] __sys_sendmsg+0xf3/0x1c0 [ 2113.834896][T13629] ? __sys_sendmsg_sock+0x30/0x30 [ 2113.839937][T13629] ? lock_downgrade+0x6e0/0x6e0 [ 2113.844808][T13629] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2113.850715][T13629] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2113.856621][T13629] ? lockdep_hardirqs_on+0x79/0x100 [ 2113.861832][T13629] do_syscall_64+0x35/0xb0 [ 2113.871120][T13629] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2113.877199][T13629] RIP: 0033:0x7f58e888a5a9 [ 2113.881622][T13629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2113.901238][T13629] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2113.909667][T13629] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2113.917645][T13629] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2113.925620][T13629] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2113.933603][T13629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2113.941578][T13629] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2113.949574][T13629] [ 2113.955945][T13629] memory: usage 307196kB, limit 307200kB, failcnt 46485 [ 2113.963242][T13629] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2113.970549][T13629] Memory cgroup stats for /syz1: [ 2113.970722][T13629] anon 135168 [ 2113.970722][T13629] file 389120 [ 2113.970722][T13629] kernel 314044416 [ 2113.970722][T13629] kernel_stack 65536 [ 2113.970722][T13629] pagetables 77824 [ 2113.970722][T13629] percpu 5593216 [ 2113.970722][T13629] sock 0 [ 2113.970722][T13629] vmalloc 0 [ 2113.970722][T13629] shmem 389120 [ 2113.970722][T13629] zswap 0 [ 2113.970722][T13629] zswapped 0 [ 2113.970722][T13629] file_mapped 389120 [ 2113.970722][T13629] file_dirty 0 [ 2113.970722][T13629] file_writeback 0 [ 2113.970722][T13629] swapcached 0 [ 2113.970722][T13629] anon_thp 0 [ 2113.970722][T13629] file_thp 0 [ 2113.970722][T13629] shmem_thp 0 [ 2113.970722][T13629] inactive_anon 225280 [ 2113.970722][T13629] active_anon 299008 [ 2113.970722][T13629] inactive_file 0 [ 2113.970722][T13629] active_file 0 [ 2113.970722][T13629] unevictable 0 [ 2113.970722][T13629] slab_reclaimable 21832 [ 2113.970722][T13629] slab_unreclaimable 308249776 [ 2113.970722][T13629] slab 308271608 [ 2114.067802][T13629] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13623,uid=0 [ 2114.089831][T13629] Memory cgroup out of memory: Killed process 13629 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2114.129650][T13632] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2114.140156][T13632] CPU: 0 PID: 13632 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2114.150598][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2114.160671][T13632] Call Trace: [ 2114.163964][T13632] [ 2114.166912][T13632] dump_stack_lvl+0xcd/0x134 [ 2114.171529][T13632] dump_header+0x10b/0x7f9 [ 2114.175972][T13632] oom_kill_process.cold+0x10/0x15 [ 2114.181111][T13632] out_of_memory+0x358/0x14a0 [ 2114.185819][T13632] ? find_held_lock+0x2d/0x110 [ 2114.190595][T13632] ? oom_killer_disable+0x270/0x270 [ 2114.195801][T13632] ? find_held_lock+0x2d/0x110 [ 2114.200589][T13632] mem_cgroup_out_of_memory+0x206/0x270 [ 2114.206159][T13632] ? mem_cgroup_margin+0x130/0x130 [ 2114.211316][T13632] ? lock_downgrade+0x6e0/0x6e0 [ 2114.216188][T13632] try_charge_memcg+0xf67/0x13f0 [ 2114.221171][T13632] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2114.227178][T13632] ? lock_downgrade+0x6e0/0x6e0 [ 2114.232059][T13632] charge_memcg+0x31/0x320 [ 2114.236488][T13632] __mem_cgroup_charge+0x27/0x90 [ 2114.241436][T13632] ? _compound_head+0x5d/0x150 [ 2114.246207][T13632] wp_page_copy+0x27c/0x1b60 [ 2114.250817][T13632] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2114.256281][T13632] ? lock_downgrade+0x6e0/0x6e0 [ 2114.261140][T13632] ? vm_normal_page+0x146/0x2a0 [ 2114.266009][T13632] do_wp_page+0x1d1/0x1910 [ 2114.270435][T13632] __handle_mm_fault+0x1813/0x39b0 [ 2114.275570][T13632] ? vm_iomap_memory+0x190/0x190 [ 2114.280539][T13632] handle_mm_fault+0x1c8/0x780 [ 2114.285326][T13632] do_user_addr_fault+0x475/0x1210 [ 2114.290459][T13632] exc_page_fault+0x94/0x170 [ 2114.295064][T13632] asm_exc_page_fault+0x22/0x30 [ 2114.299924][T13632] RIP: 0033:0x7f70e7e37970 [ 2114.304344][T13632] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2114.323963][T13632] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2114.330038][T13632] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2114.338014][T13632] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2114.345987][T13632] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2114.353964][T13632] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2114.362033][T13632] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2114.370011][T13632] ? __x64_sys_socket+0xd/0xb0 [ 2114.374805][T13632] [ 2114.386028][T13632] memory: usage 307200kB, limit 307200kB, failcnt 61468 [ 2114.407280][T13632] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2114.436101][T13632] Memory cgroup stats for /syz3: [ 2114.436314][T13632] anon 106496 [ 2114.436314][T13632] file 782336 [ 2114.436314][T13632] kernel 313683968 [ 2114.436314][T13632] kernel_stack 65536 [ 2114.436314][T13632] pagetables 73728 [ 2114.436314][T13632] percpu 5602688 [ 2114.436314][T13632] sock 0 [ 2114.436314][T13632] vmalloc 0 [ 2114.436314][T13632] shmem 778240 [ 2114.436314][T13632] zswap 0 [ 2114.436314][T13632] zswapped 0 [ 2114.436314][T13632] file_mapped 778240 [ 2114.436314][T13632] file_dirty 0 [ 2114.436314][T13632] file_writeback 0 [ 2114.436314][T13632] swapcached 0 [ 2114.436314][T13632] anon_thp 0 [ 2114.436314][T13632] file_thp 0 [ 2114.436314][T13632] shmem_thp 0 [ 2114.436314][T13632] inactive_anon 577536 [ 2114.436314][T13632] active_anon 307200 [ 2114.436314][T13632] inactive_file 0 [ 2114.436314][T13632] active_file 4096 [ 2114.436314][T13632] unevictable 0 [ 2114.436314][T13632] slab_reclaimable 123352 [ 2114.436314][T13632] slab_unreclaimable 307779472 [ 2114.436314][T13632] slab 307902824 03:30:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000600000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3c05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0xff2b, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x700}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x34ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xafe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2114.532329][T13632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13632,uid=0 [ 2114.548066][T13632] Memory cgroup out of memory: Killed process 13632 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x33fe0, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2114.597190][T13649] __nla_validate_parse: 12 callbacks suppressed [ 2114.597211][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x35ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x7ffff000, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb0e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x900}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3c06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2114.792806][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2114.821732][T13657] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2114.846293][T13657] CPU: 1 PID: 13657 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2114.856768][T13657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2114.866850][T13657] Call Trace: [ 2114.870167][T13657] [ 2114.873126][T13657] dump_stack_lvl+0xcd/0x134 [ 2114.877755][T13657] dump_header+0x10b/0x7f9 [ 2114.882207][T13657] oom_kill_process.cold+0x10/0x15 [ 2114.887353][T13657] out_of_memory+0x358/0x14a0 [ 2114.892068][T13657] ? find_held_lock+0x2d/0x110 [ 2114.896857][T13657] ? oom_killer_disable+0x270/0x270 [ 2114.902104][T13657] ? find_held_lock+0x2d/0x110 [ 2114.906896][T13657] mem_cgroup_out_of_memory+0x206/0x270 [ 2114.912477][T13657] ? mem_cgroup_margin+0x130/0x130 [ 2114.917625][T13657] ? lock_downgrade+0x6e0/0x6e0 [ 2114.922527][T13657] try_charge_memcg+0xf67/0x13f0 [ 2114.927505][T13657] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2114.933529][T13657] ? lock_downgrade+0x6e0/0x6e0 [ 2114.938431][T13657] charge_memcg+0x31/0x320 [ 2114.942894][T13657] __mem_cgroup_charge+0x27/0x90 [ 2114.947855][T13657] ? _compound_head+0x5d/0x150 [ 2114.952641][T13657] wp_page_copy+0x27c/0x1b60 [ 2114.957261][T13657] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2114.962728][T13657] ? lock_downgrade+0x6e0/0x6e0 [ 2114.967587][T13657] ? vm_normal_page+0x146/0x2a0 [ 2114.972466][T13657] do_wp_page+0x1d1/0x1910 [ 2114.976897][T13657] __handle_mm_fault+0x1813/0x39b0 [ 2114.982036][T13657] ? vm_iomap_memory+0x190/0x190 [ 2114.987008][T13657] handle_mm_fault+0x1c8/0x780 [ 2114.991788][T13657] do_user_addr_fault+0x475/0x1210 [ 2114.996935][T13657] exc_page_fault+0x94/0x170 [ 2115.001541][T13657] asm_exc_page_fault+0x22/0x30 [ 2115.006407][T13657] RIP: 0033:0x7f70e7e37970 [ 2115.010827][T13657] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2115.030442][T13657] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2115.036519][T13657] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2115.044496][T13657] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2115.052560][T13657] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2115.060556][T13657] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2115.068532][T13657] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2115.076508][T13657] ? __x64_sys_socket+0xd/0xb0 [ 2115.081303][T13657] [ 2115.088993][T13657] memory: usage 307200kB, limit 307200kB, failcnt 61502 [ 2115.138278][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2115.151881][T13657] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2115.164776][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2115.165296][T13657] Memory cgroup stats for /syz3: [ 2115.184577][T13657] anon 106496 [ 2115.184577][T13657] file 782336 [ 2115.184577][T13657] kernel 313683968 [ 2115.184577][T13657] kernel_stack 65536 [ 2115.184577][T13657] pagetables 73728 [ 2115.184577][T13657] percpu 5602688 [ 2115.184577][T13657] sock 0 [ 2115.184577][T13657] vmalloc 0 [ 2115.184577][T13657] shmem 778240 [ 2115.184577][T13657] zswap 0 [ 2115.184577][T13657] zswapped 0 [ 2115.184577][T13657] file_mapped 778240 [ 2115.184577][T13657] file_dirty 0 [ 2115.184577][T13657] file_writeback 0 [ 2115.184577][T13657] swapcached 0 [ 2115.184577][T13657] anon_thp 0 [ 2115.184577][T13657] file_thp 0 [ 2115.184577][T13657] shmem_thp 0 [ 2115.184577][T13657] inactive_anon 577536 [ 2115.184577][T13657] active_anon 307200 [ 2115.184577][T13657] inactive_file 0 [ 2115.184577][T13657] active_file 4096 [ 2115.184577][T13657] unevictable 0 [ 2115.184577][T13657] slab_reclaimable 123352 [ 2115.184577][T13657] slab_unreclaimable 307779472 [ 2115.184577][T13657] slab 307902824 03:30:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000680000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xe00}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb1020000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3c07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x36ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2115.304219][T13657] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13657,uid=0 [ 2115.321014][T13657] Memory cgroup out of memory: Killed process 13657 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2115.360289][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb1e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x6, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2115.483059][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3d04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x37ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x10, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2115.607016][T13679] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2115.619766][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2115.655850][T13679] CPU: 1 PID: 13679 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2115.666328][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2115.676419][T13679] Call Trace: [ 2115.679718][T13679] [ 2115.682675][T13679] dump_stack_lvl+0xcd/0x134 [ 2115.687293][T13679] dump_header+0x10b/0x7f9 [ 2115.691747][T13679] oom_kill_process.cold+0x10/0x15 [ 2115.696890][T13679] out_of_memory+0x358/0x14a0 [ 2115.701630][T13679] ? find_held_lock+0x2d/0x110 [ 2115.706418][T13679] ? oom_killer_disable+0x270/0x270 [ 2115.711645][T13679] ? find_held_lock+0x2d/0x110 [ 2115.714245][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2115.716419][T13679] mem_cgroup_out_of_memory+0x206/0x270 [ 2115.716453][T13679] ? mem_cgroup_margin+0x130/0x130 [ 2115.716477][T13679] ? lock_downgrade+0x6e0/0x6e0 [ 2115.716520][T13679] try_charge_memcg+0xf67/0x13f0 [ 2115.716552][T13679] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2115.716585][T13679] ? lock_downgrade+0x6e0/0x6e0 [ 2115.716624][T13679] charge_memcg+0x31/0x320 [ 2115.716651][T13679] __mem_cgroup_charge+0x27/0x90 [ 2115.716675][T13679] ? _compound_head+0x5d/0x150 [ 2115.716698][T13679] wp_page_copy+0x27c/0x1b60 [ 2115.716732][T13679] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2115.716755][T13679] ? lock_downgrade+0x6e0/0x6e0 [ 2115.716776][T13679] ? vm_normal_page+0x146/0x2a0 [ 2115.791342][T13679] do_wp_page+0x1d1/0x1910 [ 2115.795784][T13679] __handle_mm_fault+0x1813/0x39b0 [ 2115.800913][T13679] ? vm_iomap_memory+0x190/0x190 [ 2115.805888][T13679] handle_mm_fault+0x1c8/0x780 [ 2115.810673][T13679] do_user_addr_fault+0x475/0x1210 [ 2115.815804][T13679] exc_page_fault+0x94/0x170 [ 2115.820409][T13679] asm_exc_page_fault+0x22/0x30 [ 2115.825269][T13679] RIP: 0033:0x7f70e7e37970 [ 2115.829687][T13679] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2115.849303][T13679] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2115.855397][T13679] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2115.863375][T13679] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2115.871361][T13679] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2115.879338][T13679] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2115.887320][T13679] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2115.895298][T13679] ? __x64_sys_socket+0xd/0xb0 [ 2115.900093][T13679] [ 2115.915861][T13679] memory: usage 307200kB, limit 307200kB, failcnt 61561 [ 2115.922858][T13679] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2115.931225][T13679] Memory cgroup stats for /syz3: [ 2115.931452][T13679] anon 106496 [ 2115.931452][T13679] file 782336 [ 2115.931452][T13679] kernel 313683968 [ 2115.931452][T13679] kernel_stack 65536 [ 2115.931452][T13679] pagetables 73728 [ 2115.931452][T13679] percpu 5602688 [ 2115.931452][T13679] sock 0 [ 2115.931452][T13679] vmalloc 0 [ 2115.931452][T13679] shmem 778240 [ 2115.931452][T13679] zswap 0 [ 2115.931452][T13679] zswapped 0 [ 2115.931452][T13679] file_mapped 778240 [ 2115.931452][T13679] file_dirty 4096 [ 2115.931452][T13679] file_writeback 0 [ 2115.931452][T13679] swapcached 0 [ 2115.931452][T13679] anon_thp 0 [ 2115.931452][T13679] file_thp 0 [ 2115.931452][T13679] shmem_thp 0 [ 2115.931452][T13679] inactive_anon 577536 [ 2115.931452][T13679] active_anon 307200 [ 2115.931452][T13679] inactive_file 0 [ 2115.931452][T13679] active_file 4096 [ 2115.931452][T13679] unevictable 0 03:30:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000006c0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3d05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0xb, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb2e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2115.931452][T13679] slab_reclaimable 123352 [ 2115.931452][T13679] slab_unreclaimable 307779472 [ 2115.931452][T13679] slab 307902824 [ 2116.030617][T13679] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13679,uid=0 [ 2116.046429][T13679] Memory cgroup out of memory: Killed process 13679 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x38ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0xc, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2116.117662][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb3e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2116.237286][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3d06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2ec2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x4, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x402, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2116.347481][T13707] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2116.378840][T13707] CPU: 1 PID: 13707 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2116.389407][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2116.399496][T13707] Call Trace: [ 2116.402802][T13707] [ 2116.405757][T13707] dump_stack_lvl+0xcd/0x134 [ 2116.410383][T13707] dump_header+0x10b/0x7f9 [ 2116.414836][T13707] oom_kill_process.cold+0x10/0x15 [ 2116.420078][T13707] out_of_memory+0x358/0x14a0 [ 2116.424810][T13707] ? find_held_lock+0x2d/0x110 [ 2116.429613][T13707] ? oom_killer_disable+0x270/0x270 [ 2116.434855][T13707] ? find_held_lock+0x2d/0x110 [ 2116.439654][T13707] mem_cgroup_out_of_memory+0x206/0x270 [ 2116.445218][T13707] ? mem_cgroup_margin+0x130/0x130 [ 2116.450338][T13707] ? lock_downgrade+0x6e0/0x6e0 [ 2116.455389][T13707] try_charge_memcg+0xf67/0x13f0 [ 2116.460344][T13707] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2116.466336][T13707] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2116.472064][T13707] ? lock_downgrade+0x6e0/0x6e0 [ 2116.476942][T13707] obj_cgroup_charge+0x2ab/0x5e0 [ 2116.481902][T13707] __kmalloc+0xb2/0x340 [ 2116.486065][T13707] ? veth_dev_init+0x1dd/0x3e0 [ 2116.490853][T13707] veth_dev_init+0x1dd/0x3e0 [ 2116.495453][T13707] ? veth_get_num_queues+0x50/0x50 [ 2116.500576][T13707] register_netdevice+0x5e1/0x1680 [ 2116.505709][T13707] ? netdev_change_features+0xb0/0xb0 [ 2116.511100][T13707] ? dev_addr_mod+0x2c9/0x3f0 [ 2116.515803][T13707] veth_newlink+0x338/0x990 [ 2116.520324][T13707] ? veth_set_features+0x190/0x190 [ 2116.525444][T13707] ? netlink_rcv_skb+0x153/0x420 [ 2116.530394][T13707] ? netlink_unicast+0x543/0x7f0 [ 2116.535342][T13707] ? netlink_sendmsg+0x917/0xe10 [ 2116.540349][T13707] ? dev_addr_mod+0x2c9/0x3f0 [ 2116.545042][T13707] ? rtnl_create_link+0x7e8/0xc00 [ 2116.550081][T13707] ? veth_set_features+0x190/0x190 [ 2116.555377][T13707] __rtnl_newlink+0x1087/0x17e0 [ 2116.560345][T13707] ? rtnl_link_unregister+0x250/0x250 [ 2116.565731][T13707] ? rtnl_newlink+0x46/0xa0 [ 2116.570263][T13707] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2116.575826][T13707] ? trace_kmalloc+0x32/0x100 [ 2116.580515][T13707] rtnl_newlink+0x64/0xa0 [ 2116.584854][T13707] ? __rtnl_newlink+0x17e0/0x17e0 [ 2116.589976][T13707] rtnetlink_rcv_msg+0x43a/0xca0 [ 2116.594929][T13707] ? rtnl_getlink+0xae0/0xae0 [ 2116.599619][T13707] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2116.604921][T13707] ? ref_tracker_free+0x370/0x6b0 [ 2116.609961][T13707] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2116.615350][T13707] netlink_rcv_skb+0x153/0x420 [ 2116.620128][T13707] ? rtnl_getlink+0xae0/0xae0 [ 2116.624816][T13707] ? netlink_ack+0xd50/0xd50 [ 2116.629416][T13707] ? netlink_deliver_tap+0x1a2/0xc40 [ 2116.634718][T13707] ? netlink_deliver_tap+0x1b1/0xc40 [ 2116.640024][T13707] netlink_unicast+0x543/0x7f0 [ 2116.644814][T13707] ? netlink_attachskb+0x880/0x880 [ 2116.649934][T13707] ? __phys_addr+0xc4/0x140 [ 2116.654454][T13707] ? __phys_addr_symbol+0x2c/0x70 [ 2116.659489][T13707] ? __check_object_size+0x2de/0x700 [ 2116.664797][T13707] netlink_sendmsg+0x917/0xe10 [ 2116.669580][T13707] ? netlink_unicast+0x7f0/0x7f0 [ 2116.674542][T13707] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2116.679861][T13707] ? netlink_unicast+0x7f0/0x7f0 [ 2116.684812][T13707] sock_sendmsg+0xcf/0x120 [ 2116.689245][T13707] ____sys_sendmsg+0x6eb/0x810 [ 2116.694027][T13707] ? copy_msghdr_from_user+0xfc/0x150 [ 2116.699413][T13707] ? kernel_sendmsg+0x50/0x50 [ 2116.704111][T13707] ? futex_unqueue+0xb3/0x120 [ 2116.708808][T13707] ___sys_sendmsg+0x110/0x1b0 [ 2116.713502][T13707] ? do_recvmmsg+0x6e0/0x6e0 [ 2116.718109][T13707] ? __fget_files+0x248/0x440 [ 2116.722881][T13707] ? lock_downgrade+0x6e0/0x6e0 [ 2116.727747][T13707] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2116.733746][T13707] ? __fget_files+0x26a/0x440 [ 2116.738443][T13707] ? __fget_light+0xe5/0x270 [ 2116.743069][T13707] __sys_sendmsg+0xf3/0x1c0 [ 2116.747588][T13707] ? __sys_sendmsg_sock+0x30/0x30 [ 2116.752625][T13707] ? lock_downgrade+0x6e0/0x6e0 [ 2116.757497][T13707] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2116.763410][T13707] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2116.769317][T13707] ? lockdep_hardirqs_on+0x79/0x100 [ 2116.774550][T13707] do_syscall_64+0x35/0xb0 [ 2116.778974][T13707] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2116.784881][T13707] RIP: 0033:0x7f58e888a5a9 [ 2116.789312][T13707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2116.808927][T13707] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2116.817349][T13707] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2116.825324][T13707] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2116.833301][T13707] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2116.841282][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2116.849342][T13707] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2116.857339][T13707] [ 2116.867381][T13707] memory: usage 307196kB, limit 307200kB, failcnt 46759 [ 2116.897284][T13707] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2116.912450][T13707] Memory cgroup stats for /syz1: [ 2116.912693][T13707] anon 135168 [ 2116.912693][T13707] file 389120 [ 2116.912693][T13707] kernel 314044416 [ 2116.912693][T13707] kernel_stack 65536 [ 2116.912693][T13707] pagetables 77824 [ 2116.912693][T13707] percpu 5593216 [ 2116.912693][T13707] sock 0 [ 2116.912693][T13707] vmalloc 0 [ 2116.912693][T13707] shmem 389120 [ 2116.912693][T13707] zswap 0 [ 2116.912693][T13707] zswapped 0 [ 2116.912693][T13707] file_mapped 389120 [ 2116.912693][T13707] file_dirty 0 [ 2116.912693][T13707] file_writeback 0 [ 2116.912693][T13707] swapcached 0 [ 2116.912693][T13707] anon_thp 0 [ 