a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xc}, 0x0) 10:22:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="13000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:26 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = memfd_secret(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'lo\x00'}) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) ppoll(&(0x7f0000000640)=[{r3, 0x802}, {r1, 0x8040}, {0xffffffffffffffff, 0x1294}, {0xffffffffffffffff, 0x22}, {r2}, {r3, 0xae40}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0xc02c}, {0xffffffffffffffff, 0x401}, {r4, 0x8000}], 0xa, &(0x7f0000000700)={r5, r6+10000000}, &(0x7f0000000740)={[0x100]}, 0x8) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="b4fd86e1d0be7e1d000025c5e49fe0eb1217895b1364cb6df623edda08001efa8f1f891cac"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = syz_io_uring_setup(0x2f36, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x272}, &(0x7f0000002000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r11) (async, rerun: 64) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_NODE_GET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x14, r12, 0x1ad2c317b5116bdd}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="00c0005ce202b356ac92dd2569b65c133b5d66c2ae5072c70389b4c1313e5529ac2dbcc1e82543f27dbe97f1c45876b1aba3d5105ac054f49b4bdc8805a099e49b18f03fa0e1db767f5f820ba3bac73318c1aa6e59b0e73209914d8eb8301e3d3d532daf12528014a3986b36b87269269ed7af83d87809a0ea6320a54db4c1e31ea68b30003f18300ca5e726472cc55203a2bd3591023f438b949001f9339715ba2b1e45a81f51958f41c7c9e48542111a71759687cd06326da6dee310", @ANYRES16=r12, @ANYBLOB="000227bd7000fddbdf250e000000740002800c00038008000100ceffffff4400038008000200b4ad00000800010000f0ffff0800010003000000080001000000000008000200000200000800010001000080080002000600000008000200fc6c00000c000380080002004e000000040004000800020001000080080001000300000034000980080001000500000008000200090000000800020002000000080001000100000008000200ff0f00000800010003000000"], 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r15 = userfaultfd(0x80001) ioctl$UFFDIO_API(r15, 0xc018aa3f, &(0x7f00000000c0)) (async) r16 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x13, r16, 0x0) ioctl$UFFDIO_COPY(r15, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000374000/0x3000)=nil, &(0x7f00003fa000/0x1000)=nil, 0x3000}) (async) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000003c0)={'lo\x00'}) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff9, 0x5}, {0xfff3, 0x4}, {0xffe0, 0x3}}, [""]}, 0x24}}, 0x10) io_uring_enter(r8, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2936.605300][ T5134] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:26 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x2400000000000000, 0x0, 0x0) [ 2936.648001][ T5134] CPU: 1 PID: 5134 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2936.658413][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2936.668523][ T5134] Call Trace: [ 2936.671827][ T5134] [ 2936.674792][ T5134] dump_stack_lvl+0xd1/0x138 [ 2936.679437][ T5134] dump_header+0x10b/0x85f [ 2936.683935][ T5134] oom_kill_process.cold+0x10/0x15 [ 2936.689365][ T5134] out_of_memory+0x35c/0x14a0 [ 2936.694096][ T5134] ? find_held_lock+0x2d/0x110 [ 2936.698906][ T5134] ? oom_killer_disable+0x280/0x280 [ 2936.704167][ T5134] ? find_held_lock+0x2d/0x110 [ 2936.708981][ T5134] mem_cgroup_out_of_memory+0x206/0x270 [ 2936.714572][ T5134] ? mem_cgroup_margin+0x130/0x130 [ 2936.719724][ T5134] ? lock_downgrade+0x6e0/0x6e0 [ 2936.724622][ T5134] try_charge_memcg+0xefb/0x12f0 [ 2936.729593][ T5134] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2936.735611][ T5134] ? lock_downgrade+0x6e0/0x6e0 [ 2936.740516][ T5134] charge_memcg+0x90/0x3b0 [ 2936.744984][ T5134] __mem_cgroup_charge+0x2b/0x90 [ 2936.749954][ T5134] ? _compound_head+0x5d/0x150 [ 2936.754742][ T5134] __handle_mm_fault+0x187d/0x3c90 [ 2936.759888][ T5134] ? vm_iomap_memory+0x190/0x190 [ 2936.764875][ T5134] handle_mm_fault+0x1b6/0x850 [ 2936.769667][ T5134] do_user_addr_fault+0x475/0x1210 [ 2936.775064][ T5134] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2936.780641][ T5134] exc_page_fault+0x98/0x170 [ 2936.785249][ T5134] asm_exc_page_fault+0x26/0x30 [ 2936.790124][ T5134] RIP: 0033:0x7fd887030e0c [ 2936.794546][ T5134] Code: c0 e8 98 5a ff ff b8 ff ff ff ff e9 33 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 54 31 c0 55 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 30 6c 0a 00 48 89 34 24 48 8b 14 24 48 8b [ 2936.814280][ T5134] RSP: 002b:00007fd887ea60e0 EFLAGS: 00010202 [ 2936.820381][ T5134] RAX: 0000000000000000 RBX: 00007fd8871abf80 RCX: 0000000000000000 [ 2936.828365][ T5134] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000200005c0 [ 2936.836351][ T5134] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2936.844343][ T5134] R10: 00000000200005c0 R11: 0000000000000000 R12: 0000000000000000 [ 2936.852338][ T5134] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2936.860331][ T5134] [ 2937.110024][ T5134] memory: usage 307200kB, limit 307200kB, failcnt 15162 [ 2937.124507][ T5134] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2937.149837][ T5134] Memory cgroup stats for /syz3: [ 2937.151863][ T5134] anon 2904064 [ 2937.151863][ T5134] file 10280960 [ 2937.151863][ T5134] kernel 301387776 [ 2937.151863][ T5134] kernel_stack 851968 [ 2937.151863][ T5134] pagetables 1675264 [ 2937.151863][ T5134] sec_pagetables 0 [ 2937.151863][ T5134] percpu 5136672 [ 2937.151863][ T5134] sock 0 [ 2937.151863][ T5134] vmalloc 0 [ 2937.151863][ T5134] shmem 10280960 [ 2937.151863][ T5134] zswap 0 [ 2937.151863][ T5134] zswapped 0 [ 2937.151863][ T5134] file_mapped 262144 [ 2937.151863][ T5134] file_dirty 0 [ 2937.151863][ T5134] file_writeback 0 [ 2937.151863][ T5134] swapcached 0 [ 2937.151863][ T5134] anon_thp 0 [ 2937.151863][ T5134] file_thp 0 [ 2937.151863][ T5134] shmem_thp 0 [ 2937.151863][ T5134] inactive_anon 2908160 [ 2937.151863][ T5134] active_anon 10276864 [ 2937.151863][ T5134] inactive_file 0 [ 2937.151863][ T5134] active_file 0 [ 2937.151863][ T5134] unevictable 0 [ 2937.151863][ T5134] slab_reclaimable 281800 [ 2937.151863][ T5134] slab_unreclaimable 293012592 [ 2937.296416][ T5134] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5133,uid=0 [ 2937.321772][ T5134] Memory cgroup out of memory: Killed process 5133 (syz-executor.3) total-vm:54540kB, anon-rss:484kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 10:22:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000ac8000a000f"], 0x28}}, 0x0) 10:22:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="28000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:27 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r5, &(0x7f00000002c0)="73122d9087e389f149500fbcbe1af87a5841f3b36d6d750275ac0e6e40491d9fe77b6c567c0289564e280101c89d0e4cc94290d4ad02046db60c4ec75249e9b767c3dcfe26e66e9e8f6cabfd25bce91386fb76a5ad5980d6b3ececcdde7fcff6bca9dacfe2e240ef8301257736a084bef067d878", 0x74) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:27 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x2a00000000000000, 0x0, 0x0) 10:22:27 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xe}, 0x0) 10:22:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="48000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="4c000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:27 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf}, 0x0) 10:22:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="60000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2937.727526][ T5294] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:27 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r5, &(0x7f00000002c0)="73122d9087e389f149500fbcbe1af87a5841f3b36d6d750275ac0e6e40491d9fe77b6c567c0289564e280101c89d0e4cc94290d4ad02046db60c4ec75249e9b767c3dcfe26e66e9e8f6cabfd25bce91386fb76a5ad5980d6b3ececcdde7fcff6bca9dacfe2e240ef8301257736a084bef067d878", 0x74) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="14000080000000000000000000000000000000008512cccd2b28b50fc7d2a49ed95d5274e7f1c9fc09f1a6d48c0d29e42e2d0504f56479b5644e6a62082dead92d3954234561b844303bd1daacb08f1db4cd8b4eccefdf5b6c0ef8fc53e077a122396f61446d06dc1916fff863b6311ec8553f4477cb92414df38d9e5304f564646286442a1f1aa13576cd0dd5580f2b1dcf28c46467c9af92c869d4bfae70029d21f6773869627e88fbc051246d72208015191d578d92ce20bcc418be81498d6ddba2da3e1f17dfd61612cdd6a313a9138874ba776da6393b842112dfd453d747d1423158a8dbc276bf17c5f2562023e1ca6f36031211b5771b9531164098a2258a43b474985c0dd20389e6f6b928b2c2ed20ab3c59a832095d104283f14b9674a17412919138adb37798f0100baa819479f57d7e7608ef533205f38c57c603964a466f7e5d6f3cb188504ce24579ea34877bbda3883e1ba95b26654b89d2b9038eaa1f486c9f419a4215a5a345e2eeedf05f663e7a08b1963033"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) pipe(&(0x7f0000000180)) (async) write$char_usb(r5, &(0x7f00000002c0)="73122d9087e389f149500fbcbe1af87a5841f3b36d6d750275ac0e6e40491d9fe77b6c567c0289564e280101c89d0e4cc94290d4ad02046db60c4ec75249e9b767c3dcfe26e66e9e8f6cabfd25bce91386fb76a5ad5980d6b3ececcdde7fcff6bca9dacfe2e240ef8301257736a084bef067d878", 0x74) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) [ 2937.795627][ T5294] CPU: 1 PID: 5294 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2937.806152][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2937.816256][ T5294] Call Trace: [ 2937.819566][ T5294] [ 2937.822525][ T5294] dump_stack_lvl+0xd1/0x138 [ 2937.827168][ T5294] dump_header+0x10b/0x85f [ 2937.831640][ T5294] oom_kill_process.cold+0x10/0x15 [ 2937.836799][ T5294] out_of_memory+0x35c/0x14a0 [ 2937.841522][ T5294] ? find_held_lock+0x2d/0x110 [ 2937.846344][ T5294] ? oom_killer_disable+0x280/0x280 [ 2937.851593][ T5294] ? find_held_lock+0x2d/0x110 [ 2937.856414][ T5294] mem_cgroup_out_of_memory+0x206/0x270 [ 2937.862811][ T5294] ? mem_cgroup_margin+0x130/0x130 [ 2937.868584][ T5294] ? lock_downgrade+0x6e0/0x6e0 [ 2937.873486][ T5294] try_charge_memcg+0xefb/0x12f0 [ 2937.878469][ T5294] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2937.884484][ T5294] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2937.890253][ T5294] ? lock_downgrade+0x6e0/0x6e0 [ 2937.895155][ T5294] ? lock_downgrade+0x6e0/0x6e0 [ 2937.900069][ T5294] obj_cgroup_charge+0x2af/0x5e0 [ 2937.905059][ T5294] kmem_cache_alloc_lru+0x145/0x760 [ 2937.910303][ T5294] ? sock_alloc_inode+0x27/0x1d0 [ 2937.915305][ T5294] sock_alloc_inode+0x27/0x1d0 [ 2937.920115][ T5294] ? sock_free_inode+0x30/0x30 [ 2937.924922][ T5294] alloc_inode+0x61/0x230 [ 2937.929308][ T5294] new_inode_pseudo+0x17/0x80 [ 2937.934029][ T5294] sock_alloc+0x40/0x260 [ 2937.938311][ T5294] __sock_create+0xbd/0x790 [ 2937.942872][ T5294] __sys_socket+0x133/0x250 [ 2937.947417][ T5294] ? __sys_socket_file+0x1f0/0x1f0 [ 2937.952585][ T5294] __x64_sys_socket+0x73/0xb0 [ 2937.957318][ T5294] do_syscall_64+0x39/0xb0 [ 2937.961775][ T5294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2937.967710][ T5294] RIP: 0033:0x7fd88708c0c9 [ 2937.972154][ T5294] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2937.991811][ T5294] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2938.000279][ T5294] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2938.008293][ T5294] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2938.016304][ T5294] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2938.024312][ T5294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2938.032319][ T5294] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2938.040352][ T5294] [ 2938.139464][ T5294] memory: usage 307200kB, limit 307200kB, failcnt 15266 [ 2938.159316][ T5294] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2938.280041][ T5294] Memory cgroup stats for /syz3: [ 2938.280298][ T5294] anon 2899968 [ 2938.280298][ T5294] file 10280960 [ 2938.280298][ T5294] kernel 301391872 [ 2938.280298][ T5294] kernel_stack 851968 [ 2938.280298][ T5294] pagetables 1667072 [ 2938.280298][ T5294] sec_pagetables 0 [ 2938.280298][ T5294] percpu 5136736 [ 2938.280298][ T5294] sock 0 [ 2938.280298][ T5294] vmalloc 0 [ 2938.280298][ T5294] shmem 10280960 [ 2938.280298][ T5294] zswap 0 [ 2938.280298][ T5294] zswapped 0 [ 2938.280298][ T5294] file_mapped 262144 [ 2938.280298][ T5294] file_dirty 0 [ 2938.280298][ T5294] file_writeback 0 [ 2938.280298][ T5294] swapcached 0 [ 2938.280298][ T5294] anon_thp 0 [ 2938.280298][ T5294] file_thp 0 [ 2938.280298][ T5294] shmem_thp 0 [ 2938.280298][ T5294] inactive_anon 2904064 [ 2938.280298][ T5294] active_anon 10276864 [ 2938.280298][ T5294] inactive_file 0 [ 2938.280298][ T5294] active_file 0 [ 2938.280298][ T5294] unevictable 0 [ 2938.280298][ T5294] slab_reclaimable 279872 [ 2938.280298][ T5294] slab_unreclaimable 293023328 [ 2938.412129][ T5294] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5293,uid=0 10:22:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="68000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000bc8000a000f"], 0x28}}, 0x0) 10:22:28 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x2c00000000000000, 0x0, 0x0) 10:22:28 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x10}, 0x0) 10:22:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:28 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async, rerun: 64) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 64) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r5, &(0x7f00000002c0)="73122d9087e389f149500fbcbe1af87a5841f3b36d6d750275ac0e6e40491d9fe77b6c567c0289564e280101c89d0e4cc94290d4ad02046db60c4ec75249e9b767c3dcfe26e66e9e8f6cabfd25bce91386fb76a5ad5980d6b3ececcdde7fcff6bca9dacfe2e240ef8301257736a084bef067d878", 0x74) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2938.477132][ T5294] Memory cgroup out of memory: Killed process 5293 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="6c000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:28 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x3000000000000000, 0x0, 0x0) 10:22:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="74000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="7a000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2938.990726][ T5325] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 10:22:28 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x60}, 0x0) [ 2939.136207][ T5325] CPU: 0 PID: 5325 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2939.146618][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2939.156714][ T5325] Call Trace: [ 2939.160028][ T5325] [ 2939.162995][ T5325] dump_stack_lvl+0xd1/0x138 [ 2939.167639][ T5325] dump_header+0x10b/0x85f [ 2939.172117][ T5325] oom_kill_process.cold+0x10/0x15 [ 2939.177306][ T5325] out_of_memory+0x35c/0x14a0 [ 2939.182058][ T5325] ? find_held_lock+0x2d/0x110 [ 2939.186880][ T5325] ? oom_killer_disable+0x280/0x280 [ 2939.192142][ T5325] ? find_held_lock+0x2d/0x110 [ 2939.196973][ T5325] mem_cgroup_out_of_memory+0x206/0x270 [ 2939.202921][ T5325] ? mem_cgroup_margin+0x130/0x130 [ 2939.208085][ T5325] ? lock_downgrade+0x6e0/0x6e0 [ 2939.212992][ T5325] try_charge_memcg+0xefb/0x12f0 [ 2939.217983][ T5325] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2939.224023][ T5325] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2939.229808][ T5325] ? lock_downgrade+0x6e0/0x6e0 [ 2939.234710][ T5325] ? lock_downgrade+0x6e0/0x6e0 [ 2939.239624][ T5325] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2939.245231][ T5325] __alloc_pages+0x1f3/0x5b0 [ 2939.249870][ T5325] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2939.256718][ T5325] alloc_pages+0x1aa/0x270 [ 2939.261192][ T5325] __pmd_alloc+0x3f/0x5d0 [ 2939.265583][ T5325] __handle_mm_fault+0x932/0x3c90 [ 2939.270676][ T5325] ? vm_iomap_memory+0x190/0x190 [ 2939.275693][ T5325] handle_mm_fault+0x1b6/0x850 [ 2939.280526][ T5325] do_user_addr_fault+0x475/0x1210 [ 2939.285698][ T5325] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2939.291327][ T5325] exc_page_fault+0x98/0x170 [ 2939.295972][ T5325] asm_exc_page_fault+0x26/0x30 [ 2939.300864][ T5325] RIP: 0033:0x7fd887086c25 [ 2939.305324][ T5325] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2939.324979][ T5325] RSP: 002b:00007fd8872cfb98 EFLAGS: 00010202 [ 2939.331100][ T5325] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2939.339113][ T5325] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 2939.347127][ T5325] RBP: 00007fd8872cfc58 R08: 00007fd887000000 R09: 00007fd886c00000 [ 2939.355140][ T5325] R10: 00007fd886c000c8 R11: 000000000008ca2c R12: 00000000002cd79c [ 2939.363151][ T5325] R13: 00007fd8872cfc80 R14: 00007fd8872cfca0 R15: 0000000000000032 [ 2939.371191][ T5325] 10:22:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="f0000000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2939.471066][ T5325] memory: usage 307184kB, limit 307200kB, failcnt 15361 [ 2939.488554][ T5325] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2939.619831][ T5325] Memory cgroup stats for /syz3: [ 2939.620069][ T5325] anon 2899968 [ 2939.620069][ T5325] file 10280960 [ 2939.620069][ T5325] kernel 301375488 [ 2939.620069][ T5325] kernel_stack 851968 [ 2939.620069][ T5325] pagetables 1667072 [ 2939.620069][ T5325] sec_pagetables 0 [ 2939.620069][ T5325] percpu 5136672 [ 2939.620069][ T5325] sock 0 [ 2939.620069][ T5325] vmalloc 0 [ 2939.620069][ T5325] shmem 10280960 [ 2939.620069][ T5325] zswap 0 [ 2939.620069][ T5325] zswapped 0 [ 2939.620069][ T5325] file_mapped 262144 [ 2939.620069][ T5325] file_dirty 0 [ 2939.620069][ T5325] file_writeback 0 [ 2939.620069][ T5325] swapcached 0 [ 2939.620069][ T5325] anon_thp 0 [ 2939.620069][ T5325] file_thp 0 [ 2939.620069][ T5325] shmem_thp 0 [ 2939.620069][ T5325] inactive_anon 2904064 [ 2939.620069][ T5325] active_anon 10276864 [ 2939.620069][ T5325] inactive_file 0 [ 2939.620069][ T5325] active_file 0 [ 2939.620069][ T5325] unevictable 0 [ 2939.620069][ T5325] slab_reclaimable 279872 [ 2939.620069][ T5325] slab_unreclaimable 293011544 [ 2939.818665][ T5325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5325,uid=0 [ 2939.881326][ T5325] Memory cgroup out of memory: Killed process 5325 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000bcc000a000f"], 0x28}}, 0x0) 10:22:29 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x3600000000000000, 0x0, 0x0) 10:22:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00030000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:29 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = memfd_secret(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='fi\x00'/13]) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14e325fd06f439714700800080"], 0x14}], 0x1}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f00000006c0), &(0x7f0000000400)=0x0, &(0x7f0000000700)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0ab18e8ac9e233bd3b69ba7a3c33a5e1cfe8123519dfc585e365a25ce1f826fea3f10355bbb2fc99c02c64d031551c483144ab31944ea8", @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESHEX=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r8]) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getenv(0x4205, r9, 0x1, &(0x7f00000000c0)) r10 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0, r5, r6, 0xee00, r8, 0x40, 0x4}, 0x80, 0xffffffffffffe685, 0x1, 0x1ff, r9, r10, 0x40}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@loopback, @in6=@remote, 0x4e20, 0x100, 0x4e24, 0x3, 0x2, 0xa0, 0x80, 0x3b, 0x0, r5}, {0x4, 0x608, 0xb99d, 0x3f, 0x7, 0xd6b9, 0x5, 0x884c00}, {0x81, 0xfff, 0x101, 0x6}, 0x0, 0x6e6bb9, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x18}, 0x2, @in6=@private1, 0x0, 0x0, 0x3, 0xd8, 0x3, 0x5, 0xfff}}, 0xe8) statx(r1, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x80, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r13]) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)={0x350, 0xfffffffffffffffe, 0x0, [{{0x3, 0x2, 0x3, 0xfff, 0x37e, 0x2, {0x1, 0x3, 0x2, 0x9, 0x5, 0x2068, 0x7fff, 0x3, 0x8868, 0xa000, 0xdf9, 0xffffffffffffffff, 0x0, 0xeaef, 0xfffffff7}}, {0x6, 0xfffffffffffffffe, 0x1, 0xa4, '^'}}, {{0x2, 0x1, 0x100, 0xf1c2, 0x7fffffff, 0x8, {0x0, 0x1000, 0xffffffffffffff18, 0x4, 0x4, 0x100000000, 0x2, 0x400, 0x8, 0x2000, 0x101, r5, 0xffffffffffffffff, 0x2, 0x40}}, {0x1, 0xfff, 0x2, 0x9, '\\&'}}, {{0x4, 0x3, 0x5, 0x10001, 0x1, 0xfffffffb, {0x3, 0x2000000000, 0x1fcc, 0x6, 0x9, 0x8001, 0x8b56, 0x7, 0x3f, 0xc000, 0x1, r11, r13, 0x200, 0x6}}, {0x0, 0x400, 0x12, 0x6, '/dev/snd/midiC#D#\x00'}}, {{0x2, 0x0, 0x79f, 0x2, 0x203d, 0x7, {0x6, 0x6, 0xbe4, 0x5, 0x9, 0xd35, 0x7f, 0x77, 0x80, 0x8000, 0x0, 0xffffffffffffffff, 0xee00, 0xf26, 0x5}}, {0x4, 0x6, 0x1, 0x2, '\x00'}}, {{0x4, 0x0, 0x8000, 0x800, 0x1ff, 0x200, {0x1, 0x7ff, 0x1, 0x4, 0x2, 0xffffffff00000001, 0xffffffe0, 0x0, 0x1ff, 0x2000, 0x7, 0xffffffffffffffff, 0xee01, 0x0, 0xea}}, {0x3, 0x2, 0x12, 0x7, '/dev/snd/midiC#D#\x00'}}]}, 0x350) bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r14, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:29 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf0}, 0x0) 10:22:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00050000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:29 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x300}, 0x0) 10:22:29 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) (async) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = memfd_secret(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='fi\x00'/13]) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14e325fd06f439714700800080"], 0x14}], 0x1}, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f00000006c0), &(0x7f0000000400)=0x0, &(0x7f0000000700)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0ab18e8ac9e233bd3b69ba7a3c33a5e1cfe8123519dfc585e365a25ce1f826fea3f10355bbb2fc99c02c64d031551c483144ab31944ea8", @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESHEX=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r8]) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getenv(0x4205, r9, 0x1, &(0x7f00000000c0)) (async) r10 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0, r5, r6, 0xee00, r8, 0x40, 0x4}, 0x80, 0xffffffffffffe685, 0x1, 0x1ff, r9, r10, 0x40}) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@loopback, @in6=@remote, 0x4e20, 0x100, 0x4e24, 0x3, 0x2, 0xa0, 0x80, 0x3b, 0x0, r5}, {0x4, 0x608, 0xb99d, 0x3f, 0x7, 0xd6b9, 0x5, 0x884c00}, {0x81, 0xfff, 0x101, 0x6}, 0x0, 0x6e6bb9, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x18}, 0x2, @in6=@private1, 0x0, 0x0, 0x3, 0xd8, 0x3, 0x5, 0xfff}}, 0xe8) (async) statx(r1, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x80, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r13]) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)={0x350, 0xfffffffffffffffe, 0x0, [{{0x3, 0x2, 0x3, 0xfff, 0x37e, 0x2, {0x1, 0x3, 0x2, 0x9, 0x5, 0x2068, 0x7fff, 0x3, 0x8868, 0xa000, 0xdf9, 0xffffffffffffffff, 0x0, 0xeaef, 0xfffffff7}}, {0x6, 0xfffffffffffffffe, 0x1, 0xa4, '^'}}, {{0x2, 0x1, 0x100, 0xf1c2, 0x7fffffff, 0x8, {0x0, 0x1000, 0xffffffffffffff18, 0x4, 0x4, 0x100000000, 0x2, 0x400, 0x8, 0x2000, 0x101, r5, 0xffffffffffffffff, 0x2, 0x40}}, {0x1, 0xfff, 0x2, 0x9, '\\&'}}, {{0x4, 0x3, 0x5, 0x10001, 0x1, 0xfffffffb, {0x3, 0x2000000000, 0x1fcc, 0x6, 0x9, 0x8001, 0x8b56, 0x7, 0x3f, 0xc000, 0x1, r11, r13, 0x200, 0x6}}, {0x0, 0x400, 0x12, 0x6, '/dev/snd/midiC#D#\x00'}}, {{0x2, 0x0, 0x79f, 0x2, 0x203d, 0x7, {0x6, 0x6, 0xbe4, 0x5, 0x9, 0xd35, 0x7f, 0x77, 0x80, 0x8000, 0x0, 0xffffffffffffffff, 0xee00, 0xf26, 0x5}}, {0x4, 0x6, 0x1, 0x2, '\x00'}}, {{0x4, 0x0, 0x8000, 0x800, 0x1ff, 0x200, {0x1, 0x7ff, 0x1, 0x4, 0x2, 0xffffffff00000001, 0xffffffe0, 0x0, 0x1ff, 0x2000, 0x7, 0xffffffffffffffff, 0xee01, 0x0, 0xea}}, {0x3, 0x2, 0x12, 0x7, '/dev/snd/midiC#D#\x00'}}]}, 0x350) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r14 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r14, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00060000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:30 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x3c00000000000000, 0x0, 0x0) [ 2940.376876][ T5376] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00070000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2940.438082][ T5376] CPU: 1 PID: 5376 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2940.448494][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2940.458590][ T5376] Call Trace: [ 2940.461894][ T5376] [ 2940.464855][ T5376] dump_stack_lvl+0xd1/0x138 [ 2940.469493][ T5376] dump_header+0x10b/0x85f [ 2940.473967][ T5376] oom_kill_process.cold+0x10/0x15 [ 2940.479131][ T5376] out_of_memory+0x35c/0x14a0 [ 2940.483855][ T5376] ? find_held_lock+0x2d/0x110 [ 2940.488673][ T5376] ? oom_killer_disable+0x280/0x280 [ 2940.493919][ T5376] ? find_held_lock+0x2d/0x110 [ 2940.498728][ T5376] mem_cgroup_out_of_memory+0x206/0x270 [ 2940.504326][ T5376] ? mem_cgroup_margin+0x130/0x130 [ 2940.509486][ T5376] ? lock_downgrade+0x6e0/0x6e0 [ 2940.514394][ T5376] try_charge_memcg+0xefb/0x12f0 [ 2940.519384][ T5376] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2940.525408][ T5376] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2940.531184][ T5376] ? lock_downgrade+0x6e0/0x6e0 [ 2940.536066][ T5376] ? lock_downgrade+0x6e0/0x6e0 [ 2940.540962][ T5376] obj_cgroup_charge+0x2af/0x5e0 [ 2940.545952][ T5376] kmem_cache_alloc_lru+0x145/0x760 [ 2940.551191][ T5376] ? sock_alloc_inode+0x27/0x1d0 [ 2940.556181][ T5376] sock_alloc_inode+0x27/0x1d0 [ 2940.560986][ T5376] ? sock_free_inode+0x30/0x30 [ 2940.565794][ T5376] alloc_inode+0x61/0x230 [ 2940.570179][ T5376] new_inode_pseudo+0x17/0x80 [ 2940.574897][ T5376] sock_alloc+0x40/0x260 [ 2940.579172][ T5376] __sock_create+0xbd/0x790 [ 2940.583715][ T5376] __sys_socket+0x133/0x250 [ 2940.588257][ T5376] ? __sys_socket_file+0x1f0/0x1f0 [ 2940.593411][ T5376] __x64_sys_socket+0x73/0xb0 [ 2940.598123][ T5376] do_syscall_64+0x39/0xb0 [ 2940.602579][ T5376] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2940.608508][ T5376] RIP: 0033:0x7fd88708c0c9 [ 2940.612951][ T5376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2940.632597][ T5376] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2940.641034][ T5376] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2940.649003][ T5376] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2940.656972][ T5376] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2940.664942][ T5376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2940.672912][ T5376] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2940.680902][ T5376] [ 2940.787383][ T5376] memory: usage 307184kB, limit 307200kB, failcnt 15490 [ 2940.797722][ T5376] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2940.807418][ T5376] Memory cgroup stats for /syz3: [ 2940.807651][ T5376] anon 2899968 [ 2940.807651][ T5376] file 10280960 [ 2940.807651][ T5376] kernel 301375488 [ 2940.807651][ T5376] kernel_stack 851968 [ 2940.807651][ T5376] pagetables 1667072 [ 2940.807651][ T5376] sec_pagetables 0 [ 2940.807651][ T5376] percpu 5136672 [ 2940.807651][ T5376] sock 0 [ 2940.807651][ T5376] vmalloc 0 [ 2940.807651][ T5376] shmem 10280960 [ 2940.807651][ T5376] zswap 0 [ 2940.807651][ T5376] zswapped 0 [ 2940.807651][ T5376] file_mapped 262144 [ 2940.807651][ T5376] file_dirty 0 [ 2940.807651][ T5376] file_writeback 0 [ 2940.807651][ T5376] swapcached 0 [ 2940.807651][ T5376] anon_thp 0 [ 2940.807651][ T5376] file_thp 0 [ 2940.807651][ T5376] shmem_thp 0 [ 2940.807651][ T5376] inactive_anon 2904064 [ 2940.807651][ T5376] active_anon 10276864 [ 2940.807651][ T5376] inactive_file 0 [ 2940.807651][ T5376] active_file 0 [ 2940.807651][ T5376] unevictable 0 [ 2940.807651][ T5376] slab_reclaimable 279872 [ 2940.807651][ T5376] slab_unreclaimable 293011848 [ 2940.971471][ T5376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5375,uid=0 [ 2940.998366][ T5376] Memory cgroup out of memory: Killed process 5375 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000ad0000a000f"], 0x28}}, 0x0) 10:22:30 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x600}, 0x0) 10:22:30 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) (async) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = memfd_secret(0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='fi\x00'/13]) (async) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14e325fd06f439714700800080"], 0x14}], 0x1}, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) (async) stat(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f00000006c0), &(0x7f0000000400)=0x0, &(0x7f0000000700)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0ab18e8ac9e233bd3b69ba7a3c33a5e1cfe8123519dfc585e365a25ce1f826fea3f10355bbb2fc99c02c64d031551c483144ab31944ea8", @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESHEX=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r8]) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getenv(0x4205, r9, 0x1, &(0x7f00000000c0)) r10 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0, r5, r6, 0xee00, r8, 0x40, 0x4}, 0x80, 0xffffffffffffe685, 0x1, 0x1ff, r9, r10, 0x40}) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@loopback, @in6=@remote, 0x4e20, 0x100, 0x4e24, 0x3, 0x2, 0xa0, 0x80, 0x3b, 0x0, r5}, {0x4, 0x608, 0xb99d, 0x3f, 0x7, 0xd6b9, 0x5, 0x884c00}, {0x81, 0xfff, 0x101, 0x6}, 0x0, 0x6e6bb9, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x18}, 0x2, @in6=@private1, 0x0, 0x0, 0x3, 0xd8, 0x3, 0x5, 0xfff}}, 0xe8) (async) statx(r1, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x80, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r13]) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)={0x350, 0xfffffffffffffffe, 0x0, [{{0x3, 0x2, 0x3, 0xfff, 0x37e, 0x2, {0x1, 0x3, 0x2, 0x9, 0x5, 0x2068, 0x7fff, 0x3, 0x8868, 0xa000, 0xdf9, 0xffffffffffffffff, 0x0, 0xeaef, 0xfffffff7}}, {0x6, 0xfffffffffffffffe, 0x1, 0xa4, '^'}}, {{0x2, 0x1, 0x100, 0xf1c2, 0x7fffffff, 0x8, {0x0, 0x1000, 0xffffffffffffff18, 0x4, 0x4, 0x100000000, 0x2, 0x400, 0x8, 0x2000, 0x101, r5, 0xffffffffffffffff, 0x2, 0x40}}, {0x1, 0xfff, 0x2, 0x9, '\\&'}}, {{0x4, 0x3, 0x5, 0x10001, 0x1, 0xfffffffb, {0x3, 0x2000000000, 0x1fcc, 0x6, 0x9, 0x8001, 0x8b56, 0x7, 0x3f, 0xc000, 0x1, r11, r13, 0x200, 0x6}}, {0x0, 0x400, 0x12, 0x6, '/dev/snd/midiC#D#\x00'}}, {{0x2, 0x0, 0x79f, 0x2, 0x203d, 0x7, {0x6, 0x6, 0xbe4, 0x5, 0x9, 0xd35, 0x7f, 0x77, 0x80, 0x8000, 0x0, 0xffffffffffffffff, 0xee00, 0xf26, 0x5}}, {0x4, 0x6, 0x1, 0x2, '\x00'}}, {{0x4, 0x0, 0x8000, 0x800, 0x1ff, 0x200, {0x1, 0x7ff, 0x1, 0x4, 0x2, 0xffffffff00000001, 0xffffffe0, 0x0, 0x1ff, 0x2000, 0x7, 0xffffffffffffffff, 0xee01, 0x0, 0xea}}, {0x3, 0x2, 0x12, 0x7, '/dev/snd/midiC#D#\x00'}}]}, 0x350) bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r14, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00090000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:30 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x3f00000000000000, 0x0, 0x0) 10:22:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000a0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:30 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x800, 0x1ff, 0x0, 0x8000], 0x4, 0x800, 0x0, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x7784, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:30 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000b0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2941.320398][ T5394] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:31 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x4e1c000000000000, 0x0, 0x0) 10:22:31 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x900}, 0x0) [ 2941.385231][ T5394] CPU: 1 PID: 5394 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2941.395624][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2941.405717][ T5394] Call Trace: [ 2941.409027][ T5394] [ 2941.411986][ T5394] dump_stack_lvl+0xd1/0x138 [ 2941.416624][ T5394] dump_header+0x10b/0x85f [ 2941.421087][ T5394] oom_kill_process.cold+0x10/0x15 [ 2941.426253][ T5394] out_of_memory+0x35c/0x14a0 [ 2941.430998][ T5394] ? find_held_lock+0x2d/0x110 [ 2941.435816][ T5394] ? oom_killer_disable+0x280/0x280 [ 2941.441069][ T5394] ? find_held_lock+0x2d/0x110 [ 2941.445890][ T5394] mem_cgroup_out_of_memory+0x206/0x270 [ 2941.451493][ T5394] ? mem_cgroup_margin+0x130/0x130 [ 2941.456674][ T5394] ? lock_downgrade+0x6e0/0x6e0 [ 2941.461589][ T5394] try_charge_memcg+0xefb/0x12f0 [ 2941.466577][ T5394] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2941.472609][ T5394] ? lock_downgrade+0x6e0/0x6e0 [ 2941.477521][ T5394] charge_memcg+0x90/0x3b0 [ 2941.481984][ T5394] __mem_cgroup_charge+0x2b/0x90 [ 2941.486962][ T5394] ? copy_mc_to_kernel+0x3e/0x90 [ 2941.491933][ T5394] do_wp_page+0x7ec/0x3370 [ 2941.496406][ T5394] ? lock_release+0x810/0x810 [ 2941.501127][ T5394] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2941.506553][ T5394] ? do_raw_spin_lock+0x124/0x2b0 [ 2941.511616][ T5394] ? rwlock_bug.part.0+0x90/0x90 [ 2941.516591][ T5394] ? lock_chain_count+0x20/0x20 [ 2941.521484][ T5394] __handle_mm_fault+0x1f58/0x3c90 [ 2941.526649][ T5394] ? vm_iomap_memory+0x190/0x190 [ 2941.531666][ T5394] handle_mm_fault+0x1b6/0x850 [ 2941.536487][ T5394] do_user_addr_fault+0x475/0x1210 [ 2941.541650][ T5394] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2941.547257][ T5394] exc_page_fault+0x98/0x170 [ 2941.551903][ T5394] asm_exc_page_fault+0x26/0x30 [ 2941.556799][ T5394] RIP: 0033:0x7fd887036645 [ 2941.561253][ T5394] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d 7e 1a 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 2d 73 17 00 48 8b 53 10 4c 8d 81 00 10:22:31 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xa00}, 0x0) [ 2941.580906][ T5394] RSP: 002b:00007fd8872cfb70 EFLAGS: 00010206 [ 2941.587285][ T5394] RAX: 0000000000000003 RBX: 00007fd8871abf80 RCX: 00007fd8871a80c0 [ 2941.595297][ T5394] RDX: 00007fd8871a80c0 RSI: 0000000000000080 RDI: 00007fd8871abf80 [ 2941.603319][ T5394] RBP: 00007fd8871abf80 R08: 00007ffda7993080 R09: 0000000000000000 [ 2941.611333][ T5394] R10: 00007fd8872cfc80 R11: 0000000000000246 R12: 00000000002ce0d8 [ 2941.619343][ T5394] R13: 00007fd8872cfc80 R14: 00007fd8871abf80 R15: 0000000000000032 [ 2941.627466][ T5394] [ 2941.701886][ T5394] memory: usage 307164kB, limit 307200kB, failcnt 15573 [ 2941.780638][ T5394] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2941.874044][ T5394] Memory cgroup stats for /syz3: [ 2941.874265][ T5394] anon 2863104 [ 2941.874265][ T5394] file 10280960 [ 2941.874265][ T5394] kernel 301391872 [ 2941.874265][ T5394] kernel_stack 851968 [ 2941.874265][ T5394] pagetables 1667072 [ 2941.874265][ T5394] sec_pagetables 0 [ 2941.874265][ T5394] percpu 5136736 [ 2941.874265][ T5394] sock 0 [ 2941.874265][ T5394] vmalloc 0 [ 2941.874265][ T5394] shmem 10280960 [ 2941.874265][ T5394] zswap 0 [ 2941.874265][ T5394] zswapped 0 [ 2941.874265][ T5394] file_mapped 262144 [ 2941.874265][ T5394] file_dirty 0 [ 2941.874265][ T5394] file_writeback 0 [ 2941.874265][ T5394] swapcached 0 [ 2941.874265][ T5394] anon_thp 0 [ 2941.874265][ T5394] file_thp 0 [ 2941.874265][ T5394] shmem_thp 0 [ 2941.874265][ T5394] inactive_anon 2867200 [ 2941.874265][ T5394] active_anon 10276864 [ 2941.874265][ T5394] inactive_file 0 [ 2941.874265][ T5394] active_file 0 [ 2941.874265][ T5394] unevictable 0 [ 2941.874265][ T5394] slab_reclaimable 279872 [ 2941.874265][ T5394] slab_unreclaimable 293023328 [ 2942.030745][ T5394] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5394,uid=0 10:22:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000bd4000a000f"], 0x28}}, 0x0) 10:22:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000f0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:31 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x800, 0x1ff, 0x0, 0x8000], 0x4, 0x800, 0x0, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x7784, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x800, 0x1ff, 0x0, 0x8000], 0x4, 0x800}) (async) syz_io_uring_setup(0x7784, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:22:31 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x4f1c000000000000, 0x0, 0x0) 10:22:31 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xc00}, 0x0) [ 2942.112290][ T5394] Memory cgroup out of memory: Killed process 5394 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00110000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2942.410042][ T5445] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:32 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xe00}, 0x0) [ 2942.489507][ T5445] CPU: 0 PID: 5445 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2942.499928][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2942.510023][ T5445] Call Trace: [ 2942.513335][ T5445] [ 2942.516291][ T5445] dump_stack_lvl+0xd1/0x138 [ 2942.520931][ T5445] dump_header+0x10b/0x85f [ 2942.525414][ T5445] oom_kill_process.cold+0x10/0x15 [ 2942.530591][ T5445] out_of_memory+0x35c/0x14a0 10:22:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00130000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:32 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x800, 0x1ff, 0x0, 0x8000], 0x4, 0x800, 0x0, 0xffffffffffffffff}) (rerun: 32) r4 = syz_io_uring_setup(0x7784, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2942.535332][ T5445] ? find_held_lock+0x2d/0x110 [ 2942.540145][ T5445] ? oom_killer_disable+0x280/0x280 [ 2942.545401][ T5445] ? find_held_lock+0x2d/0x110 [ 2942.550212][ T5445] mem_cgroup_out_of_memory+0x206/0x270 [ 2942.555804][ T5445] ? mem_cgroup_margin+0x130/0x130 [ 2942.560958][ T5445] ? lock_downgrade+0x6e0/0x6e0 [ 2942.565858][ T5445] try_charge_memcg+0xefb/0x12f0 [ 2942.570841][ T5445] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2942.576869][ T5445] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2942.582653][ T5445] ? lock_downgrade+0x6e0/0x6e0 [ 2942.587553][ T5445] ? lock_downgrade+0x6e0/0x6e0 [ 2942.592467][ T5445] obj_cgroup_charge+0x2af/0x5e0 [ 2942.597461][ T5445] kmem_cache_alloc_lru+0x145/0x760 [ 2942.602703][ T5445] ? sock_alloc_inode+0x27/0x1d0 [ 2942.607705][ T5445] sock_alloc_inode+0x27/0x1d0 [ 2942.612521][ T5445] ? sock_free_inode+0x30/0x30 [ 2942.617364][ T5445] alloc_inode+0x61/0x230 [ 2942.621747][ T5445] new_inode_pseudo+0x17/0x80 [ 2942.626483][ T5445] sock_alloc+0x40/0x260 [ 2942.630789][ T5445] __sock_create+0xbd/0x790 [ 2942.635352][ T5445] __sys_socket+0x133/0x250 10:22:32 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 2942.639907][ T5445] ? __sys_socket_file+0x1f0/0x1f0 [ 2942.645086][ T5445] __x64_sys_socket+0x73/0xb0 [ 2942.649818][ T5445] do_syscall_64+0x39/0xb0 [ 2942.654279][ T5445] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2942.660990][ T5445] RIP: 0033:0x7fd88708c0c9 [ 2942.665440][ T5445] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2942.685093][ T5445] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2942.693551][ T5445] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2942.701559][ T5445] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2942.709565][ T5445] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2942.717574][ T5445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2942.725579][ T5445] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2942.733607][ T5445] [ 2942.871172][ T5445] memory: usage 307200kB, limit 307200kB, failcnt 15653 [ 2942.893343][ T5445] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2942.916389][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2942.920586][ T5445] Memory cgroup stats for /syz3: [ 2942.941029][ T5445] anon 2899968 [ 2942.941029][ T5445] file 10280960 [ 2942.941029][ T5445] kernel 301391872 [ 2942.941029][ T5445] kernel_stack 851968 [ 2942.941029][ T5445] pagetables 1667072 [ 2942.941029][ T5445] sec_pagetables 0 [ 2942.941029][ T5445] percpu 5136736 [ 2942.941029][ T5445] sock 0 [ 2942.941029][ T5445] vmalloc 0 [ 2942.941029][ T5445] shmem 10280960 [ 2942.941029][ T5445] zswap 0 [ 2942.941029][ T5445] zswapped 0 [ 2942.941029][ T5445] file_mapped 262144 [ 2942.941029][ T5445] file_dirty 0 [ 2942.941029][ T5445] file_writeback 0 [ 2942.941029][ T5445] swapcached 0 [ 2942.941029][ T5445] anon_thp 0 [ 2942.941029][ T5445] file_thp 0 [ 2942.941029][ T5445] shmem_thp 0 [ 2942.941029][ T5445] inactive_anon 2904064 [ 2942.941029][ T5445] active_anon 10276864 [ 2942.941029][ T5445] inactive_file 0 [ 2942.941029][ T5445] active_file 0 [ 2942.941029][ T5445] unevictable 0 [ 2942.941029][ T5445] slab_reclaimable 279872 [ 2942.941029][ T5445] slab_unreclaimable 293023328 [ 2943.092626][ T5445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5444,uid=0 10:22:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000000009d8000a000f"], 0x28}}, 0x0) 10:22:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:32 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x6000000000000000, 0x0, 0x0) 10:22:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="001f0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:32 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xec0}, 0x0) 10:22:32 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 2943.149963][ T5445] Memory cgroup out of memory: Killed process 5444 (syz-executor.3) total-vm:54540kB, anon-rss:484kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00200000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:33 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf00}, 0x0) 10:22:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="4e230000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:33 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x6558000000000000, 0x0, 0x0) [ 2943.508663][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:33 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) [ 2943.669279][ T5507] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2943.820364][ T5507] CPU: 1 PID: 5507 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2943.830772][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2943.840870][ T5507] Call Trace: [ 2943.844181][ T5507] [ 2943.847140][ T5507] dump_stack_lvl+0xd1/0x138 [ 2943.851783][ T5507] dump_header+0x10b/0x85f [ 2943.856248][ T5507] oom_kill_process.cold+0x10/0x15 [ 2943.861417][ T5507] out_of_memory+0x35c/0x14a0 [ 2943.866147][ T5507] ? find_held_lock+0x2d/0x110 [ 2943.870954][ T5507] ? oom_killer_disable+0x280/0x280 [ 2943.876200][ T5507] ? find_held_lock+0x2d/0x110 [ 2943.881007][ T5507] mem_cgroup_out_of_memory+0x206/0x270 [ 2943.886605][ T5507] ? mem_cgroup_margin+0x130/0x130 [ 2943.891776][ T5507] ? lock_downgrade+0x6e0/0x6e0 [ 2943.896686][ T5507] try_charge_memcg+0xefb/0x12f0 [ 2943.901666][ T5507] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2943.907683][ T5507] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2943.913447][ T5507] ? lock_downgrade+0x6e0/0x6e0 [ 2943.918341][ T5507] ? lock_downgrade+0x6e0/0x6e0 [ 2943.923244][ T5507] obj_cgroup_charge+0x2af/0x5e0 [ 2943.928224][ T5507] kmem_cache_alloc_lru+0x145/0x760 [ 2943.933446][ T5507] ? sock_alloc_inode+0x27/0x1d0 [ 2943.938428][ T5507] sock_alloc_inode+0x27/0x1d0 [ 2943.943231][ T5507] ? sock_free_inode+0x30/0x30 [ 2943.948028][ T5507] alloc_inode+0x61/0x230 [ 2943.952397][ T5507] new_inode_pseudo+0x17/0x80 [ 2943.957112][ T5507] sock_alloc+0x40/0x260 [ 2943.961393][ T5507] __sock_create+0xbd/0x790 [ 2943.965944][ T5507] __sys_socket+0x133/0x250 [ 2943.970480][ T5507] ? __sys_socket_file+0x1f0/0x1f0 [ 2943.975637][ T5507] __x64_sys_socket+0x73/0xb0 [ 2943.981134][ T5507] do_syscall_64+0x39/0xb0 [ 2943.986142][ T5507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2943.992065][ T5507] RIP: 0033:0x7fd88708c0c9 [ 2943.996507][ T5507] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2944.016159][ T5507] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2944.024624][ T5507] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2944.032641][ T5507] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2944.040635][ T5507] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2944.048615][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2944.056604][ T5507] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2944.064603][ T5507] [ 2944.161611][ T5507] memory: usage 307200kB, limit 307200kB, failcnt 15758 [ 2944.170792][ T5507] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2944.180125][ T5507] Memory cgroup stats for /syz3: [ 2944.180340][ T5507] anon 2899968 [ 2944.180340][ T5507] file 10280960 [ 2944.180340][ T5507] kernel 301391872 [ 2944.180340][ T5507] kernel_stack 851968 [ 2944.180340][ T5507] pagetables 1667072 [ 2944.180340][ T5507] sec_pagetables 0 [ 2944.180340][ T5507] percpu 5136736 [ 2944.180340][ T5507] sock 0 [ 2944.180340][ T5507] vmalloc 0 [ 2944.180340][ T5507] shmem 10280960 [ 2944.180340][ T5507] zswap 0 [ 2944.180340][ T5507] zswapped 0 [ 2944.180340][ T5507] file_mapped 262144 [ 2944.180340][ T5507] file_dirty 0 [ 2944.180340][ T5507] file_writeback 0 [ 2944.180340][ T5507] swapcached 0 [ 2944.180340][ T5507] anon_thp 0 [ 2944.180340][ T5507] file_thp 0 [ 2944.180340][ T5507] shmem_thp 0 [ 2944.180340][ T5507] inactive_anon 2904064 [ 2944.180340][ T5507] active_anon 10276864 [ 2944.180340][ T5507] inactive_file 0 [ 2944.180340][ T5507] active_file 0 [ 2944.180340][ T5507] unevictable 0 [ 2944.180340][ T5507] slab_reclaimable 279872 [ 2944.180340][ T5507] slab_unreclaimable 293023328 10:22:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000bdc000a000f"], 0x28}}, 0x0) 10:22:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00280000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:34 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x47d3}, 0x0) 10:22:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:34 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x8100000000000000, 0x0, 0x0) 10:22:34 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000e40)={0x2, 0x0, [0x0, 0x7f, 0x6e8c9700], &(0x7f0000000e00)}) memfd_secret(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000440)=@newtaction={0x910, 0x30, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{0x374, 0x1, [@m_ife={0x180, 0x1d, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @random="e6c98a4ee622"}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffff289b}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x444}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000001}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x0, 0xffffffffffffffff, 0x3}}}]}, {0xc2, 0x6, "04a176756d042068f3d5ae7063840f5af60fa712d868ae1e60cd3b8b6fe4ce8db163875f9f196511842407d258ce35cb5371b1c70c6619321f5ea26a7d3365cef42bc41da128683ac78785f04d8ad404926f661f4782aaae4810d076214f316f2df4e3f221292a45600f628842b2b2c81c7f4803e10cd282f2b48b08d345fd4ffd8cfa6ac664c419885fe9e299f1def29f4a76c9653609c660b079ed2939c2fbb48a940fbc093c51ec7a8e1b02ec48dea76ee570f35f2f297890fa14fbe1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x118, 0x1c, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x0, 0x40}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xbe, 0x7, 0x1, 0x20000000}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xffffffff, 0x7, 0x62, 0x6}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7fffffff, 0xffffffffffffffff, 0x8, 0x1}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x8, 0xffff, 0x8}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x3, 0x8000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3, 0x20, 0x4}, 0x6a}}]}, {0x26, 0x6, "a0a4bd49a7e1464b980849c27565b24928420444356bf4f0801ba95dea91629a12a8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x50, 0x14, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "9bd47f64ad55d3e65151fa41ec2cc61a"}]}, {0xa, 0x6, "97ab6307c817"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x88, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x3b, 0x6, "c93280c802891c622e3377d08f6b296529c15a86cb1cb12bf5aa4a2e046af891ccb92d60ff9611ecc09da6ff43e6ba2c1d338a7b382a8b"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x588, 0x1, [@m_tunnel_key={0x4c, 0x9, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x13, 0x6, "d9279316d8362f8c8ea992da151a30"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_nat={0x124, 0xf, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0xf458, 0x6c}, @empty, @private=0xa010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1f, 0x0, 0x5, 0x7f}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x6, 0x8, 0xba}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x5, 0x0, 0x9}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x0, 0x4, 0x8a97}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x3, 0x20000000, 0x6, 0x7}, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}]}, {0xa, 0x6, "3e5f08c20905"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_tunnel_key={0xb4, 0xd, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbb22, 0x4, 0x0, 0x1ff, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x800, 0x8, 0x7, 0xd69, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x80}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}]}, {0x16, 0x6, "8cfce70c8744d82d762efee93eed1ccc917b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xdc, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\&\'.\\}$B.,\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x97, 0x6, "127845aa8b24b642682334410efb2fc83f4149dc2d5ad1c5c9b4f27d259e4672e9bcf68659405c4905b4663cd3ab5c6bcce3022816b1c0420250970ce53a9fc4dc23698a4949ddfdfb8230304a64a5ab89de0f88c9da6f7567eaa27961cb2826e70a94ea8fa2dd315cececd56d7ce0441c1533af1f9434c0767c0d33f7ebfe84eff46c1944fc0d1c5f6d29da4ce7798b048280"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x58, 0x12, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff1}}]}, {0x19, 0x6, "6e5c4fe1a413038976eaa14638d6137db3f9d12718"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x17c, 0x1f, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x6, 0xffffffffffffffff, 0x79eb}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x10000000, 0x6, 0x2921}, 0x1}}]}, {0xf7, 0x6, "99478058df0fd80478578f06584735f3c497d2467d97092186c588838eec60adcc3c9831de54e6a45aac248a5f1b42aa16ddc51a3e132d8be15a2cf01a72216ad50c8b9aa00e236a0bea47bf5ddb92f256c4409b077c4755ebaf0aa00f469752f248005b3b60ffeaf48dbad76bb5194c10f06203ad102ce590295a761359eb45a350637846fe065a4fc4035246a70eddd1ea1629b6ea60f0f2edb758845be10cbbaaf0ce1b31cd085334667d822b9978bc7e69d3ec060273ac58b41a9a81f71ef4bd9c425064b90e1d489ba11c02f6d07eb53426cf328a4161e724ddeef1a63428e5aa73b47716382891bbd5617444ace9f80b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xb0, 0x1d, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x67, 0x6, "c43fa54296ad372608954f49f0691e7803f417cf6af6388bea0c91cd1466a54f8a7a893f8b2a6d21007a7cb67d7d27f50ac76a48d61f03fada491d2fc06fce5201ff023909492363783b1c1f6f5aa1f231088c49877d44f00b3b295925c1d6a3122eb6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x910}, 0x1, 0x0, 0x0, 0x48090}, 0x4000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x10, 0x0, r3, 0x0, &(0x7f00000002c0)="90007b8959e118f2c74527c591480baf3f82624cb3c7fe39b3b480e64e9bf4471a29b9fbbaa692ea5a1900ec8af0f0db57990530add8df7c20219b106e12807713c540eb8afae75dbca4c7ad9919f61b931c600490f7f87c3b394a40d73783fb1abdec7102c8b3ff1dc9c03f08c7ef880db1a8b68cfc73c9523b8c12962a954baff49b983e129fd9e893ba8633708ef0812f2d7e84e48d5d73cd1f9f690e1b94d06f3bc2740fce7e60668cc2e5e2a6a778", 0xb1, 0x40821}, 0x6) r4 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x104) r5 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f00000001c0), 0x28880, 0x0) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x200000d, 0x12, r4, 0x60d0f000) r7 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000b0f00000004000000000000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000001400020008000800000000000800060000000000"], 0x48}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0x3, &(0x7f0000000e00)=0x1000, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r12, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r12, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xe, &(0x7f0000000ec0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xca}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], &(0x7f0000000e80)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f80)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000fc0)={0x1, 0xd, 0x2, 0x410}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0xffffffffffffffff, r6, r12]}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r7, 0x2ff, 0xfffffffc, 0x11, 0x0, 0x0) [ 2944.309043][ T5507] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5497,uid=0 [ 2944.330263][ T5507] Memory cgroup out of memory: Killed process 5497 (syz-executor.3) total-vm:54540kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00480000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:34 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x5865}, 0x0) [ 2944.516148][ T5538] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2944.581160][ T5537] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2944.598769][ T5537] CPU: 1 PID: 5537 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2944.609151][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2944.619211][ T5537] Call Trace: [ 2944.622487][ T5537] [ 2944.625421][ T5537] dump_stack_lvl+0xd1/0x138 [ 2944.630030][ T5537] dump_header+0x10b/0x85f [ 2944.634465][ T5537] oom_kill_process.cold+0x10/0x15 [ 2944.639592][ T5537] out_of_memory+0x35c/0x14a0 [ 2944.644284][ T5537] ? find_held_lock+0x2d/0x110 [ 2944.649057][ T5537] ? oom_killer_disable+0x280/0x280 [ 2944.654269][ T5537] ? find_held_lock+0x2d/0x110 [ 2944.659043][ T5537] mem_cgroup_out_of_memory+0x206/0x270 [ 2944.664598][ T5537] ? mem_cgroup_margin+0x130/0x130 [ 2944.669714][ T5537] ? lock_downgrade+0x6e0/0x6e0 [ 2944.674579][ T5537] try_charge_memcg+0xefb/0x12f0 [ 2944.679522][ T5537] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2944.685505][ T5537] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2944.691232][ T5537] ? lock_downgrade+0x6e0/0x6e0 [ 2944.696085][ T5537] ? lock_downgrade+0x6e0/0x6e0 [ 2944.700946][ T5537] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2944.706494][ T5537] __alloc_pages+0x1f3/0x5b0 [ 2944.711087][ T5537] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2944.717873][ T5537] alloc_pages+0x1aa/0x270 [ 2944.722311][ T5537] __pmd_alloc+0x3f/0x5d0 [ 2944.726649][ T5537] __handle_mm_fault+0x932/0x3c90 [ 2944.731685][ T5537] ? vm_iomap_memory+0x190/0x190 [ 2944.736649][ T5537] handle_mm_fault+0x1b6/0x850 [ 2944.741423][ T5537] do_user_addr_fault+0x475/0x1210 [ 2944.746542][ T5537] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2944.752098][ T5537] exc_page_fault+0x98/0x170 [ 2944.756697][ T5537] asm_exc_page_fault+0x26/0x30 [ 2944.761547][ T5537] RIP: 0033:0x7fd887086c25 [ 2944.765960][ T5537] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2944.785565][ T5537] RSP: 002b:00007fd8872cfb98 EFLAGS: 00010202 [ 2944.791630][ T5537] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2944.799598][ T5537] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 2944.807565][ T5537] RBP: 00007fd8872cfc58 R08: 00007fd887000000 R09: 00007fd886c00000 [ 2944.815536][ T5537] R10: 00007fd886c000c8 R11: 000000000008ce36 R12: 00000000002cede6 [ 2944.823509][ T5537] R13: 00007fd8872cfc80 R14: 00007fd8872cfca0 R15: 0000000000000032 [ 2944.831492][ T5537] 10:22:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="004c0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:34 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) (async, rerun: 64) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 64) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000e40)={0x2, 0x0, [0x0, 0x7f, 0x6e8c9700], &(0x7f0000000e00)}) memfd_secret(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000440)=@newtaction={0x910, 0x30, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{0x374, 0x1, [@m_ife={0x180, 0x1d, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @random="e6c98a4ee622"}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffff289b}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x444}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000001}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x0, 0xffffffffffffffff, 0x3}}}]}, {0xc2, 0x6, "04a176756d042068f3d5ae7063840f5af60fa712d868ae1e60cd3b8b6fe4ce8db163875f9f196511842407d258ce35cb5371b1c70c6619321f5ea26a7d3365cef42bc41da128683ac78785f04d8ad404926f661f4782aaae4810d076214f316f2df4e3f221292a45600f628842b2b2c81c7f4803e10cd282f2b48b08d345fd4ffd8cfa6ac664c419885fe9e299f1def29f4a76c9653609c660b079ed2939c2fbb48a940fbc093c51ec7a8e1b02ec48dea76ee570f35f2f297890fa14fbe1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x118, 0x1c, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x0, 0x40}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xbe, 0x7, 0x1, 0x20000000}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xffffffff, 0x7, 0x62, 0x6}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7fffffff, 0xffffffffffffffff, 0x8, 0x1}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x8, 0xffff, 0x8}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x3, 0x8000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3, 0x20, 0x4}, 0x6a}}]}, {0x26, 0x6, "a0a4bd49a7e1464b980849c27565b24928420444356bf4f0801ba95dea91629a12a8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x50, 0x14, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "9bd47f64ad55d3e65151fa41ec2cc61a"}]}, {0xa, 0x6, "97ab6307c817"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x88, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x3b, 0x6, "c93280c802891c622e3377d08f6b296529c15a86cb1cb12bf5aa4a2e046af891ccb92d60ff9611ecc09da6ff43e6ba2c1d338a7b382a8b"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x588, 0x1, [@m_tunnel_key={0x4c, 0x9, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x13, 0x6, "d9279316d8362f8c8ea992da151a30"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_nat={0x124, 0xf, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0xf458, 0x6c}, @empty, @private=0xa010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1f, 0x0, 0x5, 0x7f}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x6, 0x8, 0xba}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x5, 0x0, 0x9}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x0, 0x4, 0x8a97}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x3, 0x20000000, 0x6, 0x7}, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}]}, {0xa, 0x6, "3e5f08c20905"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_tunnel_key={0xb4, 0xd, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbb22, 0x4, 0x0, 0x1ff, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x800, 0x8, 0x7, 0xd69, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x80}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}]}, {0x16, 0x6, "8cfce70c8744d82d762efee93eed1ccc917b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xdc, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\&\'.\\}$B.,\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x97, 0x6, "127845aa8b24b642682334410efb2fc83f4149dc2d5ad1c5c9b4f27d259e4672e9bcf68659405c4905b4663cd3ab5c6bcce3022816b1c0420250970ce53a9fc4dc23698a4949ddfdfb8230304a64a5ab89de0f88c9da6f7567eaa27961cb2826e70a94ea8fa2dd315cececd56d7ce0441c1533af1f9434c0767c0d33f7ebfe84eff46c1944fc0d1c5f6d29da4ce7798b048280"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x58, 0x12, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff1}}]}, {0x19, 0x6, "6e5c4fe1a413038976eaa14638d6137db3f9d12718"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x17c, 0x1f, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x6, 0xffffffffffffffff, 0x79eb}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x10000000, 0x6, 0x2921}, 0x1}}]}, {0xf7, 0x6, "99478058df0fd80478578f06584735f3c497d2467d97092186c588838eec60adcc3c9831de54e6a45aac248a5f1b42aa16ddc51a3e132d8be15a2cf01a72216ad50c8b9aa00e236a0bea47bf5ddb92f256c4409b077c4755ebaf0aa00f469752f248005b3b60ffeaf48dbad76bb5194c10f06203ad102ce590295a761359eb45a350637846fe065a4fc4035246a70eddd1ea1629b6ea60f0f2edb758845be10cbbaaf0ce1b31cd085334667d822b9978bc7e69d3ec060273ac58b41a9a81f71ef4bd9c425064b90e1d489ba11c02f6d07eb53426cf328a4161e724ddeef1a63428e5aa73b47716382891bbd5617444ace9f80b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xb0, 0x1d, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x67, 0x6, "c43fa54296ad372608954f49f0691e7803f417cf6af6388bea0c91cd1466a54f8a7a893f8b2a6d21007a7cb67d7d27f50ac76a48d61f03fada491d2fc06fce5201ff023909492363783b1c1f6f5aa1f231088c49877d44f00b3b295925c1d6a3122eb6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x910}, 0x1, 0x0, 0x0, 0x48090}, 0x4000000) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x10, 0x0, r3, 0x0, &(0x7f00000002c0)="90007b8959e118f2c74527c591480baf3f82624cb3c7fe39b3b480e64e9bf4471a29b9fbbaa692ea5a1900ec8af0f0db57990530add8df7c20219b106e12807713c540eb8afae75dbca4c7ad9919f61b931c600490f7f87c3b394a40d73783fb1abdec7102c8b3ff1dc9c03f08c7ef880db1a8b68cfc73c9523b8c12962a954baff49b983e129fd9e893ba8633708ef0812f2d7e84e48d5d73cd1f9f690e1b94d06f3bc2740fce7e60668cc2e5e2a6a778", 0xb1, 0x40821}, 0x6) (async, rerun: 32) r4 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x104) (async, rerun: 32) r5 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f00000001c0), 0x28880, 0x0) r6 = dup(r5) (async, rerun: 32) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x200000d, 0x12, r4, 0x60d0f000) (async, rerun: 32) r7 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) (async) r10 = socket(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000b0f00000004000000000000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000001400020008000800000000000800060000000000"], 0x48}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0x3, &(0x7f0000000e00)=0x1000, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r12, &(0x7f0000000080)={0x10}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r12, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xe, &(0x7f0000000ec0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xca}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], &(0x7f0000000e80)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f80)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000fc0)={0x1, 0xd, 0x2, 0x410}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0xffffffffffffffff, r6, r12]}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r7, 0x2ff, 0xfffffffc, 0x11, 0x0, 0x0) 10:22:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="234e0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2945.096285][ T5537] memory: usage 307200kB, limit 307200kB, failcnt 15867 [ 2945.152381][ T5537] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2945.171919][ T5537] Memory cgroup stats for /syz3: [ 2945.172149][ T5537] anon 2899968 [ 2945.172149][ T5537] file 10280960 [ 2945.172149][ T5537] kernel 301391872 [ 2945.172149][ T5537] kernel_stack 851968 [ 2945.172149][ T5537] pagetables 1667072 [ 2945.172149][ T5537] sec_pagetables 0 [ 2945.172149][ T5537] percpu 5136736 [ 2945.172149][ T5537] sock 0 [ 2945.172149][ T5537] vmalloc 0 [ 2945.172149][ T5537] shmem 10280960 [ 2945.172149][ T5537] zswap 0 [ 2945.172149][ T5537] zswapped 0 [ 2945.172149][ T5537] file_mapped 262144 [ 2945.172149][ T5537] file_dirty 0 [ 2945.172149][ T5537] file_writeback 0 [ 2945.172149][ T5537] swapcached 0 [ 2945.172149][ T5537] anon_thp 0 [ 2945.172149][ T5537] file_thp 0 [ 2945.172149][ T5537] shmem_thp 0 [ 2945.172149][ T5537] inactive_anon 2904064 [ 2945.172149][ T5537] active_anon 10276864 [ 2945.172149][ T5537] inactive_file 0 [ 2945.172149][ T5537] active_file 0 [ 2945.172149][ T5537] unevictable 0 [ 2945.172149][ T5537] slab_reclaimable 279872 [ 2945.172149][ T5537] slab_unreclaimable 293023328 [ 2945.295485][ T5537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5537,uid=0 [ 2945.331110][ T5537] Memory cgroup out of memory: Killed process 5537 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000ddc000a000f"], 0x28}}, 0x0) 10:22:35 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x6000}, 0x0) 10:22:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000e40)={0x2, 0x0, [0x0, 0x7f, 0x6e8c9700], &(0x7f0000000e00)}) (async) memfd_secret(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000440)=@newtaction={0x910, 0x30, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{0x374, 0x1, [@m_ife={0x180, 0x1d, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @random="e6c98a4ee622"}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffff289b}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x444}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000001}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x0, 0xffffffffffffffff, 0x3}}}]}, {0xc2, 0x6, "04a176756d042068f3d5ae7063840f5af60fa712d868ae1e60cd3b8b6fe4ce8db163875f9f196511842407d258ce35cb5371b1c70c6619321f5ea26a7d3365cef42bc41da128683ac78785f04d8ad404926f661f4782aaae4810d076214f316f2df4e3f221292a45600f628842b2b2c81c7f4803e10cd282f2b48b08d345fd4ffd8cfa6ac664c419885fe9e299f1def29f4a76c9653609c660b079ed2939c2fbb48a940fbc093c51ec7a8e1b02ec48dea76ee570f35f2f297890fa14fbe1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x118, 0x1c, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x4, 0x0, 0x40}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xbe, 0x7, 0x1, 0x20000000}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xffffffff, 0x7, 0x62, 0x6}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7fffffff, 0xffffffffffffffff, 0x8, 0x1}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x8, 0xffff, 0x8}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x3, 0x8000}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3, 0x20, 0x4}, 0x6a}}]}, {0x26, 0x6, "a0a4bd49a7e1464b980849c27565b24928420444356bf4f0801ba95dea91629a12a8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x50, 0x14, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "9bd47f64ad55d3e65151fa41ec2cc61a"}]}, {0xa, 0x6, "97ab6307c817"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x88, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x3b, 0x6, "c93280c802891c622e3377d08f6b296529c15a86cb1cb12bf5aa4a2e046af891ccb92d60ff9611ecc09da6ff43e6ba2c1d338a7b382a8b"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, {0x588, 0x1, [@m_tunnel_key={0x4c, 0x9, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x13, 0x6, "d9279316d8362f8c8ea992da151a30"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_nat={0x124, 0xf, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0xf458, 0x6c}, @empty, @private=0xa010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1f, 0x0, 0x5, 0x7f}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x6, 0x8, 0xba}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x5, 0x0, 0x9}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x0, 0x4, 0x8a97}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x3, 0x20000000, 0x6, 0x7}, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}]}, {0xa, 0x6, "3e5f08c20905"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_tunnel_key={0xb4, 0xd, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbb22, 0x4, 0x0, 0x1ff, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x800, 0x8, 0x7, 0xd69, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x80}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x400}]}, {0x16, 0x6, "8cfce70c8744d82d762efee93eed1ccc917b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0xdc, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\&\'.