2116.912693][T13707] file_thp 0 [ 2116.912693][T13707] shmem_thp 0 [ 2116.912693][T13707] inactive_anon 225280 [ 2116.912693][T13707] active_anon 299008 [ 2116.912693][T13707] inactive_file 0 [ 2116.912693][T13707] active_file 0 [ 2116.912693][T13707] unevictable 0 [ 2116.912693][T13707] slab_reclaimable 21832 [ 2116.912693][T13707] slab_unreclaimable 308249776 [ 2116.912693][T13707] slab 308271608 [ 2117.009481][T13707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13703,uid=0 [ 2117.029796][T13707] Memory cgroup out of memory: Killed process 13707 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2117.072600][T13705] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2117.093906][T13705] CPU: 1 PID: 13705 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2117.104619][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2117.114744][T13705] Call Trace: [ 2117.118034][T13705] [ 2117.120962][T13705] dump_stack_lvl+0xcd/0x134 [ 2117.125553][T13705] dump_header+0x10b/0x7f9 [ 2117.129970][T13705] oom_kill_process.cold+0x10/0x15 [ 2117.135074][T13705] out_of_memory+0x358/0x14a0 [ 2117.139775][T13705] ? find_held_lock+0x2d/0x110 [ 2117.144551][T13705] ? oom_killer_disable+0x270/0x270 [ 2117.149769][T13705] ? find_held_lock+0x2d/0x110 [ 2117.154535][T13705] mem_cgroup_out_of_memory+0x206/0x270 [ 2117.160078][T13705] ? mem_cgroup_margin+0x130/0x130 [ 2117.165181][T13705] ? lock_downgrade+0x6e0/0x6e0 [ 2117.170079][T13705] try_charge_memcg+0xf67/0x13f0 [ 2117.175048][T13705] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2117.181119][T13705] ? lock_downgrade+0x6e0/0x6e0 [ 2117.185999][T13705] charge_memcg+0x31/0x320 [ 2117.190433][T13705] __mem_cgroup_charge+0x27/0x90 [ 2117.195387][T13705] ? _compound_head+0x5d/0x150 [ 2117.200242][T13705] wp_page_copy+0x27c/0x1b60 [ 2117.204921][T13705] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2117.210372][T13705] ? lock_downgrade+0x6e0/0x6e0 [ 2117.215228][T13705] ? vm_normal_page+0x146/0x2a0 [ 2117.220086][T13705] do_wp_page+0x1d1/0x1910 [ 2117.224498][T13705] __handle_mm_fault+0x1813/0x39b0 [ 2117.229608][T13705] ? vm_iomap_memory+0x190/0x190 [ 2117.234554][T13705] handle_mm_fault+0x1c8/0x780 [ 2117.239313][T13705] do_user_addr_fault+0x475/0x1210 [ 2117.244442][T13705] exc_page_fault+0x94/0x170 [ 2117.249081][T13705] asm_exc_page_fault+0x22/0x30 [ 2117.253930][T13705] RIP: 0033:0x7f70e7e37970 [ 2117.258337][T13705] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2117.278122][T13705] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2117.284201][T13705] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2117.292166][T13705] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2117.300145][T13705] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2117.308136][T13705] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2117.316102][T13705] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2117.324065][T13705] ? __x64_sys_socket+0xd/0xb0 [ 2117.328838][T13705] [ 2117.352308][T13705] memory: usage 307200kB, limit 307200kB, failcnt 61643 [ 2117.359912][T13705] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2117.367318][T13705] Memory cgroup stats for /syz3: [ 2117.367543][T13705] anon 106496 [ 2117.367543][T13705] file 782336 [ 2117.367543][T13705] kernel 313667584 [ 2117.367543][T13705] kernel_stack 65536 [ 2117.367543][T13705] pagetables 73728 [ 2117.367543][T13705] percpu 5602688 [ 2117.367543][T13705] sock 0 [ 2117.367543][T13705] vmalloc 0 [ 2117.367543][T13705] shmem 778240 [ 2117.367543][T13705] zswap 0 [ 2117.367543][T13705] zswapped 0 [ 2117.367543][T13705] file_mapped 778240 [ 2117.367543][T13705] file_dirty 4096 [ 2117.367543][T13705] file_writeback 0 [ 2117.367543][T13705] swapcached 0 [ 2117.367543][T13705] anon_thp 0 [ 2117.367543][T13705] file_thp 0 [ 2117.367543][T13705] shmem_thp 0 [ 2117.367543][T13705] inactive_anon 577536 [ 2117.367543][T13705] active_anon 307200 [ 2117.367543][T13705] inactive_file 0 [ 2117.367543][T13705] active_file 4096 [ 2117.367543][T13705] unevictable 0 [ 2117.367543][T13705] slab_reclaimable 123352 [ 2117.367543][T13705] slab_unreclaimable 307768376 [ 2117.367543][T13705] slab 307891728 03:30:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000740000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x403, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3d07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb4e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x39ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2117.462154][T13705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13705,uid=0 [ 2117.483504][T13705] Memory cgroup out of memory: Killed process 13705 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb5e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xc00e}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3aae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2117.714750][T13732] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2117.744502][T13732] CPU: 0 PID: 13732 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2117.754970][T13732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2117.765037][T13732] Call Trace: [ 2117.768327][T13732] [ 2117.771272][T13732] dump_stack_lvl+0xcd/0x134 [ 2117.775878][T13732] dump_header+0x10b/0x7f9 [ 2117.780306][T13732] oom_kill_process.cold+0x10/0x15 [ 2117.785428][T13732] out_of_memory+0x358/0x14a0 [ 2117.790122][T13732] ? find_held_lock+0x2d/0x110 [ 2117.794895][T13732] ? oom_killer_disable+0x270/0x270 [ 2117.800105][T13732] ? find_held_lock+0x2d/0x110 [ 2117.804881][T13732] mem_cgroup_out_of_memory+0x206/0x270 [ 2117.810434][T13732] ? mem_cgroup_margin+0x130/0x130 [ 2117.815552][T13732] ? lock_downgrade+0x6e0/0x6e0 [ 2117.820599][T13732] try_charge_memcg+0xf67/0x13f0 [ 2117.825553][T13732] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2117.831546][T13732] ? lock_downgrade+0x6e0/0x6e0 [ 2117.836415][T13732] charge_memcg+0x31/0x320 [ 2117.840841][T13732] __mem_cgroup_charge+0x27/0x90 [ 2117.845802][T13732] ? _compound_head+0x5d/0x150 [ 2117.850573][T13732] wp_page_copy+0x27c/0x1b60 [ 2117.855179][T13732] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2117.860646][T13732] ? lock_downgrade+0x6e0/0x6e0 [ 2117.865502][T13732] ? vm_normal_page+0x146/0x2a0 [ 2117.870372][T13732] do_wp_page+0x1d1/0x1910 [ 2117.874805][T13732] __handle_mm_fault+0x1813/0x39b0 [ 2117.879954][T13732] ? vm_iomap_memory+0x190/0x190 [ 2117.884945][T13732] handle_mm_fault+0x1c8/0x780 [ 2117.889740][T13732] do_user_addr_fault+0x475/0x1210 [ 2117.894900][T13732] exc_page_fault+0x94/0x170 [ 2117.899523][T13732] asm_exc_page_fault+0x22/0x30 [ 2117.904397][T13732] RIP: 0033:0x7f70e7e37970 [ 2117.908823][T13732] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2117.928452][T13732] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2117.934532][T13732] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2117.942526][T13732] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2117.950518][T13732] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2117.958511][T13732] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2117.966487][T13732] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2117.974462][T13732] ? __x64_sys_socket+0xd/0xb0 [ 2117.979258][T13732] [ 2117.996844][T13732] memory: usage 307200kB, limit 307200kB, failcnt 61696 03:30:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3e04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2118.012145][T13732] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2118.036669][T13732] Memory cgroup stats for /syz3: [ 2118.036843][T13732] anon 106496 [ 2118.036843][T13732] file 782336 [ 2118.036843][T13732] kernel 313683968 [ 2118.036843][T13732] kernel_stack 65536 [ 2118.036843][T13732] pagetables 73728 [ 2118.036843][T13732] percpu 5602688 [ 2118.036843][T13732] sock 0 [ 2118.036843][T13732] vmalloc 0 [ 2118.036843][T13732] shmem 778240 [ 2118.036843][T13732] zswap 0 [ 2118.036843][T13732] zswapped 0 [ 2118.036843][T13732] file_mapped 778240 [ 2118.036843][T13732] file_dirty 4096 03:30:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x405, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xc22e}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2118.036843][T13732] file_writeback 0 [ 2118.036843][T13732] swapcached 0 [ 2118.036843][T13732] anon_thp 0 [ 2118.036843][T13732] file_thp 0 [ 2118.036843][T13732] shmem_thp 0 [ 2118.036843][T13732] inactive_anon 577536 [ 2118.036843][T13732] active_anon 307200 [ 2118.036843][T13732] inactive_file 0 [ 2118.036843][T13732] active_file 4096 [ 2118.036843][T13732] unevictable 0 [ 2118.036843][T13732] slab_reclaimable 123352 [ 2118.036843][T13732] slab_unreclaimable 307779472 [ 2118.036843][T13732] slab 307902824 [ 2118.220302][T13732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13732,uid=0 [ 2118.246002][T13732] Memory cgroup out of memory: Killed process 13732 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000760000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3e05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb6e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3bae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xf000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb7e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3e06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x406, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3cae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x407, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3e07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2118.597945][T13756] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2118.644238][T13756] CPU: 1 PID: 13756 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2118.654715][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2118.664798][T13756] Call Trace: [ 2118.668107][T13756] [ 2118.671064][T13756] dump_stack_lvl+0xcd/0x134 [ 2118.675697][T13756] dump_header+0x10b/0x7f9 [ 2118.680154][T13756] oom_kill_process.cold+0x10/0x15 [ 2118.685393][T13756] out_of_memory+0x358/0x14a0 [ 2118.690124][T13756] ? find_held_lock+0x2d/0x110 [ 2118.694919][T13756] ? oom_killer_disable+0x270/0x270 [ 2118.700154][T13756] ? find_held_lock+0x2d/0x110 [ 2118.704947][T13756] mem_cgroup_out_of_memory+0x206/0x270 [ 2118.710521][T13756] ? mem_cgroup_margin+0x130/0x130 [ 2118.715677][T13756] ? lock_downgrade+0x6e0/0x6e0 [ 2118.720579][T13756] try_charge_memcg+0xf67/0x13f0 [ 2118.725559][T13756] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2118.731577][T13756] ? lock_downgrade+0x6e0/0x6e0 [ 2118.736471][T13756] charge_memcg+0x31/0x320 [ 2118.740934][T13756] __mem_cgroup_charge+0x27/0x90 [ 2118.745893][T13756] ? _compound_head+0x5d/0x150 [ 2118.750679][T13756] wp_page_copy+0x27c/0x1b60 [ 2118.755293][T13756] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2118.760760][T13756] ? lock_downgrade+0x6e0/0x6e0 [ 2118.765622][T13756] ? vm_normal_page+0x146/0x2a0 [ 2118.770498][T13756] do_wp_page+0x1d1/0x1910 [ 2118.774946][T13756] __handle_mm_fault+0x1813/0x39b0 [ 2118.780084][T13756] ? vm_iomap_memory+0x190/0x190 [ 2118.785080][T13756] handle_mm_fault+0x1c8/0x780 [ 2118.789888][T13756] do_user_addr_fault+0x475/0x1210 [ 2118.795055][T13756] exc_page_fault+0x94/0x170 [ 2118.799678][T13756] asm_exc_page_fault+0x22/0x30 [ 2118.804545][T13756] RIP: 0033:0x7f70e7e37970 [ 2118.808967][T13756] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2118.828596][T13756] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2118.834677][T13756] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2118.842659][T13756] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2118.850638][T13756] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2118.858616][T13756] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2118.866590][T13756] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2118.874567][T13756] ? __x64_sys_socket+0xd/0xb0 [ 2118.879363][T13756] [ 2118.887586][T13756] memory: usage 307200kB, limit 307200kB, failcnt 61748 [ 2118.895211][T13756] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2118.903171][T13756] Memory cgroup stats for /syz3: [ 2118.903394][T13756] anon 106496 [ 2118.903394][T13756] file 782336 [ 2118.903394][T13756] kernel 313683968 [ 2118.903394][T13756] kernel_stack 65536 [ 2118.903394][T13756] pagetables 73728 [ 2118.903394][T13756] percpu 5602688 [ 2118.903394][T13756] sock 0 [ 2118.903394][T13756] vmalloc 0 [ 2118.903394][T13756] shmem 778240 [ 2118.903394][T13756] zswap 0 [ 2118.903394][T13756] zswapped 0 [ 2118.903394][T13756] file_mapped 778240 [ 2118.903394][T13756] file_dirty 4096 [ 2118.903394][T13756] file_writeback 0 [ 2118.903394][T13756] swapcached 0 [ 2118.903394][T13756] anon_thp 0 [ 2118.903394][T13756] file_thp 0 [ 2118.903394][T13756] shmem_thp 0 [ 2118.903394][T13756] inactive_anon 577536 [ 2118.903394][T13756] active_anon 307200 [ 2118.903394][T13756] inactive_file 0 [ 2118.903394][T13756] active_file 4096 [ 2118.903394][T13756] unevictable 0 [ 2118.903394][T13756] slab_reclaimable 123352 [ 2118.903394][T13756] slab_unreclaimable 307779472 03:30:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000007a0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3dae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb8e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3f04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x3}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x408, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2118.903394][T13756] slab 307902824 [ 2119.009112][T13756] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13756,uid=0 [ 2119.027262][T13756] Memory cgroup out of memory: Killed process 13756 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x409, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x8}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3f05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb9e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2119.199048][T13790] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 03:30:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x40a, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2119.270470][T13781] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2119.283157][T13790] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2119.301214][T13781] CPU: 1 PID: 13781 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2119.311682][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2119.321784][T13781] Call Trace: [ 2119.325093][T13781] [ 2119.328047][T13781] dump_stack_lvl+0xcd/0x134 [ 2119.332685][T13781] dump_header+0x10b/0x7f9 [ 2119.337138][T13781] oom_kill_process.cold+0x10/0x15 [ 2119.342288][T13781] out_of_memory+0x358/0x14a0 [ 2119.347005][T13781] ? find_held_lock+0x2d/0x110 [ 2119.351790][T13781] ? oom_killer_disable+0x270/0x270 [ 2119.357006][T13781] ? find_held_lock+0x2d/0x110 [ 2119.361782][T13781] mem_cgroup_out_of_memory+0x206/0x270 [ 2119.367339][T13781] ? mem_cgroup_margin+0x130/0x130 [ 2119.372458][T13781] ? lock_downgrade+0x6e0/0x6e0 [ 2119.377333][T13781] try_charge_memcg+0xf67/0x13f0 [ 2119.382289][T13781] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2119.388278][T13781] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2119.394006][T13781] ? lock_downgrade+0x6e0/0x6e0 [ 2119.398885][T13781] obj_cgroup_charge+0x2ab/0x5e0 [ 2119.403838][T13781] __kmalloc+0xb2/0x340 [ 2119.407998][T13781] ? veth_dev_init+0x1dd/0x3e0 [ 2119.412777][T13781] veth_dev_init+0x1dd/0x3e0 [ 2119.417378][T13781] ? veth_get_num_queues+0x50/0x50 [ 2119.422501][T13781] register_netdevice+0x5e1/0x1680 [ 2119.427634][T13781] ? netdev_change_features+0xb0/0xb0 [ 2119.433017][T13781] ? dev_addr_mod+0x2c9/0x3f0 [ 2119.437710][T13781] veth_newlink+0x338/0x990 [ 2119.442226][T13781] ? veth_set_features+0x190/0x190 [ 2119.447342][T13781] ? netlink_rcv_skb+0x153/0x420 [ 2119.452288][T13781] ? netlink_unicast+0x543/0x7f0 [ 2119.457232][T13781] ? netlink_sendmsg+0x917/0xe10 [ 2119.462232][T13781] ? dev_addr_mod+0x2c9/0x3f0 [ 2119.466925][T13781] ? rtnl_create_link+0x7e8/0xc00 [ 2119.471961][T13781] ? veth_set_features+0x190/0x190 [ 2119.477081][T13781] __rtnl_newlink+0x1087/0x17e0 [ 2119.481956][T13781] ? rtnl_link_unregister+0x250/0x250 [ 2119.487339][T13781] ? find_held_lock+0x2d/0x110 [ 2119.492221][T13781] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2119.497777][T13781] ? trace_kmalloc+0x32/0x100 [ 2119.502477][T13781] rtnl_newlink+0x64/0xa0 [ 2119.506817][T13781] ? __rtnl_newlink+0x17e0/0x17e0 [ 2119.511848][T13781] rtnetlink_rcv_msg+0x43a/0xca0 [ 2119.516798][T13781] ? rtnl_getlink+0xae0/0xae0 [ 2119.521568][T13781] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2119.526870][T13781] ? ref_tracker_free+0x370/0x6b0 [ 2119.531904][T13781] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2119.537291][T13781] netlink_rcv_skb+0x153/0x420 [ 2119.542072][T13781] ? rtnl_getlink+0xae0/0xae0 [ 2119.546768][T13781] ? netlink_ack+0xd50/0xd50 [ 2119.551368][T13781] ? netlink_deliver_tap+0x1a2/0xc40 [ 2119.556673][T13781] ? netlink_deliver_tap+0x1b1/0xc40 [ 2119.561979][T13781] netlink_unicast+0x543/0x7f0 [ 2119.566763][T13781] ? netlink_attachskb+0x880/0x880 [ 2119.572057][T13781] ? __phys_addr+0xc4/0x140 [ 2119.576568][T13781] ? __phys_addr_symbol+0x2c/0x70 [ 2119.581600][T13781] ? __check_object_size+0x2de/0x700 [ 2119.586914][T13781] netlink_sendmsg+0x917/0xe10 [ 2119.591693][T13781] ? netlink_unicast+0x7f0/0x7f0 [ 2119.596649][T13781] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2119.601958][T13781] ? netlink_unicast+0x7f0/0x7f0 [ 2119.606924][T13781] sock_sendmsg+0xcf/0x120 [ 2119.611361][T13781] ____sys_sendmsg+0x6eb/0x810 [ 2119.616145][T13781] ? copy_msghdr_from_user+0xfc/0x150 [ 2119.621548][T13781] ? kernel_sendmsg+0x50/0x50 [ 2119.626243][T13781] ? futex_unqueue+0xb3/0x120 [ 2119.630939][T13781] ___sys_sendmsg+0x110/0x1b0 [ 2119.635630][T13781] ? do_recvmmsg+0x6e0/0x6e0 [ 2119.640236][T13781] ? __fget_files+0x248/0x440 [ 2119.644926][T13781] ? lock_downgrade+0x6e0/0x6e0 [ 2119.649792][T13781] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2119.655787][T13781] ? __fget_files+0x26a/0x440 [ 2119.660485][T13781] ? __fget_light+0xe5/0x270 [ 2119.665094][T13781] __sys_sendmsg+0xf3/0x1c0 [ 2119.669612][T13781] ? __sys_sendmsg_sock+0x30/0x30 [ 2119.674650][T13781] ? lock_downgrade+0x6e0/0x6e0 [ 2119.679529][T13781] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2119.685435][T13781] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2119.691341][T13781] ? lockdep_hardirqs_on+0x79/0x100 [ 2119.696553][T13781] do_syscall_64+0x35/0xb0 [ 2119.700977][T13781] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2119.706883][T13781] RIP: 0033:0x7f58e888a5a9 [ 2119.711328][T13781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2119.730944][T13781] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2119.739364][T13781] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2119.747340][T13781] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2119.755320][T13781] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2119.763297][T13781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 03:30:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x18}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2119.771273][T13781] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2119.779275][T13781] [ 2119.796892][T13781] memory: usage 307196kB, limit 307200kB, failcnt 47017 [ 2119.804316][T13781] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2119.812240][T13781] Memory cgroup stats for /syz1: [ 2119.812564][T13781] anon 135168 [ 2119.812564][T13781] file 389120 [ 2119.812564][T13781] kernel 314044416 [ 2119.812564][T13781] kernel_stack 65536 [ 2119.812564][T13781] pagetables 77824 [ 2119.812564][T13781] percpu 5593216 [ 2119.812564][T13781] sock 0 [ 2119.812564][T13781] vmalloc 0 [ 2119.812564][T13781] shmem 389120 [ 2119.812564][T13781] zswap 0 [ 2119.812564][T13781] zswapped 0 [ 2119.812564][T13781] file_mapped 389120 [ 2119.812564][T13781] file_dirty 0 [ 2119.812564][T13781] file_writeback 0 [ 2119.812564][T13781] swapcached 0 [ 2119.812564][T13781] anon_thp 0 [ 2119.812564][T13781] file_thp 0 [ 2119.812564][T13781] shmem_thp 0 [ 2119.812564][T13781] inactive_anon 225280 [ 2119.812564][T13781] active_anon 299008 [ 2119.812564][T13781] inactive_file 0 [ 2119.812564][T13781] active_file 0 [ 2119.812564][T13781] unevictable 0 [ 2119.812564][T13781] slab_reclaimable 21832 [ 2119.812564][T13781] slab_unreclaimable 308249776 [ 2119.812564][T13781] slab 308271608 [ 2119.844111][T13797] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2119.924647][T13797] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 2119.933558][T13781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13773,uid=0 [ 2119.949497][T13781] Memory cgroup out of memory: Killed process 13781 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2119.983599][T13783] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2119.994290][T13783] CPU: 0 PID: 13783 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2120.004786][T13783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2120.014866][T13783] Call Trace: [ 2120.018168][T13783] [ 2120.021120][T13783] dump_stack_lvl+0xcd/0x134 [ 2120.025750][T13783] dump_header+0x10b/0x7f9 [ 2120.030203][T13783] oom_kill_process.cold+0x10/0x15 [ 2120.035353][T13783] out_of_memory+0x358/0x14a0 [ 2120.040067][T13783] ? find_held_lock+0x2d/0x110 [ 2120.044854][T13783] ? oom_killer_disable+0x270/0x270 [ 2120.050077][T13783] ? find_held_lock+0x2d/0x110 [ 2120.054885][T13783] mem_cgroup_out_of_memory+0x206/0x270 [ 2120.060474][T13783] ? mem_cgroup_margin+0x130/0x130 [ 2120.065580][T13783] ? lock_downgrade+0x6e0/0x6e0 [ 2120.070461][T13783] try_charge_memcg+0xf67/0x13f0 [ 2120.075428][T13783] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2120.081408][T13783] ? lock_downgrade+0x6e0/0x6e0 [ 2120.086280][T13783] charge_memcg+0x31/0x320 [ 2120.090725][T13783] __mem_cgroup_charge+0x27/0x90 [ 2120.095681][T13783] ? _compound_head+0x5d/0x150 [ 2120.100452][T13783] wp_page_copy+0x27c/0x1b60 [ 2120.105037][T13783] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2120.110499][T13783] ? lock_downgrade+0x6e0/0x6e0 [ 2120.115372][T13783] ? vm_normal_page+0x146/0x2a0 [ 2120.120260][T13783] do_wp_page+0x1d1/0x1910 [ 2120.124719][T13783] __handle_mm_fault+0x1813/0x39b0 [ 2120.129850][T13783] ? vm_iomap_memory+0x190/0x190 [ 2120.134844][T13783] handle_mm_fault+0x1c8/0x780 [ 2120.139629][T13783] do_user_addr_fault+0x475/0x1210 [ 2120.144746][T13783] exc_page_fault+0x94/0x170 [ 2120.149349][T13783] asm_exc_page_fault+0x22/0x30 [ 2120.154227][T13783] RIP: 0033:0x7f70e7e37970 [ 2120.158662][T13783] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2120.178293][T13783] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2120.184382][T13783] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2120.192367][T13783] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2120.200348][T13783] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2120.208327][T13783] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2120.216300][T13783] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2120.224285][T13783] ? __x64_sys_socket+0xd/0xb0 [ 2120.229088][T13783] [ 2120.239837][T13783] memory: usage 307200kB, limit 307200kB, failcnt 61823 [ 2120.246997][T13783] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2120.254019][T13783] Memory cgroup stats for /syz3: [ 2120.254230][T13783] anon 106496 [ 2120.254230][T13783] file 782336 [ 2120.254230][T13783] kernel 313683968 [ 2120.254230][T13783] kernel_stack 65536 [ 2120.254230][T13783] pagetables 73728 [ 2120.254230][T13783] percpu 5602688 [ 2120.254230][T13783] sock 0 [ 2120.254230][T13783] vmalloc 0 [ 2120.254230][T13783] shmem 778240 [ 2120.254230][T13783] zswap 0 [ 2120.254230][T13783] zswapped 0 [ 2120.254230][T13783] file_mapped 778240 [ 2120.254230][T13783] file_dirty 4096 [ 2120.254230][T13783] file_writeback 0 [ 2120.254230][T13783] swapcached 0 [ 2120.254230][T13783] anon_thp 0 [ 2120.254230][T13783] file_thp 0 [ 2120.254230][T13783] shmem_thp 0 [ 2120.254230][T13783] inactive_anon 577536 [ 2120.254230][T13783] active_anon 307200 [ 2120.254230][T13783] inactive_file 0 [ 2120.254230][T13783] active_file 4096 [ 2120.254230][T13783] unevictable 0 [ 2120.254230][T13783] slab_reclaimable 123352 03:30:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000a20000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3f06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x40b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x2}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3eae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xba030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2120.254230][T13783] slab_unreclaimable 307779472 [ 2120.254230][T13783] slab 307902824 [ 2120.348994][T13783] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13783,uid=0 [ 2120.367457][T13783] Memory cgroup out of memory: Killed process 13783 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x4}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2120.423554][T13806] __nla_validate_parse: 17 callbacks suppressed [ 2120.423573][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xbae21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2120.581599][T13808] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2120.591737][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2120.595109][T13808] CPU: 1 PID: 13808 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2120.611414][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2120.621497][T13808] Call Trace: [ 2120.624800][T13808] [ 2120.627747][T13808] dump_stack_lvl+0xcd/0x134 [ 2120.632358][T13808] dump_header+0x10b/0x7f9 [ 2120.636812][T13808] oom_kill_process.cold+0x10/0x15 [ 2120.641961][T13808] out_of_memory+0x358/0x14a0 [ 2120.646681][T13808] ? find_held_lock+0x2d/0x110 [ 2120.648706][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2120.651457][T13808] ? oom_killer_disable+0x270/0x270 [ 2120.651501][T13808] ? find_held_lock+0x2d/0x110 [ 2120.660879][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x3f07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4004}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2120.665873][T13808] mem_cgroup_out_of_memory+0x206/0x270 [ 2120.665906][T13808] ? mem_cgroup_margin+0x130/0x130 [ 2120.665927][T13808] ? lock_downgrade+0x6e0/0x6e0 [ 2120.665968][T13808] try_charge_memcg+0xf67/0x13f0 [ 2120.700391][T13808] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2120.706423][T13808] ? lock_downgrade+0x6e0/0x6e0 [ 2120.711327][T13808] charge_memcg+0x31/0x320 [ 2120.715784][T13808] __mem_cgroup_charge+0x27/0x90 [ 2120.717542][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4005}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2120.720735][T13808] ? _compound_head+0x5d/0x150 [ 2120.720768][T13808] wp_page_copy+0x27c/0x1b60 [ 2120.720802][T13808] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2120.730175][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2120.734715][T13808] ? lock_downgrade+0x6e0/0x6e0 [ 2120.734744][T13808] ? vm_normal_page+0x146/0x2a0 [ 2120.734785][T13808] do_wp_page+0x1d1/0x1910 [ 2120.768148][T13808] __handle_mm_fault+0x1813/0x39b0 [ 2120.773295][T13808] ? vm_iomap_memory+0x190/0x190 03:30:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4006}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2120.775561][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2120.778271][T13808] handle_mm_fault+0x1c8/0x780 [ 2120.778310][T13808] do_user_addr_fault+0x475/0x1210 [ 2120.787662][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2120.792340][T13808] exc_page_fault+0x94/0x170 [ 2120.792376][T13808] asm_exc_page_fault+0x22/0x30 [ 2120.816227][T13808] RIP: 0033:0x7f70e7e37970 [ 2120.820666][T13808] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2120.837490][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2120.840278][T13808] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2120.840305][T13808] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2120.840323][T13808] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2120.840339][T13808] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2120.858477][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2120.863542][T13808] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2120.863563][T13808] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2120.863581][T13808] ? __x64_sys_socket+0xd/0xb0 [ 2120.909441][T13808] [ 2120.939185][T13808] memory: usage 307200kB, limit 307200kB, failcnt 61880 [ 2120.961392][T13808] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2120.968528][T13808] Memory cgroup stats for /syz3: [ 2120.968746][T13808] anon 106496 [ 2120.968746][T13808] file 782336 [ 2120.968746][T13808] kernel 313683968 [ 2120.968746][T13808] kernel_stack 65536 [ 2120.968746][T13808] pagetables 73728 [ 2120.968746][T13808] percpu 5602688 [ 2120.968746][T13808] sock 0 [ 2120.968746][T13808] vmalloc 0 [ 2120.968746][T13808] shmem 778240 [ 2120.968746][T13808] zswap 0 [ 2120.968746][T13808] zswapped 0 [ 2120.968746][T13808] file_mapped 778240 [ 2120.968746][T13808] file_dirty 4096 [ 2120.968746][T13808] file_writeback 0 [ 2120.968746][T13808] swapcached 0 [ 2120.968746][T13808] anon_thp 0 [ 2120.968746][T13808] file_thp 0 [ 2120.968746][T13808] shmem_thp 0 [ 2120.968746][T13808] inactive_anon 577536 [ 2120.968746][T13808] active_anon 307200 [ 2120.968746][T13808] inactive_file 0 [ 2120.968746][T13808] active_file 4096 [ 2120.968746][T13808] unevictable 0 [ 2120.968746][T13808] slab_reclaimable 123352 [ 2120.968746][T13808] slab_unreclaimable 307779472 [ 2120.968746][T13808] slab 307902824 [ 2121.064318][T13808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13808,uid=0 03:30:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000cb0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4007}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x410, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xbbe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2121.081105][T13808] Memory cgroup out of memory: Killed process 13808 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4104}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x6}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x411, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xbce21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x7}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2121.233507][T13836] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 03:30:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3fae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2121.350856][T13833] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2121.381456][T13833] CPU: 0 PID: 13833 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2121.391928][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2121.402007][T13833] Call Trace: [ 2121.405303][T13833] [ 2121.408262][T13833] dump_stack_lvl+0xcd/0x134 [ 2121.412883][T13833] dump_header+0x10b/0x7f9 [ 2121.417855][T13833] oom_kill_process.cold+0x10/0x15 [ 2121.422999][T13833] out_of_memory+0x358/0x14a0 [ 2121.427713][T13833] ? find_held_lock+0x2d/0x110 [ 2121.432502][T13833] ? oom_killer_disable+0x270/0x270 [ 2121.437732][T13833] ? find_held_lock+0x2d/0x110 [ 2121.442522][T13833] mem_cgroup_out_of_memory+0x206/0x270 [ 2121.448101][T13833] ? mem_cgroup_margin+0x130/0x130 [ 2121.453241][T13833] ? lock_downgrade+0x6e0/0x6e0 [ 2121.458121][T13833] try_charge_memcg+0xf67/0x13f0 [ 2121.463073][T13833] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2121.469075][T13833] ? lock_downgrade+0x6e0/0x6e0 [ 2121.473928][T13833] charge_memcg+0x31/0x320 [ 2121.478345][T13833] __mem_cgroup_charge+0x27/0x90 [ 2121.483305][T13833] ? _compound_head+0x5d/0x150 [ 2121.488095][T13833] wp_page_copy+0x27c/0x1b60 [ 2121.492698][T13833] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2121.498173][T13833] ? lock_downgrade+0x6e0/0x6e0 [ 2121.503027][T13833] ? vm_normal_page+0x146/0x2a0 [ 2121.507903][T13833] do_wp_page+0x1d1/0x1910 [ 2121.512317][T13833] __handle_mm_fault+0x1813/0x39b0 [ 2121.517428][T13833] ? vm_iomap_memory+0x190/0x190 [ 2121.522405][T13833] handle_mm_fault+0x1c8/0x780 [ 2121.527179][T13833] do_user_addr_fault+0x475/0x1210 [ 2121.532320][T13833] exc_page_fault+0x94/0x170 [ 2121.536911][T13833] asm_exc_page_fault+0x22/0x30 [ 2121.541761][T13833] RIP: 0033:0x7f70e7e37970 [ 2121.546166][T13833] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2121.565783][T13833] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2121.571865][T13833] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2121.579829][T13833] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2121.587793][T13833] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2121.595845][T13833] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2121.603812][T13833] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2121.611795][T13833] ? __x64_sys_socket+0xd/0xb0 [ 2121.616587][T13833] [ 2121.635540][T13833] memory: usage 307200kB, limit 307200kB, failcnt 61934 [ 2121.642577][T13833] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2121.649886][T13833] Memory cgroup stats for /syz3: [ 2121.650052][T13833] anon 106496 [ 2121.650052][T13833] file 782336 [ 2121.650052][T13833] kernel 313683968 [ 2121.650052][T13833] kernel_stack 65536 [ 2121.650052][T13833] pagetables 73728 [ 2121.650052][T13833] percpu 5602688 [ 2121.650052][T13833] sock 0 [ 2121.650052][T13833] vmalloc 0 [ 2121.650052][T13833] shmem 778240 [ 2121.650052][T13833] zswap 0 [ 2121.650052][T13833] zswapped 0 [ 2121.650052][T13833] file_mapped 778240 [ 2121.650052][T13833] file_dirty 4096 [ 2121.650052][T13833] file_writeback 0 [ 2121.650052][T13833] swapcached 0 [ 2121.650052][T13833] anon_thp 0 [ 2121.650052][T13833] file_thp 0 [ 2121.650052][T13833] shmem_thp 0 [ 2121.650052][T13833] inactive_anon 577536 [ 2121.650052][T13833] active_anon 307200 [ 2121.650052][T13833] inactive_file 0 [ 2121.650052][T13833] active_file 4096 [ 2121.650052][T13833] unevictable 0 [ 2121.650052][T13833] slab_reclaimable 123352 [ 2121.650052][T13833] slab_unreclaimable 307779472 [ 2121.650052][T13833] slab 307902824 03:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000f00000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4105}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x8}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xbde21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2121.751020][T13833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13833,uid=0 [ 2121.767046][T13833] Memory cgroup out of memory: Killed process 13833 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4106}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x9}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xbe030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4107}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x2, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2121.957993][T13858] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 03:30:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0xa}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2122.006531][T13858] CPU: 1 PID: 13858 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2122.017006][T13858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2122.027083][T13858] Call Trace: [ 2122.030382][T13858] [ 2122.033327][T13858] dump_stack_lvl+0xcd/0x134 [ 2122.037950][T13858] dump_header+0x10b/0x7f9 [ 2122.042404][T13858] oom_kill_process.cold+0x10/0x15 [ 2122.047554][T13858] out_of_memory+0x358/0x14a0 [ 2122.052272][T13858] ? find_held_lock+0x2d/0x110 [ 2122.057150][T13858] ? oom_killer_disable+0x270/0x270 [ 2122.062394][T13858] ? find_held_lock+0x2d/0x110 [ 2122.067189][T13858] mem_cgroup_out_of_memory+0x206/0x270 [ 2122.073196][T13858] ? mem_cgroup_margin+0x130/0x130 [ 2122.078825][T13858] ? lock_downgrade+0x6e0/0x6e0 [ 2122.083735][T13858] try_charge_memcg+0xf67/0x13f0 [ 2122.088709][T13858] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2122.094736][T13858] ? lock_downgrade+0x6e0/0x6e0 [ 2122.099630][T13858] charge_memcg+0x31/0x320 [ 2122.104086][T13858] __mem_cgroup_charge+0x27/0x90 [ 2122.109058][T13858] ? _compound_head+0x5d/0x150 [ 2122.113857][T13858] wp_page_copy+0x27c/0x1b60 [ 2122.118486][T13858] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2122.123969][T13858] ? lock_downgrade+0x6e0/0x6e0 [ 2122.128831][T13858] ? vm_normal_page+0x146/0x2a0 [ 2122.133792][T13858] do_wp_page+0x52c/0x1910 [ 2122.138221][T13858] __handle_mm_fault+0x1813/0x39b0 [ 2122.143356][T13858] ? vm_iomap_memory+0x190/0x190 [ 2122.148324][T13858] handle_mm_fault+0x1c8/0x780 [ 2122.153102][T13858] do_user_addr_fault+0x475/0x1210 [ 2122.158239][T13858] exc_page_fault+0x94/0x170 [ 2122.162871][T13858] asm_exc_page_fault+0x22/0x30 [ 2122.167839][T13858] RIP: 0033:0x7f70e7e34a15 [ 2122.172267][T13858] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2122.191890][T13858] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2122.197964][T13858] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2122.205938][T13858] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2122.213916][T13858] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2122.221891][T13858] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 0000000000206098 [ 2122.229873][T13858] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2122.237871][T13858] [ 2122.260778][T13858] memory: usage 307200kB, limit 307200kB, failcnt 61988 [ 2122.289488][T13858] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2122.298724][T13858] Memory cgroup stats for /syz3: [ 2122.298958][T13858] anon 90112 [ 2122.298958][T13858] file 782336 [ 2122.298958][T13858] kernel 313700352 [ 2122.298958][T13858] kernel_stack 65536 [ 2122.298958][T13858] pagetables 73728 [ 2122.298958][T13858] percpu 5602688 [ 2122.298958][T13858] sock 0 [ 2122.298958][T13858] vmalloc 0 [ 2122.298958][T13858] shmem 778240 [ 2122.298958][T13858] zswap 0 [ 2122.298958][T13858] zswapped 0 [ 2122.298958][T13858] file_mapped 778240 [ 2122.298958][T13858] file_dirty 4096 [ 2122.298958][T13858] file_writeback 0 [ 2122.298958][T13858] swapcached 0 [ 2122.298958][T13858] anon_thp 0 [ 2122.298958][T13858] file_thp 0 [ 2122.298958][T13858] shmem_thp 0 [ 2122.298958][T13858] inactive_anon 561152 [ 2122.298958][T13858] active_anon 307200 [ 2122.298958][T13858] inactive_file 0 [ 2122.298958][T13858] active_file 4096 [ 2122.298958][T13858] unevictable 0 [ 2122.298958][T13858] slab_reclaimable 123352 [ 2122.298958][T13858] slab_unreclaimable 307790872 [ 2122.298958][T13858] slab 307914224 03:30:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000a0100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0xb}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4204}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x3, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xbee21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2122.408510][T13858] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13858,uid=0 [ 2122.433480][T13858] Memory cgroup out of memory: Killed process 13858 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xbfe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4205}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x10}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2122.622264][T13881] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2122.647244][T13881] CPU: 0 PID: 13881 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2122.657722][T13881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2122.667802][T13881] Call Trace: 03:30:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x4, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2122.671114][T13881] [ 2122.674077][T13881] dump_stack_lvl+0xcd/0x134 [ 2122.678715][T13881] dump_header+0x10b/0x7f9 [ 2122.683175][T13881] oom_kill_process.cold+0x10/0x15 [ 2122.688336][T13881] out_of_memory+0x358/0x14a0 [ 2122.693086][T13881] ? find_held_lock+0x2d/0x110 [ 2122.697891][T13881] ? oom_killer_disable+0x270/0x270 [ 2122.703133][T13881] ? find_held_lock+0x2d/0x110 [ 2122.707933][T13881] mem_cgroup_out_of_memory+0x206/0x270 [ 2122.713685][T13881] ? mem_cgroup_margin+0x130/0x130 03:30:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x5, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2122.718825][T13881] ? lock_downgrade+0x6e0/0x6e0 [ 2122.723724][T13881] try_charge_memcg+0xf67/0x13f0 [ 2122.728707][T13881] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2122.734718][T13881] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2122.740471][T13881] ? lock_downgrade+0x6e0/0x6e0 [ 2122.745388][T13881] obj_cgroup_charge+0x2ab/0x5e0 [ 2122.750378][T13881] __kmalloc+0xb2/0x340 [ 2122.754566][T13881] ? veth_dev_init+0x1dd/0x3e0 [ 2122.759371][T13881] veth_dev_init+0x1dd/0x3e0 [ 2122.763994][T13881] ? veth_get_num_queues+0x50/0x50 [ 2122.769145][T13881] register_netdevice+0x5e1/0x1680 [ 2122.774300][T13881] ? netdev_change_features+0xb0/0xb0 [ 2122.779712][T13881] ? dev_addr_mod+0x2c9/0x3f0 [ 2122.784435][T13881] veth_newlink+0x338/0x990 [ 2122.788971][T13881] ? veth_set_features+0x190/0x190 [ 2122.794110][T13881] ? netlink_rcv_skb+0x153/0x420 [ 2122.799075][T13881] ? netlink_unicast+0x543/0x7f0 [ 2122.804035][T13881] ? netlink_sendmsg+0x917/0xe10 [ 2122.809073][T13881] ? dev_addr_mod+0x2c9/0x3f0 [ 2122.813787][T13881] ? rtnl_create_link+0x7e8/0xc00 03:30:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x6, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2122.818843][T13881] ? veth_set_features+0x190/0x190 [ 2122.823983][T13881] __rtnl_newlink+0x1087/0x17e0 [ 2122.828880][T13881] ? rtnl_link_unregister+0x250/0x250 [ 2122.834287][T13881] ? rtnl_newlink+0x46/0xa0 [ 2122.838847][T13881] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2122.844422][T13881] ? trace_kmalloc+0x32/0x100 [ 2122.849140][T13881] rtnl_newlink+0x64/0xa0 [ 2122.853504][T13881] ? __rtnl_newlink+0x17e0/0x17e0 [ 2122.858561][T13881] rtnetlink_rcv_msg+0x43a/0xca0 [ 2122.863538][T13881] ? rtnl_getlink+0xae0/0xae0 [ 2122.868244][T13881] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2122.873554][T13881] ? ref_tracker_free+0x370/0x6b0 [ 2122.878614][T13881] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2122.884035][T13881] netlink_rcv_skb+0x153/0x420 [ 2122.888837][T13881] ? rtnl_getlink+0xae0/0xae0 [ 2122.893553][T13881] ? netlink_ack+0xd50/0xd50 [ 2122.898174][T13881] ? netlink_deliver_tap+0x1a2/0xc40 [ 2122.903498][T13881] ? netlink_deliver_tap+0x1b1/0xc40 [ 2122.908836][T13881] netlink_unicast+0x543/0x7f0 [ 2122.913646][T13881] ? netlink_attachskb+0x880/0x880 [ 2122.918786][T13881] ? __phys_addr+0xc4/0x140 [ 2122.923314][T13881] ? __phys_addr_symbol+0x2c/0x70 [ 2122.928366][T13881] ? __check_object_size+0x2de/0x700 [ 2122.933704][T13881] netlink_sendmsg+0x917/0xe10 [ 2122.938506][T13881] ? netlink_unicast+0x7f0/0x7f0 [ 2122.943483][T13881] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2122.948798][T13881] ? netlink_unicast+0x7f0/0x7f0 [ 2122.953767][T13881] sock_sendmsg+0xcf/0x120 [ 2122.958217][T13881] ____sys_sendmsg+0x6eb/0x810 [ 2122.963009][T13881] ? copy_msghdr_from_user+0xfc/0x150 [ 2122.968416][T13881] ? kernel_sendmsg+0x50/0x50 [ 2122.973133][T13881] ? futex_unqueue+0xb3/0x120 [ 2122.977851][T13881] ___sys_sendmsg+0x110/0x1b0 [ 2122.982566][T13881] ? do_recvmmsg+0x6e0/0x6e0 [ 2122.987196][T13881] ? __fget_files+0x248/0x440 [ 2122.991901][T13881] ? lock_downgrade+0x6e0/0x6e0 [ 2122.996880][T13881] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2123.002902][T13881] ? __fget_files+0x26a/0x440 [ 2123.007621][T13881] ? __fget_light+0xe5/0x270 [ 2123.012260][T13881] __sys_sendmsg+0xf3/0x1c0 [ 2123.016797][T13881] ? __sys_sendmsg_sock+0x30/0x30 [ 2123.021857][T13881] ? lock_downgrade+0x6e0/0x6e0 [ 2123.026754][T13881] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2123.032676][T13881] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2123.038601][T13881] ? lockdep_hardirqs_on+0x79/0x100 [ 2123.043829][T13881] do_syscall_64+0x35/0xb0 [ 2123.048271][T13881] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2123.054206][T13881] RIP: 0033:0x7f58e888a5a9 [ 2123.058649][T13881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2123.078290][T13881] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2123.086725][T13881] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2123.094693][T13881] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2123.102662][T13881] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2123.110647][T13881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2123.118635][T13881] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2123.126660][T13881] [ 