\\}$B.,\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x97, 0x6, "127845aa8b24b642682334410efb2fc83f4149dc2d5ad1c5c9b4f27d259e4672e9bcf68659405c4905b4663cd3ab5c6bcce3022816b1c0420250970ce53a9fc4dc23698a4949ddfdfb8230304a64a5ab89de0f88c9da6f7567eaa27961cb2826e70a94ea8fa2dd315cececd56d7ce0441c1533af1f9434c0767c0d33f7ebfe84eff46c1944fc0d1c5f6d29da4ce7798b048280"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x58, 0x12, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff1}}]}, {0x19, 0x6, "6e5c4fe1a413038976eaa14638d6137db3f9d12718"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x17c, 0x1f, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x6, 0xffffffffffffffff, 0x79eb}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x2, 0x10000000, 0x6, 0x2921}, 0x1}}]}, {0xf7, 0x6, "99478058df0fd80478578f06584735f3c497d2467d97092186c588838eec60adcc3c9831de54e6a45aac248a5f1b42aa16ddc51a3e132d8be15a2cf01a72216ad50c8b9aa00e236a0bea47bf5ddb92f256c4409b077c4755ebaf0aa00f469752f248005b3b60ffeaf48dbad76bb5194c10f06203ad102ce590295a761359eb45a350637846fe065a4fc4035246a70eddd1ea1629b6ea60f0f2edb758845be10cbbaaf0ce1b31cd085334667d822b9978bc7e69d3ec060273ac58b41a9a81f71ef4bd9c425064b90e1d489ba11c02f6d07eb53426cf328a4161e724ddeef1a63428e5aa73b47716382891bbd5617444ace9f80b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xb0, 0x1d, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x67, 0x6, "c43fa54296ad372608954f49f0691e7803f417cf6af6388bea0c91cd1466a54f8a7a893f8b2a6d21007a7cb67d7d27f50ac76a48d61f03fada491d2fc06fce5201ff023909492363783b1c1f6f5aa1f231088c49877d44f00b3b295925c1d6a3122eb6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x910}, 0x1, 0x0, 0x0, 0x48090}, 0x4000000) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SEND={0x1a, 0x10, 0x0, r3, 0x0, &(0x7f00000002c0)="90007b8959e118f2c74527c591480baf3f82624cb3c7fe39b3b480e64e9bf4471a29b9fbbaa692ea5a1900ec8af0f0db57990530add8df7c20219b106e12807713c540eb8afae75dbca4c7ad9919f61b931c600490f7f87c3b394a40d73783fb1abdec7102c8b3ff1dc9c03f08c7ef880db1a8b68cfc73c9523b8c12962a954baff49b983e129fd9e893ba8633708ef0812f2d7e84e48d5d73cd1f9f690e1b94d06f3bc2740fce7e60668cc2e5e2a6a778", 0xb1, 0x40821}, 0x6) r4 = openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x104) r5 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f00000001c0), 0x28880, 0x0) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x200000d, 0x12, r4, 0x60d0f000) r7 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) (async) r10 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000b0f00000004000000000000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000001400020008000800000000000800060000000000"], 0x48}}, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0x3, &(0x7f0000000e00)=0x1000, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r12, &(0x7f0000000080)={0x10}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r12, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xe, &(0x7f0000000ec0)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0xca}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], &(0x7f0000000e80)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000f80)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000fc0)={0x1, 0xd, 0x2, 0x410}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0xffffffffffffffff, r6, r12]}, 0x80) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r7, 0x2ff, 0xfffffffc, 0x11, 0x0, 0x0) 10:22:35 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x88a8ffff00000000, 0x0, 0x0) 10:22:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00600000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="a6650000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2945.528819][ T5581] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:35 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7786, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x401}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40000}, 0x80, 0x0}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x7) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00680000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2945.641874][ T5593] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2945.739074][ T5593] CPU: 1 PID: 5593 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2945.749491][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2945.759585][ T5593] Call Trace: [ 2945.762899][ T5593] [ 2945.765859][ T5593] dump_stack_lvl+0xd1/0x138 [ 2945.770592][ T5593] dump_header+0x10b/0x85f [ 2945.775071][ T5593] oom_kill_process.cold+0x10/0x15 [ 2945.780250][ T5593] out_of_memory+0x35c/0x14a0 [ 2945.785001][ T5593] ? find_held_lock+0x2d/0x110 [ 2945.789816][ T5593] ? oom_killer_disable+0x280/0x280 [ 2945.795075][ T5593] ? find_held_lock+0x2d/0x110 [ 2945.799890][ T5593] mem_cgroup_out_of_memory+0x206/0x270 [ 2945.805490][ T5593] ? mem_cgroup_margin+0x130/0x130 [ 2945.810646][ T5593] ? lock_downgrade+0x6e0/0x6e0 [ 2945.815555][ T5593] try_charge_memcg+0xefb/0x12f0 [ 2945.820544][ T5593] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2945.826572][ T5593] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2945.832357][ T5593] ? lock_downgrade+0x6e0/0x6e0 10:22:35 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x6558}, 0x0) 10:22:35 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0xc3ffffff00000000, 0x0, 0x0) 10:22:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="006c0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2945.837268][ T5593] ? lock_downgrade+0x6e0/0x6e0 [ 2945.842186][ T5593] obj_cgroup_charge+0x2af/0x5e0 [ 2945.847199][ T5593] kmem_cache_alloc_lru+0x145/0x760 [ 2945.852437][ T5593] ? sock_alloc_inode+0x27/0x1d0 [ 2945.857427][ T5593] sock_alloc_inode+0x27/0x1d0 [ 2945.862233][ T5593] ? sock_free_inode+0x30/0x30 [ 2945.867038][ T5593] alloc_inode+0x61/0x230 [ 2945.871413][ T5593] new_inode_pseudo+0x17/0x80 [ 2945.876133][ T5593] sock_alloc+0x40/0x260 [ 2945.880417][ T5593] __sock_create+0xbd/0x790 [ 2945.884971][ T5593] __sys_socket+0x133/0x250 [ 2945.889520][ T5593] ? __sys_socket_file+0x1f0/0x1f0 [ 2945.894778][ T5593] __x64_sys_socket+0x73/0xb0 [ 2945.899508][ T5593] do_syscall_64+0x39/0xb0 [ 2945.903967][ T5593] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2945.909894][ T5593] RIP: 0033:0x7fd88708c0c9 [ 2945.914331][ T5593] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2945.933986][ T5593] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2945.942448][ T5593] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2945.950472][ T5593] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2945.958661][ T5593] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2945.966682][ T5593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2945.974710][ T5593] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2945.982745][ T5593] [ 2946.045303][ T5593] memory: usage 307200kB, limit 307200kB, failcnt 15951 [ 2946.080612][ T5593] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2946.100092][ T5593] Memory cgroup stats for /syz3: [ 2946.100334][ T5593] anon 2899968 [ 2946.100334][ T5593] file 10280960 [ 2946.100334][ T5593] kernel 301391872 [ 2946.100334][ T5593] kernel_stack 851968 [ 2946.100334][ T5593] pagetables 1667072 [ 2946.100334][ T5593] sec_pagetables 0 [ 2946.100334][ T5593] percpu 5136736 [ 2946.100334][ T5593] sock 0 [ 2946.100334][ T5593] vmalloc 0 [ 2946.100334][ T5593] shmem 10280960 [ 2946.100334][ T5593] zswap 0 [ 2946.100334][ T5593] zswapped 0 [ 2946.100334][ T5593] file_mapped 262144 [ 2946.100334][ T5593] file_dirty 0 [ 2946.100334][ T5593] file_writeback 0 [ 2946.100334][ T5593] swapcached 0 [ 2946.100334][ T5593] anon_thp 0 [ 2946.100334][ T5593] file_thp 0 [ 2946.100334][ T5593] shmem_thp 0 [ 2946.100334][ T5593] inactive_anon 2904064 [ 2946.100334][ T5593] active_anon 10276864 [ 2946.100334][ T5593] inactive_file 0 [ 2946.100334][ T5593] active_file 0 [ 2946.100334][ T5593] unevictable 0 [ 2946.100334][ T5593] slab_reclaimable 279872 [ 2946.100334][ T5593] slab_unreclaimable 293023328 [ 2946.326518][ T5593] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5580,uid=0 [ 2946.357135][ T5593] Memory cgroup out of memory: Killed process 5580 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000be0000a000f"], 0x28}}, 0x0) 10:22:36 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0xe51b000000000000, 0x0, 0x0) 10:22:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00740000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:36 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x8100}, 0x0) 10:22:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="007a0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:36 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7786, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x401}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40000}, 0x80, 0x0}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x7) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7786, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x401}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40000}, 0x80, 0x0}}], 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x7) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:22:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="65a60000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:36 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0xffffffff00000000, 0x0, 0x0) 10:22:36 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xc00e}, 0x0) 10:22:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00f00000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2946.800611][ T5627] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2947.015833][ T5627] CPU: 0 PID: 5627 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2947.026240][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2947.036334][ T5627] Call Trace: [ 2947.039641][ T5627] [ 2947.042606][ T5627] dump_stack_lvl+0xd1/0x138 [ 2947.047254][ T5627] dump_header+0x10b/0x85f [ 2947.051708][ T5627] oom_kill_process.cold+0x10/0x15 [ 2947.056861][ T5627] out_of_memory+0x35c/0x14a0 [ 2947.061594][ T5627] ? find_held_lock+0x2d/0x110 [ 2947.066407][ T5627] ? oom_killer_disable+0x280/0x280 [ 2947.071659][ T5627] ? find_held_lock+0x2d/0x110 [ 2947.076485][ T5627] mem_cgroup_out_of_memory+0x206/0x270 [ 2947.082076][ T5627] ? mem_cgroup_margin+0x130/0x130 [ 2947.087228][ T5627] ? lock_downgrade+0x6e0/0x6e0 [ 2947.092115][ T5627] try_charge_memcg+0xefb/0x12f0 [ 2947.097070][ T5627] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2947.103054][ T5627] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2947.108788][ T5627] ? lock_downgrade+0x6e0/0x6e0 [ 2947.113640][ T5627] ? lock_downgrade+0x6e0/0x6e0 [ 2947.118500][ T5627] obj_cgroup_charge+0x2af/0x5e0 [ 2947.123452][ T5627] kmem_cache_alloc_lru+0x145/0x760 [ 2947.128673][ T5627] ? sock_alloc_inode+0x27/0x1d0 [ 2947.133652][ T5627] sock_alloc_inode+0x27/0x1d0 [ 2947.138437][ T5627] ? sock_free_inode+0x30/0x30 [ 2947.143220][ T5627] alloc_inode+0x61/0x230 [ 2947.147569][ T5627] new_inode_pseudo+0x17/0x80 [ 2947.152258][ T5627] sock_alloc+0x40/0x260 [ 2947.156514][ T5627] __sock_create+0xbd/0x790 [ 2947.161033][ T5627] __sys_socket+0x133/0x250 [ 2947.165542][ T5627] ? __sys_socket_file+0x1f0/0x1f0 [ 2947.170666][ T5627] __x64_sys_socket+0x73/0xb0 [ 2947.175351][ T5627] do_syscall_64+0x39/0xb0 [ 2947.179787][ T5627] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2947.185682][ T5627] RIP: 0033:0x7fd88708c0c9 [ 2947.190098][ T5627] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2947.209711][ T5627] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2947.218127][ T5627] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2947.226095][ T5627] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2947.234060][ T5627] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2947.242029][ T5627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2947.249996][ T5627] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2947.257981][ T5627] [ 2947.368659][ T5627] memory: usage 307200kB, limit 307200kB, failcnt 16059 [ 2947.380022][ T5627] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2947.400756][ T5627] Memory cgroup stats for /syz3: [ 2947.401210][ T5627] anon 2899968 [ 2947.401210][ T5627] file 10280960 [ 2947.401210][ T5627] kernel 301391872 [ 2947.401210][ T5627] kernel_stack 851968 [ 2947.401210][ T5627] pagetables 1667072 [ 2947.401210][ T5627] sec_pagetables 0 [ 2947.401210][ T5627] percpu 5136736 [ 2947.401210][ T5627] sock 0 [ 2947.401210][ T5627] vmalloc 0 [ 2947.401210][ T5627] shmem 10280960 [ 2947.401210][ T5627] zswap 0 [ 2947.401210][ T5627] zswapped 0 [ 2947.401210][ T5627] file_mapped 262144 [ 2947.401210][ T5627] file_dirty 0 [ 2947.401210][ T5627] file_writeback 0 [ 2947.401210][ T5627] swapcached 0 [ 2947.401210][ T5627] anon_thp 0 [ 2947.401210][ T5627] file_thp 0 [ 2947.401210][ T5627] shmem_thp 0 [ 2947.401210][ T5627] inactive_anon 2904064 [ 2947.401210][ T5627] active_anon 10276864 [ 2947.401210][ T5627] inactive_file 0 [ 2947.401210][ T5627] active_file 0 [ 2947.401210][ T5627] unevictable 0 [ 2947.401210][ T5627] slab_reclaimable 279872 [ 2947.401210][ T5627] slab_unreclaimable 293023328 10:22:37 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0xfffffffffffff000, 0x0, 0x0) 10:22:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000de0000a000f"], 0x28}}, 0x0) 10:22:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00400300ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:37 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xd347}, 0x0) 10:22:37 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7786, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x401}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40000}, 0x80, 0x0}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x7) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2947.569444][ T5627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5625,uid=0 [ 2947.591275][ T5627] Memory cgroup out of memory: Killed process 5625 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000500ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:37 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) 10:22:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:37 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf000}, 0x0) [ 2947.940297][ T5664] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00002800ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:37 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000180)={0x55ca, 0x1, @name="3941765fdd41837492f7cb749f295d16013d87a96bdb8b404fbb493a77cd2184"}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2948.029990][ T5664] CPU: 0 PID: 5664 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2948.040390][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2948.050450][ T5664] Call Trace: [ 2948.053727][ T5664] [ 2948.056658][ T5664] dump_stack_lvl+0xd1/0x138 [ 2948.061263][ T5664] dump_header+0x10b/0x85f [ 2948.065695][ T5664] oom_kill_process.cold+0x10/0x15 [ 2948.070826][ T5664] out_of_memory+0x35c/0x14a0 [ 2948.075522][ T5664] ? find_held_lock+0x2d/0x110 [ 2948.080296][ T5664] ? oom_killer_disable+0x280/0x280 [ 2948.085521][ T5664] ? find_held_lock+0x2d/0x110 [ 2948.090331][ T5664] mem_cgroup_out_of_memory+0x206/0x270 [ 2948.095920][ T5664] ? mem_cgroup_margin+0x130/0x130 [ 2948.101049][ T5664] ? lock_downgrade+0x6e0/0x6e0 [ 2948.105919][ T5664] try_charge_memcg+0xefb/0x12f0 [ 2948.110871][ T5664] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2948.116851][ T5664] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2948.122588][ T5664] ? lock_downgrade+0x6e0/0x6e0 [ 2948.127440][ T5664] ? lock_downgrade+0x6e0/0x6e0 [ 2948.132302][ T5664] obj_cgroup_charge+0x2af/0x5e0 [ 2948.137277][ T5664] kmem_cache_alloc_lru+0x145/0x760 [ 2948.142826][ T5664] ? sock_alloc_inode+0x27/0x1d0 [ 2948.147786][ T5664] sock_alloc_inode+0x27/0x1d0 [ 2948.152557][ T5664] ? sock_free_inode+0x30/0x30 [ 2948.157328][ T5664] alloc_inode+0x61/0x230 [ 2948.161674][ T5664] new_inode_pseudo+0x17/0x80 [ 2948.167054][ T5664] sock_alloc+0x40/0x260 [ 2948.171485][ T5664] __sock_create+0xbd/0x790 [ 2948.176001][ T5664] __sys_socket+0x133/0x250 [ 2948.180520][ T5664] ? __sys_socket_file+0x1f0/0x1f0 [ 2948.185646][ T5664] __x64_sys_socket+0x73/0xb0 [ 2948.190335][ T5664] do_syscall_64+0x39/0xb0 [ 2948.194770][ T5664] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2948.200669][ T5664] RIP: 0033:0x7fd88708c0c9 [ 2948.205690][ T5664] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2948.225326][ T5664] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2948.233752][ T5664] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2948.241771][ T5664] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2948.249751][ T5664] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2948.257722][ T5664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2948.265692][ T5664] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2948.273679][ T5664] [ 2948.402423][ T5664] memory: usage 307200kB, limit 307200kB, failcnt 16140 [ 2948.497137][ T5664] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2948.517502][ T5664] Memory cgroup stats for /syz3: [ 2948.517824][ T5664] anon 2899968 [ 2948.517824][ T5664] file 10280960 [ 2948.517824][ T5664] kernel 301375488 [ 2948.517824][ T5664] kernel_stack 851968 [ 2948.517824][ T5664] pagetables 1667072 [ 2948.517824][ T5664] sec_pagetables 0 [ 2948.517824][ T5664] percpu 5136672 [ 2948.517824][ T5664] sock 0 [ 2948.517824][ T5664] vmalloc 0 [ 2948.517824][ T5664] shmem 10280960 [ 2948.517824][ T5664] zswap 0 [ 2948.517824][ T5664] zswapped 0 [ 2948.517824][ T5664] file_mapped 262144 [ 2948.517824][ T5664] file_dirty 0 [ 2948.517824][ T5664] file_writeback 0 [ 2948.517824][ T5664] swapcached 0 [ 2948.517824][ T5664] anon_thp 0 [ 2948.517824][ T5664] file_thp 0 [ 2948.517824][ T5664] shmem_thp 0 [ 2948.517824][ T5664] inactive_anon 2904064 [ 2948.517824][ T5664] active_anon 10276864 [ 2948.517824][ T5664] inactive_file 0 10:22:38 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x3) 10:22:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00034000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2948.517824][ T5664] active_file 0 [ 2948.517824][ T5664] unevictable 0 [ 2948.517824][ T5664] slab_reclaimable 279872 [ 2948.517824][ T5664] slab_unreclaimable 293011848 [ 2948.805292][ T5664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5662,uid=0 10:22:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000be4000a000f"], 0x28}}, 0x0) 10:22:38 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x34000}, 0x0) 10:22:38 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000180)={0x55ca, 0x1, @name="3941765fdd41837492f7cb749f295d16013d87a96bdb8b404fbb493a77cd2184"}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000180)={0x55ca, 0x1, @name="3941765fdd41837492f7cb749f295d16013d87a96bdb8b404fbb493a77cd2184"}) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:22:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="fffff000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:38 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x4) [ 2948.856733][ T5664] Memory cgroup out of memory: Killed process 5662 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000001ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:38 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000002ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2949.186644][ T5703] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2949.236023][ T5703] CPU: 1 PID: 5703 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2949.246437][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2949.256530][ T5703] Call Trace: [ 2949.259876][ T5703] [ 2949.262849][ T5703] dump_stack_lvl+0xd1/0x138 [ 2949.267497][ T5703] dump_header+0x10b/0x85f [ 2949.271977][ T5703] oom_kill_process.cold+0x10/0x15 [ 2949.277160][ T5703] out_of_memory+0x35c/0x14a0 10:22:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2949.281904][ T5703] ? find_held_lock+0x2d/0x110 [ 2949.286727][ T5703] ? oom_killer_disable+0x280/0x280 [ 2949.291989][ T5703] ? find_held_lock+0x2d/0x110 [ 2949.296803][ T5703] mem_cgroup_out_of_memory+0x206/0x270 [ 2949.302399][ T5703] ? mem_cgroup_margin+0x130/0x130 [ 2949.307561][ T5703] ? lock_downgrade+0x6e0/0x6e0 [ 2949.312466][ T5703] try_charge_memcg+0xefb/0x12f0 [ 2949.317463][ T5703] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2949.323493][ T5703] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2949.329288][ T5703] ? lock_downgrade+0x6e0/0x6e0 [ 2949.334211][ T5703] ? lock_downgrade+0x6e0/0x6e0 [ 2949.339136][ T5703] obj_cgroup_charge+0x2af/0x5e0 [ 2949.344131][ T5703] kmem_cache_alloc_lru+0x145/0x760 [ 2949.349374][ T5703] ? sock_alloc_inode+0x27/0x1d0 [ 2949.354367][ T5703] sock_alloc_inode+0x27/0x1d0 [ 2949.360153][ T5703] ? sock_free_inode+0x30/0x30 [ 2949.364962][ T5703] alloc_inode+0x61/0x230 [ 2949.369356][ T5703] new_inode_pseudo+0x17/0x80 [ 2949.374084][ T5703] sock_alloc+0x40/0x260 [ 2949.378384][ T5703] __sock_create+0xbd/0x790 [ 2949.382930][ T5703] __sys_socket+0x133/0x250 [ 2949.388252][ T5703] ? __sys_socket_file+0x1f0/0x1f0 [ 2949.393427][ T5703] __x64_sys_socket+0x73/0xb0 [ 2949.398151][ T5703] do_syscall_64+0x39/0xb0 [ 2949.402604][ T5703] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2949.408540][ T5703] RIP: 0033:0x7fd88708c0c9 [ 2949.412990][ T5703] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 10:22:39 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x5) [ 2949.433519][ T5703] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2949.441995][ T5703] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2949.450198][ T5703] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2949.458213][ T5703] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2949.466229][ T5703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2949.474235][ T5703] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2949.482271][ T5703] 10:22:39 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x400300}, 0x0) 10:22:39 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000180)={0x55ca, 0x1, @name="3941765fdd41837492f7cb749f295d16013d87a96bdb8b404fbb493a77cd2184"}) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2949.579897][ T5703] memory: usage 307200kB, limit 307200kB, failcnt 16238 [ 2949.622107][ T5703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2949.638342][ T5703] Memory cgroup stats for /syz3: [ 2949.638582][ T5703] anon 2899968 [ 2949.638582][ T5703] file 10280960 [ 2949.638582][ T5703] kernel 301391872 [ 2949.638582][ T5703] kernel_stack 851968 [ 2949.638582][ T5703] pagetables 1667072 [ 2949.638582][ T5703] sec_pagetables 0 [ 2949.638582][ T5703] percpu 5136736 [ 2949.638582][ T5703] sock 0 [ 2949.638582][ T5703] vmalloc 0 [ 2949.638582][ T5703] shmem 10280960 [ 2949.638582][ T5703] zswap 0 [ 2949.638582][ T5703] zswapped 0 [ 2949.638582][ T5703] file_mapped 262144 [ 2949.638582][ T5703] file_dirty 0 [ 2949.638582][ T5703] file_writeback 0 [ 2949.638582][ T5703] swapcached 0 [ 2949.638582][ T5703] anon_thp 0 [ 2949.638582][ T5703] file_thp 0 [ 2949.638582][ T5703] shmem_thp 0 [ 2949.638582][ T5703] inactive_anon 2904064 [ 2949.638582][ T5703] active_anon 10276864 [ 2949.638582][ T5703] inactive_file 0 [ 2949.638582][ T5703] active_file 0 [ 2949.638582][ T5703] unevictable 0 [ 2949.638582][ T5703] slab_reclaimable 279872 [ 2949.638582][ T5703] slab_unreclaimable 293023328 [ 2949.778641][ T5703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5695,uid=0 [ 2949.814875][ T5703] Memory cgroup out of memory: Killed process 5695 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000de4000a000f"], 0x28}}, 0x0) 10:22:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000003ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:39 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="f603000080000000"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r7, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:39 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf0ffff}, 0x0) 10:22:39 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x6) 10:22:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000004ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000005ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:39 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="f603000080000000"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r7, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2950.282566][ T5744] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2950.393315][ T5744] CPU: 1 PID: 5744 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2950.403725][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2950.413842][ T5744] Call Trace: [ 2950.417147][ T5744] [ 2950.420091][ T5744] dump_stack_lvl+0xd1/0x138 [ 2950.424708][ T5744] dump_header+0x10b/0x85f [ 2950.429157][ T5744] oom_kill_process.cold+0x10/0x15 [ 2950.434298][ T5744] out_of_memory+0x35c/0x14a0 [ 2950.439011][ T5744] ? find_held_lock+0x2d/0x110 [ 2950.443798][ T5744] ? oom_killer_disable+0x280/0x280 [ 2950.449033][ T5744] ? find_held_lock+0x2d/0x110 [ 2950.453822][ T5744] mem_cgroup_out_of_memory+0x206/0x270 [ 2950.459530][ T5744] ? mem_cgroup_margin+0x130/0x130 [ 2950.464680][ T5744] ? lock_downgrade+0x6e0/0x6e0 [ 2950.469582][ T5744] try_charge_memcg+0xefb/0x12f0 [ 2950.474560][ T5744] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2950.480569][ T5744] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2950.486344][ T5744] ? lock_downgrade+0x6e0/0x6e0 [ 2950.491225][ T5744] ? lock_downgrade+0x6e0/0x6e0 [ 2950.496107][ T5744] obj_cgroup_charge+0x2af/0x5e0 [ 2950.501072][ T5744] kmem_cache_alloc_lru+0x145/0x760 [ 2950.506284][ T5744] ? sock_alloc_inode+0x27/0x1d0 [ 2950.511250][ T5744] sock_alloc_inode+0x27/0x1d0 [ 2950.516024][ T5744] ? sock_free_inode+0x30/0x30 [ 2950.520790][ T5744] alloc_inode+0x61/0x230 [ 2950.525141][ T5744] new_inode_pseudo+0x17/0x80 [ 2950.529843][ T5744] sock_alloc+0x40/0x260 [ 2950.534103][ T5744] __sock_create+0xbd/0x790 [ 2950.538636][ T5744] __sys_socket+0x133/0x250 [ 2950.543157][ T5744] ? __sys_socket_file+0x1f0/0x1f0 [ 2950.548302][ T5744] __x64_sys_socket+0x73/0xb0 [ 2950.552997][ T5744] do_syscall_64+0x39/0xb0 [ 2950.557440][ T5744] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2950.563346][ T5744] RIP: 0033:0x7fd88708c0c9 [ 2950.567776][ T5744] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2950.587388][ T5744] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2950.595808][ T5744] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2950.603780][ T5744] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2950.611746][ T5744] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2950.619714][ T5744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2950.627722][ T5744] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2950.635744][ T5744] 10:22:40 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x1000000}, 0x0) 10:22:40 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x7) 10:22:40 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) (async) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="f603000080000000"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r7, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2950.725110][ T5744] memory: usage 307200kB, limit 307200kB, failcnt 16314 [ 2950.740923][ T5744] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2950.791459][ T5744] Memory cgroup stats for /syz3: [ 2950.791696][ T5744] anon 2899968 [ 2950.791696][ T5744] file 10280960 [ 2950.791696][ T5744] kernel 301391872 [ 2950.791696][ T5744] kernel_stack 851968 [ 2950.791696][ T5744] pagetables 1667072 [ 2950.791696][ T5744] sec_pagetables 0 [ 2950.791696][ T5744] percpu 5136736 [ 2950.791696][ T5744] sock 0 [ 2950.791696][ T5744] vmalloc 0 [ 2950.791696][ T5744] shmem 10280960 [ 2950.791696][ T5744] zswap 0 [ 2950.791696][ T5744] zswapped 0 [ 2950.791696][ T5744] file_mapped 262144 [ 2950.791696][ T5744] file_dirty 0 [ 2950.791696][ T5744] file_writeback 0 [ 2950.791696][ T5744] swapcached 0 [ 2950.791696][ T5744] anon_thp 0 [ 2950.791696][ T5744] file_thp 0 [ 2950.791696][ T5744] shmem_thp 0 [ 2950.791696][ T5744] inactive_anon 2904064 [ 2950.791696][ T5744] active_anon 10276864 [ 2950.791696][ T5744] inactive_file 0 [ 2950.791696][ T5744] active_file 0 [ 2950.791696][ T5744] unevictable 0 [ 2950.791696][ T5744] slab_reclaimable 279872 [ 2950.791696][ T5744] slab_unreclaimable 293023328 10:22:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000be8000a000f"], 0x28}}, 0x0) 10:22:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000006ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:40 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x2000000}, 0x0) 10:22:40 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x8) 10:22:40 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002080)={r3}) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000003000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2951.096724][ T5744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5736,uid=0 [ 2951.118305][ T5744] Memory cgroup out of memory: Killed process 5736 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000007ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000008ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:41 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002080)={r3}) (async, rerun: 32) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000003000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 10:22:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000009ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000000affffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:41 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002080)={r3}) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000003000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002080)={r3}) (async) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000003000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) [ 2951.639787][ T5787] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2951.662003][ T5787] CPU: 0 PID: 5787 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2951.672417][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2951.682515][ T5787] Call Trace: [ 2951.685834][ T5787] [ 2951.688787][ T5787] dump_stack_lvl+0xd1/0x138 [ 2951.693438][ T5787] dump_header+0x10b/0x85f [ 2951.697905][ T5787] oom_kill_process.cold+0x10/0x15 [ 2951.703059][ T5787] out_of_memory+0x35c/0x14a0 [ 2951.707747][ T5787] ? find_held_lock+0x2d/0x110 [ 2951.712515][ T5787] ? oom_killer_disable+0x280/0x280 [ 2951.717764][ T5787] ? find_held_lock+0x2d/0x110 [ 2951.722575][ T5787] mem_cgroup_out_of_memory+0x206/0x270 [ 2951.728167][ T5787] ? mem_cgroup_margin+0x130/0x130 [ 2951.733311][ T5787] ? lock_downgrade+0x6e0/0x6e0 [ 2951.738192][ T5787] try_charge_memcg+0xefb/0x12f0 [ 2951.744436][ T5787] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2951.750408][ T5787] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2951.756123][ T5787] ? lock_downgrade+0x6e0/0x6e0 [ 2951.760968][ T5787] ? lock_downgrade+0x6e0/0x6e0 [ 2951.765843][ T5787] obj_cgroup_charge+0x2af/0x5e0 [ 2951.770818][ T5787] kmem_cache_alloc_lru+0x145/0x760 [ 2951.776046][ T5787] ? sock_alloc_inode+0x27/0x1d0 [ 2951.781034][ T5787] sock_alloc_inode+0x27/0x1d0 [ 2951.785845][ T5787] ? sock_free_inode+0x30/0x30 [ 2951.790648][ T5787] alloc_inode+0x61/0x230 [ 2951.795019][ T5787] new_inode_pseudo+0x17/0x80 [ 2951.799727][ T5787] sock_alloc+0x40/0x260 [ 2951.804005][ T5787] __sock_create+0xbd/0x790 [ 2951.808502][ T5787] __sys_socket+0x133/0x250 [ 2951.813011][ T5787] ? __sys_socket_file+0x1f0/0x1f0 [ 2951.818515][ T5787] __x64_sys_socket+0x73/0xb0 [ 2951.823243][ T5787] do_syscall_64+0x39/0xb0 [ 2951.827705][ T5787] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2951.833637][ T5787] RIP: 0033:0x7fd88708c0c9 [ 2951.838082][ T5787] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2951.858065][ T5787] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2951.867276][ T5787] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2951.875283][ T5787] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2951.883295][ T5787] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2951.891295][ T5787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2951.899366][ T5787] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2951.907695][ T5787] [ 2951.956054][ T5787] memory: usage 307200kB, limit 307200kB, failcnt 16412 [ 2951.965371][ T5787] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2951.972318][ T5787] Memory cgroup stats for /syz3: [ 2951.972442][ T5787] anon 2899968 [ 2951.972442][ T5787] file 10280960 [ 2951.972442][ T5787] kernel 301391872 [ 2951.972442][ T5787] kernel_stack 851968 [ 2951.972442][ T5787] pagetables 1667072 [ 2951.972442][ T5787] sec_pagetables 0 [ 2951.972442][ T5787] percpu 5136736 [ 2951.972442][ T5787] sock 0 [ 2951.972442][ T5787] vmalloc 0 [ 2951.972442][ T5787] shmem 10280960 [ 2951.972442][ T5787] zswap 0 [ 2951.972442][ T5787] zswapped 0 [ 2951.972442][ T5787] file_mapped 262144 [ 2951.972442][ T5787] file_dirty 0 [ 2951.972442][ T5787] file_writeback 0 [ 2951.972442][ T5787] swapcached 0 [ 2951.972442][ T5787] anon_thp 0 [ 2951.972442][ T5787] file_thp 0 [ 2951.972442][ T5787] shmem_thp 0 [ 2951.972442][ T5787] inactive_anon 2904064 [ 2951.972442][ T5787] active_anon 10276864 [ 2951.972442][ T5787] inactive_file 0 [ 2951.972442][ T5787] active_file 0 [ 2951.972442][ T5787] unevictable 0 [ 2951.972442][ T5787] slab_reclaimable 279872 [ 2951.972442][ T5787] slab_unreclaimable 293023328 10:22:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000de8000a000f"], 0x28}}, 0x0) 10:22:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:41 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x9) 10:22:41 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x3000000}, 0x0) 10:22:41 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x5973, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000000bffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2952.096093][ T5787] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5781,uid=0 [ 2952.118574][ T5787] Memory cgroup out of memory: Killed process 5781 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000000fffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000010ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:42 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000011ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:42 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xa) 10:22:42 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x5973, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x5973, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) [ 2952.657838][ T5821] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2952.745491][ T5821] CPU: 1 PID: 5821 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2952.755908][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2952.765989][ T5821] Call Trace: [ 2952.769283][ T5821] [ 2952.772236][ T5821] dump_stack_lvl+0xd1/0x138 [ 2952.776873][ T5821] dump_header+0x10b/0x85f [ 2952.781333][ T5821] oom_kill_process.cold+0x10/0x15 [ 2952.786498][ T5821] out_of_memory+0x35c/0x14a0 [ 2952.791230][ T5821] ? find_held_lock+0x2d/0x110 [ 2952.796045][ T5821] ? oom_killer_disable+0x280/0x280 [ 2952.801303][ T5821] ? find_held_lock+0x2d/0x110 [ 2952.806116][ T5821] mem_cgroup_out_of_memory+0x206/0x270 [ 2952.811719][ T5821] ? mem_cgroup_margin+0x130/0x130 [ 2952.816881][ T5821] ? lock_downgrade+0x6e0/0x6e0 [ 2952.821785][ T5821] try_charge_memcg+0xefb/0x12f0 [ 2952.826776][ T5821] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2952.832810][ T5821] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2952.838592][ T5821] ? lock_downgrade+0x6e0/0x6e0 [ 2952.843483][ T5821] ? lock_downgrade+0x6e0/0x6e0 [ 2952.848398][ T5821] obj_cgroup_charge+0x2af/0x5e0 [ 2952.853482][ T5821] kmem_cache_alloc_lru+0x145/0x760 [ 2952.858722][ T5821] ? sock_alloc_inode+0x27/0x1d0 [ 2952.863721][ T5821] sock_alloc_inode+0x27/0x1d0 [ 2952.868526][ T5821] ? sock_free_inode+0x30/0x30 [ 2952.873332][ T5821] alloc_inode+0x61/0x230 [ 2952.877707][ T5821] new_inode_pseudo+0x17/0x80 [ 2952.882431][ T5821] sock_alloc+0x40/0x260 [ 2952.886708][ T5821] __sock_create+0xbd/0x790 [ 2952.891255][ T5821] __sys_socket+0x133/0x250 [ 2952.895812][ T5821] ? __sys_socket_file+0x1f0/0x1f0 [ 2952.900987][ T5821] __x64_sys_socket+0x73/0xb0 [ 2952.905723][ T5821] do_syscall_64+0x39/0xb0 [ 2952.910190][ T5821] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2952.916218][ T5821] RIP: 0033:0x7fd88708c0c9 [ 2952.920669][ T5821] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2952.940409][ T5821] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2952.949049][ T5821] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2952.957076][ T5821] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2952.965082][ T5821] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2952.973090][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2952.981191][ T5821] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2952.989229][ T5821] [ 2953.095434][ T5821] memory: usage 307200kB, limit 307200kB, failcnt 16498 [ 2953.102450][ T5821] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2953.112622][ T5821] Memory cgroup stats for /syz3: [ 2953.115823][ T5821] anon 2899968 [ 2953.115823][ T5821] file 10280960 [ 2953.115823][ T5821] kernel 301391872 [ 2953.115823][ T5821] kernel_stack 851968 [ 2953.115823][ T5821] pagetables 1667072 [ 2953.115823][ T5821] sec_pagetables 0 [ 2953.115823][ T5821] percpu 5136736 [ 2953.115823][ T5821] sock 0 [ 2953.115823][ T5821] vmalloc 0 [ 2953.115823][ T5821] shmem 10280960 [ 2953.115823][ T5821] zswap 0 [ 2953.115823][ T5821] zswapped 0 [ 2953.115823][ T5821] file_mapped 262144 [ 2953.115823][ T5821] file_dirty 0 [ 2953.115823][ T5821] file_writeback 0 [ 2953.115823][ T5821] swapcached 0 [ 2953.115823][ T5821] anon_thp 0 [ 2953.115823][ T5821] file_thp 0 [ 2953.115823][ T5821] shmem_thp 0 [ 2953.115823][ T5821] inactive_anon 2904064 [ 2953.115823][ T5821] active_anon 10276864 [ 2953.115823][ T5821] inactive_file 0 [ 2953.115823][ T5821] active_file 0 [ 2953.115823][ T5821] unevictable 0 [ 2953.115823][ T5821] slab_reclaimable 279872 [ 2953.115823][ T5821] slab_unreclaimable 293023328 [ 2953.250550][ T5821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5818,uid=0 10:22:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000bec000a000f"], 0x28}}, 0x0) 10:22:43 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xc) 10:22:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000013ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:43 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x4000000}, 0x0) 10:22:43 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x5973, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2953.286674][ T5821] Memory cgroup out of memory: Killed process 5818 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000001fffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000020ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:43 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000120021030000000006000080e9c3ce44dd7bcc2970cab30f0225371ec9396cc11f8e853c449de94c6b6429db473a84b7c0576254aed65e2cbcd0f7002d2cfb74684c045b14db7d7d14e2428cab1b4618a481015e3c2a39ac3f9bc11310f666e80b68d9354b68521590eee910bdc9b813666eb5e0eb390017864f149dbd0349fcfaf9"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:43 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x6000000}, 0x0) 10:22:43 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00004e23ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2953.725842][ T5861] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2953.795912][ T5861] CPU: 0 PID: 5861 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2953.806323][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2953.816414][ T5861] Call Trace: [ 2953.820167][ T5861] [ 2953.823123][ T5861] dump_stack_lvl+0xd1/0x138 [ 2953.827771][ T5861] dump_header+0x10b/0x85f [ 2953.832252][ T5861] oom_kill_process.cold+0x10/0x15 [ 2953.837413][ T5861] out_of_memory+0x35c/0x14a0 [ 2953.842131][ T5861] ? find_held_lock+0x2d/0x110 [ 2953.846918][ T5861] ? oom_killer_disable+0x280/0x280 [ 2953.852131][ T5861] ? find_held_lock+0x2d/0x110 [ 2953.856919][ T5861] mem_cgroup_out_of_memory+0x206/0x270 [ 2953.862514][ T5861] ? mem_cgroup_margin+0x130/0x130 [ 2953.867655][ T5861] ? lock_downgrade+0x6e0/0x6e0 [ 2953.872524][ T5861] try_charge_memcg+0xefb/0x12f0 [ 2953.877472][ T5861] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2953.883452][ T5861] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2953.889194][ T5861] ? lock_downgrade+0x6e0/0x6e0 [ 2953.894046][ T5861] ? lock_downgrade+0x6e0/0x6e0 [ 2953.898907][ T5861] obj_cgroup_charge+0x2af/0x5e0 [ 2953.903855][ T5861] kmem_cache_alloc_lru+0x145/0x760 [ 2953.909054][ T5861] ? sock_alloc_inode+0x27/0x1d0 [ 2953.914007][ T5861] sock_alloc_inode+0x27/0x1d0 [ 2953.918776][ T5861] ? sock_free_inode+0x30/0x30 [ 2953.923542][ T5861] alloc_inode+0x61/0x230 [ 2953.927879][ T5861] new_inode_pseudo+0x17/0x80 [ 2953.932566][ T5861] sock_alloc+0x40/0x260 [ 2953.936817][ T5861] __sock_create+0xbd/0x790 [ 2953.941333][ T5861] __sys_socket+0x133/0x250 [ 2953.945845][ T5861] ? __sys_socket_file+0x1f0/0x1f0 [ 2953.950973][ T5861] __x64_sys_socket+0x73/0xb0 [ 2953.955656][ T5861] do_syscall_64+0x39/0xb0 [ 2953.960081][ T5861] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2953.965974][ T5861] RIP: 0033:0x7fd88708c0c9 [ 2953.970400][ T5861] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2953.990789][ T5861] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2953.999207][ T5861] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2954.007189][ T5861] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2954.015166][ T5861] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2954.023133][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2954.031107][ T5861] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2954.039098][ T5861] [ 2954.120421][ T5861] memory: usage 307200kB, limit 307200kB, failcnt 16585 [ 2954.141814][ T5861] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2954.170056][ T5861] Memory cgroup stats for /syz3: [ 2954.170299][ T5861] anon 2899968 [ 2954.170299][ T5861] file 10280960 [ 2954.170299][ T5861] kernel 301375488 [ 2954.170299][ T5861] kernel_stack 851968 [ 2954.170299][ T5861] pagetables 1667072 [ 2954.170299][ T5861] sec_pagetables 0 [ 2954.170299][ T5861] percpu 5136672 [ 2954.170299][ T5861] sock 0 [ 2954.170299][ T5861] vmalloc 0 [ 2954.170299][ T5861] shmem 10280960 [ 2954.170299][ T5861] zswap 0 [ 2954.170299][ T5861] zswapped 0 [ 2954.170299][ T5861] file_mapped 262144 [ 2954.170299][ T5861] file_dirty 0 [ 2954.170299][ T5861] file_writeback 0 [ 2954.170299][ T5861] swapcached 0 [ 2954.170299][ T5861] anon_thp 0 [ 2954.170299][ T5861] file_thp 0 [ 2954.170299][ T5861] shmem_thp 0 [ 2954.170299][ T5861] inactive_anon 2904064 [ 2954.170299][ T5861] active_anon 10276864 [ 2954.170299][ T5861] inactive_file 0 [ 2954.170299][ T5861] active_file 0 [ 2954.170299][ T5861] unevictable 0 [ 2954.170299][ T5861] slab_reclaimable 279872 [ 2954.170299][ T5861] slab_unreclaimable 293014096 [ 2954.298195][ T5861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5856,uid=0 [ 2954.323535][ T5861] Memory cgroup out of memory: Killed process 5856 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000dec000a000f"], 0x28}}, 0x0) 10:22:44 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xe) 10:22:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000048ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:44 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async, rerun: 64) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (rerun: 64) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000120021030000000006000080e9c3ce44dd7bcc2970cab30f0225371ec9396cc11f8e853c449de94c6b6429db473a84b7c0576254aed65e2cbcd0f7002d2cfb74684c045b14db7d7d14e2428cab1b4618a481015e3c2a39ac3f9bc11310f666e80b68d9354b68521590eee910bdc9b813666eb5e0eb390017864f149dbd0349fcfaf9"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:44 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x8000000}, 0x0) 10:22:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000004cffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000060ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2954.671519][ T5893] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:44 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x9000000}, 0x0) [ 2954.796528][ T5893] CPU: 0 PID: 5893 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2954.807024][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2954.817085][ T5893] Call Trace: [ 2954.820359][ T5893] [ 2954.823289][ T5893] dump_stack_lvl+0xd1/0x138 [ 2954.827893][ T5893] dump_header+0x10b/0x85f [ 2954.832330][ T5893] oom_kill_process.cold+0x10/0x15 [ 2954.837456][ T5893] out_of_memory+0x35c/0x14a0 [ 2954.842149][ T5893] ? find_held_lock+0x2d/0x110 [ 2954.846939][ T5893] ? oom_killer_disable+0x280/0x280 [ 2954.852185][ T5893] ? find_held_lock+0x2d/0x110 [ 2954.856984][ T5893] mem_cgroup_out_of_memory+0x206/0x270 [ 2954.862550][ T5893] ? mem_cgroup_margin+0x130/0x130 [ 2954.867667][ T5893] ? lock_downgrade+0x6e0/0x6e0 [ 2954.872540][ T5893] try_charge_memcg+0xefb/0x12f0 [ 2954.877491][ T5893] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2954.883483][ T5893] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2954.889226][ T5893] ? lock_downgrade+0x6e0/0x6e0 [ 2954.894078][ T5893] ? lock_downgrade+0x6e0/0x6e0 [ 2954.898945][ T5893] obj_cgroup_charge+0x2af/0x5e0 [ 2954.903891][ T5893] kmem_cache_alloc_lru+0x145/0x760 [ 2954.909087][ T5893] ? sock_alloc_inode+0x27/0x1d0 [ 2954.914036][ T5893] sock_alloc_inode+0x27/0x1d0 [ 2954.918817][ T5893] ? sock_free_inode+0x30/0x30 [ 2954.923673][ T5893] alloc_inode+0x61/0x230 [ 2954.928015][ T5893] new_inode_pseudo+0x17/0x80 [ 2954.932704][ T5893] sock_alloc+0x40/0x260 [ 2954.936958][ T5893] __sock_create+0xbd/0x790 [ 2954.941476][ T5893] __sys_socket+0x133/0x250 [ 2954.945988][ T5893] ? __sys_socket_file+0x1f0/0x1f0 [ 2954.951213][ T5893] __x64_sys_socket+0x73/0xb0 [ 2954.955897][ T5893] do_syscall_64+0x39/0xb0 [ 2954.960322][ T5893] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2954.966217][ T5893] RIP: 0033:0x7fd88708c0c9 [ 2954.970647][ T5893] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2954.990257][ T5893] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2954.998673][ T5893] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2955.006641][ T5893] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2955.014609][ T5893] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2955.022577][ T5893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2955.030544][ T5893] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2955.038533][ T5893] 10:22:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000068ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:44 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x10) [ 2955.131621][ T5893] memory: usage 307200kB, limit 307200kB, failcnt 16695 [ 2955.154823][ T5893] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2955.171932][ T5893] Memory cgroup stats for /syz3: [ 2955.172156][ T5893] anon 2899968 [ 2955.172156][ T5893] file 10280960 [ 2955.172156][ T5893] kernel 301391872 [ 2955.172156][ T5893] kernel_stack 851968 [ 2955.172156][ T5893] pagetables 1667072 [ 2955.172156][ T5893] sec_pagetables 0 [ 2955.172156][ T5893] percpu 5136736 [ 2955.172156][ T5893] sock 0 [ 2955.172156][ T5893] vmalloc 0 [ 2955.172156][ T5893] shmem 10280960 [ 2955.172156][ T5893] zswap 0 [ 2955.172156][ T5893] zswapped 0 [ 2955.172156][ T5893] file_mapped 262144 [ 2955.172156][ T5893] file_dirty 0 [ 2955.172156][ T5893] file_writeback 0 10:22:44 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000006cffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2955.172156][ T5893] swapcached 0 [ 2955.172156][ T5893] anon_thp 0 [ 2955.172156][ T5893] file_thp 0 [ 2955.172156][ T5893] shmem_thp 0 [ 2955.172156][ T5893] inactive_anon 2904064 [ 2955.172156][ T5893] active_anon 10276864 [ 2955.172156][ T5893] inactive_file 0 [ 2955.172156][ T5893] active_file 0 [ 2955.172156][ T5893] unevictable 0 [ 2955.172156][ T5893] slab_reclaimable 279872 [ 2955.172156][ T5893] slab_unreclaimable 293023328 [ 2955.459551][ T5893] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5892,uid=0 [ 2955.596231][ T5893] Memory cgroup out of memory: Killed process 5892 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000bf0000a000f"], 0x28}}, 0x0) 10:22:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000074ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:45 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000120021030000000006000080e9c3ce44dd7bcc2970cab30f0225371ec9396cc11f8e853c449de94c6b6429db473a84b7c0576254aed65e2cbcd0f7002d2cfb74684c045b14db7d7d14e2428cab1b4618a481015e3c2a39ac3f9bc11310f666e80b68d9354b68521590eee910bdc9b813666eb5e0eb390017864f149dbd0349fcfaf9"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:45 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xa000000}, 0x0) 10:22:45 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x12) 10:22:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000007affffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="ffffff9effffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2955.901655][ T5933] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2955.951753][ T5933] CPU: 0 PID: 5933 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2955.962163][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2955.972251][ T5933] Call Trace: [ 2955.975540][ T5933] [ 2955.978472][ T5933] dump_stack_lvl+0xd1/0x138 [ 2955.983077][ T5933] dump_header+0x10b/0x85f [ 2955.987509][ T5933] oom_kill_process.cold+0x10/0x15 [ 2955.992828][ T5933] out_of_memory+0x35c/0x14a0 [ 2955.997519][ T5933] ? find_held_lock+0x2d/0x110 [ 2956.002322][ T5933] ? oom_killer_disable+0x280/0x280 [ 2956.007858][ T5933] ? find_held_lock+0x2d/0x110 [ 2956.012676][ T5933] mem_cgroup_out_of_memory+0x206/0x270 [ 2956.018264][ T5933] ? mem_cgroup_margin+0x130/0x130 [ 2956.023389][ T5933] ? lock_downgrade+0x6e0/0x6e0 [ 2956.028253][ T5933] try_charge_memcg+0xefb/0x12f0 [ 2956.033206][ T5933] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2956.039191][ T5933] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2956.045007][ T5933] ? lock_downgrade+0x6e0/0x6e0 [ 2956.049948][ T5933] ? lock_downgrade+0x6e0/0x6e0 [ 2956.054810][ T5933] obj_cgroup_charge+0x2af/0x5e0 [ 2956.059756][ T5933] kmem_cache_alloc_lru+0x145/0x760 [ 2956.064955][ T5933] ? sock_alloc_inode+0x27/0x1d0 [ 2956.069909][ T5933] sock_alloc_inode+0x27/0x1d0 [ 2956.074698][ T5933] ? sock_free_inode+0x30/0x30 [ 2956.079477][ T5933] alloc_inode+0x61/0x230 [ 2956.083817][ T5933] new_inode_pseudo+0x17/0x80 [ 2956.088505][ T5933] sock_alloc+0x40/0x260 [ 2956.092757][ T5933] __sock_create+0xbd/0x790 [ 2956.097273][ T5933] __sys_socket+0x133/0x250 [ 2956.101783][ T5933] ? __sys_socket_file+0x1f0/0x1f0 [ 2956.106997][ T5933] __x64_sys_socket+0x73/0xb0 [ 2956.111679][ T5933] do_syscall_64+0x39/0xb0 [ 2956.116109][ T5933] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2956.122006][ T5933] RIP: 0033:0x7fd88708c0c9 [ 2956.126421][ T5933] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2956.146030][ T5933] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2956.154446][ T5933] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2956.162440][ T5933] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2956.170448][ T5933] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2956.178431][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2956.186404][ T5933] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2956.194394][ T5933] 10:22:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000065a6ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:45 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000012010000000100000000010004000080"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 10:22:45 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x18) 10:22:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="fffffff0ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2956.293894][ T5933] memory: usage 307200kB, limit 307200kB, failcnt 16788 [ 2956.331025][ T5933] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2956.421168][ T5933] Memory cgroup stats for /syz3: [ 2956.421410][ T5933] anon 2899968 [ 2956.421410][ T5933] file 10280960 [ 2956.421410][ T5933] kernel 301375488 [ 2956.421410][ T5933] kernel_stack 851968 [ 2956.421410][ T5933] pagetables 1667072 [ 2956.421410][ T5933] sec_pagetables 0 [ 2956.421410][ T5933] percpu 5136672 [ 2956.421410][ T5933] sock 0 [ 2956.421410][ T5933] vmalloc 0 [ 2956.421410][ T5933] shmem 10280960 [ 2956.421410][ T5933] zswap 0 [ 2956.421410][ T5933] zswapped 0 [ 2956.421410][ T5933] file_mapped 262144 [ 2956.421410][ T5933] file_dirty 0 [ 2956.421410][ T5933] file_writeback 0 [ 2956.421410][ T5933] swapcached 0 [ 2956.421410][ T5933] anon_thp 0 [ 2956.421410][ T5933] file_thp 0 [ 2956.421410][ T5933] shmem_thp 0 [ 2956.421410][ T5933] inactive_anon 2904064 [ 2956.421410][ T5933] active_anon 10276864 [ 2956.421410][ T5933] inactive_file 0 [ 2956.421410][ T5933] active_file 0 [ 2956.421410][ T5933] unevictable 0 [ 2956.421410][ T5933] slab_reclaimable 279872 [ 2956.421410][ T5933] slab_unreclaimable 293011848 [ 2956.672591][ T5933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5929,uid=0 10:22:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000df0000a000f"], 0x28}}, 0x0) 10:22:46 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xc000000}, 0x0) 10:22:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="fffffffcffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:46 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000012010000000100000000010004000080"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 10:22:46 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e) [ 2956.708463][ T5933] Memory cgroup out of memory: Killed process 5929 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00f0ffffffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:46 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 32) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000012010000000100000000010004000080"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) (rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) 10:22:46 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x24) 10:22:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="7fffffffffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2957.139522][ T5974] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2957.155544][ T5974] CPU: 1 PID: 5974 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2957.165945][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2957.176053][ T5974] Call Trace: [ 2957.179381][ T5974] [ 2957.182365][ T5974] dump_stack_lvl+0xd1/0x138 [ 2957.187036][ T5974] dump_header+0x10b/0x85f [ 2957.191513][ T5974] oom_kill_process.cold+0x10/0x15 [ 2957.196690][ T5974] out_of_memory+0x35c/0x14a0 [ 2957.201434][ T5974] ? find_held_lock+0x2d/0x110 [ 2957.206262][ T5974] ? oom_killer_disable+0x280/0x280 [ 2957.211523][ T5974] ? find_held_lock+0x2d/0x110 [ 2957.216346][ T5974] mem_cgroup_out_of_memory+0x206/0x270 [ 2957.221955][ T5974] ? mem_cgroup_margin+0x130/0x130 [ 2957.227138][ T5974] ? lock_downgrade+0x6e0/0x6e0 [ 2957.232057][ T5974] try_charge_memcg+0xefb/0x12f0 [ 2957.237053][ T5974] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2957.243093][ T5974] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2957.248873][ T5974] ? lock_downgrade+0x6e0/0x6e0 [ 2957.253749][ T5974] ? lock_downgrade+0x6e0/0x6e0 [ 2957.258626][ T5974] obj_cgroup_charge+0x2af/0x5e0 [ 2957.263585][ T5974] kmem_cache_alloc_lru+0x145/0x760 [ 2957.268796][ T5974] ? sock_alloc_inode+0x27/0x1d0 [ 2957.273760][ T5974] sock_alloc_inode+0x27/0x1d0 [ 2957.278540][ T5974] ? sock_free_inode+0x30/0x30 [ 2957.283312][ T5974] alloc_inode+0x61/0x230 [ 2957.287665][ T5974] new_inode_pseudo+0x17/0x80 [ 2957.292355][ T5974] sock_alloc+0x40/0x260 [ 2957.296611][ T5974] __sock_create+0xbd/0x790 [ 2957.301131][ T5974] __sys_socket+0x133/0x250 [ 2957.305653][ T5974] ? __sys_socket_file+0x1f0/0x1f0 [ 2957.310790][ T5974] __x64_sys_socket+0x73/0xb0 [ 2957.315475][ T5974] do_syscall_64+0x39/0xb0 [ 2957.319900][ T5974] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2957.325797][ T5974] RIP: 0033:0x7fd88708c0c9 [ 2957.330212][ T5974] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2957.349826][ T5974] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2957.358246][ T5974] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2957.366322][ T5974] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2957.374291][ T5974] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2957.382261][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2957.390229][ T5974] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2957.398214][ T5974] 10:22:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="9effffffffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2957.481518][ T5974] memory: usage 307200kB, limit 307200kB, failcnt 16887 [ 2957.492678][ T5974] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2957.499761][ T5974] Memory cgroup stats for /syz3: [ 2957.499974][ T5974] anon 2899968 [ 2957.499974][ T5974] file 10280960 [ 2957.499974][ T5974] kernel 301391872 [ 2957.499974][ T5974] kernel_stack 851968 [ 2957.499974][ T5974] pagetables 1667072 [ 2957.499974][ T5974] sec_pagetables 0 [ 2957.499974][ T5974] percpu 5136736 [ 2957.499974][ T5974] sock 0 [ 2957.499974][ T5974] vmalloc 0 [ 2957.499974][ T5974] shmem 10280960 [ 2957.499974][ T5974] zswap 0 [ 2957.499974][ T5974] zswapped 0 [ 2957.499974][ T5974] file_mapped 262144 [ 2957.499974][ T5974] file_dirty 0 [ 2957.499974][ T5974] file_writeback 0 [ 2957.499974][ T5974] swapcached 0 [ 2957.499974][ T5974] anon_thp 0 [ 2957.499974][ T5974] file_thp 0 [ 2957.499974][ T5974] shmem_thp 0 10:22:47 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xe000000}, 0x0) [ 2957.499974][ T5974] inactive_anon 2904064 [ 2957.499974][ T5974] active_anon 10276864 [ 2957.499974][ T5974] inactive_file 0 [ 2957.499974][ T5974] active_file 0 [ 2957.499974][ T5974] unevictable 0 [ 2957.499974][ T5974] slab_reclaimable 279872 [ 2957.499974][ T5974] slab_unreclaimable 293023328 [ 2957.709201][ T5974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5969,uid=0 [ 2957.740196][ T5974] Memory cgroup out of memory: Killed process 5969 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000bf4000a000f"], 0x28}}, 0x0) 10:22:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="f0ffffffffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:47 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000001c0)) close_range(r2, r1, 0x2) memfd_secret(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) write$binfmt_elf32(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x1, 0x9, 0x81, 0x4, 0x2, 0x3e, 0x2b, 0x3ca, 0x38, 0xd8, 0x3, 0x40, 0x20, 0x1, 0x0, 0x7e46, 0x80}, [{0x4, 0x6, 0x1000, 0x9, 0x80000001, 0x1b, 0xfc, 0x3ff}], "f1c972f8082d768b1830c318c33ad685d6b8803c2faad9e0cce0d051d0eb4fae4d9a74c8365b1b21467f140e3c60f2020621bc77125ece6e8d6282c8447623bb32950328b7ee7df596caa4f8b02e1283ecf4b914488d0b0d93cdf98057e2f4358a7948483a12b072a0894f018fc03ec166abbd4c8600e7619e059cd16391e676734124b14b5972603ef12ca2cad67053eaf29da70b2581381afeae46bebb5494a25630aefb430ab7a9bd913e81ce", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x606) r6 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) io_uring_enter(r6, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:47 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2a) 