2123.145306][T13881] memory: usage 307196kB, limit 307200kB, failcnt 47213 [ 2123.152609][T13881] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2123.160021][T13881] Memory cgroup stats for /syz1: [ 2123.160259][T13881] anon 135168 [ 2123.160259][T13881] file 389120 [ 2123.160259][T13881] kernel 314044416 [ 2123.160259][T13881] kernel_stack 65536 [ 2123.160259][T13881] pagetables 77824 [ 2123.160259][T13881] percpu 5593216 [ 2123.160259][T13881] sock 0 [ 2123.160259][T13881] vmalloc 0 [ 2123.160259][T13881] shmem 389120 [ 2123.160259][T13881] zswap 0 [ 2123.160259][T13881] zswapped 0 [ 2123.160259][T13881] file_mapped 389120 [ 2123.160259][T13881] file_dirty 0 [ 2123.160259][T13881] file_writeback 0 [ 2123.160259][T13881] swapcached 0 [ 2123.160259][T13881] anon_thp 0 [ 2123.160259][T13881] file_thp 0 [ 2123.160259][T13881] shmem_thp 0 [ 2123.160259][T13881] inactive_anon 225280 [ 2123.160259][T13881] active_anon 299008 [ 2123.160259][T13881] inactive_file 0 [ 2123.160259][T13881] active_file 0 [ 2123.160259][T13881] unevictable 0 [ 2123.160259][T13881] slab_reclaimable 21832 [ 2123.160259][T13881] slab_unreclaimable 308249776 [ 2123.160259][T13881] slab 308271608 [ 2123.255020][T13881] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13872,uid=0 [ 2123.271158][T13881] Memory cgroup out of memory: Killed process 13872 (syz-executor.1) total-vm:54592kB, anon-rss:456kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2123.308350][T13882] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2123.318814][T13882] CPU: 1 PID: 13882 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2123.329255][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2123.339329][T13882] Call Trace: [ 2123.342629][T13882] [ 2123.345566][T13882] dump_stack_lvl+0xcd/0x134 [ 2123.350311][T13882] dump_header+0x10b/0x7f9 [ 2123.354725][T13882] oom_kill_process.cold+0x10/0x15 [ 2123.359828][T13882] out_of_memory+0x358/0x14a0 [ 2123.364512][T13882] ? find_held_lock+0x2d/0x110 [ 2123.369285][T13882] ? oom_killer_disable+0x270/0x270 [ 2123.374476][T13882] ? find_held_lock+0x2d/0x110 [ 2123.379245][T13882] mem_cgroup_out_of_memory+0x206/0x270 [ 2123.384819][T13882] ? mem_cgroup_margin+0x130/0x130 [ 2123.389943][T13882] ? lock_downgrade+0x6e0/0x6e0 [ 2123.394799][T13882] try_charge_memcg+0xf67/0x13f0 [ 2123.399741][T13882] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2123.405723][T13882] ? lock_downgrade+0x6e0/0x6e0 [ 2123.410571][T13882] charge_memcg+0x31/0x320 [ 2123.414980][T13882] __mem_cgroup_charge+0x27/0x90 [ 2123.419907][T13882] ? _compound_head+0x5d/0x150 [ 2123.424747][T13882] wp_page_copy+0x27c/0x1b60 [ 2123.429351][T13882] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2123.434829][T13882] ? lock_downgrade+0x6e0/0x6e0 [ 2123.439698][T13882] ? vm_normal_page+0x146/0x2a0 [ 2123.444590][T13882] do_wp_page+0x1d1/0x1910 [ 2123.449041][T13882] __handle_mm_fault+0x1813/0x39b0 [ 2123.454169][T13882] ? vm_iomap_memory+0x190/0x190 [ 2123.459120][T13882] handle_mm_fault+0x1c8/0x780 [ 2123.463876][T13882] do_user_addr_fault+0x475/0x1210 [ 2123.469004][T13882] exc_page_fault+0x94/0x170 [ 2123.473622][T13882] asm_exc_page_fault+0x22/0x30 [ 2123.478568][T13882] RIP: 0033:0x7f70e7e37970 [ 2123.483002][T13882] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2123.502627][T13882] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2123.508701][T13882] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2123.516698][T13882] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2123.524680][T13882] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2123.532665][T13882] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2123.540655][T13882] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2123.548630][T13882] ? __x64_sys_socket+0xd/0xb0 [ 2123.553403][T13882] [ 2123.565269][T13882] memory: usage 307200kB, limit 307200kB, failcnt 62067 [ 2123.605856][T13882] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2123.612760][T13882] Memory cgroup stats for /syz3: [ 2123.612970][T13882] anon 106496 [ 2123.612970][T13882] file 782336 [ 2123.612970][T13882] kernel 313683968 [ 2123.612970][T13882] kernel_stack 65536 [ 2123.612970][T13882] pagetables 73728 [ 2123.612970][T13882] percpu 5602688 [ 2123.612970][T13882] sock 0 [ 2123.612970][T13882] vmalloc 0 [ 2123.612970][T13882] shmem 778240 [ 2123.612970][T13882] zswap 0 [ 2123.612970][T13882] zswapped 0 [ 2123.612970][T13882] file_mapped 778240 [ 2123.612970][T13882] file_dirty 4096 [ 2123.612970][T13882] file_writeback 0 [ 2123.612970][T13882] swapcached 0 [ 2123.612970][T13882] anon_thp 0 [ 2123.612970][T13882] file_thp 0 [ 2123.612970][T13882] shmem_thp 0 [ 2123.612970][T13882] inactive_anon 577536 [ 2123.612970][T13882] active_anon 307200 [ 2123.612970][T13882] inactive_file 0 [ 2123.612970][T13882] active_file 4096 [ 2123.612970][T13882] unevictable 0 [ 2123.612970][T13882] slab_reclaimable 123352 [ 2123.612970][T13882] slab_unreclaimable 307779472 03:30:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000001c0200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x7, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4206}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x11}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc0e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x41ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2123.612970][T13882] slab 307902824 [ 2123.712454][T13882] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13882,uid=0 [ 2123.728286][T13882] Memory cgroup out of memory: Killed process 13882 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x42ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4207}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x300}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x8, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4304}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc1e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2123.963639][T13908] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2124.001476][T13908] CPU: 0 PID: 13908 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2124.011957][T13908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2124.022042][T13908] Call Trace: [ 2124.025338][T13908] [ 2124.028295][T13908] dump_stack_lvl+0xcd/0x134 [ 2124.032921][T13908] dump_header+0x10b/0x7f9 [ 2124.037370][T13908] oom_kill_process.cold+0x10/0x15 [ 2124.042513][T13908] out_of_memory+0x358/0x14a0 [ 2124.047234][T13908] ? find_held_lock+0x2d/0x110 [ 2124.052037][T13908] ? oom_killer_disable+0x270/0x270 [ 2124.057268][T13908] ? find_held_lock+0x2d/0x110 [ 2124.062088][T13908] mem_cgroup_out_of_memory+0x206/0x270 [ 2124.067664][T13908] ? mem_cgroup_margin+0x130/0x130 [ 2124.072799][T13908] ? lock_downgrade+0x6e0/0x6e0 [ 2124.077693][T13908] try_charge_memcg+0xf67/0x13f0 [ 2124.082660][T13908] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2124.088679][T13908] ? lock_downgrade+0x6e0/0x6e0 [ 2124.093575][T13908] charge_memcg+0x31/0x320 [ 2124.098031][T13908] __mem_cgroup_charge+0x27/0x90 [ 2124.103007][T13908] ? _compound_head+0x5d/0x150 [ 2124.107801][T13908] wp_page_copy+0x27c/0x1b60 [ 2124.112427][T13908] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2124.117915][T13908] ? lock_downgrade+0x6e0/0x6e0 [ 2124.122797][T13908] ? vm_normal_page+0x146/0x2a0 [ 2124.127695][T13908] do_wp_page+0x1d1/0x1910 [ 2124.132145][T13908] __handle_mm_fault+0x1813/0x39b0 [ 2124.137293][T13908] ? vm_iomap_memory+0x190/0x190 [ 2124.142289][T13908] handle_mm_fault+0x1c8/0x780 [ 2124.147095][T13908] do_user_addr_fault+0x475/0x1210 [ 2124.152251][T13908] exc_page_fault+0x94/0x170 [ 2124.156872][T13908] asm_exc_page_fault+0x22/0x30 [ 2124.161754][T13908] RIP: 0033:0x7f70e7e37970 [ 2124.166195][T13908] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2124.185833][T13908] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2124.191931][T13908] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2124.199928][T13908] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2124.207925][T13908] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2124.215924][T13908] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2124.223938][T13908] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2124.231930][T13908] ? __x64_sys_socket+0xd/0xb0 [ 2124.236734][T13908] [ 2124.245940][T13908] memory: usage 307200kB, limit 307200kB, failcnt 62125 [ 2124.252925][T13908] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2124.260035][T13908] Memory cgroup stats for /syz3: [ 2124.260229][T13908] anon 106496 [ 2124.260229][T13908] file 782336 [ 2124.260229][T13908] kernel 313683968 [ 2124.260229][T13908] kernel_stack 65536 [ 2124.260229][T13908] pagetables 73728 [ 2124.260229][T13908] percpu 5602688 [ 2124.260229][T13908] sock 0 [ 2124.260229][T13908] vmalloc 0 [ 2124.260229][T13908] shmem 778240 [ 2124.260229][T13908] zswap 0 [ 2124.260229][T13908] zswapped 0 [ 2124.260229][T13908] file_mapped 778240 [ 2124.260229][T13908] file_dirty 4096 [ 2124.260229][T13908] file_writeback 0 [ 2124.260229][T13908] swapcached 0 [ 2124.260229][T13908] anon_thp 0 [ 2124.260229][T13908] file_thp 0 [ 2124.260229][T13908] shmem_thp 0 [ 2124.260229][T13908] inactive_anon 577536 [ 2124.260229][T13908] active_anon 307200 [ 2124.260229][T13908] inactive_file 0 [ 2124.260229][T13908] active_file 4096 [ 2124.260229][T13908] unevictable 0 [ 2124.260229][T13908] slab_reclaimable 123352 [ 2124.260229][T13908] slab_unreclaimable 307779472 [ 2124.260229][T13908] slab 307902824 03:30:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000480200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x9, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x43ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4305}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc2010000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2124.364035][T13908] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13908,uid=0 [ 2124.382282][T13908] Memory cgroup out of memory: Killed process 13908 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4306}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc2e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x44010000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xe, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2124.636404][T13937] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2124.678449][T13937] CPU: 0 PID: 13937 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2124.689110][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2124.699191][T13937] Call Trace: [ 2124.702491][T13937] [ 2124.705447][T13937] dump_stack_lvl+0xcd/0x134 [ 2124.710075][T13937] dump_header+0x10b/0x7f9 [ 2124.714530][T13937] oom_kill_process.cold+0x10/0x15 [ 2124.719683][T13937] out_of_memory+0x358/0x14a0 03:30:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x44030000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2124.724402][T13937] ? find_held_lock+0x2d/0x110 [ 2124.729196][T13937] ? oom_killer_disable+0x270/0x270 [ 2124.734433][T13937] ? find_held_lock+0x2d/0x110 [ 2124.739319][T13937] mem_cgroup_out_of_memory+0x206/0x270 [ 2124.744893][T13937] ? mem_cgroup_margin+0x130/0x130 [ 2124.750030][T13937] ? lock_downgrade+0x6e0/0x6e0 [ 2124.754923][T13937] try_charge_memcg+0xf67/0x13f0 [ 2124.759895][T13937] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2124.765916][T13937] ? lock_downgrade+0x6e0/0x6e0 [ 2124.770818][T13937] charge_memcg+0x31/0x320 [ 2124.775279][T13937] __mem_cgroup_charge+0x27/0x90 [ 2124.780249][T13937] ? _compound_head+0x5d/0x150 [ 2124.785044][T13937] wp_page_copy+0x27c/0x1b60 [ 2124.789673][T13937] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2124.795160][T13937] ? lock_downgrade+0x6e0/0x6e0 [ 2124.800036][T13937] ? vm_normal_page+0x146/0x2a0 [ 2124.804930][T13937] do_wp_page+0x1d1/0x1910 [ 2124.809384][T13937] __handle_mm_fault+0x1813/0x39b0 [ 2124.814540][T13937] ? vm_iomap_memory+0x190/0x190 [ 2124.819540][T13937] handle_mm_fault+0x1c8/0x780 03:30:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4307}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2124.824344][T13937] do_user_addr_fault+0x475/0x1210 [ 2124.829510][T13937] exc_page_fault+0x94/0x170 [ 2124.834132][T13937] asm_exc_page_fault+0x22/0x30 [ 2124.839013][T13937] RIP: 0033:0x7f70e7e37970 [ 2124.843450][T13937] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2124.863100][T13937] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2124.869199][T13937] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2124.877198][T13937] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2124.885366][T13937] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2124.893363][T13937] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2124.901363][T13937] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2124.909363][T13937] ? __x64_sys_socket+0xd/0xb0 [ 2124.914188][T13937] [ 2124.930400][T13937] memory: usage 307200kB, limit 307200kB, failcnt 62173 [ 2124.952018][T13937] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2124.959427][T13937] Memory cgroup stats for /syz3: [ 2124.959653][T13937] anon 106496 [ 2124.959653][T13937] file 782336 [ 2124.959653][T13937] kernel 313683968 [ 2124.959653][T13937] kernel_stack 65536 [ 2124.959653][T13937] pagetables 73728 [ 2124.959653][T13937] percpu 5602688 [ 2124.959653][T13937] sock 0 [ 2124.959653][T13937] vmalloc 0 [ 2124.959653][T13937] shmem 778240 [ 2124.959653][T13937] zswap 0 [ 2124.959653][T13937] zswapped 0 [ 2124.959653][T13937] file_mapped 778240 [ 2124.959653][T13937] file_dirty 4096 [ 2124.959653][T13937] file_writeback 0 [ 2124.959653][T13937] swapcached 0 [ 2124.959653][T13937] anon_thp 0 [ 2124.959653][T13937] file_thp 0 [ 2124.959653][T13937] shmem_thp 0 [ 2124.959653][T13937] inactive_anon 577536 [ 2124.959653][T13937] active_anon 307200 [ 2124.959653][T13937] inactive_file 0 [ 2124.959653][T13937] active_file 4096 [ 2124.959653][T13937] unevictable 0 [ 2124.959653][T13937] slab_reclaimable 123352 [ 2124.959653][T13937] slab_unreclaimable 307779472 [ 2124.959653][T13937] slab 307902824 [ 2125.054437][T13937] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13937,uid=0 03:30:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000520200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x60, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc3e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4404}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x10}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2125.070522][T13937] Memory cgroup out of memory: Killed process 13937 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x44ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc4e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2125.280753][T13960] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2125.324285][T13960] CPU: 1 PID: 13960 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2125.334769][T13960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2125.344849][T13960] Call Trace: [ 2125.348148][T13960] [ 2125.351091][T13960] dump_stack_lvl+0xcd/0x134 [ 2125.355717][T13960] dump_header+0x10b/0x7f9 [ 2125.360176][T13960] oom_kill_process.cold+0x10/0x15 [ 2125.365330][T13960] out_of_memory+0x358/0x14a0 [ 2125.370057][T13960] ? find_held_lock+0x2d/0x110 [ 2125.374933][T13960] ? oom_killer_disable+0x270/0x270 [ 2125.380163][T13960] ? find_held_lock+0x2d/0x110 [ 2125.384961][T13960] mem_cgroup_out_of_memory+0x206/0x270 [ 2125.390540][T13960] ? mem_cgroup_margin+0x130/0x130 [ 2125.395686][T13960] ? lock_downgrade+0x6e0/0x6e0 [ 2125.400577][T13960] try_charge_memcg+0xf67/0x13f0 [ 2125.405559][T13960] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2125.411605][T13960] ? lock_downgrade+0x6e0/0x6e0 [ 2125.416497][T13960] charge_memcg+0x31/0x320 [ 2125.420941][T13960] __mem_cgroup_charge+0x27/0x90 [ 2125.425888][T13960] ? _compound_head+0x5d/0x150 [ 2125.430659][T13960] wp_page_copy+0x27c/0x1b60 [ 2125.435274][T13960] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2125.440753][T13960] ? lock_downgrade+0x6e0/0x6e0 [ 2125.445802][T13960] ? vm_normal_page+0x146/0x2a0 [ 2125.450689][T13960] do_wp_page+0x52c/0x1910 [ 2125.455131][T13960] __handle_mm_fault+0x1813/0x39b0 [ 2125.460266][T13960] ? vm_iomap_memory+0x190/0x190 [ 2125.465234][T13960] handle_mm_fault+0x1c8/0x780 [ 2125.470013][T13960] do_user_addr_fault+0x475/0x1210 [ 2125.475146][T13960] exc_page_fault+0x94/0x170 [ 2125.479751][T13960] asm_exc_page_fault+0x22/0x30 [ 2125.484615][T13960] RIP: 0033:0x7f70e7e34a15 [ 2125.489054][T13960] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2125.508680][T13960] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2125.514929][T13960] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 03:30:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xf0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x3}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4405}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2125.522908][T13960] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2125.530888][T13960] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2125.538871][T13960] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 0000000000206d86 [ 2125.546844][T13960] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2125.554843][T13960] 03:30:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x45ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2125.609162][T13970] __nla_validate_parse: 28 callbacks suppressed [ 2125.609182][T13970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2125.645903][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x300, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2125.667010][T13960] memory: usage 307200kB, limit 307200kB, failcnt 62239 [ 2125.674189][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2125.686943][T13960] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2125.694566][T13970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2125.732149][T13960] Memory cgroup stats for /syz3: [ 2125.732316][T13960] anon 90112 [ 2125.732316][T13960] file 782336 [ 2125.732316][T13960] kernel 313700352 [ 2125.732316][T13960] kernel_stack 65536 [ 2125.732316][T13960] pagetables 73728 [ 2125.732316][T13960] percpu 5602688 [ 2125.732316][T13960] sock 0 [ 2125.732316][T13960] vmalloc 0 [ 2125.732316][T13960] shmem 778240 [ 2125.732316][T13960] zswap 0 [ 2125.732316][T13960] zswapped 0 [ 2125.732316][T13960] file_mapped 778240 [ 2125.732316][T13960] file_dirty 4096 [ 2125.732316][T13960] file_writeback 0 [ 2125.732316][T13960] swapcached 0 [ 2125.732316][T13960] anon_thp 0 [ 2125.732316][T13960] file_thp 0 [ 2125.732316][T13960] shmem_thp 0 [ 2125.732316][T13960] inactive_anon 561152 [ 2125.732316][T13960] active_anon 307200 [ 2125.732316][T13960] inactive_file 0 [ 2125.732316][T13960] active_file 4096 [ 2125.732316][T13960] unevictable 0 [ 2125.732316][T13960] slab_reclaimable 123352 [ 2125.732316][T13960] slab_unreclaimable 307790872 [ 2125.732316][T13960] slab 307914224 [ 2125.893152][T13960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13960,uid=0 [ 2125.915884][T13960] Memory cgroup out of memory: Killed process 13960 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2125.933499][T13973] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 03:30:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000590200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc5e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4406}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x4}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x500, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2125.944759][T13973] CPU: 0 PID: 13973 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2125.955220][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2125.965303][T13973] Call Trace: [ 2125.968605][T13973] [ 2125.971555][T13973] dump_stack_lvl+0xcd/0x134 [ 2125.976182][T13973] dump_header+0x10b/0x7f9 [ 2125.977743][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2125.980621][T13973] oom_kill_process.cold+0x10/0x15 [ 2125.980660][T13973] out_of_memory+0x358/0x14a0 [ 2125.999695][T13973] ? oom_killer_disable+0x270/0x270 [ 2126.004938][T13973] ? find_held_lock+0x2d/0x110 [ 2126.009736][T13973] mem_cgroup_out_of_memory+0x206/0x270 [ 2126.015317][T13973] ? mem_cgroup_margin+0x130/0x130 [ 2126.020548][T13973] ? lock_downgrade+0x6e0/0x6e0 [ 2126.023765][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2126.025429][T13973] try_charge_memcg+0xf67/0x13f0 [ 2126.025470][T13973] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2126.025507][T13973] ? lock_downgrade+0x6e0/0x6e0 [ 2126.050914][T13973] charge_memcg+0x31/0x320 [ 2126.055355][T13973] __mem_cgroup_charge+0x27/0x90 [ 2126.060302][T13973] ? _compound_head+0x5d/0x150 [ 2126.065101][T13973] wp_page_copy+0x27c/0x1b60 [ 2126.069710][T13973] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2126.075177][T13973] ? lock_downgrade+0x6e0/0x6e0 [ 2126.080033][T13973] ? vm_normal_page+0x146/0x2a0 [ 2126.084911][T13973] do_wp_page+0x1d1/0x1910 [ 2126.089340][T13973] __handle_mm_fault+0x1813/0x39b0 [ 2126.094469][T13973] ? vm_iomap_memory+0x190/0x190 [ 2126.099437][T13973] handle_mm_fault+0x1c8/0x780 [ 2126.104219][T13973] do_user_addr_fault+0x475/0x1210 [ 2126.109352][T13973] exc_page_fault+0x94/0x170 [ 2126.113954][T13973] asm_exc_page_fault+0x22/0x30 [ 2126.118820][T13973] RIP: 0033:0x7f58e8837970 [ 2126.123241][T13973] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2126.142870][T13973] RSP: 002b:00007ffce2e5b650 EFLAGS: 00010246 [ 2126.148944][T13973] RAX: 00000000fe0921cb RBX: 00007f58e89ac0e8 RCX: 0000001b2ea20000 [ 2126.156927][T13973] RDX: 0000000000000000 RSI: 0000001b2ea20018 RDI: 000000000c1c3fb0 [ 2126.164902][T13973] RBP: 00000000fe0921cb R08: 00000000000001cb R09: 00000000fe0921cf [ 2126.172876][T13973] R10: 00007ffce2e5b820 R11: 0000000000000246 R12: 00007f58e89a0000 [ 2126.180850][T13973] R13: 0000000000000001 R14: 0000000000000007 R15: ffffffff874e2c22 [ 2126.188825][T13973] ? __sys_sendmsg+0x82/0x1c0 [ 2126.193531][T13973] 03:30:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4407}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2126.225976][T13973] memory: usage 307200kB, limit 307200kB, failcnt 47569 [ 2126.235413][T13988] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 2126.257401][T13973] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2126.284227][T13973] Memory cgroup stats for /syz1: [ 2126.284459][T13973] anon 118784 [ 2126.284459][T13973] file 389120 [ 2126.284459][T13973] kernel 314064896 [ 2126.284459][T13973] kernel_stack 98304 [ 2126.284459][T13973] pagetables 81920 [ 2126.284459][T13973] percpu 5593216 [ 2126.284459][T13973] sock 0 [ 2126.284459][T13973] vmalloc 0 [ 2126.284459][T13973] shmem 389120 [ 2126.284459][T13973] zswap 0 [ 2126.284459][T13973] zswapped 0 [ 2126.284459][T13973] file_mapped 389120 [ 2126.284459][T13973] file_dirty 0 03:30:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x600, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2126.284459][T13973] file_writeback 0 [ 2126.284459][T13973] swapcached 0 [ 2126.284459][T13973] anon_thp 0 [ 2126.284459][T13973] file_thp 0 [ 2126.284459][T13973] shmem_thp 0 [ 2126.284459][T13973] inactive_anon 208896 [ 2126.284459][T13973] active_anon 299008 [ 2126.284459][T13973] inactive_file 0 [ 2126.284459][T13973] active_file 0 [ 2126.284459][T13973] unevictable 0 [ 2126.284459][T13973] slab_reclaimable 21832 [ 2126.284459][T13973] slab_unreclaimable 308236032 [ 2126.284459][T13973] slab 308257864 03:30:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc6e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x6}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2126.396210][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2126.399853][T13992] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 2126.422298][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2126.485283][T13997] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 2126.513486][T13973] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13973,uid=0 03:30:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x46ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4504}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2126.538146][T13973] Memory cgroup out of memory: Killed process 13973 (syz-executor.1) total-vm:54724kB, anon-rss:456kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2126.608124][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2126.619125][T13982] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2126.626352][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2126.644253][T13982] CPU: 1 PID: 13982 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2126.654731][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2126.664821][T13982] Call Trace: [ 2126.668122][T13982] [ 2126.671072][T13982] dump_stack_lvl+0xcd/0x134 [ 2126.675690][T13982] dump_header+0x10b/0x7f9 [ 2126.680167][T13982] oom_kill_process.cold+0x10/0x15 [ 2126.685324][T13982] out_of_memory+0x358/0x14a0 [ 2126.690076][T13982] ? find_held_lock+0x2d/0x110 [ 2126.694866][T13982] ? oom_killer_disable+0x270/0x270 [ 2126.700087][T13982] ? find_held_lock+0x2d/0x110 [ 2126.704871][T13982] mem_cgroup_out_of_memory+0x206/0x270 [ 2126.710430][T13982] ? mem_cgroup_margin+0x130/0x130 [ 2126.715549][T13982] ? lock_downgrade+0x6e0/0x6e0 [ 2126.720422][T13982] try_charge_memcg+0xf67/0x13f0 [ 2126.725375][T13982] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2126.731371][T13982] ? lock_downgrade+0x6e0/0x6e0 [ 2126.736245][T13982] charge_memcg+0x31/0x320 [ 2126.740678][T13982] __mem_cgroup_charge+0x27/0x90 [ 2126.745623][T13982] ? _compound_head+0x5d/0x150 [ 2126.750395][T13982] wp_page_copy+0x27c/0x1b60 [ 2126.755000][T13982] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2126.760464][T13982] ? lock_downgrade+0x6e0/0x6e0 [ 2126.765321][T13982] ? vm_normal_page+0x146/0x2a0 [ 2126.770192][T13982] do_wp_page+0x1d1/0x1910 [ 2126.774622][T13982] __handle_mm_fault+0x1813/0x39b0 [ 2126.779772][T13982] ? vm_iomap_memory+0x190/0x190 [ 2126.784780][T13982] handle_mm_fault+0x1c8/0x780 [ 2126.789600][T13982] do_user_addr_fault+0x475/0x1210 [ 2126.794761][T13982] exc_page_fault+0x94/0x170 [ 2126.799377][T13982] asm_exc_page_fault+0x22/0x30 [ 2126.804242][T13982] RIP: 0033:0x7f70e7e37970 [ 2126.808665][T13982] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2126.828279][T13982] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2126.834352][T13982] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2126.842329][T13982] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2126.850304][T13982] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2126.858282][T13982] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2126.866256][T13982] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2126.874232][T13982] ? __x64_sys_socket+0xd/0xb0 [ 2126.879028][T13982] [ 2126.886749][T13982] memory: usage 307200kB, limit 307200kB, failcnt 62319 [ 2126.896739][T13982] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2126.903866][T13982] Memory cgroup stats for /syz3: [ 2126.904072][T13982] anon 106496 [ 2126.904072][T13982] file 782336 [ 2126.904072][T13982] kernel 313683968 [ 2126.904072][T13982] kernel_stack 65536 [ 2126.904072][T13982] pagetables 73728 [ 2126.904072][T13982] percpu 5602688 [ 2126.904072][T13982] sock 0 [ 2126.904072][T13982] vmalloc 0 [ 2126.904072][T13982] shmem 778240 [ 2126.904072][T13982] zswap 0 [ 2126.904072][T13982] zswapped 0 [ 2126.904072][T13982] file_mapped 778240 [ 2126.904072][T13982] file_dirty 4096 [ 2126.904072][T13982] file_writeback 0 [ 2126.904072][T13982] swapcached 0 [ 2126.904072][T13982] anon_thp 0 [ 2126.904072][T13982] file_thp 0 [ 2126.904072][T13982] shmem_thp 0 [ 2126.904072][T13982] inactive_anon 577536 [ 2126.904072][T13982] active_anon 307200 [ 2126.904072][T13982] inactive_file 0 [ 2126.904072][T13982] active_file 4096 [ 2126.904072][T13982] unevictable 0 [ 2126.904072][T13982] slab_reclaimable 123352 [ 2126.904072][T13982] slab_unreclaimable 307779472 [ 2126.904072][T13982] slab 307902824 03:30:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000920200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x7}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x700, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc7e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4505}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2127.000085][T13982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13982,uid=0 [ 2127.015989][T13982] Memory cgroup out of memory: Killed process 13982 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4506}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2127.055344][T14007] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 03:30:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0xc}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc8e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x47ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2127.176769][T14017] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 03:30:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4507}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x900, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2127.222592][T14017] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 03:30:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x10}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2127.274971][T14015] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2127.340317][T14015] CPU: 0 PID: 14015 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2127.350784][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2127.360871][T14015] Call Trace: [ 2127.364170][T14015] [ 2127.367120][T14015] dump_stack_lvl+0xcd/0x134 [ 2127.371738][T14015] dump_header+0x10b/0x7f9 [ 2127.376183][T14015] oom_kill_process.cold+0x10/0x15 [ 2127.381331][T14015] out_of_memory+0x358/0x14a0 [ 2127.386136][T14015] ? find_held_lock+0x2d/0x110 [ 2127.390931][T14015] ? oom_killer_disable+0x270/0x270 [ 2127.396165][T14015] ? find_held_lock+0x2d/0x110 [ 2127.400989][T14015] mem_cgroup_out_of_memory+0x206/0x270 [ 2127.406570][T14015] ? mem_cgroup_margin+0x130/0x130 [ 2127.411712][T14015] ? lock_downgrade+0x6e0/0x6e0 [ 2127.416616][T14015] try_charge_memcg+0xf67/0x13f0 [ 2127.421588][T14015] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2127.427604][T14015] ? lock_downgrade+0x6e0/0x6e0 [ 2127.432496][T14015] charge_memcg+0x31/0x320 [ 2127.434630][T14029] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 2127.436928][T14015] __mem_cgroup_charge+0x27/0x90 [ 2127.436962][T14015] ? _compound_head+0x5d/0x150 [ 2127.436986][T14015] wp_page_copy+0x27c/0x1b60 [ 2127.437017][T14015] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2127.437040][T14015] ? lock_downgrade+0x6e0/0x6e0 [ 2127.437063][T14015] ? vm_normal_page+0x146/0x2a0 [ 2127.437102][T14015] do_wp_page+0x1d1/0x1910 [ 2127.437132][T14015] __handle_mm_fault+0x1813/0x39b0 [ 2127.437165][T14015] ? vm_iomap_memory+0x190/0x190 [ 2127.437223][T14015] handle_mm_fault+0x1c8/0x780 [ 2127.449400][T14029] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 2127.450219][T14015] do_user_addr_fault+0x475/0x1210 [ 2127.507182][T14015] exc_page_fault+0x94/0x170 [ 2127.511800][T14015] asm_exc_page_fault+0x22/0x30 [ 2127.516651][T14015] RIP: 0033:0x7f70e7e37970 [ 2127.521058][T14015] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2127.540675][T14015] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2127.546765][T14015] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2127.554746][T14015] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2127.562713][T14015] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2127.570681][T14015] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2127.578655][T14015] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2127.586646][T14015] ? __x64_sys_socket+0xd/0xb0 [ 2127.591437][T14015] [ 2127.598654][T14015] memory: usage 307200kB, limit 307200kB, failcnt 62374 [ 2127.606697][T14015] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2127.613697][T14015] Memory cgroup stats for /syz3: [ 2127.613912][T14015] anon 106496 [ 2127.613912][T14015] file 782336 [ 2127.613912][T14015] kernel 313683968 [ 2127.613912][T14015] kernel_stack 65536 [ 2127.613912][T14015] pagetables 73728 [ 2127.613912][T14015] percpu 5602688 [ 2127.613912][T14015] sock 0 [ 2127.613912][T14015] vmalloc 0 [ 2127.613912][T14015] shmem 778240 [ 2127.613912][T14015] zswap 0 [ 2127.613912][T14015] zswapped 0 [ 2127.613912][T14015] file_mapped 778240 [ 2127.613912][T14015] file_dirty 4096 [ 2127.613912][T14015] file_writeback 0 [ 2127.613912][T14015] swapcached 0 [ 2127.613912][T14015] anon_thp 0 [ 2127.613912][T14015] file_thp 0 [ 2127.613912][T14015] shmem_thp 0 [ 2127.613912][T14015] inactive_anon 577536 [ 2127.613912][T14015] active_anon 307200 [ 2127.613912][T14015] inactive_file 0 [ 2127.613912][T14015] active_file 4096 [ 2127.613912][T14015] unevictable 0 [ 2127.613912][T14015] slab_reclaimable 123352 [ 2127.613912][T14015] slab_unreclaimable 307779472 [ 2127.613912][T14015] slab 307902824 [ 2127.711152][T14015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14015,uid=0 03:30:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000940200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4604}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xe00, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x104}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc9e21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2127.726808][T14015] Memory cgroup out of memory: Killed process 14015 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4605}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x105}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xcae21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4606}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2127.945952][T14038] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2128.005226][T14038] CPU: 1 PID: 14038 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2128.015691][T14038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2128.025768][T14038] Call Trace: [ 2128.029065][T14038] [ 2128.032016][T14038] dump_stack_lvl+0xcd/0x134 [ 2128.036636][T14038] dump_header+0x10b/0x7f9 [ 2128.041088][T14038] oom_kill_process.cold+0x10/0x15 [ 2128.046232][T14038] out_of_memory+0x358/0x14a0 [ 2128.050942][T14038] ? find_held_lock+0x2d/0x110 [ 2128.055729][T14038] ? oom_killer_disable+0x270/0x270 [ 2128.060957][T14038] ? find_held_lock+0x2d/0x110 [ 2128.065748][T14038] mem_cgroup_out_of_memory+0x206/0x270 [ 2128.071321][T14038] ? mem_cgroup_margin+0x130/0x130 [ 2128.076458][T14038] ? lock_downgrade+0x6e0/0x6e0 [ 2128.081352][T14038] try_charge_memcg+0xf67/0x13f0 [ 2128.086329][T14038] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2128.092351][T14038] ? lock_downgrade+0x6e0/0x6e0 [ 2128.097244][T14038] charge_memcg+0x31/0x320 [ 2128.101696][T14038] __mem_cgroup_charge+0x27/0x90 [ 2128.106658][T14038] ? _compound_head+0x5d/0x150 [ 2128.111437][T14038] __handle_mm_fault+0x17df/0x39b0 [ 2128.116573][T14038] ? vm_iomap_memory+0x190/0x190 [ 2128.121557][T14038] handle_mm_fault+0x1c8/0x780 [ 2128.126341][T14038] do_user_addr_fault+0x475/0x1210 [ 2128.131482][T14038] exc_page_fault+0x94/0x170 [ 2128.136085][T14038] asm_exc_page_fault+0x22/0x30 [ 2128.140944][T14038] RIP: 0033:0x7f70e7e3533d [ 2128.145358][T14038] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 53 52 05 00 <83> 05 bc ac 57 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 57 00 0b 01 [ 2128.164967][T14038] RSP: 002b:00007ffcadad7be0 EFLAGS: 00010207 [ 2128.171038][T14038] RAX: 0000000000000001 RBX: 00007f70e7fabf8c RCX: 00007f70e7e8a5a9 [ 2128.179012][T14038] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f70e7fabf88 [ 2128.186981][T14038] RBP: 00007f70e7fabf80 R08: 00007f70e9053700 R09: 0000000000000000 [ 2128.194955][T14038] R10: 00007f70e9053700 R11: 0000000000000246 R12: 00007f70e7fabf8c 03:30:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xec0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x48ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2128.202927][T14038] R13: 00007f70e7fb0060 R14: 00007f70e7fabf80 R15: 0000000000000000 [ 2128.210919][T14038] [ 2128.218766][T14038] memory: usage 307180kB, limit 307200kB, failcnt 62427 [ 2128.249176][T14038] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2128.280711][T14038] Memory cgroup stats for /syz3: [ 2128.280906][T14038] anon 86016 [ 2128.280906][T14038] file 782336 [ 2128.280906][T14038] kernel 313683968 [ 2128.280906][T14038] kernel_stack 65536 [ 2128.280906][T14038] pagetables 73728 [ 2128.280906][T14038] percpu 5602688 [ 2128.280906][T14038] sock 0 [ 2128.280906][T14038] vmalloc 0 [ 2128.280906][T14038] shmem 778240 [ 2128.280906][T14038] zswap 0 [ 2128.280906][T14038] zswapped 0 [ 2128.280906][T14038] file_mapped 778240 [ 2128.280906][T14038] file_dirty 4096 [ 2128.280906][T14038] file_writeback 0 [ 2128.280906][T14038] swapcached 0 [ 2128.280906][T14038] anon_thp 0 [ 2128.280906][T14038] file_thp 0 [ 2128.280906][T14038] shmem_thp 0 [ 2128.280906][T14038] inactive_anon 557056 [ 2128.280906][T14038] active_anon 307200 [ 2128.280906][T14038] inactive_file 0 [ 2128.280906][T14038] active_file 4096 [ 2128.280906][T14038] unevictable 0 [ 2128.280906][T14038] slab_reclaimable 123352 [ 2128.280906][T14038] slab_unreclaimable 307779472 [ 2128.280906][T14038] slab 307902824 03:30:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000c60200000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x106}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xcbe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x2000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4607}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x49ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2128.396095][T14038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14038,uid=0 [ 2128.411729][T14038] Memory cgroup out of memory: Killed process 14038 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xcce21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4704}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4a000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x107}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x3c89, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2128.616494][T14066] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2128.639104][T14066] CPU: 1 PID: 14066 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2128.649577][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2128.659653][T14066] Call Trace: [ 2128.662952][T14066] [ 2128.665901][T14066] dump_stack_lvl+0xcd/0x134 [ 2128.670521][T14066] dump_header+0x10b/0x7f9 [ 2128.674977][T14066] oom_kill_process.cold+0x10/0x15 [ 2128.680121][T14066] out_of_memory+0x358/0x14a0 [ 2128.684825][T14066] ? find_held_lock+0x2d/0x110 [ 2128.689630][T14066] ? oom_killer_disable+0x270/0x270 [ 2128.694863][T14066] ? find_held_lock+0x2d/0x110 [ 2128.699661][T14066] mem_cgroup_out_of_memory+0x206/0x270 [ 2128.705248][T14066] ? mem_cgroup_margin+0x130/0x130 [ 2128.710384][T14066] ? lock_downgrade+0x6e0/0x6e0 [ 2128.715279][T14066] try_charge_memcg+0xf67/0x13f0 [ 2128.720250][T14066] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2128.726264][T14066] ? lock_downgrade+0x6e0/0x6e0 [ 2128.731155][T14066] charge_memcg+0x31/0x320 [ 2128.735604][T14066] __mem_cgroup_charge+0x27/0x90 [ 2128.740573][T14066] ? _compound_head+0x5d/0x150 [ 2128.745367][T14066] wp_page_copy+0x27c/0x1b60 [ 2128.749985][T14066] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2128.755453][T14066] ? lock_downgrade+0x6e0/0x6e0 [ 2128.760324][T14066] ? vm_normal_page+0x146/0x2a0 [ 2128.765193][T14066] do_wp_page+0x52c/0x1910 [ 2128.769632][T14066] __handle_mm_fault+0x1813/0x39b0 [ 2128.774784][T14066] ? vm_iomap_memory+0x190/0x190 [ 2128.779761][T14066] handle_mm_fault+0x1c8/0x780 [ 2128.784534][T14066] do_user_addr_fault+0x475/0x1210 [ 2128.789670][T14066] exc_page_fault+0x94/0x170 [ 2128.794277][T14066] asm_exc_page_fault+0x22/0x30 [ 2128.799135][T14066] RIP: 0033:0x7f70e7e34a15 [ 2128.803557][T14066] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2128.823168][T14066] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2128.829238][T14066] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2128.837209][T14066] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2128.845181][T14066] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2128.853154][T14066] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 0000000000207a95 03:30:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x204}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2128.861127][T14066] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2128.869114][T14066] [ 2128.938073][T14066] memory: usage 307200kB, limit 307200kB, failcnt 62482 [ 2128.945170][T14066] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2128.952600][T14066] Memory cgroup stats for /syz3: [ 2128.952835][T14066] anon 90112 [ 2128.952835][T14066] file 782336 [ 2128.952835][T14066] kernel 313700352 [ 2128.952835][T14066] kernel_stack 65536 [ 2128.952835][T14066] pagetables 73728 [ 2128.952835][T14066] percpu 5602688 [ 2128.952835][T14066] sock 0 [ 2128.952835][T14066] vmalloc 0 [ 2128.952835][T14066] shmem 778240 [ 2128.952835][T14066] zswap 0 [ 2128.952835][T14066] zswapped 0 [ 2128.952835][T14066] file_mapped 778240 [ 2128.952835][T14066] file_dirty 4096 [ 2128.952835][T14066] file_writeback 0 [ 2128.952835][T14066] swapcached 0 [ 2128.952835][T14066] anon_thp 0 [ 2128.952835][T14066] file_thp 0 [ 2128.952835][T14066] shmem_thp 0 [ 2128.952835][T14066] inactive_anon 561152 [ 2128.952835][T14066] active_anon 307200 [ 2128.952835][T14066] inactive_file 0 [ 2128.952835][T14066] active_file 4096 [ 2128.952835][T14066] unevictable 0 03:30:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4705}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xcde21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x41a8, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x205}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2128.952835][T14066] slab_reclaimable 123352 [ 2128.952835][T14066] slab_unreclaimable 307790872 [ 2128.952835][T14066] slab 307914224 [ 2129.047073][T14066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14066,uid=0 [ 2129.062939][T14066] Memory cgroup out of memory: Killed process 14066 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x206}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2129.145564][T14075] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2129.178106][T14075] CPU: 0 PID: 14075 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2129.188584][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2129.198735][T14075] Call Trace: [ 2129.202014][T14075] [ 2129.204949][T14075] dump_stack_lvl+0xcd/0x134 [ 2129.209554][T14075] dump_header+0x10b/0x7f9 [ 2129.213987][T14075] oom_kill_process.cold+0x10/0x15 [ 2129.219112][T14075] out_of_memory+0x358/0x14a0 [ 2129.223810][T14075] ? find_held_lock+0x2d/0x110 [ 2129.228585][T14075] ? oom_killer_disable+0x270/0x270 [ 2129.233799][T14075] ? find_held_lock+0x2d/0x110 [ 2129.238576][T14075] mem_cgroup_out_of_memory+0x206/0x270 [ 2129.244136][T14075] ? mem_cgroup_margin+0x130/0x130 [ 2129.249255][T14075] ? lock_downgrade+0x6e0/0x6e0 [ 2129.254128][T14075] try_charge_memcg+0xf67/0x13f0 [ 2129.259086][T14075] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2129.265078][T14075] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2129.270811][T14075] ? lock_downgrade+0x6e0/0x6e0 [ 2129.275696][T14075] obj_cgroup_charge+0x2ab/0x5e0 [ 2129.280659][T14075] __kmalloc+0xb2/0x340 [ 2129.284822][T14075] ? veth_dev_init+0x1dd/0x3e0 [ 2129.289603][T14075] veth_dev_init+0x1dd/0x3e0 [ 2129.294205][T14075] ? veth_get_num_queues+0x50/0x50 [ 2129.299327][T14075] register_netdevice+0x5e1/0x1680 [ 2129.304459][T14075] ? netdev_change_features+0xb0/0xb0 [ 2129.309946][T14075] ? dev_addr_mod+0x2c9/0x3f0 [ 2129.314643][T14075] veth_newlink+0x338/0x990 [ 2129.319164][T14075] ? veth_set_features+0x190/0x190 [ 2129.324286][T14075] ? netlink_rcv_skb+0x153/0x420 [ 2129.329230][T14075] ? netlink_unicast+0x543/0x7f0 [ 2129.334176][T14075] ? netlink_sendmsg+0x917/0xe10 [ 2129.339175][T14075] ? dev_addr_mod+0x2c9/0x3f0 [ 2129.343870][T14075] ? rtnl_create_link+0x7e8/0xc00 [ 2129.348992][T14075] ? veth_set_features+0x190/0x190 [ 2129.354111][T14075] __rtnl_newlink+0x1087/0x17e0 [ 2129.358988][T14075] ? rtnl_link_unregister+0x250/0x250 [ 2129.364370][T14075] ? find_held_lock+0x2d/0x110 [ 2129.369162][T14075] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2129.374714][T14075] ? trace_kmalloc+0x32/0x100 [ 2129.379416][T14075] rtnl_newlink+0x64/0xa0 [ 2129.383800][T14075] ? __rtnl_newlink+0x17e0/0x17e0 [ 2129.388834][T14075] rtnetlink_rcv_msg+0x43a/0xca0 [ 2129.393784][T14075] ? rtnl_getlink+0xae0/0xae0 [ 2129.398467][T14075] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2129.403758][T14075] ? skb_clone+0x16e/0x3c0 [ 2129.408188][T14075] ? ref_tracker_free+0x370/0x6b0 [ 2129.413224][T14075] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2129.418610][T14075] netlink_rcv_skb+0x153/0x420 [ 2129.423391][T14075] ? rtnl_getlink+0xae0/0xae0 [ 2129.428105][T14075] ? netlink_ack+0xd50/0xd50 [ 2129.432704][T14075] ? netlink_deliver_tap+0x1a2/0xc40 [ 2129.438004][T14075] ? netlink_deliver_tap+0x1b1/0xc40 [ 2129.443304][T14075] netlink_unicast+0x543/0x7f0 [ 2129.448084][T14075] ? netlink_attachskb+0x880/0x880 [ 2129.453203][T14075] ? __phys_addr+0xc4/0x140 [ 2129.457717][T14075] ? __phys_addr_symbol+0x2c/0x70 [ 2129.462765][T14075] ? __check_object_size+0x2de/0x700 [ 2129.468066][T14075] netlink_sendmsg+0x917/0xe10 [ 2129.472849][T14075] ? netlink_unicast+0x7f0/0x7f0 [ 2129.477805][T14075] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2129.483101][T14075] ? netlink_unicast+0x7f0/0x7f0 [ 2129.488051][T14075] sock_sendmsg+0xcf/0x120 [ 2129.492480][T14075] ____sys_sendmsg+0x6eb/0x810 [ 2129.497253][T14075] ? copy_msghdr_from_user+0xfc/0x150 [ 2129.502639][T14075] ? kernel_sendmsg+0x50/0x50 [ 2129.507333][T14075] ? futex_unqueue+0xb3/0x120 [ 2129.512028][T14075] ___sys_sendmsg+0x110/0x1b0 [ 2129.516715][T14075] ? do_recvmmsg+0x6e0/0x6e0 [ 2129.521317][T14075] ? __fget_files+0x248/0x440 [ 2129.526002][T14075] ? lock_downgrade+0x6e0/0x6e0 [ 2129.530866][T14075] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2129.536860][T14075] ? __fget_files+0x26a/0x440 [ 2129.541555][T14075] ? __fget_light+0xe5/0x270 [ 2129.546166][T14075] __sys_sendmsg+0xf3/0x1c0 [ 2129.550684][T14075] ? __sys_sendmsg_sock+0x30/0x30 [ 2129.555720][T14075] ? lock_downgrade+0x6e0/0x6e0 [ 2129.560591][T14075] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2129.566497][T14075] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2129.572398][T14075] ? lockdep_hardirqs_on+0x79/0x100 [ 2129.577612][T14075] do_syscall_64+0x35/0xb0 [ 2129.582036][T14075] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2129.587941][T14075] RIP: 0033:0x7f58e888a5a9 [ 2129.592370][T14075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2129.611985][T14075] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2129.620405][T14075] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2129.628380][T14075] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2129.636353][T14075] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2129.644328][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2129.652300][T14075] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2129.660292][T14075] 03:30:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4706}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x207}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2129.691145][T14075] memory: usage 307196kB, limit 307200kB, failcnt 47883 [ 2129.698245][T14075] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2129.705122][T14075] Memory cgroup stats for /syz1: [ 2129.705298][T14075] anon 135168 [ 2129.705298][T14075] file 389120 [ 2129.705298][T14075] kernel 314044416 [ 2129.705298][T14075] kernel_stack 65536 [ 2129.705298][T14075] pagetables 77824 [ 2129.705298][T14075] percpu 5593216 [ 2129.705298][T14075] sock 0 [ 2129.705298][T14075] vmalloc 0 [ 2129.705298][T14075] shmem 389120 [ 2129.705298][T14075] zswap 0 [ 2129.705298][T14075] zswapped 0 [ 2129.705298][T14075] file_mapped 389120 [ 2129.705298][T14075] file_dirty 0 [ 2129.705298][T14075] file_writeback 0 [ 2129.705298][T14075] swapcached 0 [ 2129.705298][T14075] anon_thp 0 [ 2129.705298][T14075] file_thp 0 [ 2129.705298][T14075] shmem_thp 0 [ 2129.705298][T14075] inactive_anon 225280 [ 2129.705298][T14075] active_anon 299008 [ 2129.705298][T14075] inactive_file 0 [ 2129.705298][T14075] active_file 0 [ 2129.705298][T14075] unevictable 0 [ 2129.705298][T14075] slab_reclaimable 21832 [ 2129.705298][T14075] slab_unreclaimable 308249776 [ 2129.705298][T14075] slab 308271608 [ 2129.813616][T14075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14074,uid=0 [ 2129.829631][T14075] Memory cgroup out of memory: Killed process 14074 (syz-executor.1) total-vm:54592kB, anon-rss:456kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2129.855860][T14091] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2129.871695][T14091] CPU: 0 PID: 14091 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2129.882162][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2129.892237][T14091] Call Trace: [ 2129.895530][T14091] [ 2129.898478][T14091] dump_stack_lvl+0xcd/0x134 [ 2129.903095][T14091] dump_header+0x10b/0x7f9 [ 2129.907527][T14091] oom_kill_process.cold+0x10/0x15 [ 2129.912809][T14091] out_of_memory+0x358/0x14a0 [ 2129.917497][T14091] ? oom_killer_disable+0x270/0x270 [ 2129.922704][T14091] ? find_held_lock+0x2d/0x110 [ 2129.927465][T14091] mem_cgroup_out_of_memory+0x206/0x270 [ 2129.933010][T14091] ? mem_cgroup_margin+0x130/0x130 [ 2129.938113][T14091] ? lock_downgrade+0x6e0/0x6e0 [ 2129.942969][T14091] try_charge_memcg+0xf67/0x13f0 [ 2129.947907][T14091] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2129.953889][T14091] ? lock_downgrade+0x6e0/0x6e0 [ 2129.958744][T14091] charge_memcg+0x31/0x320 [ 2129.963155][T14091] __mem_cgroup_charge+0x27/0x90 [ 2129.968088][T14091] ? _compound_head+0x5d/0x150 [ 2129.972845][T14091] wp_page_copy+0x27c/0x1b60 [ 2129.977435][T14091] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2129.982883][T14091] ? lock_downgrade+0x6e0/0x6e0 [ 2129.987739][T14091] ? vm_normal_page+0x146/0x2a0 [ 2129.992637][T14091] do_wp_page+0x1d1/0x1910 [ 2129.997457][T14091] __handle_mm_fault+0x1813/0x39b0 [ 2130.002611][T14091] ? vm_iomap_memory+0x190/0x190 [ 2130.007603][T14091] handle_mm_fault+0x1c8/0x780 [ 2130.012383][T14091] do_user_addr_fault+0x475/0x1210 [ 2130.017506][T14091] exc_page_fault+0x94/0x170 [ 2130.022092][T14091] asm_exc_page_fault+0x22/0x30 [ 2130.026936][T14091] RIP: 0033:0x7f70e7e37970 [ 2130.031341][T14091] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2130.050942][T14091] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2130.057000][T14091] RAX: 00000000410a32cc RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2130.064971][T14091] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 0000000000000022 [ 2130.072937][T14091] RBP: 00000000410a32cc R08: 00000000000012cc R09: 00000000410a32d0 [ 2130.080904][T14091] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2130.088869][T14091] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a37ba6 [ 2130.096833][T14091] ? trace_user_exit.constprop.0+0x6/0x210 [ 2130.102661][T14091] [ 2130.107392][T14091] memory: usage 307188kB, limit 307200kB, failcnt 62534 [ 2130.119436][T14091] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2130.128221][T14091] Memory cgroup stats for /syz3: [ 2130.128392][T14091] anon 94208 [ 2130.128392][T14091] file 782336 [ 2130.128392][T14091] kernel 313683968 [ 2130.128392][T14091] kernel_stack 65536 [ 2130.128392][T14091] pagetables 73728 [ 2130.128392][T14091] percpu 5602688 [ 2130.128392][T14091] sock 0 [ 2130.128392][T14091] vmalloc 0 [ 2130.128392][T14091] shmem 778240 [ 2130.128392][T14091] zswap 0 [ 2130.128392][T14091] zswapped 0 [ 2130.128392][T14091] file_mapped 778240 [ 2130.128392][T14091] file_dirty 4096 [ 2130.128392][T14091] file_writeback 0 [ 2130.128392][T14091] swapcached 0 [ 2130.128392][T14091] anon_thp 0 [ 2130.128392][T14091] file_thp 0 [ 2130.128392][T14091] shmem_thp 0 [ 2130.128392][T14091] inactive_anon 565248 [ 2130.128392][T14091] active_anon 307200 [ 2130.128392][T14091] inactive_file 4096 [ 2130.128392][T14091] active_file 0 [ 2130.128392][T14091] unevictable 0 [ 2130.128392][T14091] slab_reclaimable 123352 [ 2130.128392][T14091] slab_unreclaimable 307779472 [ 2130.128392][T14091] slab 307902824 [ 2130.222365][T14091] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14091,uid=0 03:30:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4707}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4aae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x6000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000000e0300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x304}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2130.239523][T14091] Memory cgroup out of memory: Killed process 14091 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xce030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4804}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x305}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x893c, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x306}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4805}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xcee21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2130.536615][T14105] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2130.554673][T14105] CPU: 1 PID: 14105 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2130.565145][T14105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2130.575227][T14105] Call Trace: [ 2130.578532][T14105] [ 2130.581491][T14105] dump_stack_lvl+0xcd/0x134 [ 2130.586116][T14105] dump_header+0x10b/0x7f9 [ 2130.590913][T14105] oom_kill_process.cold+0x10/0x15 [ 2130.596060][T14105] out_of_memory+0x358/0x14a0 [ 2130.600785][T14105] ? find_held_lock+0x2d/0x110 [ 2130.605584][T14105] ? oom_killer_disable+0x270/0x270 [ 2130.610819][T14105] ? find_held_lock+0x2d/0x110 [ 2130.615596][T14105] mem_cgroup_out_of_memory+0x206/0x270 [ 2130.621152][T14105] ? mem_cgroup_margin+0x130/0x130 [ 2130.626268][T14105] ? lock_downgrade+0x6e0/0x6e0 [ 2130.631143][T14105] try_charge_memcg+0xf67/0x13f0 [ 2130.636099][T14105] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2130.642099][T14105] ? lock_downgrade+0x6e0/0x6e0 [ 2130.646972][T14105] charge_memcg+0x31/0x320 [ 2130.651406][T14105] __mem_cgroup_charge+0x27/0x90 [ 2130.656356][T14105] ? _compound_head+0x5d/0x150 [ 2130.661138][T14105] wp_page_copy+0x27c/0x1b60 [ 2130.665743][T14105] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2130.671211][T14105] ? lock_downgrade+0x6e0/0x6e0 [ 2130.676072][T14105] ? vm_normal_page+0x146/0x2a0 [ 2130.680950][T14105] do_wp_page+0x1d1/0x1910 [ 2130.685386][T14105] __handle_mm_fault+0x1813/0x39b0 [ 2130.690516][T14105] ? vm_iomap_memory+0x190/0x190 [ 2130.695491][T14105] handle_mm_fault+0x1c8/0x780 [ 2130.700269][T14105] do_user_addr_fault+0x475/0x1210 [ 2130.705421][T14105] exc_page_fault+0x94/0x170 [ 2130.710025][T14105] asm_exc_page_fault+0x22/0x30 [ 2130.714888][T14105] RIP: 0033:0x7f70e7e37970 [ 2130.719308][T14105] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2130.739009][T14105] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2130.745084][T14105] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2130.753059][T14105] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2130.761043][T14105] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2130.769019][T14105] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2130.776992][T14105] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d 03:30:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4bae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2130.784969][T14105] ? __x64_sys_socket+0xd/0xb0 [ 2130.789762][T14105] [ 2130.799789][T14123] __nla_validate_parse: 46 callbacks suppressed [ 2130.799808][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2130.825845][T14105] memory: usage 307200kB, limit 307200kB, failcnt 62602 [ 2130.836491][T14105] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2130.851777][T14105] Memory cgroup stats for /syz3: [ 2130.852002][T14105] anon 106496 [ 2130.852002][T14105] file 782336 [ 2130.852002][T14105] kernel 313683968 [ 2130.852002][T14105] kernel_stack 65536 [ 2130.852002][T14105] pagetables 73728 [ 2130.852002][T14105] percpu 5602688 [ 2130.852002][T14105] sock 0 [ 2130.852002][T14105] vmalloc 0 [ 2130.852002][T14105] shmem 778240 [ 2130.852002][T14105] zswap 0 [ 2130.852002][T14105] zswapped 0 [ 2130.852002][T14105] file_mapped 778240 [ 2130.852002][T14105] file_dirty 4096 [ 2130.852002][T14105] file_writeback 0 [ 2130.852002][T14105] swapcached 0 [ 2130.852002][T14105] anon_thp 0 [ 2130.852002][T14105] file_thp 0 [ 2130.852002][T14105] shmem_thp 0 [ 2130.852002][T14105] inactive_anon 577536 [ 2130.852002][T14105] active_anon 307200 [ 2130.852002][T14105] inactive_file 0 [ 2130.852002][T14105] active_file 4096 [ 2130.852002][T14105] unevictable 0 [ 2130.852002][T14105] slab_reclaimable 123352 [ 2130.852002][T14105] slab_unreclaimable 307779472 [ 2130.852002][T14105] slab 307902824 [ 2130.871422][T14119] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2130.970632][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xcfe21200, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x307}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xa841, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2130.991618][T14105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14105,uid=0 [ 2131.019383][T14105] Memory cgroup out of memory: Killed process 14105 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000180300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4806}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2131.086802][T14132] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2131.105273][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xd9030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xc00e, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x404}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4807}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2131.191709][T14132] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2131.208413][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2131.295534][T14135] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2131.318213][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2131.332343][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 03:30:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4cae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2131.342267][T14135] CPU: 1 PID: 14135 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2131.352724][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2131.362813][T14135] Call Trace: [ 2131.366114][T14135] [ 2131.369068][T14135] dump_stack_lvl+0xcd/0x134 [ 2131.373684][T14135] dump_header+0x10b/0x7f9 [ 2131.378128][T14135] oom_kill_process.cold+0x10/0x15 [ 2131.383277][T14135] out_of_memory+0x358/0x14a0 [ 2131.387995][T14135] ? find_held_lock+0x2d/0x110 [ 2131.392779][T14135] ? oom_killer_disable+0x270/0x270 [ 2131.398021][T14135] ? find_held_lock+0x2d/0x110 [ 2131.402821][T14135] mem_cgroup_out_of_memory+0x206/0x270 [ 2131.402964][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2131.408387][T14135] ? mem_cgroup_margin+0x130/0x130 [ 2131.408419][T14135] ? lock_downgrade+0x6e0/0x6e0 [ 2131.408459][T14135] try_charge_memcg+0xf67/0x13f0 [ 2131.432752][T14135] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2131.438824][T14135] ? lock_downgrade+0x6e0/0x6e0 [ 2131.443757][T14135] charge_memcg+0x31/0x320 [ 2131.448202][T14135] __mem_cgroup_charge+0x27/0x90 [ 2131.453160][T14135] ? _compound_head+0x5d/0x150 [ 2131.457950][T14135] wp_page_copy+0x27c/0x1b60 [ 2131.462579][T14135] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2131.468054][T14135] ? lock_downgrade+0x6e0/0x6e0 [ 2131.472927][T14135] ? vm_normal_page+0x146/0x2a0 [ 2131.477809][T14135] do_wp_page+0x1d1/0x1910 [ 2131.482251][T14135] __handle_mm_fault+0x1813/0x39b0 [ 2131.487378][T14135] ? vm_iomap_memory+0x190/0x190 [ 2131.492356][T14135] handle_mm_fault+0x1c8/0x780 [ 2131.497137][T14135] do_user_addr_fault+0x475/0x1210 [ 2131.502361][T14135] exc_page_fault+0x94/0x170 [ 2131.506961][T14135] asm_exc_page_fault+0x22/0x30 [ 2131.511824][T14135] RIP: 0033:0x7f70e7e37970 [ 2131.516242][T14135] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2131.535942][T14135] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2131.542014][T14135] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2131.549991][T14135] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2131.557967][T14135] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2131.565940][T14135] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2131.574004][T14135] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2131.581978][T14135] ? __x64_sys_socket+0xd/0xb0 [ 2131.586771][T14135] 03:30:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x405}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe4ffffff, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2131.605819][T14135] memory: usage 307200kB, limit 307200kB, failcnt 62662 [ 2131.628810][T14135] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2131.660015][T14135] Memory cgroup stats for /syz3: [ 2131.660188][T14135] anon 106496 [ 2131.660188][T14135] file 782336 [ 2131.660188][T14135] kernel 313683968 [ 2131.660188][T14135] kernel_stack 65536 [ 2131.660188][T14135] pagetables 73728 [ 2131.660188][T14135] percpu 5602688 [ 2131.660188][T14135] sock 0 [ 2131.660188][T14135] vmalloc 0 [ 2131.660188][T14135] shmem 778240 [ 2131.660188][T14135] zswap 0 [ 2131.660188][T14135] zswapped 0 [ 2131.660188][T14135] file_mapped 778240 [ 2131.660188][T14135] file_dirty 4096 03:30:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4904}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x406}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2131.660188][T14135] file_writeback 0 [ 2131.660188][T14135] swapcached 0 [ 2131.660188][T14135] anon_thp 0 [ 2131.660188][T14135] file_thp 0 [ 2131.660188][T14135] shmem_thp 0 [ 2131.660188][T14135] inactive_anon 577536 [ 2131.660188][T14135] active_anon 307200 [ 2131.660188][T14135] inactive_file 0 [ 2131.660188][T14135] active_file 4096 [ 2131.660188][T14135] unevictable 0 [ 2131.660188][T14135] slab_reclaimable 123352 [ 2131.660188][T14135] slab_unreclaimable 307779472 [ 2131.660188][T14135] slab 307902824 [ 2131.773168][T14135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14135,uid=0 [ 2131.789511][T14135] Memory cgroup out of memory: Killed process 14135 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2131.828388][T14148] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2131.845376][T14148] CPU: 0 PID: 14148 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2131.855931][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2131.866021][T14148] Call Trace: [ 2131.869333][T14148] [ 2131.872282][T14148] dump_stack_lvl+0xcd/0x134 [ 2131.876904][T14148] dump_header+0x10b/0x7f9 [ 2131.881358][T14148] oom_kill_process.cold+0x10/0x15 [ 2131.886505][T14148] out_of_memory+0x358/0x14a0 [ 2131.891230][T14148] ? oom_killer_disable+0x270/0x270 [ 2131.896468][T14148] ? find_held_lock+0x2d/0x110 [ 2131.901271][T14148] mem_cgroup_out_of_memory+0x206/0x270 [ 2131.906854][T14148] ? mem_cgroup_margin+0x130/0x130 [ 2131.911998][T14148] ? lock_downgrade+0x6e0/0x6e0 [ 2131.916897][T14148] try_charge_memcg+0xf67/0x13f0 [ 2131.921874][T14148] ? mem_cgroup_handle_over_high+0x510/0x510 03:30:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000380300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4905}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xf000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x407}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe6030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4906}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2131.927896][T14148] ? lock_downgrade+0x6e0/0x6e0 [ 2131.932793][T14148] charge_memcg+0x31/0x320 [ 2131.937242][T14148] __mem_cgroup_charge+0x27/0x90 [ 2131.942216][T14148] ? _compound_head+0x5d/0x150 [ 2131.947010][T14148] wp_page_copy+0x27c/0x1b60 [ 2131.951642][T14148] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2131.957132][T14148] ? lock_downgrade+0x6e0/0x6e0 [ 2131.962015][T14148] ? vm_normal_page+0x146/0x2a0 [ 2131.966912][T14148] do_wp_page+0x1d1/0x1910 [ 2131.971367][T14148] __handle_mm_fault+0x1813/0x39b0 03:30:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x504}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2131.976606][T14148] ? vm_iomap_memory+0x190/0x190 [ 2131.981602][T14148] handle_mm_fault+0x1c8/0x780 [ 2131.986402][T14148] do_user_addr_fault+0x475/0x1210 [ 2131.991559][T14148] exc_page_fault+0x94/0x170 [ 2131.996192][T14148] asm_exc_page_fault+0x22/0x30 [ 2132.001076][T14148] RIP: 0033:0x7f58e8837970 [ 2132.005511][T14148] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2132.025146][T14148] RSP: 002b:00007ffce2e5b650 EFLAGS: 00010246 [ 2132.031247][T14148] RAX: 00000000410a32cc RBX: 00007f58e89ac0e8 RCX: 0000001b2ea20000 [ 2132.039248][T14148] RDX: 0000000000000000 RSI: 0000001b2ea20018 RDI: 0000000000000022 [ 2132.047253][T14148] RBP: 00000000410a32cc R08: 00000000000012cc R09: 00000000410a32d0 [ 2132.055269][T14148] R10: 00007ffce2e5b820 R11: 0000000000000246 R12: 00007f58e89a0000 [ 2132.063445][T14148] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff81a37ba6 [ 2132.071446][T14148] ? trace_user_exit.constprop.0+0x6/0x210 [ 2132.077311][T14148] [ 2132.095946][T14148] memory: usage 307184kB, limit 307200kB, failcnt 48138 [ 2132.103055][T14148] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2132.110432][T14148] Memory cgroup stats for /syz1: [ 2132.110594][T14148] anon 102400 [ 2132.110594][T14148] file 389120 [ 2132.110594][T14148] kernel 314064896 [ 2132.110594][T14148] kernel_stack 98304 [ 2132.110594][T14148] pagetables 81920 [ 2132.110594][T14148] percpu 5593216 [ 2132.110594][T14148] sock 0 [ 2132.110594][T14148] vmalloc 0 [ 2132.110594][T14148] shmem 389120 [ 2132.110594][T14148] zswap 0 [ 2132.110594][T14148] zswapped 0 [ 2132.110594][T14148] file_mapped 389120 [ 