10:22:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="fcffffffffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:47 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf000000}, 0x0) 10:22:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00020000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:47 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000001c0)) close_range(r2, r1, 0x2) memfd_secret(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) write$binfmt_elf32(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x1, 0x9, 0x81, 0x4, 0x2, 0x3e, 0x2b, 0x3ca, 0x38, 0xd8, 0x3, 0x40, 0x20, 0x1, 0x0, 0x7e46, 0x80}, [{0x4, 0x6, 0x1000, 0x9, 0x80000001, 0x1b, 0xfc, 0x3ff}], "f1c972f8082d768b1830c318c33ad685d6b8803c2faad9e0cce0d051d0eb4fae4d9a74c8365b1b21467f140e3c60f2020621bc77125ece6e8d6282c8447623bb32950328b7ee7df596caa4f8b02e1283ecf4b914488d0b0d93cdf98057e2f4358a7948483a12b072a0894f018fc03ec166abbd4c8600e7619e059cd16391e676734124b14b5972603ef12ca2cad67053eaf29da70b2581381afeae46bebb5494a25630aefb430ab7a9bd913e81ce", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x606) r6 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) io_uring_enter(r6, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000001c0)) (async) close_range(r2, r1, 0x2) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) write$binfmt_elf32(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x1, 0x9, 0x81, 0x4, 0x2, 0x3e, 0x2b, 0x3ca, 0x38, 0xd8, 0x3, 0x40, 0x20, 0x1, 0x0, 0x7e46, 0x80}, [{0x4, 0x6, 0x1000, 0x9, 0x80000001, 0x1b, 0xfc, 0x3ff}], "f1c972f8082d768b1830c318c33ad685d6b8803c2faad9e0cce0d051d0eb4fae4d9a74c8365b1b21467f140e3c60f2020621bc77125ece6e8d6282c8447623bb32950328b7ee7df596caa4f8b02e1283ecf4b914488d0b0d93cdf98057e2f4358a7948483a12b072a0894f018fc03ec166abbd4c8600e7619e059cd16391e676734124b14b5972603ef12ca2cad67053eaf29da70b2581381afeae46bebb5494a25630aefb430ab7a9bd913e81ce", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x606) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async) io_uring_enter(r6, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:22:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00030000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2958.179037][ T6001] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2958.223249][ T6001] CPU: 1 PID: 6001 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2958.233742][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2958.243836][ T6001] Call Trace: [ 2958.247146][ T6001] [ 2958.250100][ T6001] dump_stack_lvl+0xd1/0x138 [ 2958.254736][ T6001] dump_header+0x10b/0x85f [ 2958.259199][ T6001] oom_kill_process.cold+0x10/0x15 [ 2958.264360][ T6001] out_of_memory+0x35c/0x14a0 [ 2958.269094][ T6001] ? find_held_lock+0x2d/0x110 [ 2958.273917][ T6001] ? oom_killer_disable+0x280/0x280 [ 2958.279163][ T6001] ? find_held_lock+0x2d/0x110 [ 2958.283975][ T6001] mem_cgroup_out_of_memory+0x206/0x270 [ 2958.289562][ T6001] ? mem_cgroup_margin+0x130/0x130 [ 2958.294717][ T6001] ? lock_downgrade+0x6e0/0x6e0 [ 2958.299618][ T6001] try_charge_memcg+0xefb/0x12f0 [ 2958.304600][ T6001] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2958.310615][ T6001] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2958.316387][ T6001] ? lock_downgrade+0x6e0/0x6e0 [ 2958.321278][ T6001] ? lock_downgrade+0x6e0/0x6e0 [ 2958.326192][ T6001] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2958.331792][ T6001] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2958.337998][ T6001] copy_process+0x4e3/0x7520 [ 2958.342629][ T6001] ? __lock_acquire+0xbc3/0x56d0 [ 2958.347702][ T6001] ? __cleanup_sighand+0xb0/0xb0 [ 2958.352671][ T6001] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2958.358690][ T6001] ? psi_memstall_leave+0x174/0x250 [ 2958.363928][ T6001] kernel_clone+0xeb/0x990 [ 2958.368363][ T6001] ? create_io_thread+0xf0/0xf0 [ 2958.373231][ T6001] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2958.379517][ T6001] ? lock_downgrade+0x6e0/0x6e0 [ 2958.384413][ T6001] __do_sys_clone+0xba/0x100 [ 2958.389041][ T6001] ? kernel_clone+0x990/0x990 [ 2958.393757][ T6001] ? syscall_enter_from_user_mode+0x26/0xb0 [ 2958.399684][ T6001] do_syscall_64+0x39/0xb0 [ 2958.404131][ T6001] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2958.410037][ T6001] RIP: 0033:0x7fd88708d4f1 [ 2958.414462][ T6001] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2958.434807][ T6001] RSP: 002b:00007fd8872cfa68 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2958.444030][ T6001] RAX: ffffffffffffffda RBX: 00007fd887e86700 RCX: 00007fd88708d4f1 [ 2958.452036][ T6001] RDX: 00007fd887e869d0 RSI: 00007fd887e862f0 RDI: 00000000003d0f00 [ 2958.460030][ T6001] RBP: 00007fd8872cfcb0 R08: 00007fd887e86700 R09: 00007fd887e86700 10:22:48 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2c) [ 2958.468041][ T6001] R10: 00007fd887e869d0 R11: 0000000000000206 R12: 00007fd8872cfb1e [ 2958.476019][ T6001] R13: 00007fd8872cfb1f R14: 00007fd887e86300 R15: 0000000000022000 [ 2958.484006][ T6001] [ 2958.577097][ T6001] memory: usage 307200kB, limit 307200kB, failcnt 16965 [ 2958.587383][ T6001] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2958.609246][ T6001] Memory cgroup stats for /syz3: [ 2958.609474][ T6001] anon 2867200 [ 2958.609474][ T6001] file 10280960 [ 2958.609474][ T6001] kernel 301424640 [ 2958.609474][ T6001] kernel_stack 851968 [ 2958.609474][ T6001] pagetables 1667072 [ 2958.609474][ T6001] sec_pagetables 0 [ 2958.609474][ T6001] percpu 5136736 [ 2958.609474][ T6001] sock 0 [ 2958.609474][ T6001] vmalloc 0 [ 2958.609474][ T6001] shmem 10280960 [ 2958.609474][ T6001] zswap 0 [ 2958.609474][ T6001] zswapped 0 [ 2958.609474][ T6001] file_mapped 262144 [ 2958.609474][ T6001] file_dirty 0 [ 2958.609474][ T6001] file_writeback 0 [ 2958.609474][ T6001] swapcached 0 [ 2958.609474][ T6001] anon_thp 0 [ 2958.609474][ T6001] file_thp 0 [ 2958.609474][ T6001] shmem_thp 0 [ 2958.609474][ T6001] inactive_anon 2871296 [ 2958.609474][ T6001] active_anon 10276864 [ 2958.609474][ T6001] inactive_file 0 [ 2958.609474][ T6001] active_file 0 [ 2958.609474][ T6001] unevictable 0 [ 2958.609474][ T6001] slab_reclaimable 279872 [ 2958.609474][ T6001] slab_unreclaimable 293031688 [ 2958.733332][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.733392][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 2958.807463][ T6001] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6001,uid=0 [ 2958.829941][ T6001] Memory cgroup out of memory: Killed process 6001 (syz-executor.3) total-vm:54672kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000df4000a000f"], 0x28}}, 0x0) 10:22:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00040000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:48 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x10000000}, 0x0) 10:22:48 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000001c0)) close_range(r2, r1, 0x2) (async) memfd_secret(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) write$binfmt_elf32(r5, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x1, 0x9, 0x81, 0x4, 0x2, 0x3e, 0x2b, 0x3ca, 0x38, 0xd8, 0x3, 0x40, 0x20, 0x1, 0x0, 0x7e46, 0x80}, [{0x4, 0x6, 0x1000, 0x9, 0x80000001, 0x1b, 0xfc, 0x3ff}], "f1c972f8082d768b1830c318c33ad685d6b8803c2faad9e0cce0d051d0eb4fae4d9a74c8365b1b21467f140e3c60f2020621bc77125ece6e8d6282c8447623bb32950328b7ee7df596caa4f8b02e1283ecf4b914488d0b0d93cdf98057e2f4358a7948483a12b072a0894f018fc03ec166abbd4c8600e7619e059cd16391e676734124b14b5972603ef12ca2cad67053eaf29da70b2581381afeae46bebb5494a25630aefb430ab7a9bd913e81ce", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x606) (async) r6 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 64) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async, rerun: 64) io_uring_enter(r6, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 10:22:48 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x30) 10:22:48 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="00081847b5dc021d3b3f2e9f230e501ea80b8cb01bd1b88a5d7ce50cc259d8b9c84536d8904e3f12ab33381853477bcac991d69dcae4ded17365f331e3360ee23110eca0230a6aa6ea475ac87b7c0d83793745e44495f2810b5e68e9d957706728b15ebb440aabb8e9de16b63a273f8bfb221a8a46f3c7"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7781, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00050000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00060000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:48 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="00081847b5dc021d3b3f2e9f230e501ea80b8cb01bd1b88a5d7ce50cc259d8b9c84536d8904e3f12ab33381853477bcac991d69dcae4ded17365f331e3360ee23110eca0230a6aa6ea475ac87b7c0d83793745e44495f2810b5e68e9d957706728b15ebb440aabb8e9de16b63a273f8bfb221a8a46f3c7"], 0x14}], 0x1}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x7781, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 64) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 10:22:48 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x60000000}, 0x0) [ 2959.247271][ T6045] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2959.298951][ T6045] CPU: 1 PID: 6045 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2959.309358][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2959.319449][ T6045] Call Trace: [ 2959.322750][ T6045] [ 2959.325698][ T6045] dump_stack_lvl+0xd1/0x138 [ 2959.330339][ T6045] dump_header+0x10b/0x85f [ 2959.334808][ T6045] oom_kill_process.cold+0x10/0x15 [ 2959.339972][ T6045] out_of_memory+0x35c/0x14a0 [ 2959.344698][ T6045] ? find_held_lock+0x2d/0x110 [ 2959.349511][ T6045] ? oom_killer_disable+0x280/0x280 [ 2959.354779][ T6045] ? find_held_lock+0x2d/0x110 [ 2959.359583][ T6045] mem_cgroup_out_of_memory+0x206/0x270 [ 2959.365171][ T6045] ? mem_cgroup_margin+0x130/0x130 [ 2959.370331][ T6045] ? lock_downgrade+0x6e0/0x6e0 [ 2959.375242][ T6045] try_charge_memcg+0xefb/0x12f0 [ 2959.380220][ T6045] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2959.386318][ T6045] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2959.392076][ T6045] ? lock_downgrade+0x6e0/0x6e0 10:22:49 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x36) [ 2959.397048][ T6045] ? lock_downgrade+0x6e0/0x6e0 [ 2959.401949][ T6045] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2959.407538][ T6045] __alloc_pages+0x1f3/0x5b0 [ 2959.412159][ T6045] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2959.418971][ T6045] alloc_pages+0x1aa/0x270 [ 2959.423422][ T6045] __pmd_alloc+0x3f/0x5d0 [ 2959.427799][ T6045] __handle_mm_fault+0x932/0x3c90 [ 2959.432871][ T6045] ? vm_iomap_memory+0x190/0x190 [ 2959.437875][ T6045] handle_mm_fault+0x1b6/0x850 [ 2959.442682][ T6045] do_user_addr_fault+0x475/0x1210 [ 2959.447844][ T6045] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2959.453443][ T6045] exc_page_fault+0x98/0x170 [ 2959.458678][ T6045] asm_exc_page_fault+0x26/0x30 [ 2959.463563][ T6045] RIP: 0033:0x7fd887086c25 [ 2959.468002][ T6045] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2959.489224][ T6045] RSP: 002b:00007fd8872cfb98 EFLAGS: 00010202 [ 2959.495343][ T6045] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2959.503348][ T6045] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 2959.511444][ T6045] RBP: 00007fd8872cfc58 R08: 00007fd887000000 R09: 00007fd886c00000 [ 2959.519460][ T6045] R10: 00007fd886c000c8 R11: 000000000008d836 R12: 00000000002d26f9 [ 2959.527471][ T6045] R13: 00007fd8872cfc80 R14: 00007fd8872cfca0 R15: 0000000000000032 [ 2959.535494][ T6045] [ 2960.021647][ T6045] memory: usage 307184kB, limit 307200kB, failcnt 17069 [ 2960.048781][ T6045] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2960.066961][ T6045] Memory cgroup stats for /syz3: [ 2960.067191][ T6045] anon 2899968 [ 2960.067191][ T6045] file 10280960 [ 2960.067191][ T6045] kernel 301375488 [ 2960.067191][ T6045] kernel_stack 851968 [ 2960.067191][ T6045] pagetables 1667072 [ 2960.067191][ T6045] sec_pagetables 0 [ 2960.067191][ T6045] percpu 5136672 [ 2960.067191][ T6045] sock 0 [ 2960.067191][ T6045] vmalloc 0 [ 2960.067191][ T6045] shmem 10280960 [ 2960.067191][ T6045] zswap 0 [ 2960.067191][ T6045] zswapped 0 [ 2960.067191][ T6045] file_mapped 262144 [ 2960.067191][ T6045] file_dirty 0 [ 2960.067191][ T6045] file_writeback 0 [ 2960.067191][ T6045] swapcached 0 [ 2960.067191][ T6045] anon_thp 0 [ 2960.067191][ T6045] file_thp 0 [ 2960.067191][ T6045] shmem_thp 0 [ 2960.067191][ T6045] inactive_anon 2904064 [ 2960.067191][ T6045] active_anon 10276864 [ 2960.067191][ T6045] inactive_file 0 [ 2960.067191][ T6045] active_file 0 [ 2960.067191][ T6045] unevictable 0 [ 2960.067191][ T6045] slab_reclaimable 279872 [ 2960.067191][ T6045] slab_unreclaimable 293011544 10:22:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000bf8000a000f"], 0x28}}, 0x0) 10:22:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00070000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:49 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="00081847b5dc021d3b3f2e9f230e501ea80b8cb01bd1b88a5d7ce50cc259d8b9c84536d8904e3f12ab33381853477bcac991d69dcae4ded17365f331e3360ee23110eca0230a6aa6ea475ac87b7c0d83793745e44495f2810b5e68e9d957706728b15ebb440aabb8e9de16b63a273f8bfb221a8a46f3c7"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7781, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:49 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x65580000}, 0x0) 10:22:49 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x3c) 10:22:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2960.196878][ T6045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6045,uid=0 [ 2960.219080][ T6045] Memory cgroup out of memory: Killed process 6045 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00080000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:50 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x0, 0x882) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6ffb6709d32ebf050c6d5228db58943bea26c65a8f456ae5", 0x18}, {&(0x7f0000000300)="5092a767334390db7054ab86b1301d6700b4e9a39993f8f3a9478c337dab3dc9bbb3234ab2d072ac63a97f032b6f6e0e9e2afffc06f93caf7e97c5ae23445042e031d083ab686b07c16a8a7fb526a74dcb829ec9fa8b951352d2f7754950d48ba50cec7490df9fdcb0dbd44fb1990c2939261cf8a043af2697d9c1c1b11c5675d72003159bd5e93dcf488a78519fe276e8ab5f8108075309d7519110ff27d18cb4b70fc8a082cedaba3b5df90b70", 0xae}, {&(0x7f0000000440)="6f04c7965847d7d6cfdc5ce057dad4dbf3220126ee705fab4f420ed5e778c46de2b48b01531cdb9c42d025c1cccc0abb2da2487c502d09d56194df227389579793421a99fdea8c574d11a829a76e0754e34eb28f2cfcfac8dedf1a1c", 0x5c}, {&(0x7f00000004c0)="ce853b02322d3804401d48328b6ad065e1424963120c7f13879fe7b0fb73551188e722029eed654b3e34da53484591e50f5daef717053c3b3fc55eb1e64e4a87fbe094fbe55daf84ec9bc570027943f379cfa046d5863cb1e50a5d54f22e5c96e57dc6b4b9c6b7302bf0ed8083e9b16071b5f1e58a76e17a0b76aa3426a44e39ace602342687750c483aef74bfab685df3f52ed8b84dec979ecad29d6e6711abe3251e377afe3d12e566f347d72227973f9bfb00e9b1e38d", 0xb8}], 0x4, &(0x7f0000000580)=[{0xe8, 0x3a, 0x3, "b34b1860d39f522f0d0fbd78319d36dd24c9ce6710709465680a10d75f1dd9bee4aa2976a2ca3b65c97d0f6ac181903cef9b9f6a05e7abc6a9efbed3255b41dfe41fa27f457646c5121b627593769fcf1dbef471ed2dcd0d0a4aa228f549bc009e53bbb29e228fe2355ef9f70d173a729a556e1e6df4e060b697bac068f1eae23ecc97ca85304432bcfc9b1aa248c83e753920d9972276a01fe043a762723adacd7ae6f8723eda002ff8174a09c779852c721adaaaf319f0f1f74f8b71b1f7dec6265f11d024cd7877e72e6b7d69ae9c928e3777d3b9a49a"}, {0x78, 0x0, 0x3, "4e613f6a96401ced42f3b6b7d09aae1619dbeeedb9b6a5e0e44c61be5b949b4399d87b678b5fb2bd26d8d18f61bee092c2f11b60ea4bf1f21283f768d7b3a53e302da120f8206fbb36f4bfc7e628bd5b8cbf6565d39bd6acc3e0d97e6f8818e984c7726f"}, {0x40, 0x1, 0x10000, "4f43cbf2c2544c2e3ed688452a1e78f2ebf85b374112ee99d91505d0cb3ec50d2ea8291d467d44036c8df58d3a27b038"}, {0xd0, 0x0, 0x9, "ec9e0f1a8116df399476aaa04ccd8475cb2055a57bf5777a793e21caade17085c186f1c6844759e00185e023394e554181fe6d0c6666eb78b04fb4fd3b5f81d707ac3968c9fd1a0165246f820a1bc3fee20eff784f0b4c167ad33c43bb1ddd59720281d794afa100464ac8eb324b4ad9d9337e855474ce4a06dfdb3a398e9245bd16af401e112513e3f111c086570c6084b79295e46808cf3a554f5f0a9c5b6f76ed96b06bf22ac8cc6bf2958ed6cce1d8e5e61da2bc999fa4cb581b73"}, {0xa8, 0x84, 0x13, "106fe8312bfd10dc74f7b200367b67a49e921584593dfb4ebae260fb9cbcba5f6ca7d67856a4eaec65eda4fcaab7581ecce881e30d807cf8b60eca64a0d4fc92b2a3dcdcc7778d9012f951f9653681b9d9ecf0655ee8e7eb5e97f47498b46ceb676befd7b82b13aeb7cfadc6239b1592a0a76f066fac4f388e16a77e01bb5a971d43955ef1f73c98709e234b07c9b2cceb"}, {0xd8, 0x10e, 0x300, "456cf012f5b3e4dbfe2100d475bbb2612987f9b988a3eb61436223e2fbf70b80e6e924b0d2f52a2b86e2d02ec7a71fe5378424b315df39fd3e3acb0120413276f640460d0ff4f971958e5007acbe15ba54693362ab0e83d1ca8299a97f9434bc97878d5e81fefb584534197a0915b30ba148781d7022a65803cea03d32d845c22797c78eea830796dd3463266d879e2cc95dda588c1692ae4b63b2d38dabff896a1dbdf268bf2da7ed5afb673e27b4e867476bd9136cdf7d44423f863a7c8149a901737b"}, {0x70, 0x115, 0xffff, "9110a32d7a5a89b1cd31e479f695baf5cbc433d91dec7272fca1dc72b6c7e0db286816c833611d2cafe3daa88b20392a415d28768ca181383ce37f6e2ad2be2f3fbeaa11dda2945561c0a8f29af9030c422a0cd9dcc1f141a2c46190ef615d"}, {0x18, 0x10b, 0x9, "8e8f"}], 0x478}}, {{&(0x7f0000000a00)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null]}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)="0791d1df406eb6bb9ab4fb4edd59ceaaa3b6172ed30803069d666899bb8c8e9d034bc9bb2826d81e84398addf779b2b8878533d317404e9161ed17edf52062065321f9d7d97ac8f496c8ccee1bed5f90244898f12f6798280ee8160edbb800020dcf75d7b0f081faf958dbc14597dc8d20b637393ab2fdb04da00690b2935b9f842b0e7578aca31af07d4b03f2b02d9cb996d21df33f724dea901c5a01f9f2eff558eb3d1a68b5d7ba1abaa40f2894ba40f6d3f984856facfa371567f2006a1f274116639f6a739b2a26", 0xca}, {&(0x7f0000000b80)="5ac0690f78789f611c9e22d5cab448e2309d90db5277386d63195091b57c6e0c004be89bfe2d2de3986eecb388fe48eae7135a15a7a094323492eb7d84083634a610f9cbdc068c91a2973eb4543c9e393f9d30ce86b10e3a54efec2b4e395ec3e613706d321270da0d5e5d43384f6a16f5b7ec8489a674068e378ed86efc0ce766b5f1565bceb8ed93ce3227f873db72ecb8e229cec82c26ebfe20b56d6a140a33fd351c87d98a8bbb92c97317c9fd689e9aaa2e", 0xb4}, {&(0x7f0000000c40)="7efcd99578dc8a899848709002aa98", 0xf}], 0x3, &(0x7f0000000cc0)=[{0xa8, 0x101, 0x6, "4e8d237d1d7ca98f0addf9db88a9e74dea5c9712f103cffc43942e26838c6dd6f9c6304f7bce2f701f76654e869535db4c3cbe264bfffb833f57a0708a6628f14d886e0d5a56e86255aee8a0bb552d3f6c4d093e19498b826659e9de8b39af2fc243894d660dd9cb142a15a0ca2223f7d984d27252617351968f61abcb8a07d1a2bd76008f9ee4c24a8e30fd907be16191"}, {0x110, 0x119, 0x7, "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"}], 0x1b8}}], 0x2, 0x48090) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) 10:22:50 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x81000000}, 0x0) [ 2960.498255][ T6190] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2960.540330][ T6190] CPU: 1 PID: 6190 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2960.550747][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2960.560852][ T6190] Call Trace: [ 2960.564162][ T6190] [ 2960.567119][ T6190] dump_stack_lvl+0xd1/0x138 [ 2960.571755][ T6190] dump_header+0x10b/0x85f [ 2960.576226][ T6190] oom_kill_process.cold+0x10/0x15 [ 2960.581395][ T6190] out_of_memory+0x35c/0x14a0 [ 2960.586132][ T6190] ? find_held_lock+0x2d/0x110 [ 2960.590941][ T6190] ? oom_killer_disable+0x280/0x280 [ 2960.596192][ T6190] ? find_held_lock+0x2d/0x110 [ 2960.601006][ T6190] mem_cgroup_out_of_memory+0x206/0x270 [ 2960.606604][ T6190] ? mem_cgroup_margin+0x130/0x130 [ 2960.611773][ T6190] ? lock_downgrade+0x6e0/0x6e0 [ 2960.616685][ T6190] try_charge_memcg+0xefb/0x12f0 [ 2960.621679][ T6190] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2960.627705][ T6190] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2960.633482][ T6190] ? lock_downgrade+0x6e0/0x6e0 [ 2960.638376][ T6190] ? lock_downgrade+0x6e0/0x6e0 [ 2960.643273][ T6190] obj_cgroup_charge+0x2af/0x5e0 [ 2960.648250][ T6190] kmem_cache_alloc_lru+0x145/0x760 [ 2960.653470][ T6190] ? sock_alloc_inode+0x27/0x1d0 [ 2960.658440][ T6190] sock_alloc_inode+0x27/0x1d0 [ 2960.663214][ T6190] ? sock_free_inode+0x30/0x30 [ 2960.668169][ T6190] alloc_inode+0x61/0x230 [ 2960.672520][ T6190] new_inode_pseudo+0x17/0x80 [ 2960.677215][ T6190] sock_alloc+0x40/0x260 [ 2960.681551][ T6190] __sock_create+0xbd/0x790 [ 2960.686069][ T6190] __sys_socket+0x133/0x250 [ 2960.690582][ T6190] ? __sys_socket_file+0x1f0/0x1f0 [ 2960.695737][ T6190] __x64_sys_socket+0x73/0xb0 [ 2960.700449][ T6190] do_syscall_64+0x39/0xb0 [ 2960.704899][ T6190] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2960.710808][ T6190] RIP: 0033:0x7fd88708c0c9 [ 2960.715227][ T6190] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2960.734844][ T6190] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2960.743258][ T6190] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2960.751241][ T6190] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2960.759213][ T6190] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2960.767180][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2960.775150][ T6190] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2960.783145][ T6190] 10:22:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2960.911094][ T6190] memory: usage 307200kB, limit 307200kB, failcnt 17153 [ 2960.931690][ T6190] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2960.961022][ T6190] Memory cgroup stats for /syz3: [ 2960.961248][ T6190] anon 2899968 [ 2960.961248][ T6190] file 10280960 [ 2960.961248][ T6190] kernel 301391872 [ 2960.961248][ T6190] kernel_stack 851968 [ 2960.961248][ T6190] pagetables 1667072 [ 2960.961248][ T6190] sec_pagetables 0 [ 2960.961248][ T6190] percpu 5136736 [ 2960.961248][ T6190] sock 0 [ 2960.961248][ T6190] vmalloc 0 [ 2960.961248][ T6190] shmem 10280960 [ 2960.961248][ T6190] zswap 0 [ 2960.961248][ T6190] zswapped 0 10:22:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00090000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2960.961248][ T6190] file_mapped 262144 [ 2960.961248][ T6190] file_dirty 0 [ 2960.961248][ T6190] file_writeback 0 [ 2960.961248][ T6190] swapcached 0 [ 2960.961248][ T6190] anon_thp 0 [ 2960.961248][ T6190] file_thp 0 [ 2960.961248][ T6190] shmem_thp 0 [ 2960.961248][ T6190] inactive_anon 2904064 [ 2960.961248][ T6190] active_anon 10276864 [ 2960.961248][ T6190] inactive_file 0 [ 2960.961248][ T6190] active_file 0 [ 2960.961248][ T6190] unevictable 0 [ 2960.961248][ T6190] slab_reclaimable 279872 [ 2960.961248][ T6190] slab_unreclaimable 293023328 10:22:50 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x60) [ 2961.114189][ T6190] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6188,uid=0 [ 2961.141051][ T6190] Memory cgroup out of memory: Killed process 6188 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000df8000a000f"], 0x28}}, 0x0) 10:22:50 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x88a8ffff}, 0x0) 10:22:50 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x0, 0x882) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6ffb6709d32ebf050c6d5228db58943bea26c65a8f456ae5", 0x18}, {&(0x7f0000000300)="5092a767334390db7054ab86b1301d6700b4e9a39993f8f3a9478c337dab3dc9bbb3234ab2d072ac63a97f032b6f6e0e9e2afffc06f93caf7e97c5ae23445042e031d083ab686b07c16a8a7fb526a74dcb829ec9fa8b951352d2f7754950d48ba50cec7490df9fdcb0dbd44fb1990c2939261cf8a043af2697d9c1c1b11c5675d72003159bd5e93dcf488a78519fe276e8ab5f8108075309d7519110ff27d18cb4b70fc8a082cedaba3b5df90b70", 0xae}, {&(0x7f0000000440)="6f04c7965847d7d6cfdc5ce057dad4dbf3220126ee705fab4f420ed5e778c46de2b48b01531cdb9c42d025c1cccc0abb2da2487c502d09d56194df227389579793421a99fdea8c574d11a829a76e0754e34eb28f2cfcfac8dedf1a1c", 0x5c}, {&(0x7f00000004c0)="ce853b02322d3804401d48328b6ad065e1424963120c7f13879fe7b0fb73551188e722029eed654b3e34da53484591e50f5daef717053c3b3fc55eb1e64e4a87fbe094fbe55daf84ec9bc570027943f379cfa046d5863cb1e50a5d54f22e5c96e57dc6b4b9c6b7302bf0ed8083e9b16071b5f1e58a76e17a0b76aa3426a44e39ace602342687750c483aef74bfab685df3f52ed8b84dec979ecad29d6e6711abe3251e377afe3d12e566f347d72227973f9bfb00e9b1e38d", 0xb8}], 0x4, &(0x7f0000000580)=[{0xe8, 0x3a, 0x3, "b34b1860d39f522f0d0fbd78319d36dd24c9ce6710709465680a10d75f1dd9bee4aa2976a2ca3b65c97d0f6ac181903cef9b9f6a05e7abc6a9efbed3255b41dfe41fa27f457646c5121b627593769fcf1dbef471ed2dcd0d0a4aa228f549bc009e53bbb29e228fe2355ef9f70d173a729a556e1e6df4e060b697bac068f1eae23ecc97ca85304432bcfc9b1aa248c83e753920d9972276a01fe043a762723adacd7ae6f8723eda002ff8174a09c779852c721adaaaf319f0f1f74f8b71b1f7dec6265f11d024cd7877e72e6b7d69ae9c928e3777d3b9a49a"}, {0x78, 0x0, 0x3, "4e613f6a96401ced42f3b6b7d09aae1619dbeeedb9b6a5e0e44c61be5b949b4399d87b678b5fb2bd26d8d18f61bee092c2f11b60ea4bf1f21283f768d7b3a53e302da120f8206fbb36f4bfc7e628bd5b8cbf6565d39bd6acc3e0d97e6f8818e984c7726f"}, {0x40, 0x1, 0x10000, "4f43cbf2c2544c2e3ed688452a1e78f2ebf85b374112ee99d91505d0cb3ec50d2ea8291d467d44036c8df58d3a27b038"}, {0xd0, 0x0, 0x9, "ec9e0f1a8116df399476aaa04ccd8475cb2055a57bf5777a793e21caade17085c186f1c6844759e00185e023394e554181fe6d0c6666eb78b04fb4fd3b5f81d707ac3968c9fd1a0165246f820a1bc3fee20eff784f0b4c167ad33c43bb1ddd59720281d794afa100464ac8eb324b4ad9d9337e855474ce4a06dfdb3a398e9245bd16af401e112513e3f111c086570c6084b79295e46808cf3a554f5f0a9c5b6f76ed96b06bf22ac8cc6bf2958ed6cce1d8e5e61da2bc999fa4cb581b73"}, {0xa8, 0x84, 0x13, "106fe8312bfd10dc74f7b200367b67a49e921584593dfb4ebae260fb9cbcba5f6ca7d67856a4eaec65eda4fcaab7581ecce881e30d807cf8b60eca64a0d4fc92b2a3dcdcc7778d9012f951f9653681b9d9ecf0655ee8e7eb5e97f47498b46ceb676befd7b82b13aeb7cfadc6239b1592a0a76f066fac4f388e16a77e01bb5a971d43955ef1f73c98709e234b07c9b2cceb"}, {0xd8, 0x10e, 0x300, "456cf012f5b3e4dbfe2100d475bbb2612987f9b988a3eb61436223e2fbf70b80e6e924b0d2f52a2b86e2d02ec7a71fe5378424b315df39fd3e3acb0120413276f640460d0ff4f971958e5007acbe15ba54693362ab0e83d1ca8299a97f9434bc97878d5e81fefb584534197a0915b30ba148781d7022a65803cea03d32d845c22797c78eea830796dd3463266d879e2cc95dda588c1692ae4b63b2d38dabff896a1dbdf268bf2da7ed5afb673e27b4e867476bd9136cdf7d44423f863a7c8149a901737b"}, {0x70, 0x115, 0xffff, "9110a32d7a5a89b1cd31e479f695baf5cbc433d91dec7272fca1dc72b6c7e0db286816c833611d2cafe3daa88b20392a415d28768ca181383ce37f6e2ad2be2f3fbeaa11dda2945561c0a8f29af9030c422a0cd9dcc1f141a2c46190ef615d"}, {0x18, 0x10b, 0x9, "8e8f"}], 0x478}}, {{&(0x7f0000000a00)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null]}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)="0791d1df406eb6bb9ab4fb4edd59ceaaa3b6172ed30803069d666899bb8c8e9d034bc9bb2826d81e84398addf779b2b8878533d317404e9161ed17edf52062065321f9d7d97ac8f496c8ccee1bed5f90244898f12f6798280ee8160edbb800020dcf75d7b0f081faf958dbc14597dc8d20b637393ab2fdb04da00690b2935b9f842b0e7578aca31af07d4b03f2b02d9cb996d21df33f724dea901c5a01f9f2eff558eb3d1a68b5d7ba1abaa40f2894ba40f6d3f984856facfa371567f2006a1f274116639f6a739b2a26", 0xca}, {&(0x7f0000000b80)="5ac0690f78789f611c9e22d5cab448e2309d90db5277386d63195091b57c6e0c004be89bfe2d2de3986eecb388fe48eae7135a15a7a094323492eb7d84083634a610f9cbdc068c91a2973eb4543c9e393f9d30ce86b10e3a54efec2b4e395ec3e613706d321270da0d5e5d43384f6a16f5b7ec8489a674068e378ed86efc0ce766b5f1565bceb8ed93ce3227f873db72ecb8e229cec82c26ebfe20b56d6a140a33fd351c87d98a8bbb92c97317c9fd689e9aaa2e", 0xb4}, {&(0x7f0000000c40)="7efcd99578dc8a899848709002aa98", 0xf}], 0x3, &(0x7f0000000cc0)=[{0xa8, 0x101, 0x6, "4e8d237d1d7ca98f0addf9db88a9e74dea5c9712f103cffc43942e26838c6dd6f9c6304f7bce2f701f76654e869535db4c3cbe264bfffb833f57a0708a6628f14d886e0d5a56e86255aee8a0bb552d3f6c4d093e19498b826659e9de8b39af2fc243894d660dd9cb142a15a0ca2223f7d984d27252617351968f61abcb8a07d1a2bd76008f9ee4c24a8e30fd907be16191"}, {0x110, 0x119, 0x7, "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"}], 0x1b8}}], 0x2, 0x48090) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x0, 0x882) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6ffb6709d32ebf050c6d5228db58943bea26c65a8f456ae5", 0x18}, {&(0x7f0000000300)="5092a767334390db7054ab86b1301d6700b4e9a39993f8f3a9478c337dab3dc9bbb3234ab2d072ac63a97f032b6f6e0e9e2afffc06f93caf7e97c5ae23445042e031d083ab686b07c16a8a7fb526a74dcb829ec9fa8b951352d2f7754950d48ba50cec7490df9fdcb0dbd44fb1990c2939261cf8a043af2697d9c1c1b11c5675d72003159bd5e93dcf488a78519fe276e8ab5f8108075309d7519110ff27d18cb4b70fc8a082cedaba3b5df90b70", 0xae}, {&(0x7f0000000440)="6f04c7965847d7d6cfdc5ce057dad4dbf3220126ee705fab4f420ed5e778c46de2b48b01531cdb9c42d025c1cccc0abb2da2487c502d09d56194df227389579793421a99fdea8c574d11a829a76e0754e34eb28f2cfcfac8dedf1a1c", 0x5c}, {&(0x7f00000004c0)="ce853b02322d3804401d48328b6ad065e1424963120c7f13879fe7b0fb73551188e722029eed654b3e34da53484591e50f5daef717053c3b3fc55eb1e64e4a87fbe094fbe55daf84ec9bc570027943f379cfa046d5863cb1e50a5d54f22e5c96e57dc6b4b9c6b7302bf0ed8083e9b16071b5f1e58a76e17a0b76aa3426a44e39ace602342687750c483aef74bfab685df3f52ed8b84dec979ecad29d6e6711abe3251e377afe3d12e566f347d72227973f9bfb00e9b1e38d", 0xb8}], 0x4, &(0x7f0000000580)=[{0xe8, 0x3a, 0x3, "b34b1860d39f522f0d0fbd78319d36dd24c9ce6710709465680a10d75f1dd9bee4aa2976a2ca3b65c97d0f6ac181903cef9b9f6a05e7abc6a9efbed3255b41dfe41fa27f457646c5121b627593769fcf1dbef471ed2dcd0d0a4aa228f549bc009e53bbb29e228fe2355ef9f70d173a729a556e1e6df4e060b697bac068f1eae23ecc97ca85304432bcfc9b1aa248c83e753920d9972276a01fe043a762723adacd7ae6f8723eda002ff8174a09c779852c721adaaaf319f0f1f74f8b71b1f7dec6265f11d024cd7877e72e6b7d69ae9c928e3777d3b9a49a"}, {0x78, 0x0, 0x3, "4e613f6a96401ced42f3b6b7d09aae1619dbeeedb9b6a5e0e44c61be5b949b4399d87b678b5fb2bd26d8d18f61bee092c2f11b60ea4bf1f21283f768d7b3a53e302da120f8206fbb36f4bfc7e628bd5b8cbf6565d39bd6acc3e0d97e6f8818e984c7726f"}, {0x40, 0x1, 0x10000, "4f43cbf2c2544c2e3ed688452a1e78f2ebf85b374112ee99d91505d0cb3ec50d2ea8291d467d44036c8df58d3a27b038"}, {0xd0, 0x0, 0x9, "ec9e0f1a8116df399476aaa04ccd8475cb2055a57bf5777a793e21caade17085c186f1c6844759e00185e023394e554181fe6d0c6666eb78b04fb4fd3b5f81d707ac3968c9fd1a0165246f820a1bc3fee20eff784f0b4c167ad33c43bb1ddd59720281d794afa100464ac8eb324b4ad9d9337e855474ce4a06dfdb3a398e9245bd16af401e112513e3f111c086570c6084b79295e46808cf3a554f5f0a9c5b6f76ed96b06bf22ac8cc6bf2958ed6cce1d8e5e61da2bc999fa4cb581b73"}, {0xa8, 0x84, 0x13, "106fe8312bfd10dc74f7b200367b67a49e921584593dfb4ebae260fb9cbcba5f6ca7d67856a4eaec65eda4fcaab7581ecce881e30d807cf8b60eca64a0d4fc92b2a3dcdcc7778d9012f951f9653681b9d9ecf0655ee8e7eb5e97f47498b46ceb676befd7b82b13aeb7cfadc6239b1592a0a76f066fac4f388e16a77e01bb5a971d43955ef1f73c98709e234b07c9b2cceb"}, {0xd8, 0x10e, 0x300, "456cf012f5b3e4dbfe2100d475bbb2612987f9b988a3eb61436223e2fbf70b80e6e924b0d2f52a2b86e2d02ec7a71fe5378424b315df39fd3e3acb0120413276f640460d0ff4f971958e5007acbe15ba54693362ab0e83d1ca8299a97f9434bc97878d5e81fefb584534197a0915b30ba148781d7022a65803cea03d32d845c22797c78eea830796dd3463266d879e2cc95dda588c1692ae4b63b2d38dabff896a1dbdf268bf2da7ed5afb673e27b4e867476bd9136cdf7d44423f863a7c8149a901737b"}, {0x70, 0x115, 0xffff, "9110a32d7a5a89b1cd31e479f695baf5cbc433d91dec7272fca1dc72b6c7e0db286816c833611d2cafe3daa88b20392a415d28768ca181383ce37f6e2ad2be2f3fbeaa11dda2945561c0a8f29af9030c422a0cd9dcc1f141a2c46190ef615d"}, {0x18, 0x10b, 0x9, "8e8f"}], 0x478}}, {{&(0x7f0000000a00)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null]}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)="0791d1df406eb6bb9ab4fb4edd59ceaaa3b6172ed30803069d666899bb8c8e9d034bc9bb2826d81e84398addf779b2b8878533d317404e9161ed17edf52062065321f9d7d97ac8f496c8ccee1bed5f90244898f12f6798280ee8160edbb800020dcf75d7b0f081faf958dbc14597dc8d20b637393ab2fdb04da00690b2935b9f842b0e7578aca31af07d4b03f2b02d9cb996d21df33f724dea901c5a01f9f2eff558eb3d1a68b5d7ba1abaa40f2894ba40f6d3f984856facfa371567f2006a1f274116639f6a739b2a26", 0xca}, {&(0x7f0000000b80)="5ac0690f78789f611c9e22d5cab448e2309d90db5277386d63195091b57c6e0c004be89bfe2d2de3986eecb388fe48eae7135a15a7a094323492eb7d84083634a610f9cbdc068c91a2973eb4543c9e393f9d30ce86b10e3a54efec2b4e395ec3e613706d321270da0d5e5d43384f6a16f5b7ec8489a674068e378ed86efc0ce766b5f1565bceb8ed93ce3227f873db72ecb8e229cec82c26ebfe20b56d6a140a33fd351c87d98a8bbb92c97317c9fd689e9aaa2e", 0xb4}, {&(0x7f0000000c40)="7efcd99578dc8a899848709002aa98", 0xf}], 0x3, &(0x7f0000000cc0)=[{0xa8, 0x101, 0x6, "4e8d237d1d7ca98f0addf9db88a9e74dea5c9712f103cffc43942e26838c6dd6f9c6304f7bce2f701f76654e869535db4c3cbe264bfffb833f57a0708a6628f14d886e0d5a56e86255aee8a0bb552d3f6c4d093e19498b826659e9de8b39af2fc243894d660dd9cb142a15a0ca2223f7d984d27252617351968f61abcb8a07d1a2bd76008f9ee4c24a8e30fd907be16191"}, {0x110, 0x119, 0x7, "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"}], 0x1b8}}], 0x2, 0x48090) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) (async) 10:22:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000a0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000b0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:51 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf0) 10:22:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000f0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2961.374500][ T6219] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2961.422801][ T6219] CPU: 0 PID: 6219 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2961.433208][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2961.443305][ T6219] Call Trace: [ 2961.446612][ T6219] [ 2961.449926][ T6219] dump_stack_lvl+0xd1/0x138 [ 2961.454572][ T6219] dump_header+0x10b/0x85f [ 2961.459063][ T6219] oom_kill_process.cold+0x10/0x15 [ 2961.464333][ T6219] out_of_memory+0x35c/0x14a0 10:22:51 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x9effffff}, 0x0) [ 2961.469081][ T6219] ? find_held_lock+0x2d/0x110 [ 2961.473899][ T6219] ? oom_killer_disable+0x280/0x280 [ 2961.479158][ T6219] ? find_held_lock+0x2d/0x110 [ 2961.483992][ T6219] mem_cgroup_out_of_memory+0x206/0x270 [ 2961.489604][ T6219] ? mem_cgroup_margin+0x130/0x130 [ 2961.494763][ T6219] ? lock_downgrade+0x6e0/0x6e0 [ 2961.499802][ T6219] try_charge_memcg+0xefb/0x12f0 [ 2961.504789][ T6219] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2961.510824][ T6219] ? lock_downgrade+0x6e0/0x6e0 [ 2961.515747][ T6219] charge_memcg+0x90/0x3b0 10:22:51 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x300) [ 2961.520200][ T6219] __mem_cgroup_charge+0x2b/0x90 [ 2961.525188][ T6219] ? copy_mc_to_kernel+0x3e/0x90 [ 2961.530297][ T6219] do_wp_page+0x7ec/0x3370 [ 2961.534973][ T6219] ? lock_release+0x810/0x810 [ 2961.539700][ T6219] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2961.545127][ T6219] ? do_raw_spin_lock+0x124/0x2b0 [ 2961.550200][ T6219] ? rwlock_bug.part.0+0x90/0x90 [ 2961.555179][ T6219] ? lock_chain_count+0x20/0x20 [ 2961.560076][ T6219] __handle_mm_fault+0x1f58/0x3c90 [ 2961.565244][ T6219] ? vm_iomap_memory+0x190/0x190 [ 2961.570256][ T6219] handle_mm_fault+0x1b6/0x850 [ 2961.575073][ T6219] do_user_addr_fault+0x475/0x1210 [ 2961.580242][ T6219] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2961.585852][ T6219] exc_page_fault+0x98/0x170 [ 2961.590488][ T6219] asm_exc_page_fault+0x26/0x30 [ 2961.595369][ T6219] RIP: 0033:0x7fd887036645 [ 2961.599819][ T6219] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d 7e 1a 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 2d 73 17 00 48 8b 53 10 4c 8d 81 00 [ 2961.619816][ T6219] RSP: 002b:00007fd8872cfb70 EFLAGS: 00010206 [ 2961.625931][ T6219] RAX: 0000000000000003 RBX: 00007fd8871abf80 RCX: 00007fd8871a80c0 [ 2961.633939][ T6219] RDX: 00007fd8871a80c0 RSI: 0000000000000080 RDI: 00007fd8871abf80 [ 2961.641936][ T6219] RBP: 00007fd8871abf80 R08: 00007ffda7993080 R09: 0000000000000000 [ 2961.649938][ T6219] R10: 00007fd8872cfc80 R11: 0000000000000246 R12: 00000000002d2f92 [ 2961.658033][ T6219] R13: 00007fd8872cfc80 R14: 00007fd8871abf80 R15: 0000000000000032 [ 2961.666060][ T6219] [ 2961.719069][ T6219] memory: usage 307188kB, limit 307200kB, failcnt 17237 [ 2961.732725][ T6219] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2961.739841][ T6219] Memory cgroup stats for /syz3: [ 2961.740071][ T6219] anon 2863104 [ 2961.740071][ T6219] file 10280960 [ 2961.740071][ T6219] kernel 301416448 [ 2961.740071][ T6219] kernel_stack 851968 [ 2961.740071][ T6219] pagetables 1667072 [ 2961.740071][ T6219] sec_pagetables 0 [ 2961.740071][ T6219] percpu 5136736 [ 2961.740071][ T6219] sock 0 [ 2961.740071][ T6219] vmalloc 0 [ 2961.740071][ T6219] shmem 10280960 [ 2961.740071][ T6219] zswap 0 [ 2961.740071][ T6219] zswapped 0 [ 2961.740071][ T6219] file_mapped 262144 [ 2961.740071][ T6219] file_dirty 0 [ 2961.740071][ T6219] file_writeback 0 [ 2961.740071][ T6219] swapcached 0 [ 2961.740071][ T6219] anon_thp 0 [ 2961.740071][ T6219] file_thp 0 [ 2961.740071][ T6219] shmem_thp 0 [ 2961.740071][ T6219] inactive_anon 2867200 [ 2961.740071][ T6219] active_anon 10276864 [ 2961.740071][ T6219] inactive_file 0 [ 2961.740071][ T6219] active_file 0 [ 2961.740071][ T6219] unevictable 0 [ 2961.740071][ T6219] slab_reclaimable 291872 [ 2961.740071][ T6219] slab_unreclaimable 293036576 10:22:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00100000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:51 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x500) [ 2961.955140][ T6219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6219,uid=0 [ 2961.981672][ T6219] Memory cgroup out of memory: Killed process 6219 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000bfc000a000f"], 0x28}}, 0x0) 10:22:51 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) memfd_secret(0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x0, 0x882) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6ffb6709d32ebf050c6d5228db58943bea26c65a8f456ae5", 0x18}, {&(0x7f0000000300)="5092a767334390db7054ab86b1301d6700b4e9a39993f8f3a9478c337dab3dc9bbb3234ab2d072ac63a97f032b6f6e0e9e2afffc06f93caf7e97c5ae23445042e031d083ab686b07c16a8a7fb526a74dcb829ec9fa8b951352d2f7754950d48ba50cec7490df9fdcb0dbd44fb1990c2939261cf8a043af2697d9c1c1b11c5675d72003159bd5e93dcf488a78519fe276e8ab5f8108075309d7519110ff27d18cb4b70fc8a082cedaba3b5df90b70", 0xae}, {&(0x7f0000000440)="6f04c7965847d7d6cfdc5ce057dad4dbf3220126ee705fab4f420ed5e778c46de2b48b01531cdb9c42d025c1cccc0abb2da2487c502d09d56194df227389579793421a99fdea8c574d11a829a76e0754e34eb28f2cfcfac8dedf1a1c", 0x5c}, {&(0x7f00000004c0)="ce853b02322d3804401d48328b6ad065e1424963120c7f13879fe7b0fb73551188e722029eed654b3e34da53484591e50f5daef717053c3b3fc55eb1e64e4a87fbe094fbe55daf84ec9bc570027943f379cfa046d5863cb1e50a5d54f22e5c96e57dc6b4b9c6b7302bf0ed8083e9b16071b5f1e58a76e17a0b76aa3426a44e39ace602342687750c483aef74bfab685df3f52ed8b84dec979ecad29d6e6711abe3251e377afe3d12e566f347d72227973f9bfb00e9b1e38d", 0xb8}], 0x4, &(0x7f0000000580)=[{0xe8, 0x3a, 0x3, "b34b1860d39f522f0d0fbd78319d36dd24c9ce6710709465680a10d75f1dd9bee4aa2976a2ca3b65c97d0f6ac181903cef9b9f6a05e7abc6a9efbed3255b41dfe41fa27f457646c5121b627593769fcf1dbef471ed2dcd0d0a4aa228f549bc009e53bbb29e228fe2355ef9f70d173a729a556e1e6df4e060b697bac068f1eae23ecc97ca85304432bcfc9b1aa248c83e753920d9972276a01fe043a762723adacd7ae6f8723eda002ff8174a09c779852c721adaaaf319f0f1f74f8b71b1f7dec6265f11d024cd7877e72e6b7d69ae9c928e3777d3b9a49a"}, {0x78, 0x0, 0x3, "4e613f6a96401ced42f3b6b7d09aae1619dbeeedb9b6a5e0e44c61be5b949b4399d87b678b5fb2bd26d8d18f61bee092c2f11b60ea4bf1f21283f768d7b3a53e302da120f8206fbb36f4bfc7e628bd5b8cbf6565d39bd6acc3e0d97e6f8818e984c7726f"}, {0x40, 0x1, 0x10000, "4f43cbf2c2544c2e3ed688452a1e78f2ebf85b374112ee99d91505d0cb3ec50d2ea8291d467d44036c8df58d3a27b038"}, {0xd0, 0x0, 0x9, "ec9e0f1a8116df399476aaa04ccd8475cb2055a57bf5777a793e21caade17085c186f1c6844759e00185e023394e554181fe6d0c6666eb78b04fb4fd3b5f81d707ac3968c9fd1a0165246f820a1bc3fee20eff784f0b4c167ad33c43bb1ddd59720281d794afa100464ac8eb324b4ad9d9337e855474ce4a06dfdb3a398e9245bd16af401e112513e3f111c086570c6084b79295e46808cf3a554f5f0a9c5b6f76ed96b06bf22ac8cc6bf2958ed6cce1d8e5e61da2bc999fa4cb581b73"}, {0xa8, 0x84, 0x13, "106fe8312bfd10dc74f7b200367b67a49e921584593dfb4ebae260fb9cbcba5f6ca7d67856a4eaec65eda4fcaab7581ecce881e30d807cf8b60eca64a0d4fc92b2a3dcdcc7778d9012f951f9653681b9d9ecf0655ee8e7eb5e97f47498b46ceb676befd7b82b13aeb7cfadc6239b1592a0a76f066fac4f388e16a77e01bb5a971d43955ef1f73c98709e234b07c9b2cceb"}, {0xd8, 0x10e, 0x300, "456cf012f5b3e4dbfe2100d475bbb2612987f9b988a3eb61436223e2fbf70b80e6e924b0d2f52a2b86e2d02ec7a71fe5378424b315df39fd3e3acb0120413276f640460d0ff4f971958e5007acbe15ba54693362ab0e83d1ca8299a97f9434bc97878d5e81fefb584534197a0915b30ba148781d7022a65803cea03d32d845c22797c78eea830796dd3463266d879e2cc95dda588c1692ae4b63b2d38dabff896a1dbdf268bf2da7ed5afb673e27b4e867476bd9136cdf7d44423f863a7c8149a901737b"}, {0x70, 0x115, 0xffff, "9110a32d7a5a89b1cd31e479f695baf5cbc433d91dec7272fca1dc72b6c7e0db286816c833611d2cafe3daa88b20392a415d28768ca181383ce37f6e2ad2be2f3fbeaa11dda2945561c0a8f29af9030c422a0cd9dcc1f141a2c46190ef615d"}, {0x18, 0x10b, 0x9, "8e8f"}], 0x478}}, {{&(0x7f0000000a00)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null]}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a80)="0791d1df406eb6bb9ab4fb4edd59ceaaa3b6172ed30803069d666899bb8c8e9d034bc9bb2826d81e84398addf779b2b8878533d317404e9161ed17edf52062065321f9d7d97ac8f496c8ccee1bed5f90244898f12f6798280ee8160edbb800020dcf75d7b0f081faf958dbc14597dc8d20b637393ab2fdb04da00690b2935b9f842b0e7578aca31af07d4b03f2b02d9cb996d21df33f724dea901c5a01f9f2eff558eb3d1a68b5d7ba1abaa40f2894ba40f6d3f984856facfa371567f2006a1f274116639f6a739b2a26", 0xca}, {&(0x7f0000000b80)="5ac0690f78789f611c9e22d5cab448e2309d90db5277386d63195091b57c6e0c004be89bfe2d2de3986eecb388fe48eae7135a15a7a094323492eb7d84083634a610f9cbdc068c91a2973eb4543c9e393f9d30ce86b10e3a54efec2b4e395ec3e613706d321270da0d5e5d43384f6a16f5b7ec8489a674068e378ed86efc0ce766b5f1565bceb8ed93ce3227f873db72ecb8e229cec82c26ebfe20b56d6a140a33fd351c87d98a8bbb92c97317c9fd689e9aaa2e", 0xb4}, {&(0x7f0000000c40)="7efcd99578dc8a899848709002aa98", 0xf}], 0x3, &(0x7f0000000cc0)=[{0xa8, 0x101, 0x6, "4e8d237d1d7ca98f0addf9db88a9e74dea5c9712f103cffc43942e26838c6dd6f9c6304f7bce2f701f76654e869535db4c3cbe264bfffb833f57a0708a6628f14d886e0d5a56e86255aee8a0bb552d3f6c4d093e19498b826659e9de8b39af2fc243894d660dd9cb142a15a0ca2223f7d984d27252617351968f61abcb8a07d1a2bd76008f9ee4c24a8e30fd907be16191"}, {0x110, 0x119, 0x7, "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"}], 0x1b8}}], 0x2, 0x48090) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) 10:22:51 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xc00e0000}, 0x0) 10:22:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00110000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00130000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00280000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00480000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2962.372497][ T6261] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:52 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000001580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x104, 0x1ad941, 0x23456, {0x0, r9}}, 0x42) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r9}}, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e, 0x0, 0x0, {0x0, r9}}, 0x80004) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2962.415585][ T6261] CPU: 0 PID: 6261 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2962.426079][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2962.436173][ T6261] Call Trace: [ 2962.439494][ T6261] [ 2962.442456][ T6261] dump_stack_lvl+0xd1/0x138 [ 2962.447110][ T6261] dump_header+0x10b/0x85f [ 2962.451585][ T6261] oom_kill_process.cold+0x10/0x15 [ 2962.456784][ T6261] out_of_memory+0x35c/0x14a0 [ 2962.461536][ T6261] ? find_held_lock+0x2d/0x110 [ 2962.466363][ T6261] ? oom_killer_disable+0x280/0x280 [ 2962.471629][ T6261] ? find_held_lock+0x2d/0x110 [ 2962.476460][ T6261] mem_cgroup_out_of_memory+0x206/0x270 [ 2962.482057][ T6261] ? mem_cgroup_margin+0x130/0x130 [ 2962.487263][ T6261] ? lock_downgrade+0x6e0/0x6e0 [ 2962.492190][ T6261] try_charge_memcg+0xefb/0x12f0 [ 2962.497631][ T6261] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2962.503697][ T6261] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2962.509492][ T6261] ? lock_downgrade+0x6e0/0x6e0 10:22:52 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000001580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x104, 0x1ad941, 0x23456, {0x0, r9}}, 0x42) (async) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r9}}, 0x2) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e, 0x0, 0x0, {0x0, r9}}, 0x80004) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2962.514408][ T6261] ? lock_downgrade+0x6e0/0x6e0 [ 2962.519335][ T6261] obj_cgroup_charge+0x2af/0x5e0 [ 2962.524357][ T6261] kmem_cache_alloc_lru+0x145/0x760 [ 2962.529606][ T6261] ? sock_alloc_inode+0x27/0x1d0 [ 2962.534601][ T6261] sock_alloc_inode+0x27/0x1d0 [ 2962.539405][ T6261] ? sock_free_inode+0x30/0x30 [ 2962.544221][ T6261] alloc_inode+0x61/0x230 [ 2962.548600][ T6261] new_inode_pseudo+0x17/0x80 [ 2962.553331][ T6261] sock_alloc+0x40/0x260 [ 2962.557623][ T6261] __sock_create+0xbd/0x790 [ 2962.562200][ T6261] __sys_socket+0x133/0x250 [ 2962.566848][ T6261] ? __sys_socket_file+0x1f0/0x1f0 [ 2962.572106][ T6261] __x64_sys_socket+0x73/0xb0 [ 2962.576844][ T6261] do_syscall_64+0x39/0xb0 [ 2962.581308][ T6261] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2962.587246][ T6261] RIP: 0033:0x7fd88708c0c9 [ 2962.591702][ T6261] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 10:22:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="004c0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2962.611788][ T6261] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2962.621071][ T6261] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2962.629104][ T6261] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2962.637118][ T6261] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2962.645124][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2962.653138][ T6261] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2962.661157][ T6261] 10:22:52 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x600) [ 2962.701235][ T6261] memory: usage 307200kB, limit 307200kB, failcnt 17346 [ 2962.716706][ T6261] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2962.737018][ T6261] Memory cgroup stats for /syz3: [ 2962.737263][ T6261] anon 2899968 [ 2962.737263][ T6261] file 10280960 [ 2962.737263][ T6261] kernel 301391872 [ 2962.737263][ T6261] kernel_stack 851968 [ 2962.737263][ T6261] pagetables 1667072 [ 2962.737263][ T6261] sec_pagetables 0 [ 2962.737263][ T6261] percpu 5136736 [ 2962.737263][ T6261] sock 0 [ 2962.737263][ T6261] vmalloc 0 [ 2962.737263][ T6261] shmem 10280960 [ 2962.737263][ T6261] zswap 0 [ 2962.737263][ T6261] zswapped 0 [ 2962.737263][ T6261] file_mapped 262144 [ 2962.737263][ T6261] file_dirty 0 [ 2962.737263][ T6261] file_writeback 0 [ 2962.737263][ T6261] swapcached 0 [ 2962.737263][ T6261] anon_thp 0 [ 2962.737263][ T6261] file_thp 0 [ 2962.737263][ T6261] shmem_thp 0 [ 2962.737263][ T6261] inactive_anon 2904064 [ 2962.737263][ T6261] active_anon 10276864 [ 2962.737263][ T6261] inactive_file 0 [ 2962.737263][ T6261] active_file 0 [ 2962.737263][ T6261] unevictable 0 [ 2962.737263][ T6261] slab_reclaimable 279872 [ 2962.737263][ T6261] slab_unreclaimable 293023328 [ 2962.883202][ T6261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6249,uid=0 [ 2962.911891][ T6261] Memory cgroup out of memory: Killed process 6249 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000dfc000a000f"], 0x28}}, 0x0) 10:22:52 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xd3470000}, 0x0) 10:22:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00600000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:52 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000001580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x104, 0x1ad941, 0x23456, {0x0, r9}}, 0x42) (async) syz_io_uring_submit(r5, r7, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r9}}, 0x2) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e, 0x0, 0x0, {0x0, r9}}, 0x80004) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:52 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x700) 10:22:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00680000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:52 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x608082, 0x0) r6 = memfd_secret(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x80000000}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0xb, 0x6, 0x6, 0xffffffffffffffe0, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xfa, &(0x7f0000000440)=""/250, 0x41000, 0x5, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x5, 0x6, 0x1}, 0x10}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="006c0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2963.338513][ T6301] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00740000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2963.425058][ T6301] CPU: 1 PID: 6301 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2963.435468][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2963.445567][ T6301] Call Trace: [ 2963.448888][ T6301] [ 2963.451857][ T6301] dump_stack_lvl+0xd1/0x138 [ 2963.456507][ T6301] dump_header+0x10b/0x85f [ 2963.460992][ T6301] oom_kill_process.cold+0x10/0x15 [ 2963.466165][ T6301] out_of_memory+0x35c/0x14a0 [ 2963.470903][ T6301] ? find_held_lock+0x2d/0x110 [ 2963.475732][ T6301] ? oom_killer_disable+0x280/0x280 [ 2963.480988][ T6301] ? find_held_lock+0x2d/0x110 [ 2963.485804][ T6301] mem_cgroup_out_of_memory+0x206/0x270 [ 2963.491401][ T6301] ? mem_cgroup_margin+0x130/0x130 [ 2963.496567][ T6301] ? lock_downgrade+0x6e0/0x6e0 [ 2963.501476][ T6301] try_charge_memcg+0xefb/0x12f0 [ 2963.506460][ T6301] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2963.512486][ T6301] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2963.518262][ T6301] ? lock_downgrade+0x6e0/0x6e0 10:22:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="007a0000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2963.523161][ T6301] ? lock_downgrade+0x6e0/0x6e0 [ 2963.528069][ T6301] obj_cgroup_charge+0x2af/0x5e0 [ 2963.533067][ T6301] kmem_cache_alloc_lru+0x145/0x760 [ 2963.538305][ T6301] ? sock_alloc_inode+0x27/0x1d0 [ 2963.543388][ T6301] sock_alloc_inode+0x27/0x1d0 [ 2963.548203][ T6301] ? sock_free_inode+0x30/0x30 [ 2963.553018][ T6301] alloc_inode+0x61/0x230 [ 2963.557396][ T6301] new_inode_pseudo+0x17/0x80 [ 2963.562119][ T6301] sock_alloc+0x40/0x260 [ 2963.566401][ T6301] __sock_create+0xbd/0x790 [ 2963.570958][ T6301] __sys_socket+0x133/0x250 10:22:53 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf0ffffff}, 0x0) [ 2963.575512][ T6301] ? __sys_socket_file+0x1f0/0x1f0 [ 2963.580678][ T6301] __x64_sys_socket+0x73/0xb0 [ 2963.585433][ T6301] do_syscall_64+0x39/0xb0 [ 2963.590048][ T6301] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2963.596128][ T6301] RIP: 0033:0x7fd88708c0c9 [ 2963.600578][ T6301] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2963.620232][ T6301] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2963.628705][ T6301] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2963.636726][ T6301] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2963.644745][ T6301] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2963.652772][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2963.660791][ T6301] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2963.668832][ T6301] [ 2963.768618][ T6301] memory: usage 307200kB, limit 307200kB, failcnt 17473 [ 2963.780895][ T6301] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2963.791130][ T6301] Memory cgroup stats for /syz3: [ 2963.791340][ T6301] anon 2899968 [ 2963.791340][ T6301] file 10280960 [ 2963.791340][ T6301] kernel 301391872 [ 2963.791340][ T6301] kernel_stack 851968 [ 2963.791340][ T6301] pagetables 1667072 [ 2963.791340][ T6301] sec_pagetables 0 [ 2963.791340][ T6301] percpu 5136736 [ 2963.791340][ T6301] sock 0 [ 2963.791340][ T6301] vmalloc 0 [ 2963.791340][ T6301] shmem 10280960 [ 2963.791340][ T6301] zswap 0 [ 2963.791340][ T6301] zswapped 0 [ 2963.791340][ T6301] file_mapped 262144 [ 2963.791340][ T6301] file_dirty 0 [ 2963.791340][ T6301] file_writeback 0 [ 2963.791340][ T6301] swapcached 0 [ 2963.791340][ T6301] anon_thp 0 [ 2963.791340][ T6301] file_thp 0 [ 2963.791340][ T6301] shmem_thp 0 [ 2963.791340][ T6301] inactive_anon 2904064 [ 2963.791340][ T6301] active_anon 10276864 [ 2963.791340][ T6301] inactive_file 0 [ 2963.791340][ T6301] active_file 0 [ 2963.791340][ T6301] unevictable 0 [ 2963.791340][ T6301] slab_reclaimable 279872 [ 2963.791340][ T6301] slab_unreclaimable 293023328 [ 2963.921783][ T6301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6295,uid=0 [ 2963.951284][ T6301] Memory cgroup out of memory: Killed process 6295 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="00002300007fffffff000a000f"], 0x28}}, 0x0) 10:22:53 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x608082, 0x0) (async) r6 = memfd_secret(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x80000000}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0xb, 0x6, 0x6, 0xffffffffffffffe0, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xfa, &(0x7f0000000440)=""/250, 0x41000, 0x5, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x5, 0x6, 0x1}, 0x10}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:53 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x900) 10:22:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00f00000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:53 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xffffa888}, 0x0) 10:22:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000300ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:53 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x608082, 0x0) r6 = memfd_secret(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x80000000}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0xb, 0x6, 0x6, 0xffffffffffffffe0, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xfa, &(0x7f0000000440)=""/250, 0x41000, 0x5, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x5, 0x6, 0x1}, 0x10}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x608082, 0x0) (async) memfd_secret(0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x80000000}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @alu={0x4, 0x0, 0xb, 0x6, 0x6, 0xffffffffffffffe0, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xfa, &(0x7f0000000440)=""/250, 0x41000, 0x5, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x5, 0x6, 0x1}, 0x10}, 0x80) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:22:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000500ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2964.368887][ T6335] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2964.428686][ T6335] CPU: 1 PID: 6335 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2964.439359][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2964.449446][ T6335] Call Trace: [ 2964.452754][ T6335] [ 2964.455730][ T6335] dump_stack_lvl+0xd1/0x138 [ 2964.460347][ T6335] dump_header+0x10b/0x85f [ 2964.464870][ T6335] oom_kill_process.cold+0x10/0x15 [ 2964.470004][ T6335] out_of_memory+0x35c/0x14a0 [ 2964.474817][ T6335] ? find_held_lock+0x2d/0x110 [ 2964.479640][ T6335] ? oom_killer_disable+0x280/0x280 [ 2964.484894][ T6335] ? find_held_lock+0x2d/0x110 [ 2964.489803][ T6335] mem_cgroup_out_of_memory+0x206/0x270 [ 2964.495397][ T6335] ? mem_cgroup_margin+0x130/0x130 [ 2964.500529][ T6335] ? lock_downgrade+0x6e0/0x6e0 [ 2964.505396][ T6335] try_charge_memcg+0xefb/0x12f0 [ 2964.510367][ T6335] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2964.516399][ T6335] ? lock_downgrade+0x6e0/0x6e0 [ 2964.521282][ T6335] charge_memcg+0x90/0x3b0 [ 2964.525708][ T6335] __mem_cgroup_charge+0x2b/0x90 [ 2964.530659][ T6335] do_wp_page+0x7ec/0x3370 [ 2964.535086][ T6335] ? lock_release+0x810/0x810 [ 2964.539760][ T6335] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2964.545143][ T6335] ? do_raw_spin_lock+0x124/0x2b0 [ 2964.550168][ T6335] ? rwlock_bug.part.0+0x90/0x90 [ 2964.555105][ T6335] ? lock_chain_count+0x20/0x20 [ 2964.559984][ T6335] __handle_mm_fault+0x1f58/0x3c90 [ 2964.565111][ T6335] ? vm_iomap_memory+0x190/0x190 [ 2964.570079][ T6335] handle_mm_fault+0x1b6/0x850 [ 2964.574855][ T6335] do_user_addr_fault+0x475/0x1210 [ 2964.579975][ T6335] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2964.585541][ T6335] exc_page_fault+0x98/0x170 [ 2964.590144][ T6335] asm_exc_page_fault+0x26/0x30 [ 2964.594996][ T6335] RIP: 0033:0x7fd887039570 [ 2964.599409][ T6335] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2964.619020][ T6335] RSP: 002b:00007fd8872cfac0 EFLAGS: 00010246 [ 2964.625096][ T6335] RAX: 00000000e2ddf611 RBX: 00007fd8871ac018 RCX: 0000001b32520000 [ 2964.634109][ T6335] RDX: 0000000000000000 RSI: 0000001b32520018 RDI: 000000000c5ae1f9 [ 2964.642087][ T6335] RBP: 00000000e2ddf611 R08: 0000000000001611 R09: 00000000e2ddf615 [ 2964.650053][ T6335] R10: 00007fd8872cfc80 R11: 0000000000000246 R12: 00007fd8871a0000 [ 2964.658020][ T6335] R13: 0000000000000001 R14: 000000000000001a R15: ffffffff81e5c1af [ 2964.665993][ T6335] ? new_inode_pseudo+0xf/0x80 [ 2964.670782][ T6335] 10:22:54 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xfffff000}, 0x0) 10:22:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000600ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2964.752810][ T6335] memory: usage 307200kB, limit 307200kB, failcnt 17576 [ 2964.760241][ T6335] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2964.779188][ T6335] Memory cgroup stats for /syz3: [ 2964.779424][ T6335] anon 2895872 [ 2964.779424][ T6335] file 10280960 [ 2964.779424][ T6335] kernel 301395968 [ 2964.779424][ T6335] kernel_stack 851968 [ 2964.779424][ T6335] pagetables 1667072 [ 2964.779424][ T6335] sec_pagetables 0 [ 2964.779424][ T6335] percpu 5136736 [ 2964.779424][ T6335] sock 0 [ 2964.779424][ T6335] vmalloc 0 [ 2964.779424][ T6335] shmem 10280960 [ 2964.779424][ T6335] zswap 0 [ 2964.779424][ T6335] zswapped 0 [ 2964.779424][ T6335] file_mapped 262144 [ 2964.779424][ T6335] file_dirty 0 [ 2964.779424][ T6335] file_writeback 0 [ 2964.779424][ T6335] swapcached 0 [ 2964.779424][ T6335] anon_thp 0 [ 2964.779424][ T6335] file_thp 0 [ 2964.779424][ T6335] shmem_thp 0 [ 2964.779424][ T6335] inactive_anon 2899968 [ 2964.779424][ T6335] active_anon 10276864 [ 2964.779424][ T6335] inactive_file 0 [ 2964.779424][ T6335] active_file 0 [ 2964.779424][ T6335] unevictable 0 [ 2964.779424][ T6335] slab_reclaimable 279872 [ 2964.779424][ T6335] slab_unreclaimable 293023328 [ 2964.911295][ T6335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6335,uid=0 [ 2964.959481][ T6335] Memory cgroup out of memory: Killed process 6335 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000020008000a000f"], 0x28}}, 0x0) 10:22:54 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xa00) 10:22:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000700ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140000700012002103000000000000000004000080"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x7784, &(0x7f0000000240)={0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, r2}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000002000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f0666ba610066ed0f01f08fc978c692000001000f79330fc71fc4c1685c5d0dc4c241b88af19700000f20c035000001000f22c00f01cf", 0x37}], 0x1, 0x21, &(0x7f00000002c0)=[@cstype0={0x4, 0xe}, @dstype0], 0x2) 10:22:54 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xffffff7f}, 0x0) 10:22:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000900ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140000700012002103000000000000000004000080"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x7784, &(0x7f0000000240)={0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, r2}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000002000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f0666ba610066ed0f01f08fc978c692000001000f79330fc71fc4c1685c5d0dc4c241b88af19700000f20c035000001000f22c00f01cf", 0x37}], 0x1, 0x21, &(0x7f00000002c0)=[@cstype0={0x4, 0xe}, @dstype0], 0x2) 10:22:54 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140000700012002103000000000000000004000080"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x7784, &(0x7f0000000240)={0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, r2}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000000080)={0x10}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r7, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000002000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="0f0666ba610066ed0f01f08fc978c692000001000f79330fc71fc4c1685c5d0dc4c241b88af19700000f20c035000001000f22c00f01cf", 0x37}], 0x1, 0x21, &(0x7f00000002c0)=[@cstype0={0x4, 0xe}, @dstype0], 0x2) 10:22:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000a00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2965.352342][ T6374] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2965.442330][ T6374] CPU: 0 PID: 6374 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2965.452749][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2965.462842][ T6374] Call Trace: [ 2965.466131][ T6374] [ 2965.469061][ T6374] dump_stack_lvl+0xd1/0x138 [ 2965.473664][ T6374] dump_header+0x10b/0x85f [ 2965.478118][ T6374] oom_kill_process.cold+0x10/0x15 [ 2965.483273][ T6374] out_of_memory+0x35c/0x14a0 [ 2965.488061][ T6374] ? find_held_lock+0x2d/0x110 [ 2965.492870][ T6374] ? oom_killer_disable+0x280/0x280 [ 2965.498134][ T6374] ? find_held_lock+0x2d/0x110 [ 2965.502959][ T6374] mem_cgroup_out_of_memory+0x206/0x270 [ 2965.508553][ T6374] ? mem_cgroup_margin+0x130/0x130 [ 2965.513713][ T6374] ? lock_downgrade+0x6e0/0x6e0 [ 2965.518587][ T6374] try_charge_memcg+0xefb/0x12f0 [ 2965.523540][ T6374] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2965.529551][ T6374] ? lock_downgrade+0x6e0/0x6e0 [ 2965.534406][ T6374] charge_memcg+0x90/0x3b0 [ 2965.538813][ T6374] __mem_cgroup_charge+0x2b/0x90 [ 2965.543756][ T6374] do_wp_page+0x7ec/0x3370 [ 2965.548213][ T6374] ? lock_release+0x810/0x810 [ 2965.552913][ T6374] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2965.558312][ T6374] ? do_raw_spin_lock+0x124/0x2b0 [ 2965.563350][ T6374] ? rwlock_bug.part.0+0x90/0x90 [ 2965.568279][ T6374] ? lock_chain_count+0x20/0x20 [ 2965.573120][ T6374] __handle_mm_fault+0x1f58/0x3c90 [ 2965.578234][ T6374] ? vm_iomap_memory+0x190/0x190 [ 2965.583227][ T6374] handle_mm_fault+0x1b6/0x850 [ 2965.588015][ T6374] do_user_addr_fault+0x475/0x1210 [ 2965.593156][ T6374] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2965.598768][ T6374] exc_page_fault+0x98/0x170 [ 2965.603405][ T6374] asm_exc_page_fault+0x26/0x30 [ 2965.608286][ T6374] RIP: 0033:0x7fd887039570 [ 2965.612716][ T6374] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2965.632332][ T6374] RSP: 002b:00007fd8872cfac0 EFLAGS: 00010246 [ 2965.638391][ T6374] RAX: 000000004716474b RBX: 00007fd8871ac018 RCX: 0000001b32520000 [ 2965.646372][ T6374] RDX: 0000000000000000 RSI: 0000001b32520018 RDI: 0000000000000022 [ 2965.654388][ T6374] RBP: 000000004716474b R08: 000000000000074b R09: 000000004716474f [ 2965.662375][ T6374] R10: 00007fd8872cfc80 R11: 0000000000000246 R12: 00007fd8871a0000 [ 2965.670351][ T6374] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87bf0e21 [ 2965.678340][ T6374] ? __x64_sys_socket+0x11/0xb0 [ 2965.683214][ T6374] [ 2965.686364][ T6374] memory: usage 307196kB, limit 307200kB, failcnt 17662 [ 2965.708835][ T6374] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2965.732272][ T6374] Memory cgroup stats for /syz3: [ 2965.732500][ T6374] anon 2867200 [ 2965.732500][ T6374] file 10280960 [ 2965.732500][ T6374] kernel 301412352 [ 2965.732500][ T6374] kernel_stack 851968 [ 2965.732500][ T6374] pagetables 1667072 [ 2965.732500][ T6374] sec_pagetables 0 [ 2965.732500][ T6374] percpu 5136736 [ 2965.732500][ T6374] sock 0 [ 2965.732500][ T6374] vmalloc 0 [ 2965.732500][ T6374] shmem 10280960 [ 2965.732500][ T6374] zswap 0 [ 2965.732500][ T6374] zswapped 0 [ 2965.732500][ T6374] file_mapped 262144 [ 2965.732500][ T6374] file_dirty 0 [ 2965.732500][ T6374] file_writeback 0 [ 2965.732500][ T6374] swapcached 0 [ 2965.732500][ T6374] anon_thp 0 [ 2965.732500][ T6374] file_thp 0 [ 2965.732500][ T6374] shmem_thp 0 10:22:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:55 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xffffff9e}, 0x0) 10:22:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000b00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2965.732500][ T6374] inactive_anon 2871296 [ 2965.732500][ T6374] active_anon 10276864 [ 2965.732500][ T6374] inactive_file 0 [ 2965.732500][ T6374] active_file 0 [ 2965.732500][ T6374] unevictable 0 [ 2965.732500][ T6374] slab_reclaimable 290328 [ 2965.732500][ T6374] slab_unreclaimable 293035624 [ 2965.949616][ T6403] kvm: pic: non byte read [ 2965.962159][ T6374] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg= [ 2965.967456][ T6403] kvm: pic: level sensitive irq not supported [ 2965.986886][ T6374] /syz3 [ 2966.031430][ T6403] kvm: pic: non byte read [ 2966.048749][ T6374] ,task_memcg=/syz3,task=syz-executor.3,pid=6374,uid=0 [ 2966.110802][ T6374] Memory cgroup out of memory: Killed process 6374 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000030008000a000f"], 0x28}}, 0x0) 10:22:55 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xc00) 10:22:55 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000b0f00000004000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000001400020008000800000000000800060000000000"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@empty, 0x0}, &(0x7f00000002c0)=0x14) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d4050000", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400090d000008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040000087f07060000000000330302000000f7ff403f01000000000008050700000003000601010000000700010337ee0000180303080200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="a80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002000904010000000300050901000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000040004003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="8400028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="0800dd44060100000000000000000000e5daa5d37ccd0eea8679a0f5d4b48422000000", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f400000008000100", @ANYRES32=r10, @ANYBLOB="4401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003005000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000300063f00000000080020010800000002000203000000000100ea00050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001040000"], 0x5d4}, 0x1, 0x0, 0x0, 0xec99d9dcb499c7d0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@mpls_getroute={0x2c, 0x1a, 0x10, 0x70bd2d, 0x25dfdbff, {0x1c, 0x0, 0x80, 0x2, 0xfe, 0x0, 0x0, 0x3}, [@RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008001}, 0x4048000) memfd_secret(0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r14, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000001380)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x80, 0x0}}], 0x1, 0x4000004) io_uring_enter(r1, 0xd2d, 0x97db, 0x0, 0x0, 0x0) 10:22:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000f00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:55 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xfffffff0}, 0x0) 10:22:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00001100ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:56 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000b0f00000004000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000001400020008000800000000000800060000000000"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@empty, 0x0}, &(0x7f00000002c0)=0x14) (async) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d4050000", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400090d000008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040000087f07060000000000330302000000f7ff403f01000000000008050700000003000601010000000700010337ee0000180303080200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="a80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002000904010000000300050901000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000040004003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="8400028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="0800dd44060100000000000000000000e5daa5d37ccd0eea8679a0f5d4b48422000000", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f400000008000100", @ANYRES32=r10, @ANYBLOB="4401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003005000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000300063f00000000080020010800000002000203000000000100ea00050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001040000"], 0x5d4}, 0x1, 0x0, 0x0, 0xec99d9dcb499c7d0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@mpls_getroute={0x2c, 0x1a, 0x10, 0x70bd2d, 0x25dfdbff, {0x1c, 0x0, 0x80, 0x2, 0xfe, 0x0, 0x0, 0x3}, [@RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008001}, 0x4048000) (async) memfd_secret(0x0) (async) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r14, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000001380)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x80, 0x0}}], 0x1, 0x4000004) (async) io_uring_enter(r1, 0xd2d, 0x97db, 0x0, 0x0, 0x0) 10:22:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00001300ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:56 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x40030000000000}, 0x0) 10:22:56 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000b0f00000004000000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000001400020008000800000000000800060000000000"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@empty, 0x0}, &(0x7f00000002c0)=0x14) (async) r11 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d4050000", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400090d000008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040000087f07060000000000330302000000f7ff403f01000000000008050700000003000601010000000700010337ee0000180303080200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="a80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002000904010000000300050901000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000040004003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="8400028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="0800dd44060100000000000000000000e5daa5d37ccd0eea8679a0f5d4b48422000000", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f400000008000100", @ANYRES32=r10, @ANYBLOB="4401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003005000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000300063f00000000080020010800000002000203000000000100ea00050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001040000"], 0x5d4}, 0x1, 0x0, 0x0, 0xec99d9dcb499c7d0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@mpls_getroute={0x2c, 0x1a, 0x10, 0x70bd2d, 0x25dfdbff, {0x1c, 0x0, 0x80, 0x2, 0xfe, 0x0, 0x0, 0x3}, [@RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008001}, 0x4048000) (async, rerun: 64) memfd_secret(0x0) (async, rerun: 64) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r14, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000001380)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x80, 0x0}}], 0x1, 0x4000004) (async) io_uring_enter(r1, 0xd2d, 0x97db, 0x0, 0x0, 0x0) [ 2966.518426][ T6426] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2966.559733][ T6426] CPU: 0 PID: 6426 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2966.570144][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2966.580230][ T6426] Call Trace: [ 2966.583527][ T6426] [ 2966.586482][ T6426] dump_stack_lvl+0xd1/0x138 [ 2966.591104][ T6426] dump_header+0x10b/0x85f [ 2966.595559][ T6426] oom_kill_process.cold+0x10/0x15 [ 2966.600685][ T6426] out_of_memory+0x35c/0x14a0 [ 2966.605413][ T6426] ? find_held_lock+0x2d/0x110 [ 2966.610241][ T6426] ? oom_killer_disable+0x280/0x280 [ 2966.615490][ T6426] ? find_held_lock+0x2d/0x110 [ 2966.621447][ T6426] mem_cgroup_out_of_memory+0x206/0x270 [ 2966.627041][ T6426] ? mem_cgroup_margin+0x130/0x130 [ 2966.632169][ T6426] ? lock_downgrade+0x6e0/0x6e0 [ 2966.637040][ T6426] try_charge_memcg+0xefb/0x12f0 [ 2966.641985][ T6426] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2966.647976][ T6426] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2966.653711][ T6426] ? lock_downgrade+0x6e0/0x6e0 [ 2966.658567][ T6426] ? lock_downgrade+0x6e0/0x6e0 [ 2966.663427][ T6426] obj_cgroup_charge+0x2af/0x5e0 [ 2966.668373][ T6426] kmem_cache_alloc_lru+0x145/0x760 [ 2966.673571][ T6426] ? sock_alloc_inode+0x27/0x1d0 [ 2966.678523][ T6426] sock_alloc_inode+0x27/0x1d0 [ 2966.683289][ T6426] ? sock_free_inode+0x30/0x30 [ 2966.688054][ T6426] alloc_inode+0x61/0x230 [ 2966.692401][ T6426] new_inode_pseudo+0x17/0x80 [ 2966.697092][ T6426] sock_alloc+0x40/0x260 [ 2966.701337][ T6426] __sock_create+0xbd/0x790 [ 2966.705852][ T6426] __sys_socket+0x133/0x250 [ 2966.710360][ T6426] ? __sys_socket_file+0x1f0/0x1f0 [ 2966.715497][ T6426] __x64_sys_socket+0x73/0xb0 [ 2966.720182][ T6426] do_syscall_64+0x39/0xb0 [ 2966.724610][ T6426] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2966.730509][ T6426] RIP: 0033:0x7fd88708c0c9 [ 2966.734926][ T6426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2966.754534][ T6426] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2966.762950][ T6426] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2966.770928][ T6426] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2966.778904][ T6426] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2966.788003][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2966.795972][ T6426] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2966.803956][ T6426] 10:22:56 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xe00) [ 2967.008674][ T6426] memory: usage 307200kB, limit 307200kB, failcnt 17755 [ 2967.100720][ T6426] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2967.122153][ T6426] Memory cgroup stats for /syz3: [ 2967.122376][ T6426] anon 2899968 [ 2967.122376][ T6426] file 10280960 [ 2967.122376][ T6426] kernel 301375488 [ 2967.122376][ T6426] kernel_stack 851968 [ 2967.122376][ T6426] pagetables 1667072 [ 2967.122376][ T6426] sec_pagetables 0 [ 2967.122376][ T6426] percpu 5136672 [ 2967.122376][ T6426] sock 0 [ 2967.122376][ T6426] vmalloc 0 [ 2967.122376][ T6426] shmem 10280960 [ 2967.122376][ T6426] zswap 0 [ 2967.122376][ T6426] zswapped 0 [ 2967.122376][ T6426] file_mapped 262144 [ 2967.122376][ T6426] file_dirty 0 [ 2967.122376][ T6426] file_writeback 0 [ 2967.122376][ T6426] swapcached 0 [ 2967.122376][ T6426] anon_thp 0 [ 2967.122376][ T6426] file_thp 0 [ 2967.122376][ T6426] shmem_thp 0 [ 2967.122376][ T6426] inactive_anon 2904064 [ 2967.122376][ T6426] active_anon 10276864 [ 2967.122376][ T6426] inactive_file 0 [ 2967.122376][ T6426] active_file 0 [ 2967.122376][ T6426] unevictable 0 [ 2967.122376][ T6426] slab_reclaimable 279872 [ 2967.122376][ T6426] slab_unreclaimable 293014096 10:22:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000040008000a000f"], 0x28}}, 0x0) 10:22:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00001f00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:56 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="4d9d37ac89823400000016000400000000000000ac355f7332a55c51c0b5d45d5935a053f93c824b92c31c3b0000009a"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:22:56 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1200) 10:22:56 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) [ 2967.270994][ T6426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6421,uid=0 [ 2967.291101][ T6426] Memory cgroup out of memory: Killed process 6421 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00002000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2967.438088][ T6451] kvm: pic: non byte read [ 2967.445677][ T6451] kvm: pic: level sensitive irq not supported [ 2967.445860][ T6451] kvm: pic: non byte read 10:22:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="004e2300ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:57 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="4d9d37ac89823400000016000400000000000000ac355f7332a55c51c0b5d45d5935a053f93c824b92c31c3b0000009a"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (rerun: 64) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:22:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2967.655269][ T6456] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 10:22:57 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1800) 10:22:57 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x100000000000000}, 0x0) [ 2967.935532][ T6456] CPU: 0 PID: 6456 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2967.945934][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2967.956025][ T6456] Call Trace: [ 2967.959336][ T6456] [ 2967.962291][ T6456] dump_stack_lvl+0xd1/0x138 [ 2967.966938][ T6456] dump_header+0x10b/0x85f [ 2967.971399][ T6456] oom_kill_process.cold+0x10/0x15 [ 2967.976553][ T6456] out_of_memory+0x35c/0x14a0 [ 2967.981281][ T6456] ? find_held_lock+0x2d/0x110 [ 2967.986098][ T6456] ? oom_killer_disable+0x280/0x280 [ 2967.991346][ T6456] ? find_held_lock+0x2d/0x110 [ 2967.996166][ T6456] mem_cgroup_out_of_memory+0x206/0x270 [ 2968.001755][ T6456] ? mem_cgroup_margin+0x130/0x130 [ 2968.006905][ T6456] ? lock_downgrade+0x6e0/0x6e0 [ 2968.011815][ T6456] try_charge_memcg+0xefb/0x12f0 [ 2968.016805][ T6456] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2968.022843][ T6456] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2968.028618][ T6456] ? lock_downgrade+0x6e0/0x6e0 [ 2968.033512][ T6456] ? lock_downgrade+0x6e0/0x6e0 [ 2968.038412][ T6456] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2968.044001][ T6456] __alloc_pages+0x1f3/0x5b0 [ 2968.048630][ T6456] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2968.055459][ T6456] alloc_pages+0x1aa/0x270 [ 2968.059915][ T6456] __pmd_alloc+0x3f/0x5d0 [ 2968.064461][ T6456] __handle_mm_fault+0x932/0x3c90 [ 2968.069531][ T6456] ? vm_iomap_memory+0x190/0x190 [ 2968.074531][ T6456] handle_mm_fault+0x1b6/0x850 [ 2968.079347][ T6456] do_user_addr_fault+0x475/0x1210 [ 2968.084508][ T6456] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2968.090105][ T6456] exc_page_fault+0x98/0x170 [ 2968.094739][ T6456] asm_exc_page_fault+0x26/0x30 [ 2968.099625][ T6456] RIP: 0033:0x7fd887086c25 [ 2968.104065][ T6456] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2968.123725][ T6456] RSP: 002b:00007fd8872cfb98 EFLAGS: 00010202 [ 2968.129845][ T6456] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2968.137861][ T6456] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 2968.145876][ T6456] RBP: 00007fd8872cfc58 R08: 00007fd887000000 R09: 00007fd886c00000 [ 2968.153889][ T6456] R10: 00007fd886c000c8 R11: 000000000008de06 R12: 00000000002d47f4 [ 2968.161903][ T6456] R13: 00007fd8872cfc80 R14: 00007fd8872cfca0 R15: 0000000000000032 [ 2968.169945][ T6456] [ 2968.240172][ T6456] memory: usage 307200kB, limit 307200kB, failcnt 17848 [ 2968.268901][ T6456] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2968.297322][ T6456] Memory cgroup stats for /syz3: [ 2968.297560][ T6456] anon 2899968 [ 2968.297560][ T6456] file 10280960 [ 2968.297560][ T6456] kernel 301375488 [ 2968.297560][ T6456] kernel_stack 851968 [ 2968.297560][ T6456] pagetables 1667072 [ 2968.297560][ T6456] sec_pagetables 0 [ 2968.297560][ T6456] percpu 5136672 [ 2968.297560][ T6456] sock 0 [ 2968.297560][ T6456] vmalloc 0 [ 2968.297560][ T6456] shmem 10280960 [ 2968.297560][ T6456] zswap 0 [ 2968.297560][ T6456] zswapped 0 [ 2968.297560][ T6456] file_mapped 262144 [ 2968.297560][ T6456] file_dirty 0 [ 2968.297560][ T6456] file_writeback 0 [ 2968.297560][ T6456] swapcached 0 [ 2968.297560][ T6456] anon_thp 0 [ 2968.297560][ T6456] file_thp 0 [ 2968.297560][ T6456] shmem_thp 0 [ 2968.297560][ T6456] inactive_anon 2904064 [ 2968.297560][ T6456] active_anon 10276864 [ 2968.297560][ T6456] inactive_file 0 [ 2968.297560][ T6456] active_file 0 [ 2968.297560][ T6456] unevictable 0 [ 2968.297560][ T6456] slab_reclaimable 279872 [ 2968.297560][ T6456] slab_unreclaimable 293011848 10:22:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000050008000a000f"], 0x28}}, 0x0) 10:22:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00002800ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:58 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="4d9d37ac89823400000016000400000000000000ac355f7332a55c51c0b5d45d5935a053f93c824b92c31c3b0000009a"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="4d9d37ac89823400000016000400000000000000ac355f7332a55c51c0b5d45d5935a053f93c824b92c31c3b0000009a"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:22:58 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1be5) 10:22:58 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x200000000000000}, 0x0) 10:22:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2968.436406][ T6456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6456,uid=0 [ 2968.456942][ T6456] Memory cgroup out of memory: Killed process 6456 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00004800ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2968.600231][ T6482] kvm: pic: non byte read [ 2968.661038][ T6482] kvm: pic: level sensitive irq not supported [ 2968.661126][ T6482] kvm: pic: non byte read 10:22:58 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = memfd_secret(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200210300000000000000fd0c000080"], 0x14}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = signalfd4(r4, &(0x7f0000000180)={[0x4]}, 0x8, 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r5, 0x0) r6 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r11, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff}) dup(r12) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r13, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r13, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, &(0x7f00000001c0), &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x8f, &(0x7f0000000300)=""/143, 0x41000, 0x0, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x4, 0x6, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r5, r13, r1, r2]}, 0x80) sendmmsg(r9, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r6, 0x2ff, 0x0, 0x0, 0x0, 0x0) r14 = syz_open_dev$mouse(&(0x7f0000000700), 0x3ff, 0x1a3600) r15 = syz_open_dev$audion(&(0x7f0000000740), 0x80, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000400000000000000003000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000001e00008517adfe00780f00"], &(0x7f0000000580)='GPL\x00', 0xd5, 0xba, &(0x7f00000005c0)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f0000000680)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x0, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r14, r15]}, 0x80) 10:22:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00004c00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:58 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x300000000000000}, 0x0) [ 2968.848323][ T6493] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 10:22:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2968.965165][ T6493] CPU: 1 PID: 6493 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2968.975566][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2968.985646][ T6493] Call Trace: [ 2968.988948][ T6493] [ 2968.991912][ T6493] dump_stack_lvl+0xd1/0x138 [ 2968.996544][ T6493] dump_header+0x10b/0x85f [ 2969.000999][ T6493] oom_kill_process.cold+0x10/0x15 [ 2969.006140][ T6493] out_of_memory+0x35c/0x14a0 [ 2969.010838][ T6493] ? find_held_lock+0x2d/0x110 [ 2969.015616][ T6493] ? oom_killer_disable+0x280/0x280 [ 2969.020831][ T6493] ? find_held_lock+0x2d/0x110 [ 2969.025603][ T6493] mem_cgroup_out_of_memory+0x206/0x270 [ 2969.031161][ T6493] ? mem_cgroup_margin+0x130/0x130 [ 2969.036623][ T6493] ? lock_downgrade+0x6e0/0x6e0 [ 2969.041485][ T6493] try_charge_memcg+0xefb/0x12f0 [ 2969.047655][ T6493] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2969.053635][ T6493] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2969.059362][ T6493] ? lock_downgrade+0x6e0/0x6e0 [ 2969.064240][ T6493] ? lock_downgrade+0x6e0/0x6e0 [ 2969.069099][ T6493] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2969.075431][ T6493] __alloc_pages+0x1f3/0x5b0 [ 2969.080026][ T6493] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2969.086815][ T6493] alloc_pages+0x1aa/0x270 [ 2969.091236][ T6493] __pmd_alloc+0x3f/0x5d0 [ 2969.095582][ T6493] __handle_mm_fault+0x932/0x3c90 [ 2969.100705][ T6493] ? vm_iomap_memory+0x190/0x190 [ 2969.105768][ T6493] handle_mm_fault+0x1b6/0x850 [ 2969.110547][ T6493] do_user_addr_fault+0x475/0x1210 [ 2969.115758][ T6493] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2969.121323][ T6493] exc_page_fault+0x98/0x170 [ 2969.125914][ T6493] asm_exc_page_fault+0x26/0x30 [ 2969.130766][ T6493] RIP: 0033:0x7fd887086c25 [ 2969.135180][ T6493] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2969.154789][ T6493] RSP: 002b:00007fd8872cfb98 EFLAGS: 00010202 [ 2969.160860][ T6493] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2969.168830][ T6493] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 2969.176797][ T6493] RBP: 00007fd8872cfc58 R08: 00007fd887000000 R09: 00007fd886c00000 [ 2969.184768][ T6493] R10: 00007fd886c000c8 R11: 000000000008dec8 R12: 00000000002d4c6a [ 2969.193519][ T6493] R13: 00007fd8872cfc80 R14: 00007fd8872cfca0 R15: 0000000000000032 [ 2969.201502][ T6493] 10:22:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00234e00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2969.431610][ T6493] memory: usage 307184kB, limit 307200kB, failcnt 17950 [ 2969.448330][ T6493] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2969.455814][ T6493] Memory cgroup stats for /syz3: [ 2969.456018][ T6493] anon 2899968 [ 2969.456018][ T6493] file 10280960 [ 2969.456018][ T6493] kernel 301375488 [ 2969.456018][ T6493] kernel_stack 851968 [ 2969.456018][ T6493] pagetables 1667072 [ 2969.456018][ T6493] sec_pagetables 0 [ 2969.456018][ T6493] percpu 5136672 [ 2969.456018][ T6493] sock 0 [ 2969.456018][ T6493] vmalloc 0 [ 2969.456018][ T6493] shmem 10280960 [ 2969.456018][ T6493] zswap 0 [ 2969.456018][ T6493] zswapped 0 [ 2969.456018][ T6493] file_mapped 262144 [ 2969.456018][ T6493] file_dirty 0 [ 2969.456018][ T6493] file_writeback 0 [ 2969.456018][ T6493] swapcached 0 [ 2969.456018][ T6493] anon_thp 0 [ 2969.456018][ T6493] file_thp 0 [ 2969.456018][ T6493] shmem_thp 0 [ 2969.456018][ T6493] inactive_anon 2904064 [ 2969.456018][ T6493] active_anon 10276864 [ 2969.456018][ T6493] inactive_file 0 [ 2969.456018][ T6493] active_file 0 [ 2969.456018][ T6493] unevictable 0 [ 2969.456018][ T6493] slab_reclaimable 279872 [ 2969.456018][ T6493] slab_unreclaimable 293011848 [ 2969.595564][ T6493] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6493,uid=0 [ 2969.627088][ T6493] Memory cgroup out of memory: Killed process 6493 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:22:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000060008000a000f"], 0x28}}, 0x0) 10:22:59 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1c4e) 10:22:59 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r2 = memfd_secret(0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200210300000000000000fd0c000080"], 0x14}], 0x1}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = signalfd4(r4, &(0x7f0000000180)={[0x4]}, 0x8, 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r5, 0x0) (async) r6 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10}, 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r11, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff}) dup(r12) (async, rerun: 32) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (rerun: 32) write$FUSE_INTERRUPT(r13, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r13, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, &(0x7f00000001c0), &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x8f, &(0x7f0000000300)=""/143, 0x41000, 0x0, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x4, 0x6, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r5, r13, r1, r2]}, 0x80) (async) sendmmsg(r9, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r6, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r14 = syz_open_dev$mouse(&(0x7f0000000700), 0x3ff, 0x1a3600) (async) r15 = syz_open_dev$audion(&(0x7f0000000740), 0x80, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000400000000000000003000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000001e00008517adfe00780f00"], &(0x7f0000000580)='GPL\x00', 0xd5, 0xba, &(0x7f00000005c0)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f0000000680)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x0, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r14, r15]}, 0x80) 10:22:59 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x400000000000000}, 0x0) 10:22:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00006000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:22:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00a66500ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:59 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = memfd_secret(0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200210300000000000000fd0c000080"], 0x14}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = signalfd4(r4, &(0x7f0000000180)={[0x4]}, 0x8, 0x80800) mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r5, 0x0) (async) r6 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r11, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff}) dup(r12) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r13, &(0x7f0000000080)={0x10}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r13, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, &(0x7f00000001c0), &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x8f, &(0x7f0000000300)=""/143, 0x41000, 0x0, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x4, 0x6, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r5, r13, r1, r2]}, 0x80) (async, rerun: 32) sendmmsg(r9, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r6, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) r14 = syz_open_dev$mouse(&(0x7f0000000700), 0x3ff, 0x1a3600) (async, rerun: 64) r15 = syz_open_dev$audion(&(0x7f0000000740), 0x80, 0x800) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000400000000000000003000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000001e00008517adfe00780f00"], &(0x7f0000000580)='GPL\x00', 0xd5, 0xba, &(0x7f00000005c0)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f0000000680)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x0, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r14, r15]}, 0x80) 10:22:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00006800ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:22:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c7], 0x0, 0xe02}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x4a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2969.970349][ T6536] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:22:59 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1c4f) [ 2970.016849][ T6536] CPU: 1 PID: 6536 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2970.027254][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2970.037346][ T6536] Call Trace: [ 2970.040671][ T6536] [ 2970.043629][ T6536] dump_stack_lvl+0xd1/0x138 [ 2970.048267][ T6536] dump_header+0x10b/0x85f [ 2970.052739][ T6536] oom_kill_process.cold+0x10/0x15 [ 2970.057910][ T6536] out_of_memory+0x35c/0x14a0 [ 2970.062904][ T6536] ? find_held_lock+0x2d/0x110 [ 2970.069019][ T6536] ? oom_killer_disable+0x280/0x280 [ 2970.074278][ T6536] ? find_held_lock+0x2d/0x110 [ 2970.079093][ T6536] mem_cgroup_out_of_memory+0x206/0x270 [ 2970.084701][ T6536] ? mem_cgroup_margin+0x130/0x130 [ 2970.089864][ T6536] ? lock_downgrade+0x6e0/0x6e0 [ 2970.094868][ T6536] try_charge_memcg+0xefb/0x12f0 [ 2970.099859][ T6536] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2970.105886][ T6536] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2970.111677][ T6536] ? lock_downgrade+0x6e0/0x6e0 10:22:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00006c00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2970.116581][ T6536] ? lock_downgrade+0x6e0/0x6e0 [ 2970.121502][ T6536] obj_cgroup_charge+0x2af/0x5e0 [ 2970.126507][ T6536] kmem_cache_alloc_lru+0x145/0x760 [ 2970.131748][ T6536] ? sock_alloc_inode+0x27/0x1d0 [ 2970.136738][ T6536] sock_alloc_inode+0x27/0x1d0 [ 2970.141547][ T6536] ? sock_free_inode+0x30/0x30 [ 2970.146361][ T6536] alloc_inode+0x61/0x230 [ 2970.150733][ T6536] new_inode_pseudo+0x17/0x80 [ 2970.155456][ T6536] sock_alloc+0x40/0x260 [ 2970.159743][ T6536] __sock_create+0xbd/0x790 [ 2970.164311][ T6536] __sys_socket+0x133/0x250 [ 2970.168869][ T6536] ? __sys_socket_file+0x1f0/0x1f0 [ 2970.174048][ T6536] __x64_sys_socket+0x73/0xb0 [ 2970.178785][ T6536] do_syscall_64+0x39/0xb0 [ 2970.183253][ T6536] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2970.189194][ T6536] RIP: 0033:0x7fd88708c0c9 [ 2970.193660][ T6536] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2970.214005][ T6536] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2970.222468][ T6536] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2970.230482][ T6536] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2970.238501][ T6536] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2970.246524][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2970.254548][ T6536] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2970.262580][ T6536] [ 2970.375286][ T6536] memory: usage 307200kB, limit 307200kB, failcnt 18032 [ 2970.382415][ T6536] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2970.482723][ T6536] Memory cgroup stats for /syz3: [ 2970.482955][ T6536] anon 2899968 [ 2970.482955][ T6536] file 10280960 [ 2970.482955][ T6536] kernel 301391872 [ 2970.482955][ T6536] kernel_stack 851968 [ 2970.482955][ T6536] pagetables 1667072 [ 2970.482955][ T6536] sec_pagetables 0 [ 2970.482955][ T6536] percpu 5136736 [ 2970.482955][ T6536] sock 0 [ 2970.482955][ T6536] vmalloc 0 [ 2970.482955][ T6536] shmem 10280960 [ 2970.482955][ T6536] zswap 0 [ 2970.482955][ T6536] zswapped 0 [ 2970.482955][ T6536] file_mapped 262144 [ 2970.482955][ T6536] file_dirty 0 [ 2970.482955][ T6536] file_writeback 0 [ 2970.482955][ T6536] swapcached 0 [ 2970.482955][ T6536] anon_thp 0 [ 2970.482955][ T6536] file_thp 0 [ 2970.482955][ T6536] shmem_thp 0 [ 2970.482955][ T6536] inactive_anon 2904064 [ 2970.482955][ T6536] active_anon 10276864 [ 2970.482955][ T6536] inactive_file 0 [ 2970.482955][ T6536] active_file 0 [ 2970.482955][ T6536] unevictable 0 [ 2970.482955][ T6536] slab_reclaimable 279872 [ 2970.482955][ T6536] slab_unreclaimable 293023328 10:23:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000070008000a000f"], 0x28}}, 0x0) 10:23:00 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x8000000000000000, 0xfffffffffffffffe, 0x3}) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100009008080f200000000000000000076006b168d78899fc833ae206df253578f431f93d0690a14c842bc10b6371a5a420751f2661d6ba38012fc56c15c5f98fe0d5d62b85ca822bb617ec996e56640907d21556c2de634398e04d6354c68473b7d33ffbaa9c17ea4a770e5c807bce8684f8cc8f7e9d9786c9626f2a2bc8edbe26029c2f3640000"], 