2132.110594][T14148] file_dirty 0 [ 2132.110594][T14148] file_writeback 0 [ 2132.110594][T14148] swapcached 0 [ 2132.110594][T14148] anon_thp 0 [ 2132.110594][T14148] file_thp 0 [ 2132.110594][T14148] shmem_thp 0 [ 2132.110594][T14148] inactive_anon 192512 [ 2132.110594][T14148] active_anon 299008 [ 2132.110594][T14148] inactive_file 0 [ 2132.110594][T14148] active_file 0 [ 2132.110594][T14148] unevictable 0 [ 2132.110594][T14148] slab_reclaimable 21832 [ 2132.110594][T14148] slab_unreclaimable 308236032 [ 2132.110594][T14148] slab 308257864 [ 2132.220242][T14148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14148,uid=0 03:30:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4dae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x505}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4907}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x34000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xea010000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2132.263752][T14148] Memory cgroup out of memory: Killed process 14148 (syz-executor.1) total-vm:54724kB, anon-rss:456kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2132.333401][T14167] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2132.414286][T14167] CPU: 0 PID: 14167 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2132.424765][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2132.434849][T14167] Call Trace: [ 2132.438149][T14167] [ 2132.441096][T14167] dump_stack_lvl+0xcd/0x134 [ 2132.445720][T14167] dump_header+0x10b/0x7f9 [ 2132.450164][T14167] oom_kill_process.cold+0x10/0x15 [ 2132.455312][T14167] out_of_memory+0x358/0x14a0 [ 2132.460025][T14167] ? find_held_lock+0x2d/0x110 [ 2132.464816][T14167] ? oom_killer_disable+0x270/0x270 [ 2132.470058][T14167] ? find_held_lock+0x2d/0x110 [ 2132.474863][T14167] mem_cgroup_out_of_memory+0x206/0x270 [ 2132.480451][T14167] ? mem_cgroup_margin+0x130/0x130 [ 2132.485594][T14167] ? lock_downgrade+0x6e0/0x6e0 [ 2132.490497][T14167] try_charge_memcg+0xf67/0x13f0 [ 2132.495474][T14167] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2132.501488][T14167] ? lock_downgrade+0x6e0/0x6e0 [ 2132.506381][T14167] charge_memcg+0x31/0x320 [ 2132.510817][T14167] __mem_cgroup_charge+0x27/0x90 [ 2132.515770][T14167] ? _compound_head+0x5d/0x150 [ 2132.520555][T14167] wp_page_copy+0x27c/0x1b60 [ 2132.525167][T14167] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2132.530639][T14167] ? lock_downgrade+0x6e0/0x6e0 [ 2132.535502][T14167] ? vm_normal_page+0x146/0x2a0 [ 2132.540379][T14167] do_wp_page+0x1d1/0x1910 [ 2132.544808][T14167] __handle_mm_fault+0x1813/0x39b0 [ 2132.550025][T14167] ? vm_iomap_memory+0x190/0x190 [ 2132.554995][T14167] handle_mm_fault+0x1c8/0x780 [ 2132.559775][T14167] do_user_addr_fault+0x475/0x1210 [ 2132.564908][T14167] exc_page_fault+0x94/0x170 [ 2132.569516][T14167] asm_exc_page_fault+0x22/0x30 [ 2132.574376][T14167] RIP: 0033:0x7f70e7e37970 [ 2132.578800][T14167] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2132.598415][T14167] RSP: 002b:00007ffcadad7af0 EFLAGS: 00010246 [ 2132.604490][T14167] RAX: 000000002ec6ea3a RBX: 00007f70e7fac018 RCX: 0000001b2e920000 [ 2132.612467][T14167] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 000000000d5933ec [ 2132.620444][T14167] RBP: 000000002ec6ea3a R08: 0000000000000a3a R09: 000000002ec6ea3e [ 2132.628477][T14167] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00007f70e7fa0000 [ 2132.636452][T14167] R13: 0000000000000001 R14: 0000000000000006 R15: ffffffff874dcf6d [ 2132.644431][T14167] ? __x64_sys_socket+0xd/0xb0 [ 2132.649228][T14167] [ 2132.663224][T14167] memory: usage 307200kB, limit 307200kB, failcnt 62752 [ 2132.677674][T14167] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2132.688995][T14167] Memory cgroup stats for /syz3: [ 2132.689345][T14167] anon 106496 [ 2132.689345][T14167] file 782336 [ 2132.689345][T14167] kernel 313683968 [ 2132.689345][T14167] kernel_stack 65536 [ 2132.689345][T14167] pagetables 73728 [ 2132.689345][T14167] percpu 5602688 [ 2132.689345][T14167] sock 0 [ 2132.689345][T14167] vmalloc 0 [ 2132.689345][T14167] shmem 778240 [ 2132.689345][T14167] zswap 0 [ 2132.689345][T14167] zswapped 0 [ 2132.689345][T14167] file_mapped 778240 [ 2132.689345][T14167] file_dirty 4096 [ 2132.689345][T14167] file_writeback 0 [ 2132.689345][T14167] swapcached 0 [ 2132.689345][T14167] anon_thp 0 [ 2132.689345][T14167] file_thp 0 [ 2132.689345][T14167] shmem_thp 0 [ 2132.689345][T14167] inactive_anon 577536 [ 2132.689345][T14167] active_anon 307200 [ 2132.689345][T14167] inactive_file 0 [ 2132.689345][T14167] active_file 4096 [ 2132.689345][T14167] unevictable 0 [ 2132.689345][T14167] slab_reclaimable 123352 [ 2132.689345][T14167] slab_unreclaimable 307779472 [ 2132.689345][T14167] slab 307902824 [ 2132.797567][T14167] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14167,uid=0 03:30:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000880300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x506}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4eae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xea030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x40000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4a04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x507}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2132.813487][T14167] Memory cgroup out of memory: Killed process 14167 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xee030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4fae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x400300, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x604}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4a05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2133.011620][T14197] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2133.071504][T14197] CPU: 0 PID: 14197 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2133.081981][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2133.092060][T14197] Call Trace: [ 2133.095358][T14197] [ 2133.098301][T14197] dump_stack_lvl+0xcd/0x134 [ 2133.102921][T14197] dump_header+0x10b/0x7f9 [ 2133.107376][T14197] oom_kill_process.cold+0x10/0x15 [ 2133.112530][T14197] out_of_memory+0x358/0x14a0 [ 2133.117250][T14197] ? find_held_lock+0x2d/0x110 [ 2133.122044][T14197] ? oom_killer_disable+0x270/0x270 [ 2133.127282][T14197] ? find_held_lock+0x2d/0x110 [ 2133.132079][T14197] mem_cgroup_out_of_memory+0x206/0x270 [ 2133.137653][T14197] ? mem_cgroup_margin+0x130/0x130 [ 2133.142781][T14197] ? lock_downgrade+0x6e0/0x6e0 [ 2133.147655][T14197] try_charge_memcg+0xf67/0x13f0 [ 2133.152617][T14197] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2133.158607][T14197] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2133.164340][T14197] ? lock_downgrade+0x6e0/0x6e0 [ 2133.169212][T14197] ? lock_downgrade+0x6e0/0x6e0 [ 2133.174171][T14197] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2133.179821][T14197] __alloc_pages+0x1ef/0x510 [ 2133.184423][T14197] ? __alloc_pages_slowpath.constprop.0+0x2300/0x2300 [ 2133.191205][T14197] ? lock_chain_count+0x20/0x20 [ 2133.196078][T14197] ? __lock_acquire+0xbc3/0x56d0 [ 2133.201028][T14197] alloc_pages+0x1a6/0x270 [ 2133.205482][T14197] pte_alloc_one+0x16/0x230 [ 2133.209992][T14197] __pte_alloc+0x69/0x250 [ 2133.214329][T14197] ? pmd_install+0x150/0x150 [ 2133.218926][T14197] ? hugepage_vma_check+0x44e/0x780 [ 2133.224141][T14197] __handle_mm_fault+0x310b/0x39b0 [ 2133.229271][T14197] ? vm_iomap_memory+0x190/0x190 [ 2133.234244][T14197] handle_mm_fault+0x1c8/0x780 [ 2133.239108][T14197] do_user_addr_fault+0x475/0x1210 [ 2133.244241][T14197] exc_page_fault+0x94/0x170 [ 2133.248842][T14197] asm_exc_page_fault+0x22/0x30 [ 2133.253703][T14197] RIP: 0033:0x7f70e7e3533d [ 2133.258125][T14197] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 53 52 05 00 <83> 05 bc ac 57 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 57 00 0b 01 [ 2133.277750][T14197] RSP: 002b:00007ffcadad7be0 EFLAGS: 00010217 [ 2133.283844][T14197] RAX: 0000000000000000 RBX: 00007f70e7fabf8c RCX: 00007f70e7e8a5a9 [ 2133.291842][T14197] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f70e7fabf88 [ 2133.299834][T14197] RBP: 00007f70e7fabf80 R08: 00007f70e9053700 R09: 0000000000000000 [ 2133.307817][T14197] R10: 00007f70e9053700 R11: 0000000000000246 R12: 00007f70e7fabf8c [ 2133.315810][T14197] R13: 00007f70e7fb0060 R14: 00007f70e7fabf80 R15: 0000000000000000 [ 2133.323821][T14197] [ 2133.368003][T14197] memory: usage 307176kB, limit 307200kB, failcnt 62818 [ 2133.375451][T14197] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2133.383137][T14197] Memory cgroup stats for /syz3: [ 2133.383306][T14197] anon 86016 [ 2133.383306][T14197] file 782336 [ 2133.383306][T14197] kernel 313679872 [ 2133.383306][T14197] kernel_stack 65536 [ 2133.383306][T14197] pagetables 69632 [ 2133.383306][T14197] percpu 5602688 [ 2133.383306][T14197] sock 0 [ 2133.383306][T14197] vmalloc 0 [ 2133.383306][T14197] shmem 778240 [ 2133.383306][T14197] zswap 0 [ 2133.383306][T14197] zswapped 0 [ 2133.383306][T14197] file_mapped 778240 [ 2133.383306][T14197] file_dirty 4096 [ 2133.383306][T14197] file_writeback 0 [ 2133.383306][T14197] swapcached 0 [ 2133.383306][T14197] anon_thp 0 [ 2133.383306][T14197] file_thp 0 [ 2133.383306][T14197] shmem_thp 0 [ 2133.383306][T14197] inactive_anon 557056 [ 2133.383306][T14197] active_anon 307200 [ 2133.383306][T14197] inactive_file 0 [ 2133.383306][T14197] active_file 4096 [ 2133.383306][T14197] unevictable 0 [ 2133.383306][T14197] slab_reclaimable 123352 [ 2133.383306][T14197] slab_unreclaimable 307779472 [ 2133.383306][T14197] slab 307902824 03:30:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000b60300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4a06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x605}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf0010000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x50ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2133.498631][T14197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14197,uid=0 [ 2133.529047][T14197] Memory cgroup out of memory: Killed process 14197 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 03:30:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x51030000}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4a07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x606}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2133.739010][T14220] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2133.758334][T14220] CPU: 0 PID: 14220 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2133.768814][T14220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2133.778893][T14220] Call Trace: [ 2133.782187][T14220] 03:30:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x51ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2133.785134][T14220] dump_stack_lvl+0xcd/0x134 [ 2133.789763][T14220] dump_header+0x10b/0x7f9 [ 2133.794215][T14220] oom_kill_process.cold+0x10/0x15 [ 2133.799364][T14220] out_of_memory+0x358/0x14a0 [ 2133.804088][T14220] ? find_held_lock+0x2d/0x110 [ 2133.808884][T14220] ? oom_killer_disable+0x270/0x270 [ 2133.814124][T14220] ? find_held_lock+0x2d/0x110 [ 2133.818921][T14220] mem_cgroup_out_of_memory+0x206/0x270 [ 2133.824502][T14220] ? mem_cgroup_margin+0x130/0x130 [ 2133.829644][T14220] ? lock_downgrade+0x6e0/0x6e0 [ 2133.834546][T14220] try_charge_memcg+0xf67/0x13f0 [ 2133.839523][T14220] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2133.845550][T14220] ? lock_downgrade+0x6e0/0x6e0 [ 2133.850538][T14220] charge_memcg+0x31/0x320 [ 2133.855081][T14220] __mem_cgroup_charge+0x27/0x90 [ 2133.860045][T14220] ? _compound_head+0x5d/0x150 [ 2133.864833][T14220] wp_page_copy+0x27c/0x1b60 [ 2133.869467][T14220] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2133.874987][T14220] ? lock_downgrade+0x6e0/0x6e0 [ 2133.879953][T14220] ? vm_normal_page+0x146/0x2a0 [ 2133.884840][T14220] do_wp_page+0x52c/0x1910 03:30:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4b04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2133.889286][T14220] __handle_mm_fault+0x1813/0x39b0 [ 2133.894432][T14220] ? vm_iomap_memory+0x190/0x190 [ 2133.899431][T14220] handle_mm_fault+0x1c8/0x780 [ 2133.904234][T14220] do_user_addr_fault+0x475/0x1210 [ 2133.909387][T14220] exc_page_fault+0x94/0x170 [ 2133.914018][T14220] asm_exc_page_fault+0x22/0x30 [ 2133.918987][T14220] RIP: 0033:0x7f70e7e34a15 [ 2133.923431][T14220] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2133.943160][T14220] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2133.949263][T14220] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 [ 2133.957277][T14220] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2133.965366][T14220] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2133.973368][T14220] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 0000000000208eac [ 2133.981346][T14220] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2133.989440][T14220] [ 2133.996768][T14220] memory: usage 307188kB, limit 307200kB, failcnt 62863 [ 2134.003750][T14220] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2134.017988][T14220] Memory cgroup stats for /syz3: [ 2134.018210][T14220] anon 90112 [ 2134.018210][T14220] file 782336 [ 2134.018210][T14220] kernel 313683968 [ 2134.018210][T14220] kernel_stack 65536 [ 2134.018210][T14220] pagetables 73728 [ 2134.018210][T14220] percpu 5602688 [ 2134.018210][T14220] sock 0 [ 2134.018210][T14220] vmalloc 0 [ 2134.018210][T14220] shmem 778240 [ 2134.018210][T14220] zswap 0 [ 2134.018210][T14220] zswapped 0 [ 2134.018210][T14220] file_mapped 778240 [ 2134.018210][T14220] file_dirty 4096 [ 2134.018210][T14220] file_writeback 0 [ 2134.018210][T14220] swapcached 0 [ 2134.018210][T14220] anon_thp 0 [ 2134.018210][T14220] file_thp 0 [ 2134.018210][T14220] shmem_thp 0 [ 2134.018210][T14220] inactive_anon 561152 [ 2134.018210][T14220] active_anon 307200 [ 2134.018210][T14220] inactive_file 0 [ 2134.018210][T14220] active_file 4096 [ 2134.018210][T14220] unevictable 0 [ 2134.018210][T14220] slab_reclaimable 123352 [ 2134.018210][T14220] slab_unreclaimable 307779776 [ 2134.018210][T14220] slab 307903128 [ 2134.114746][T14220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14220,uid=0 03:30:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000ba0300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x607}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x1000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4b05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf2020000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2134.131593][T14220] Memory cgroup out of memory: Killed process 14220 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 03:30:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x704}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x52ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) 03:30:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4b06}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x705}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2134.331178][T14243] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2134.375774][T14243] CPU: 1 PID: 14243 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2134.386419][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2134.396498][T14243] Call Trace: [ 2134.399795][T14243] [ 2134.402742][T14243] dump_stack_lvl+0xcd/0x134 [ 2134.407358][T14243] dump_header+0x10b/0x7f9 [ 2134.411803][T14243] oom_kill_process.cold+0x10/0x15 [ 2134.417034][T14243] out_of_memory+0x358/0x14a0 [ 2134.421751][T14243] ? find_held_lock+0x2d/0x110 [ 2134.426542][T14243] ? oom_killer_disable+0x270/0x270 [ 2134.431864][T14243] ? find_held_lock+0x2d/0x110 [ 2134.436661][T14243] mem_cgroup_out_of_memory+0x206/0x270 [ 2134.442237][T14243] ? mem_cgroup_margin+0x130/0x130 [ 2134.447456][T14243] ? lock_downgrade+0x6e0/0x6e0 [ 2134.452337][T14243] try_charge_memcg+0xf67/0x13f0 [ 2134.457305][T14243] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2134.463337][T14243] ? lock_downgrade+0x6e0/0x6e0 [ 2134.468233][T14243] charge_memcg+0x31/0x320 [ 2134.472684][T14243] __mem_cgroup_charge+0x27/0x90 [ 2134.477649][T14243] ? _compound_head+0x5d/0x150 [ 2134.482436][T14243] wp_page_copy+0x27c/0x1b60 [ 2134.487055][T14243] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2134.492529][T14243] ? lock_downgrade+0x6e0/0x6e0 [ 2134.497404][T14243] ? vm_normal_page+0x146/0x2a0 [ 2134.502297][T14243] do_wp_page+0x52c/0x1910 [ 2134.506746][T14243] __handle_mm_fault+0x1813/0x39b0 [ 2134.511894][T14243] ? vm_iomap_memory+0x190/0x190 [ 2134.516879][T14243] handle_mm_fault+0x1c8/0x780 [ 2134.521677][T14243] do_user_addr_fault+0x475/0x1210 [ 2134.526830][T14243] exc_page_fault+0x94/0x170 [ 2134.531449][T14243] asm_exc_page_fault+0x22/0x30 [ 2134.536334][T14243] RIP: 0033:0x7f70e7e34a15 [ 2134.540775][T14243] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d ae 36 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d d9 b5 57 00 4c 39 ea 0f [ 2134.560413][T14243] RSP: 002b:00007ffcadad7ba0 EFLAGS: 00010206 [ 2134.566513][T14243] RAX: 0000000000000003 RBX: 00007f70e7fabf80 RCX: 00007f70e7fa80c0 03:30:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x706}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf2030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) 03:30:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x707}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2134.574516][T14243] RDX: 00007f70e7fa80c0 RSI: 0000000000000080 RDI: 00007f70e7fabf80 [ 2134.582512][T14243] RBP: 00007f70e7fabf80 R08: 00007ffcadbe3080 R09: 0000000000000000 [ 2134.590501][T14243] R10: 00007ffcadad7cc0 R11: 0000000000000246 R12: 00000000002090f1 [ 2134.598504][T14243] R13: 00007ffcadad7cc0 R14: 00007f70e7fabf80 R15: 0000000000000032 [ 2134.606520][T14243] 03:30:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x2000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) [ 2134.620841][T14243] memory: usage 307200kB, limit 307200kB, failcnt 62906 [ 2134.634834][T14243] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2134.642097][T14243] Memory cgroup stats for /syz3: [ 2134.642315][T14243] anon 90112 [ 2134.642315][T14243] file 782336 [ 2134.642315][T14243] kernel 313700352 [ 2134.642315][T14243] kernel_stack 65536 [ 2134.642315][T14243] pagetables 73728 [ 2134.642315][T14243] percpu 5602688 [ 2134.642315][T14243] sock 0 [ 2134.642315][T14243] vmalloc 0 [ 2134.642315][T14243] shmem 778240 [ 2134.642315][T14243] zswap 0 [ 2134.642315][T14243] zswapped 0 [ 2134.642315][T14243] file_mapped 778240 [ 2134.642315][T14243] file_dirty 4096 [ 2134.642315][T14243] file_writeback 0 [ 2134.642315][T14243] swapcached 0 [ 2134.642315][T14243] anon_thp 0 [ 2134.642315][T14243] file_thp 0 [ 2134.642315][T14243] shmem_thp 0 [ 2134.642315][T14243] inactive_anon 561152 [ 2134.642315][T14243] active_anon 307200 [ 2134.642315][T14243] inactive_file 0 [ 2134.642315][T14243] active_file 4096 [ 2134.642315][T14243] unevictable 0 [ 2134.642315][T14243] slab_reclaimable 123352 [ 2134.642315][T14243] slab_unreclaimable 307790872 [ 2134.642315][T14243] slab 307914224 [ 2134.738499][T14243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14243,uid=0 [ 2134.754217][T14243] Memory cgroup out of memory: Killed process 14243 (syz-executor.3) total-vm:54592kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2134.772190][T14249] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2134.786733][T14249] CPU: 1 PID: 14249 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2134.797188][T14249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2134.807362][T14249] Call Trace: [ 2134.810662][T14249] [ 2134.813616][T14249] dump_stack_lvl+0xcd/0x134 [ 2134.818239][T14249] dump_header+0x10b/0x7f9 [ 2134.822693][T14249] oom_kill_process.cold+0x10/0x15 03:30:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000d00300000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000000000004"], 0x54}}, 0x0) 03:30:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4b07}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x804}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2134.827842][T14249] out_of_memory+0x358/0x14a0 [ 2134.832562][T14249] ? oom_killer_disable+0x270/0x270 [ 2134.837798][T14249] ? find_held_lock+0x2d/0x110 [ 2134.842592][T14249] mem_cgroup_out_of_memory+0x206/0x270 [ 2134.848165][T14249] ? mem_cgroup_margin+0x130/0x130 [ 2134.853308][T14249] ? lock_downgrade+0x6e0/0x6e0 [ 2134.858210][T14249] try_charge_memcg+0xf67/0x13f0 [ 2134.863189][T14249] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2134.869200][T14249] ? get_mem_cgroup_from_objcg+0xa1/0x260 03:30:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4c04}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x805}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) [ 2134.874962][T14249] ? lock_downgrade+0x6e0/0x6e0 [ 2134.879865][T14249] obj_cgroup_charge+0x2ab/0x5e0 [ 2134.884848][T14249] __kmalloc+0xb2/0x340 [ 2134.889121][T14249] ? veth_dev_init+0x1dd/0x3e0 [ 2134.893928][T14249] veth_dev_init+0x1dd/0x3e0 [ 2134.898545][T14249] ? veth_get_num_queues+0x50/0x50 [ 2134.903690][T14249] register_netdevice+0x5e1/0x1680 [ 2134.908841][T14249] ? netdev_change_features+0xb0/0xb0 [ 2134.914252][T14249] ? dev_addr_mod+0x2c9/0x3f0 [ 2134.918977][T14249] veth_newlink+0x338/0x990 [ 2134.923514][T14249] ? veth_set_features+0x190/0x190 [ 2134.928662][T14249] ? netlink_rcv_skb+0x153/0x420 [ 2134.933632][T14249] ? netlink_unicast+0x543/0x7f0 [ 2134.938600][T14249] ? netlink_sendmsg+0x917/0xe10 [ 2134.943639][T14249] ? dev_addr_mod+0x2c9/0x3f0 [ 2134.948354][T14249] ? rtnl_create_link+0x7e8/0xc00 [ 2134.953409][T14249] ? veth_set_features+0x190/0x190 [ 2134.958547][T14249] __rtnl_newlink+0x1087/0x17e0 [ 2134.963453][T14249] ? rtnl_link_unregister+0x250/0x250 [ 2134.968870][T14249] ? rtnl_newlink+0x46/0xa0 [ 2134.973423][T14249] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2134.979005][T14249] ? trace_kmalloc+0x32/0x100 [ 2134.983745][T14249] rtnl_newlink+0x64/0xa0 [ 2134.988108][T14249] ? __rtnl_newlink+0x17e0/0x17e0 [ 2134.993153][T14249] rtnetlink_rcv_msg+0x43a/0xca0 [ 2134.998117][T14249] ? rtnl_getlink+0xae0/0xae0 [ 2135.002912][T14249] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2135.008223][T14249] ? ref_tracker_free+0x370/0x6b0 [ 2135.013247][T14249] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 2135.018618][T14249] netlink_rcv_skb+0x153/0x420 [ 2135.023381][T14249] ? rtnl_getlink+0xae0/0xae0 [ 2135.028081][T14249] ? netlink_ack+0xd50/0xd50 [ 2135.032787][T14249] ? netlink_deliver_tap+0x1a2/0xc40 [ 2135.038107][T14249] ? netlink_deliver_tap+0x1b1/0xc40 [ 2135.043414][T14249] netlink_unicast+0x543/0x7f0 [ 2135.048192][T14249] ? netlink_attachskb+0x880/0x880 [ 2135.053331][T14249] ? __phys_addr+0xc4/0x140 [ 2135.057863][T14249] ? __phys_addr_symbol+0x2c/0x70 [ 2135.062900][T14249] ? __check_object_size+0x2de/0x700 [ 2135.068187][T14249] netlink_sendmsg+0x917/0xe10 [ 2135.072950][T14249] ? netlink_unicast+0x7f0/0x7f0 [ 2135.077909][T14249] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2135.083212][T14249] ? netlink_unicast+0x7f0/0x7f0 [ 2135.088145][T14249] sock_sendmsg+0xcf/0x120 [ 2135.092569][T14249] ____sys_sendmsg+0x6eb/0x810 [ 2135.097348][T14249] ? copy_msghdr_from_user+0xfc/0x150 [ 2135.102750][T14249] ? kernel_sendmsg+0x50/0x50 [ 2135.107472][T14249] ? futex_unqueue+0xb3/0x120 [ 2135.112175][T14249] ___sys_sendmsg+0x110/0x1b0 [ 2135.116852][T14249] ? do_recvmmsg+0x6e0/0x6e0 [ 2135.121445][T14249] ? __fget_files+0x248/0x440 [ 2135.126118][T14249] ? lock_downgrade+0x6e0/0x6e0 [ 2135.130987][T14249] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2135.136968][T14249] ? __fget_files+0x26a/0x440 [ 2135.141643][T14249] ? __fget_light+0xe5/0x270 [ 2135.146243][T14249] __sys_sendmsg+0xf3/0x1c0 [ 2135.150862][T14249] ? __sys_sendmsg_sock+0x30/0x30 [ 2135.155918][T14249] ? lock_downgrade+0x6e0/0x6e0 [ 2135.160793][T14249] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2135.166681][T14249] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2135.172582][T14249] ? lockdep_hardirqs_on+0x79/0x100 [ 2135.177801][T14249] do_syscall_64+0x35/0xb0 [ 2135.182210][T14249] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2135.188111][T14249] RIP: 0033:0x7f58e888a5a9 [ 2135.192543][T14249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2135.212183][T14249] RSP: 002b:00007f58e9924168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2135.220619][T14249] RAX: ffffffffffffffda RBX: 00007f58e89abf80 RCX: 00007f58e888a5a9 [ 2135.228595][T14249] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2135.236646][T14249] RBP: 00007f58e88e5580 R08: 0000000000000000 R09: 0000000000000000 [ 2135.244609][T14249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2135.252589][T14249] R13: 00007ffce2e5b6bf R14: 00007f58e9924300 R15: 0000000000022000 [ 2135.260592][T14249] [ 2135.275831][T14249] memory: usage 307196kB, limit 307200kB, failcnt 48491 [ 2135.285726][T14249] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2135.292608][T14249] Memory cgroup stats for /syz1: [ 2135.292788][T14249] anon 135168 [ 2135.292788][T14249] file 389120 [ 2135.292788][T14249] kernel 314011648 [ 2135.292788][T14249] kernel_stack 32768 [ 2135.292788][T14249] pagetables 77824 [ 2135.292788][T14249] percpu 5593216 [ 2135.292788][T14249] sock 0 [ 2135.292788][T14249] vmalloc 0 [ 2135.292788][T14249] shmem 389120 [ 2135.292788][T14249] zswap 0 [ 2135.292788][T14249] zswapped 0 [ 2135.292788][T14249] file_mapped 389120 [ 2135.292788][T14249] file_dirty 0 [ 2135.292788][T14249] file_writeback 0 [ 2135.292788][T14249] swapcached 0 [ 2135.292788][T14249] anon_thp 0 [ 2135.292788][T14249] file_thp 0 [ 2135.292788][T14249] shmem_thp 0 [ 2135.292788][T14249] inactive_anon 225280 [ 2135.292788][T14249] active_anon 299008 [ 2135.292788][T14249] inactive_file 0 [ 2135.292788][T14249] active_file 0 [ 2135.292788][T14249] unevictable 0 [ 2135.292788][T14249] slab_reclaimable 21832 [ 2135.292788][T14249] slab_unreclaimable 308249776 [ 2135.292788][T14249] slab 308271608 [ 2135.392224][T14249] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=14248,uid=0 [ 2135.407937][T14249] Memory cgroup out of memory: Killed process 14249 (syz-executor.1) total-vm:54592kB, anon-rss:500kB, file-rss:8824kB, shmem-rss:76kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2135.445221][T14272] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2135.459681][T14272] CPU: 0 PID: 14272 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2135.470139][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2135.480205][T14272] Call Trace: [ 2135.483475][T14272] [ 2135.486406][T14272] dump_stack_lvl+0xcd/0x134 [ 2135.491023][T14272] dump_header+0x10b/0x7f9 [ 2135.495448][T14272] oom_kill_process.cold+0x10/0x15 [ 2135.500594][T14272] out_of_memory+0x358/0x14a0 [ 2135.505271][T14272] ? find_held_lock+0x2d/0x110 [ 2135.510044][T14272] ? oom_killer_disable+0x270/0x270 [ 2135.515266][T14272] ? find_held_lock+0x2d/0x110 [ 2135.520026][T14272] mem_cgroup_out_of_memory+0x206/0x270 [ 2135.525564][T14272] ? mem_cgroup_margin+0x130/0x130 [ 2135.530675][T14272] ? lock_downgrade+0x6e0/0x6e0 [ 2135.535549][T14272] try_charge_memcg+0xf67/0x13f0 [ 2135.540494][T14272] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2135.546504][T14272] ? lock_downgrade+0x6e0/0x6e0 [ 2135.551379][T14272] charge_memcg+0x31/0x320 [ 2135.555804][T14272] __mem_cgroup_charge+0x27/0x90 [ 2135.560746][T14272] ? _compound_head+0x5d/0x150 [ 2135.565518][T14272] wp_page_copy+0x27c/0x1b60 [ 2135.570131][T14272] ? restore_exclusive_pte+0x8b0/0x8b0 [ 2135.575685][T14272] ? lock_downgrade+0x6e0/0x6e0 [ 2135.580545][T14272] ? vm_normal_page+0x146/0x2a0 [ 2135.585415][T14272] do_wp_page+0x52c/0x1910 [ 2135.589843][T14272] __handle_mm_fault+0x1813/0x39b0 [ 2135.594971][T14272] ? vm_iomap_memory+0x190/0x190 [ 2135.599938][T14272] handle_mm_fault+0x1c8/0x780 [ 2135.604717][T14272] do_user_addr_fault+0x475/0x1210 [ 2135.609847][T14272] exc_page_fault+0x94/0x170 [ 2135.614447][T14272] asm_exc_page_fault+0x22/0x30 [ 2135.619307][T14272] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 2135.625138][T14272] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 2135.645018][T14272] RSP: 0018:ffffc9000544ff38 EFLAGS: 00050293 [ 2135.651089][T14272] RAX: 0000000000002e39 RBX: 00007fffffffeffd RCX: 00005555569a26d0 [ 2135.659062][T14272] RDX: 1ffff110049b1c5d RSI: 0000000000000000 RDI: 0000000000000000 [ 2135.667033][T14272] RBP: 00005555569a26d0 R08: 0000000000000000 R09: 0000000000000000 [ 2135.675004][T14272] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 2135.682979][T14272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2135.690972][T14272] schedule_tail+0xaa/0xd0 [ 2135.695399][T14272] ret_from_fork+0x8/0x30 [ 2135.699755][T14272] [ 2135.704691][T14272] memory: usage 307084kB, limit 307200kB, failcnt 62970 [ 2135.716429][T14272] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2135.723441][T14272] Memory cgroup stats for /syz3: [ 2135.723651][T14272] anon 57344 [ 2135.723651][T14272] file 782336 [ 2135.723651][T14272] kernel 313614336 [ 2135.723651][T14272] kernel_stack 32768 [ 2135.723651][T14272] pagetables 57344 [ 2135.723651][T14272] percpu 5602688 [ 2135.723651][T14272] sock 0 [ 2135.723651][T14272] vmalloc 0 [ 2135.723651][T14272] shmem 778240 [ 2135.723651][T14272] zswap 0 [ 2135.723651][T14272] zswapped 0 [ 2135.723651][T14272] file_mapped 778240 [ 2135.723651][T14272] file_dirty 4096 [ 2135.723651][T14272] file_writeback 0 [ 2135.723651][T14272] swapcached 0 [ 2135.723651][T14272] anon_thp 0 [ 2135.723651][T14272] file_thp 0 [ 2135.723651][T14272] shmem_thp 0 [ 2135.723651][T14272] inactive_anon 512000 [ 2135.723651][T14272] active_anon 307200 03:30:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x53ae0500}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x54}}, 0x0) [ 2135.723651][T14272] inactive_file 4096 [ 2135.723651][T14272] active_file 0 [ 2135.723651][T14272] unevictable 0 [ 2135.723651][T14272] slab_reclaimable 117520 [ 2135.723651][T14272] slab_unreclaimable 307770160 [ 2135.723651][T14272] slab 307887680 [ 2135.828014][T14272] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=3637,uid=0 03:30:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x4c05}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:30:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x806}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x80000) 03:30:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x3000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf6020000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2135.849376][T14272] Memory cgroup out of memory: Killed process 3637 (syz-executor.3) total-vm:50620kB, anon-rss:460kB, file-rss:9064kB, shmem-rss:4kB, UID:0 pgtables:72kB oom_score_adj:0 [ 2135.873681][T14276] __nla_validate_parse: 57 callbacks suppressed [ 2135.873701][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2135.883298][T14278] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 03:30:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001440)={&(0x7f0000001340), 0x7009, &(0x7f0000001400)={&(0x7f0000001380)={0x2c, 0x7, 0x6, 0x401, 0x4000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 03:30:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xf6030000, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0xe202}}}}}}]}, 0x48}}, 0x0) [ 2136.033875][T14278] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2136.064983][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2136.233721][ T5984] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2136.299916][ T5984] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2136.389254][ T5984] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2136.446540][ T5984] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2137.415015][ T5984] device hsr_slave_0 left promiscuous mode [ 2137.422093][ T5984] device hsr_slave_1 left promiscuous mode [ 2137.430614][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2137.439582][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2137.453125][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2137.462376][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2137.482217][ T5984] device bridge_slave_1 left promiscuous mode [ 2137.490429][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 2137.507170][ T5984] device bridge_slave_0 left promiscuous mode [ 2137.513444][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 2137.539944][ T5984] device team0 left promiscuous mode [ 2137.545287][ T5984] device team_slave_0 left promiscuous mode [ 2137.552760][ T5984] device team_slave_1 left promiscuous mode [ 2137.562977][ T5984] device veth1_macvtap left promiscuous mode [ 2137.570741][ T5984] device veth0_macvtap left promiscuous mode [ 2137.578430][ T5984] device veth1_vlan left promiscuous mode [ 2137.584545][ T5984] device veth0_vlan left promiscuous mode [ 2151.752433][ T5984] bond2 (unregistering): Released all slaves [ 2151.770419][ T5984] bond1 (unregistering): Released all slaves [ 2151.937531][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 2151.954484][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 2151.971214][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2151.985383][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2152.056135][ T5984] bond0 (unregistering): Released all slaves [ 2155.596275][T14272] ================================================================== [ 2155.604378][T14272] BUG: KASAN: use-after-free in notifier_call_chain+0x1ee/0x200 [ 2155.612025][T14272] Read of size 8 at addr ffff888020b13ae8 by task syz-executor.3/14272 [ 2155.620270][T14272] [ 2155.622590][T14272] CPU: 0 PID: 14272 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2155.632998][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2155.643046][T14272] Call Trace: [ 2155.646318][T14272] [ 2155.649249][T14272] dump_stack_lvl+0xcd/0x134 [ 2155.653848][T14272] print_report.cold+0x2ba/0x719 [ 2155.658814][T14272] ? notifier_call_chain+0x1ee/0x200 [ 2155.664103][T14272] kasan_report+0xb1/0x1e0 [ 2155.668522][T14272] ? notifier_call_chain+0x1ee/0x200 [ 2155.673811][T14272] notifier_call_chain+0x1ee/0x200 [ 2155.678926][T14272] call_netdevice_notifiers_info+0x86/0x130 [ 2155.684830][T14272] netdev_run_todo+0xbc2/0x1100 [ 2155.689686][T14272] ? generic_xdp_install+0x4a0/0x4a0 [ 2155.694974][T14272] ? netdev_state_change+0xa1/0x130 [ 2155.700171][T14272] tun_chr_close+0xe0/0x180 [ 2155.704675][T14272] __fput+0x277/0x9d0 [ 2155.708655][T14272] ? __tun_detach+0x1480/0x1480 [ 2155.713506][T14272] task_work_run+0xdd/0x1a0 [ 2155.718010][T14272] do_exit+0xad5/0x29b0 [ 2155.722164][T14272] ? find_held_lock+0x2d/0x110 [ 2155.726932][T14272] ? mm_update_next_owner+0x7a0/0x7a0 [ 2155.732308][T14272] ? lock_downgrade+0x6e0/0x6e0 [ 2155.737162][T14272] do_group_exit+0xd2/0x2f0 [ 2155.741666][T14272] get_signal+0x238c/0x2610 [ 2155.746173][T14272] ? exit_signals+0x8b0/0x8b0 [ 2155.750854][T14272] arch_do_signal_or_restart+0x82/0x2300 [ 2155.756497][T14272] ? get_sigframe_size+0x10/0x10 [ 2155.761441][T14272] ? find_held_lock+0x2d/0x110 [ 2155.766206][T14272] ? ret_from_fork+0x8/0x30 [ 2155.770710][T14272] ? lock_downgrade+0x6e0/0x6e0 [ 2155.775557][T14272] ? do_raw_spin_lock+0x120/0x2a0 [ 2155.780583][T14272] ? exit_to_user_mode_prepare+0x137/0x250 [ 2155.786393][T14272] exit_to_user_mode_prepare+0x15f/0x250 [ 2155.792025][T14272] syscall_exit_to_user_mode+0x19/0x50 [ 2155.797486][T14272] ret_from_fork+0x15/0x30 [ 2155.801901][T14272] RIP: 0033:0x7f70e7e882ab [ 2155.806314][T14272] Code: Unable to access opcode bytes at RIP 0x7f70e7e88281. [ 2155.813666][T14272] RSP: 002b:00007ffcadad7da0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2155.822076][T14272] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f70e7e882ab [ 2155.830042][T14272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2155.838009][T14272] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555569a2400 [ 2155.845978][T14272] R10: 00005555569a26d0 R11: 0000000000000246 R12: 0000000000000001 [ 2155.853953][T14272] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcadad7e80 [ 2155.861927][T14272] [ 2155.864947][T14272] [ 2155.867261][T14272] Allocated by task 3637: [ 2155.871578][T14272] kasan_save_stack+0x1e/0x40 [ 2155.876252][T14272] __kasan_slab_alloc+0x90/0xc0 [ 2155.881100][T14272] kmem_cache_alloc+0x267/0x3b0 [ 2155.885951][T14272] copy_net_ns+0x125/0x760 [ 2155.890376][T14272] create_new_namespaces+0x3f6/0xb20 [ 2155.895686][T14272] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2155.901339][T14272] ksys_unshare+0x445/0x920 [ 2155.905841][T14272] __x64_sys_unshare+0x2d/0x40 [ 2155.910603][T14272] do_syscall_64+0x35/0xb0 [ 2155.915014][T14272] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2155.920908][T14272] [ 2155.923223][T14272] Freed by task 5984: [ 2155.927193][T14272] kasan_save_stack+0x1e/0x40 [ 2155.931868][T14272] kasan_set_track+0x21/0x30 [ 2155.936454][T14272] kasan_set_free_info+0x20/0x30 [ 2155.941393][T14272] ____kasan_slab_free+0x166/0x1c0 [ 2155.946500][T14272] slab_free_freelist_hook+0x8b/0x1c0 [ 2155.951870][T14272] kmem_cache_free+0xeb/0x5b0 [ 2155.956545][T14272] cleanup_net+0x8ba/0xb00 [ 2155.960957][T14272] process_one_work+0x991/0x1610 [ 2155.965895][T14272] worker_thread+0x665/0x1080 [ 2155.970571][T14272] kthread+0x2e4/0x3a0 [ 2155.974637][T14272] ret_from_fork+0x1f/0x30 [ 2155.979051][T14272] [ 2155.981367][T14272] Last potentially related work creation: [ 2155.987066][T14272] kasan_save_stack+0x1e/0x40 [ 2155.991750][T14272] __kasan_record_aux_stack+0xbe/0xd0 [ 2155.997121][T14272] insert_work+0x48/0x350 [ 2156.001450][T14272] __queue_work+0x625/0x1210 [ 2156.006036][T14272] call_timer_fn+0x1a0/0x6b0 [ 2156.010623][T14272] __run_timers.part.0+0x4a3/0xa80 [ 2156.015819][T14272] run_timer_softirq+0x152/0x1d0 [ 2156.020752][T14272] __do_softirq+0x1d3/0x9c6 [ 2156.025251][T14272] [ 2156.027565][T14272] Second to last potentially related work creation: [ 2156.034134][T14272] kasan_save_stack+0x1e/0x40 [ 2156.038809][T14272] __kasan_record_aux_stack+0xbe/0xd0 [ 2156.044182][T14272] insert_work+0x48/0x350 [ 2156.048506][T14272] __queue_work+0x625/0x1210 [ 2156.053091][T14272] call_timer_fn+0x1a0/0x6b0 [ 2156.057677][T14272] __run_timers.part.0+0x4a3/0xa80 [ 2156.062786][T14272] run_timer_softirq+0x152/0x1d0 [ 2156.067725][T14272] __do_softirq+0x1d3/0x9c6 [ 2156.072222][T14272] [ 2156.074539][T14272] The buggy address belongs to the object at ffff888020b13880 [ 2156.074539][T14272] which belongs to the cache net_namespace of size 6976 [ 2156.088856][T14272] The buggy address is located 616 bytes inside of [ 2156.088856][T14272] 6976-byte region [ffff888020b13880, ffff888020b153c0) [ 2156.102225][T14272] [ 2156.104546][T14272] The buggy address belongs to the physical page: [ 2156.110951][T14272] page:ffffea000082c400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20b10 [ 2156.121095][T14272] head:ffffea000082c400 order:3 compound_mapcount:0 compound_pincount:0 [ 2156.129410][T14272] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2156.137395][T14272] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff8880119db3c0 [ 2156.145983][T14272] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 2156.154566][T14272] page dumped because: kasan: bad access detected [ 2156.160974][T14272] page_owner tracks the page as allocated [ 2156.166678][T14272] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3636, tgid 3636 (syz-executor.0), ts 168758626449, free_ts 168757382212 [ 2156.188386][T14272] get_page_from_freelist+0x109b/0x2ce0 [ 2156.193938][T14272] __alloc_pages+0x1c7/0x510 [ 2156.198528][T14272] alloc_pages+0x1a6/0x270 [ 2156.202942][T14272] allocate_slab+0x27e/0x3d0 [ 2156.207529][T14272] ___slab_alloc+0x7f1/0xe10 [ 2156.212116][T14272] __slab_alloc.constprop.0+0x4d/0xa0 [ 2156.217486][T14272] kmem_cache_alloc+0x38c/0x3b0 [ 2156.222336][T14272] copy_net_ns+0x125/0x760 [ 2156.226766][T14272] create_new_namespaces+0x3f6/0xb20 [ 2156.232060][T14272] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2156.237698][T14272] ksys_unshare+0x445/0x920 [ 2156.242207][T14272] __x64_sys_unshare+0x2d/0x40 [ 2156.246975][T14272] do_syscall_64+0x35/0xb0 [ 2156.251391][T14272] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2156.257283][T14272] page last free stack trace: [ 2156.261940][T14272] free_pcp_prepare+0x5e4/0xd20 [ 2156.266790][T14272] free_unref_page+0x19/0x4d0 [ 2156.271464][T14272] skb_free_head+0xac/0x110 [ 2156.275974][T14272] skb_release_data+0x5f1/0x870 [ 2156.280832][T14272] consume_skb+0xc2/0x160 [ 2156.285168][T14272] netlink_recvmsg+0x598/0xe50 [ 2156.289938][T14272] ____sys_recvmsg+0x2c7/0x600 [ 2156.294711][T14272] ___sys_recvmsg+0xf2/0x180 [ 2156.299301][T14272] __sys_recvmsg+0xf0/0x1c0 [ 2156.303804][T14272] do_syscall_64+0x35/0xb0 [ 2156.308223][T14272] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2156.314126][T14272] [ 2156.316441][T14272] Memory state around the buggy address: [ 2156.322061][T14272] ffff888020b13980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2156.330132][T14272] ffff888020b13a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2156.338193][T14272] >ffff888020b13a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2156.346247][T14272] ^ [ 2156.353700][T14272] ffff888020b13b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2156.361773][T14272] ffff888020b13b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2156.369832][T14272] ================================================================== [ 2156.400781][T14272] Kernel panic - not syncing: panic_on_warn set ... [ 2156.407387][T14272] CPU: 1 PID: 14272 Comm: syz-executor.3 Not tainted 6.0.0-rc7-syzkaller-01884-g9d43507319cc #0 [ 2156.417867][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 2156.427903][T14272] Call Trace: [ 2156.431168][T14272] [ 2156.434086][T14272] dump_stack_lvl+0xcd/0x134 [ 2156.438666][T14272] panic+0x2c8/0x627 [ 2156.442574][T14272] ? panic_print_sys_info.part.0+0x10b/0x10b [ 2156.448537][T14272] ? preempt_schedule_common+0x59/0xc0 [ 2156.453980][T14272] ? preempt_schedule_thunk+0x16/0x18 [ 2156.459354][T14272] ? notifier_call_chain+0x1ee/0x200 [ 2156.464646][T14272] end_report.part.0+0x3f/0x7c [ 2156.469405][T14272] kasan_report.cold+0xa/0xf [ 2156.473979][T14272] ? notifier_call_chain+0x1ee/0x200 [ 2156.479249][T14272] notifier_call_chain+0x1ee/0x200 [ 2156.484352][T14272] call_netdevice_notifiers_info+0x86/0x130 [ 2156.490231][T14272] netdev_run_todo+0xbc2/0x1100 [ 2156.495070][T14272] ? generic_xdp_install+0x4a0/0x4a0 [ 2156.500341][T14272] ? netdev_state_change+0xa1/0x130 [ 2156.505523][T14272] tun_chr_close+0xe0/0x180 [ 2156.510021][T14272] __fput+0x277/0x9d0 [ 2156.514016][T14272] ? __tun_detach+0x1480/0x1480 [ 2156.518871][T14272] task_work_run+0xdd/0x1a0 [ 2156.523359][T14272] do_exit+0xad5/0x29b0 [ 2156.527499][T14272] ? find_held_lock+0x2d/0x110 [ 2156.532248][T14272] ? mm_update_next_owner+0x7a0/0x7a0 [ 2156.537603][T14272] ? lock_downgrade+0x6e0/0x6e0 [ 2156.542440][T14272] do_group_exit+0xd2/0x2f0 [ 2156.546928][T14272] get_signal+0x238c/0x2610 [ 2156.551417][T14272] ? exit_signals+0x8b0/0x8b0 [ 2156.556090][T14272] arch_do_signal_or_restart+0x82/0x2300 [ 2156.561760][T14272] ? get_sigframe_size+0x10/0x10 [ 2156.566729][T14272] ? find_held_lock+0x2d/0x110 [ 2156.571512][T14272] ? ret_from_fork+0x8/0x30 [ 2156.576026][T14272] ? lock_downgrade+0x6e0/0x6e0 [ 2156.580867][T14272] ? do_raw_spin_lock+0x120/0x2a0 [ 2156.585878][T14272] ? exit_to_user_mode_prepare+0x137/0x250 [ 2156.591681][T14272] exit_to_user_mode_prepare+0x15f/0x250 [ 2156.597306][T14272] syscall_exit_to_user_mode+0x19/0x50 [ 2156.602756][T14272] ret_from_fork+0x15/0x30 [ 2156.607169][T14272] RIP: 0033:0x7f70e7e882ab [ 2156.611587][T14272] Code: Unable to access opcode bytes at RIP 0x7f70e7e88281. [ 2156.618944][T14272] RSP: 002b:00007ffcadad7da0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2156.627344][T14272] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f70e7e882ab [ 2156.635298][T14272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2156.643257][T14272] RBP: 0000000000000001 R08: 0000000000000000 R09: 00005555569a2400 [ 2156.651214][T14272] R10: 00005555569a26d0 R11: 0000000000000246 R12: 0000000000000001 [ 2156.659182][T14272] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcadad7e80 [ 2156.667174][T14272] [ 2156.670368][T14272] Kernel Offset: disabled [ 2156.674682][T14272] Rebooting in 86400 seconds..