0x88) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000120021030022e5e4fb54cba5427f4f7a51913b8b4b0000000000000004000080"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00007400ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:00 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1e00) 10:23:00 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x600000000000000}, 0x0) [ 2970.611982][ T6536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6531,uid=0 [ 2970.633011][ T6536] Memory cgroup out of memory: Killed process 6531 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00007a00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 10:23:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0065a600ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000f000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2970.928407][ T6567] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2970.965796][ T6567] CPU: 0 PID: 6567 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2970.976198][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2970.986298][ T6567] Call Trace: [ 2970.989600][ T6567] [ 2970.992556][ T6567] dump_stack_lvl+0xd1/0x138 [ 2970.997189][ T6567] dump_header+0x10b/0x85f [ 2971.001652][ T6567] oom_kill_process.cold+0x10/0x15 [ 2971.006816][ T6567] out_of_memory+0x35c/0x14a0 [ 2971.011540][ T6567] ? find_held_lock+0x2d/0x110 [ 2971.017125][ T6567] ? oom_killer_disable+0x280/0x280 [ 2971.022371][ T6567] ? find_held_lock+0x2d/0x110 [ 2971.027183][ T6567] mem_cgroup_out_of_memory+0x206/0x270 [ 2971.032771][ T6567] ? mem_cgroup_margin+0x130/0x130 [ 2971.037922][ T6567] ? lock_downgrade+0x6e0/0x6e0 [ 2971.042817][ T6567] try_charge_memcg+0xefb/0x12f0 [ 2971.047791][ T6567] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2971.053798][ T6567] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2971.059564][ T6567] ? lock_downgrade+0x6e0/0x6e0 [ 2971.064458][ T6567] ? lock_downgrade+0x6e0/0x6e0 [ 2971.069364][ T6567] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2971.074947][ T6567] __alloc_pages+0x1f3/0x5b0 [ 2971.079569][ T6567] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2971.086389][ T6567] alloc_pages+0x1aa/0x270 [ 2971.090920][ T6567] __pmd_alloc+0x3f/0x5d0 [ 2971.095285][ T6567] __handle_mm_fault+0x932/0x3c90 [ 2971.100354][ T6567] ? vm_iomap_memory+0x190/0x190 [ 2971.105350][ T6567] handle_mm_fault+0x1b6/0x850 [ 2971.110153][ T6567] do_user_addr_fault+0x475/0x1210 [ 2971.115303][ T6567] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2971.120893][ T6567] exc_page_fault+0x98/0x170 [ 2971.125521][ T6567] asm_exc_page_fault+0x26/0x30 [ 2971.130397][ T6567] RIP: 0033:0x7fd887086c25 [ 2971.134836][ T6567] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2971.154481][ T6567] RSP: 002b:00007fd8872cfb98 EFLAGS: 00010202 [ 2971.160589][ T6567] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2971.168583][ T6567] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 2971.176576][ T6567] RBP: 00007fd8872cfc58 R08: 00007fd887000000 R09: 00007fd886c00000 [ 2971.184578][ T6567] R10: 00007fd886c000c8 R11: 0000000000000246 R12: 00000000002d54c0 [ 2971.192574][ T6567] R13: 00007fd8872cfc80 R14: 00007fd8871abf80 R15: 0000000000000032 [ 2971.200591][ T6567] 10:23:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000200ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:00 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0}) 10:23:00 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1f00) [ 2971.271164][ T6567] memory: usage 307200kB, limit 307200kB, failcnt 18072 [ 2971.290941][ T6567] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2971.300442][ T6567] Memory cgroup stats for /syz3: [ 2971.300656][ T6567] anon 2899968 [ 2971.300656][ T6567] file 10280960 [ 2971.300656][ T6567] kernel 301391872 [ 2971.300656][ T6567] kernel_stack 851968 [ 2971.300656][ T6567] pagetables 1667072 [ 2971.300656][ T6567] sec_pagetables 0 [ 2971.300656][ T6567] percpu 5136736 [ 2971.300656][ T6567] sock 0 [ 2971.300656][ T6567] vmalloc 0 [ 2971.300656][ T6567] shmem 10280960 [ 2971.300656][ T6567] zswap 0 [ 2971.300656][ T6567] zswapped 0 [ 2971.300656][ T6567] file_mapped 262144 [ 2971.300656][ T6567] file_dirty 0 [ 2971.300656][ T6567] file_writeback 0 [ 2971.300656][ T6567] swapcached 0 [ 2971.300656][ T6567] anon_thp 0 [ 2971.300656][ T6567] file_thp 0 [ 2971.300656][ T6567] shmem_thp 0 [ 2971.300656][ T6567] inactive_anon 2904064 [ 2971.300656][ T6567] active_anon 10276864 [ 2971.300656][ T6567] inactive_file 0 [ 2971.300656][ T6567] active_file 0 [ 2971.300656][ T6567] unevictable 0 [ 2971.300656][ T6567] slab_reclaimable 281800 [ 2971.300656][ T6567] slab_unreclaimable 293023976 [ 2971.461358][ T6567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6567,uid=0 [ 2971.498028][ T6567] Memory cgroup out of memory: Killed process 6567 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000090008000a000f"], 0x28}}, 0x0) 10:23:01 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x800000000000000}, 0x0) 10:23:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000300ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:01 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x8000000000000000, 0xfffffffffffffffe, 0x3}) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100009008080f200000000000000000076006b168d78899fc833ae206df253578f431f93d0690a14c842bc10b6371a5a420751f2661d6ba38012fc56c15c5f98fe0d5d62b85ca822bb617ec996e56640907d21556c2de634398e04d6354c68473b7d33ffbaa9c17ea4a770e5c807bce8684f8cc8f7e9d9786c9626f2a2bc8edbe26029c2f3640000"], 0x88) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000120021030022e5e4fb54cba5427f4f7a51913b8b4b0000000000000004000080"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x8000000000000000, 0xfffffffffffffffe, 0x3}) (async) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100009008080f200000000000000000076006b168d78899fc833ae206df253578f431f93d0690a14c842bc10b6371a5a420751f2661d6ba38012fc56c15c5f98fe0d5d62b85ca822bb617ec996e56640907d21556c2de634398e04d6354c68473b7d33ffbaa9c17ea4a770e5c807bce8684f8cc8f7e9d9786c9626f2a2bc8edbe26029c2f3640000"], 0x88) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r1) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000120021030022e5e4fb54cba5427f4f7a51913b8b4b0000000000000004000080"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x5) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:23:01 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000) 10:23:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000400ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000500ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2971.755956][ T6597] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2971.867921][ T6597] CPU: 0 PID: 6597 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2971.878329][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2971.888944][ T6597] Call Trace: [ 2971.892256][ T6597] [ 2971.895210][ T6597] dump_stack_lvl+0xd1/0x138 [ 2971.899853][ T6597] dump_header+0x10b/0x85f [ 2971.904320][ T6597] oom_kill_process.cold+0x10/0x15 [ 2971.909475][ T6597] out_of_memory+0x35c/0x14a0 [ 2971.914205][ T6597] ? find_held_lock+0x2d/0x110 [ 2971.919019][ T6597] ? oom_killer_disable+0x280/0x280 [ 2971.924359][ T6597] ? find_held_lock+0x2d/0x110 [ 2971.929168][ T6597] mem_cgroup_out_of_memory+0x206/0x270 [ 2971.934756][ T6597] ? mem_cgroup_margin+0x130/0x130 [ 2971.939898][ T6597] ? lock_downgrade+0x6e0/0x6e0 [ 2971.944766][ T6597] try_charge_memcg+0xefb/0x12f0 [ 2971.949715][ T6597] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2971.955957][ T6597] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2971.961688][ T6597] ? lock_downgrade+0x6e0/0x6e0 [ 2971.966543][ T6597] ? lock_downgrade+0x6e0/0x6e0 [ 2971.971423][ T6597] obj_cgroup_charge+0x2af/0x5e0 [ 2971.976365][ T6597] kmem_cache_alloc_lru+0x145/0x760 [ 2971.981655][ T6597] ? sock_alloc_inode+0x27/0x1d0 [ 2971.986609][ T6597] sock_alloc_inode+0x27/0x1d0 [ 2971.991461][ T6597] ? sock_free_inode+0x30/0x30 [ 2971.996921][ T6597] alloc_inode+0x61/0x230 [ 2972.001261][ T6597] new_inode_pseudo+0x17/0x80 [ 2972.005945][ T6597] sock_alloc+0x40/0x260 [ 2972.010191][ T6597] __sock_create+0xbd/0x790 [ 2972.014708][ T6597] __sys_socket+0x133/0x250 [ 2972.019218][ T6597] ? __sys_socket_file+0x1f0/0x1f0 [ 2972.025100][ T6597] __x64_sys_socket+0x73/0xb0 [ 2972.029787][ T6597] do_syscall_64+0x39/0xb0 [ 2972.034217][ T6597] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2972.040112][ T6597] RIP: 0033:0x7fd88708c0c9 [ 2972.044526][ T6597] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2972.064133][ T6597] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2972.072549][ T6597] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2972.080517][ T6597] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2972.088511][ T6597] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2972.096497][ T6597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2972.104473][ T6597] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2972.112456][ T6597] 10:23:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000600ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:01 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x900000000000000}, 0x0) 10:23:01 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2400) 10:23:01 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x40, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd}}}}]}}]}}, 0x0) 10:23:01 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x8000000000000000, 0xfffffffffffffffe, 0x3}) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100009008080f200000000000000000076006b168d78899fc833ae206df253578f431f93d0690a14c842bc10b6371a5a420751f2661d6ba38012fc56c15c5f98fe0d5d62b85ca822bb617ec996e56640907d21556c2de634398e04d6354c68473b7d33ffbaa9c17ea4a770e5c807bce8684f8cc8f7e9d9786c9626f2a2bc8edbe26029c2f3640000"], 0x88) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r1) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000120021030022e5e4fb54cba5427f4f7a51913b8b4b0000000000000004000080"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x8000000000000000, 0xfffffffffffffffe, 0x3}) (async) write$capi20_data(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100009008080f200000000000000000076006b168d78899fc833ae206df253578f431f93d0690a14c842bc10b6371a5a420751f2661d6ba38012fc56c15c5f98fe0d5d62b85ca822bb617ec996e56640907d21556c2de634398e04d6354c68473b7d33ffbaa9c17ea4a770e5c807bce8684f8cc8f7e9d9786c9626f2a2bc8edbe26029c2f3640000"], 0x88) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r1) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000120021030022e5e4fb54cba5427f4f7a51913b8b4b0000000000000004000080"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x5) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) [ 2972.225303][ T6597] memory: usage 307200kB, limit 307200kB, failcnt 18186 [ 2972.321328][ T6597] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2972.411805][ T6597] Memory cgroup stats for /syz3: [ 2972.412037][ T6597] anon 2899968 [ 2972.412037][ T6597] file 10280960 [ 2972.412037][ T6597] kernel 301391872 [ 2972.412037][ T6597] kernel_stack 851968 [ 2972.412037][ T6597] pagetables 1667072 [ 2972.412037][ T6597] sec_pagetables 0 [ 2972.412037][ T6597] percpu 5136736 [ 2972.412037][ T6597] sock 0 [ 2972.412037][ T6597] vmalloc 0 [ 2972.412037][ T6597] shmem 10280960 [ 2972.412037][ T6597] zswap 0 [ 2972.412037][ T6597] zswapped 0 [ 2972.412037][ T6597] file_mapped 262144 [ 2972.412037][ T6597] file_dirty 0 [ 2972.412037][ T6597] file_writeback 0 [ 2972.412037][ T6597] swapcached 0 [ 2972.412037][ T6597] anon_thp 0 [ 2972.412037][ T6597] file_thp 0 [ 2972.412037][ T6597] shmem_thp 0 [ 2972.412037][ T6597] inactive_anon 2904064 [ 2972.412037][ T6597] active_anon 10276864 [ 2972.412037][ T6597] inactive_file 0 [ 2972.412037][ T6597] active_file 0 [ 2972.412037][ T6597] unevictable 0 [ 2972.412037][ T6597] slab_reclaimable 279872 [ 2972.412037][ T6597] slab_unreclaimable 293023328 [ 2972.617984][T19348] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2972.631391][ T6597] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6590,uid=0 [ 2972.660206][ T6597] Memory cgroup out of memory: Killed process 6590 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000240008000a000f"], 0x28}}, 0x0) 10:23:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000700ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:02 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2a00) 10:23:02 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xa00000000000000}, 0x0) 10:23:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000800ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:02 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000480)='1', 0x1) syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x104, 0x1ad941, 0x23456, {0x0, r6}}, 0x42) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000340)) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001980)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, r1, 0x0, &(0x7f0000001940)={&(0x7f0000000500)=@isdn, 0x80, &(0x7f0000000680)=[{}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x4}, 0x0, 0x40000142, 0x1, {0x3, r6}}, 0x8) memfd_secret(0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000012002f0cebe393702103000000000000000004000080"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r9, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r9, 0x0) fspick(r9, &(0x7f0000000180)='./file0\x00', 0x1) r10 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f00000002c0)=@nfc_llcp={0x27, r13, 0x0, 0x6, 0xff, 0x0, "14dc8e76c6046125f7b94f2ed80ad32fe6f3831bdf2bb179c7bd22fe44d58ffd78bc27085c7174da586ee768d8c716a7ebeeab4a280807233a209901f5efd2", 0x2b}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001ac0)="71b1885cb9e53bca9ab8d4f0d1d5242817edd114218100c5f1faa77dfe597bd7e5ed2b686b14b70dabef18d0c73515b98c121b6cf60d1a2121075e971ca1ba6d5789b9f5e507ab0d0d0a5e80e2c9796344161d33a5c27d3e6a8d16519a8fbbf9988e12839cac0cae169f770f0dd6ea629574f7c2ed841d89f4123ea366f0905e7e895ea8217a78299ff4a2c46fccd1d7ae8de015ab4e8e5635e960c2e35b095a64de46670869bd84f7fafdddacbe7cf3064252f0fe55cb59a5ff10d3c7bed8c516be4245bbbe4e1233ca423c8b0bd3b22c2c695a6ac7ef3fa07c79309b4d266c6270e2a133af2fd6ff540d50ef85eb96fb5cc4223e6cc45f3445675df35a2c58eaf8bb292435ea19d02065d069dae723c6d92a04103ff190251f9e2751f2d88a36f4aa43a6b1745a60415f02c24e9ed09dde2ecb5d3eea9a0d1a8d565e325db089c0194c6121cccd40595715917eca061b8c761d10f03d6d17ac0a5e6c1dbb7ef2bff7a395508f7a1f67", 0x16a}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x238}}], 0x1, 0x4000010) io_uring_enter(r10, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000900ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2972.927713][T19348] usb 3-1: Using ep0 maxpacket: 8 10:23:02 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xc00000000000000}, 0x0) 10:23:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000a00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:02 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000480)='1', 0x1) (async) syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async, rerun: 32) r5 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) syz_io_uring_submit(0x0, r4, &(0x7f0000001580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) (async, rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x104, 0x1ad941, 0x23456, {0x0, r6}}, 0x42) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000340)) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001980)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, r1, 0x0, &(0x7f0000001940)={&(0x7f0000000500)=@isdn, 0x80, &(0x7f0000000680)=[{}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x4}, 0x0, 0x40000142, 0x1, {0x3, r6}}, 0x8) (async) memfd_secret(0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000012002f0cebe393702103000000000000000004000080"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r9, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r9, 0x0) (async) fspick(r9, &(0x7f0000000180)='./file0\x00', 0x1) (async, rerun: 64) r10 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f00000002c0)=@nfc_llcp={0x27, r13, 0x0, 0x6, 0xff, 0x0, "14dc8e76c6046125f7b94f2ed80ad32fe6f3831bdf2bb179c7bd22fe44d58ffd78bc27085c7174da586ee768d8c716a7ebeeab4a280807233a209901f5efd2", 0x2b}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001ac0)="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", 0x16a}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x238}}], 0x1, 0x4000010) (async) io_uring_enter(r10, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2973.020401][ T6642] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2973.076062][T19348] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2973.119861][ T6642] CPU: 0 PID: 6642 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2973.130260][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2973.140320][ T6642] Call Trace: [ 2973.143599][ T6642] [ 2973.146533][ T6642] dump_stack_lvl+0xd1/0x138 [ 2973.151136][ T6642] dump_header+0x10b/0x85f [ 2973.155571][ T6642] oom_kill_process.cold+0x10/0x15 [ 2973.161128][ T6642] out_of_memory+0x35c/0x14a0 [ 2973.165820][ T6642] ? find_held_lock+0x2d/0x110 [ 2973.170596][ T6642] ? oom_killer_disable+0x280/0x280 [ 2973.175907][ T6642] ? find_held_lock+0x2d/0x110 [ 2973.180748][ T6642] mem_cgroup_out_of_memory+0x206/0x270 [ 2973.186360][ T6642] ? mem_cgroup_margin+0x130/0x130 [ 2973.191510][ T6642] ? lock_downgrade+0x6e0/0x6e0 [ 2973.196388][ T6642] try_charge_memcg+0xefb/0x12f0 [ 2973.201362][ T6642] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2973.207379][ T6642] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2973.213149][ T6642] ? lock_downgrade+0x6e0/0x6e0 [ 2973.218049][ T6642] ? lock_downgrade+0x6e0/0x6e0 [ 2973.222938][ T6642] obj_cgroup_charge+0x2af/0x5e0 [ 2973.227906][ T6642] kmem_cache_alloc_lru+0x145/0x760 [ 2973.233208][ T6642] ? sock_alloc_inode+0x27/0x1d0 [ 2973.238165][ T6642] sock_alloc_inode+0x27/0x1d0 [ 2973.242932][ T6642] ? sock_free_inode+0x30/0x30 [ 2973.247700][ T6642] alloc_inode+0x61/0x230 [ 2973.252040][ T6642] new_inode_pseudo+0x17/0x80 [ 2973.256728][ T6642] sock_alloc+0x40/0x260 [ 2973.261061][ T6642] __sock_create+0xbd/0x790 [ 2973.265580][ T6642] __sys_socket+0x133/0x250 [ 2973.270129][ T6642] ? __sys_socket_file+0x1f0/0x1f0 [ 2973.275296][ T6642] __x64_sys_socket+0x73/0xb0 [ 2973.280006][ T6642] do_syscall_64+0x39/0xb0 [ 2973.284438][ T6642] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2973.290336][ T6642] RIP: 0033:0x7fd88708c0c9 [ 2973.294752][ T6642] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2973.314386][ T6642] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2973.322900][ T6642] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2973.330868][ T6642] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2973.338846][ T6642] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2973.346815][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2973.354789][ T6642] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2973.362777][ T6642] [ 2973.476660][ T6642] memory: usage 307200kB, limit 307200kB, failcnt 18293 [ 2973.521389][ T6642] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2973.550302][ T6642] Memory cgroup stats for /syz3: [ 2973.550543][ T6642] anon 2899968 [ 2973.550543][ T6642] file 10280960 [ 2973.550543][ T6642] kernel 301391872 [ 2973.550543][ T6642] kernel_stack 851968 [ 2973.550543][ T6642] pagetables 1667072 [ 2973.550543][ T6642] sec_pagetables 0 [ 2973.550543][ T6642] percpu 5136736 [ 2973.550543][ T6642] sock 0 [ 2973.550543][ T6642] vmalloc 0 [ 2973.550543][ T6642] shmem 10280960 [ 2973.550543][ T6642] zswap 0 [ 2973.550543][ T6642] zswapped 0 [ 2973.550543][ T6642] file_mapped 262144 [ 2973.550543][ T6642] file_dirty 0 [ 2973.550543][ T6642] file_writeback 0 [ 2973.550543][ T6642] swapcached 0 [ 2973.550543][ T6642] anon_thp 0 [ 2973.550543][ T6642] file_thp 0 [ 2973.550543][ T6642] shmem_thp 0 [ 2973.550543][ T6642] inactive_anon 2904064 [ 2973.550543][ T6642] active_anon 10276864 [ 2973.550543][ T6642] inactive_file 0 [ 2973.550543][ T6642] active_file 0 [ 2973.550543][ T6642] unevictable 0 [ 2973.550543][ T6642] slab_reclaimable 279872 [ 2973.550543][ T6642] slab_unreclaimable 293023328 [ 2973.690520][T19348] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2973.705906][T19348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2973.716667][T19348] usb 3-1: Product: syz [ 2973.720948][T19348] usb 3-1: Manufacturer: syz [ 2973.728148][T19348] usb 3-1: SerialNumber: syz [ 2973.756357][ T6642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6637,uid=0 [ 2973.785498][ T6642] Memory cgroup out of memory: Killed process 6637 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2974.066692][T19348] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 2974.080676][T19348] usb 3-1: USB disconnect, device number 45 10:23:04 executing program 2: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) 10:23:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000b00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:04 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xe00000000000000}, 0x0) 10:23:04 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2c00) 10:23:04 executing program 5: syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) write$6lowpan_enable(r0, &(0x7f0000000480)='1', 0x1) syz_io_uring_setup(0x7788, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000100), &(0x7f00000000c0)=0x0) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001580)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0, 0x1}, 0x0) (async, rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, r6) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x104, 0x1ad941, 0x23456, {0x0, r6}}, 0x42) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000340)) (async, rerun: 64) syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r6}}, 0x2) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001980)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, r1, 0x0, &(0x7f0000001940)={&(0x7f0000000500)=@isdn, 0x80, &(0x7f0000000680)=[{}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x4}, 0x0, 0x40000142, 0x1, {0x3, r6}}, 0x8) (async, rerun: 32) memfd_secret(0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000012002f0cebe393702103000000000000000004000080"], 0x14}], 0x1}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r9, &(0x7f0000000080)={0x10}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r9, 0x0) (async) fspick(r9, &(0x7f0000000180)='./file0\x00', 0x1) (async) r10 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f00000002c0)=@nfc_llcp={0x27, r13, 0x0, 0x6, 0xff, 0x0, "14dc8e76c6046125f7b94f2ed80ad32fe6f3831bdf2bb179c7bd22fe44d58ffd78bc27085c7174da586ee768d8c716a7ebeeab4a280807233a209901f5efd2", 0x2b}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001ac0)="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", 0x16a}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x238}}], 0x1, 0x4000010) (async, rerun: 64) io_uring_enter(r10, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 10:23:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000480008000a000f"], 0x28}}, 0x0) 10:23:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000f00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) [ 2974.747983][ T6669] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2974.806074][ T6669] CPU: 0 PID: 6669 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2974.816484][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2974.826583][ T6669] Call Trace: [ 2974.829891][ T6669] [ 2974.832849][ T6669] dump_stack_lvl+0xd1/0x138 [ 2974.837492][ T6669] dump_header+0x10b/0x85f [ 2974.841961][ T6669] oom_kill_process.cold+0x10/0x15 [ 2974.847134][ T6669] out_of_memory+0x35c/0x14a0 10:23:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2974.851876][ T6669] ? find_held_lock+0x2d/0x110 [ 2974.856686][ T6669] ? oom_killer_disable+0x280/0x280 [ 2974.861939][ T6669] ? find_held_lock+0x2d/0x110 [ 2974.866758][ T6669] mem_cgroup_out_of_memory+0x206/0x270 [ 2974.872345][ T6669] ? mem_cgroup_margin+0x130/0x130 [ 2974.877492][ T6669] ? lock_downgrade+0x6e0/0x6e0 [ 2974.882398][ T6669] try_charge_memcg+0xefb/0x12f0 [ 2974.887385][ T6669] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2974.893409][ T6669] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2974.899184][ T6669] ? lock_downgrade+0x6e0/0x6e0 [ 2974.904085][ T6669] ? lock_downgrade+0x6e0/0x6e0 [ 2974.908989][ T6669] obj_cgroup_charge+0x2af/0x5e0 [ 2974.914062][ T6669] kmem_cache_alloc_lru+0x145/0x760 [ 2974.919291][ T6669] ? sock_alloc_inode+0x27/0x1d0 [ 2974.924270][ T6669] sock_alloc_inode+0x27/0x1d0 [ 2974.929068][ T6669] ? sock_free_inode+0x30/0x30 [ 2974.933882][ T6669] alloc_inode+0x61/0x230 [ 2974.938260][ T6669] new_inode_pseudo+0x17/0x80 [ 2974.942956][ T6669] sock_alloc+0x40/0x260 [ 2974.947209][ T6669] __sock_create+0xbd/0x790 [ 2974.951725][ T6669] __sys_socket+0x133/0x250 [ 2974.956235][ T6669] ? __sys_socket_file+0x1f0/0x1f0 [ 2974.961363][ T6669] __x64_sys_socket+0x73/0xb0 [ 2974.966056][ T6669] do_syscall_64+0x39/0xb0 [ 2974.970593][ T6669] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2974.976508][ T6669] RIP: 0033:0x7fd88708c0c9 [ 2974.980924][ T6669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2975.000660][ T6669] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2975.009089][ T6669] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2975.017065][ T6669] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2975.025043][ T6669] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2975.033014][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2975.040983][ T6669] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2975.048969][ T6669] 10:23:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00001100ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:04 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf00000000000000}, 0x0) 10:23:04 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = memfd_secret(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0ab18e8ac9e233bd3b69ba7a3c33a5e1cfe8123519dfc585e365a25ce1f826fea3f10355bbb2fc99c02c64d031551c483144ab31944ea8", @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESHEX, @ANYBLOB=',group_id=', @ANYRESDEC]) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getenv(0x4205, r4, 0x1, &(0x7f00000000c0)) r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x40, 0x4}, 0x80, 0xffffffffffffe685, 0x1, 0x1ff, r4, r5, 0x40}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@loopback, @in6=@remote, 0x4e20, 0x100, 0x4e24, 0x3, 0x2, 0xa0, 0x80, 0x3b}, {0x4, 0x608, 0xb99d, 0x3f, 0x7, 0xd6b9, 0x5, 0x884c00}, {0x81, 0xfff, 0x101, 0x6}, 0x0, 0x6e6bb9, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x18}, 0x2, @in6=@private1, 0x0, 0x0, 0x3, 0xd8, 0x3, 0x5, 0xfff}}, 0xe8) fstat(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r9]) sendmsg$netlink(r2, &(0x7f0000000f40)={&(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)=[{&(0x7f0000002080)={0x1350, 0x37, 0x2, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x62, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc0, 0x7b, 0x0, 0x0, @binary="6b19ecb22798bbe15f7e340b8d0286ace8f271db9c680bc8f5b13b5eca85eee0011192a55d42908eb092f7c365322905a9b2310eed4967d5d920470cbf18ff3ea989762f6d70cfcdeaa814509dbf361686a0c99a23d273cf78993d38cffa3281d028427ad8c652ea54f90dbd6ce26bdaf00af90b828a7524500b40a4265d467ec7c044286b49a1a2b92837277bd19fe52f7e32a089d42d38ef3ada9182ec6047a673c0c7688d81f15715cd9cec16c2bbf53cbb717e9ddd195fecf2d5"}, @generic="a3ae6ad0ac44e31a7cf9bdc5c55e593d8ac1d3bc1b7405a612eb13e4cd18f9454de3e39228933f1d1dcf159654378cdb12769f255d6446c5ab181c2e591b6661960d2bf52cdb851624ca2de10279181517de14b5f9e1d91292f163b41110f981ec79495c22433d0926108b1f802e2e1c813dbb8618ab61b6dcc9b809289da878a0efdda11f2ffa4173910345fee22979e38b1b389b4a8dded14719dfce8b5b17c662f612475d8760b48aaf07a5e63fb189bb230bcb992c61f4609b6ccb174f029cff7439e111e98f9c64ac34242dec0f328a2eac", @nested={0x36, 0x82, 0x0, 0x1, [@generic="c4458c703890eebdef7773e3277dcce03d015ad10965d8d66db9fa2f170c28bac35044f63524973bf29bb61244d4e4d8460b"]}, @generic="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", @nested={0x76, 0x11, 0x0, 0x1, [@generic="2c6daa3093ea2836103b6f2a254a70a209131f7c64564ef19810e6ed1c2a0f568311075e1b78891ef1e0e49cd532f89b287baa2f478721b4ddf91bd09eeafcc21a4248fb8379645d21bdb8993fc720cdb4ad8fafb5d330a7f609285d431946f9a904bc62aa84916889dfbb317376ea3bafe8"]}, @nested={0xf0, 0x7a, 0x0, 0x1, [@generic="5ef853b96e68f331282cec30", @generic="680cd4836deee6b86146f552b1d800628385487d813061e8393cd075266f4e9daed5c885f619d96ac9ea5828ae7bed5b6cb00405093a0903059366985fa92b110762f577321c30e527ef4225af5666799b9caa55767dd1bc135d7a17a545e956de62d807e33b58e43422898c1c5c7549bb9fc89b7be32a00ce3f3e8a92093e244db5970ac6587d2e2fe91dfa6a7f45309cabd6c58471800a30cf1343074d7da6a246e5cfce75f29b67cfee182f0e6aa2ad4c20e8512fa7063587394d0d82392730792e334bec36297c4362c5ffd57d52588cc80241a81470f1da44900da7a473"]}, @generic="cc956f"]}, 0x1350}, {&(0x7f0000000540)={0x80, 0x3d, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@mcast2}, @generic="c44d9950aea269e9cacfa8a204e5b99e1b770fe3ca8e7374c99f9fd0ef405dbc97d6347f6cd1f4c2594d0fefd6154f5ccafa8d8827ec7bb4b67477dfa1e710f04406c50322fca563faeb932987bac6357186d7a7bcf4e3a15a"]}, 0x80}, {&(0x7f0000003400)={0x26d8, 0x12, 0x200, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0x8}, @nested={0x113, 0x7b, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x88, 0x0, 0x0, @pid}, @typed={0x8, 0x1, 0x0, 0x0, @fd}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0x7f}, @generic="f4ac7a0b746d28e608eb245dad65d06164baaf35c776bc41dbc8744fac3e8403e126f8303e1642acb0419595061dec24a0dec0b70867e04a58a7254c7454390b8dc574d08eedfa1f7a776e83d518747e75b003ac06f90b3c62dd52baac067e57ca467888b62b41ca0854888939e266c65a4857e696b89d03857f2bab776cc48a6ff40305e6ac46f659a2b86adff9e137925126a5a68c73103a898998a375cab9cb286ab309b733a5e2614c63744ff4ac6d655b94c0f99a76c336f56a1dab65a1c1557b82e8fe4ca0d2ffd6b5f326cf0161545c43763ad03f809849f9bdb674a9c681367fe71234daa4fc5c"]}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="febc1d0bcdfd6194cdc21b865c7b6823a47c9388b5374445fe9577679941e883d4", @nested={0xc, 0x77, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0x500}]}, @nested={0x11e, 0x19, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @generic="ba9168b60617da52c6e7976145c6aa9626d5d0eea5d244b78c3b5eb30da580e766406c6e4afb541a71a9440d0f7a15ca77d56ace6c570ab0e921954ee8fcda26f94405fce2d6a8924cdf0827f3654092df1f209717c1db54f0dcbc5eaa6259c31c961c2630e1fd46332067f6c7015990bb40837459d97c524f563dafd23b3b9a19ed181435", @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @typed={0x8, 0x53, 0x0, 0x0, @pid}, @generic="d87add90e7ba40f53c4ae355404699dceddb583cb9d773d5c4c5476ea8f6c1131f55a89d396c4ebdde79282dc704d3082cdfca5171ddc07de87a0724ec70b173e77a3a3b39828a46152d4cb21a08d91d28c0d554bd068ab304e203efc210a1042ac69559dd05b3555f56a70d8f9183dcec"]}, @nested={0x23cd, 0x46, 0x0, 0x1, [@typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}, @generic="f14cd95241707e2f5ed198fbeef6e5635c2257b78fdd26e9162681b0aa90815ce773a82051a3421a4a251445411af7c6a11647d2a84ec1d1a3146bfcadae9f8714e33bde39d25e89e2a7645478c8afaa5476a2acd92b53264ac1eac6fc463c07c4ef12766dc83693ca15a096889e9628e0fecafb601e950b3b2969c72a4bbe784ddd669dae67c43dac37b284bdd3ac2d5bf085b295294a6e8bc9a527ded348faf9a4f9a2d8222fb72954887ea5a634a8b1468eb977350fbab878175791af30048508389b16580930b4a82d832c7d99bc488a8c014c89487c499c31aa9376fd202ea19a8088ab801a83", @generic="87c1c8ab42dfe6c51cf4b63171bed423b22a1be5f07c738ba701a793c5fcd369de773579829a2a2685c30fb34238ab276873b077cb12296f92e2a30d80776b475a40b6562dd6197a65082f7d79fe32b9c52881373310614227c2bf6b15b123e512782674f1e34f93e8eabb7f1e318f612e9ec2f4b0505979556b77332f72b44f068e255b275c06d352c1b9134f28c002ef4cba2c44072eabf8a751b57332f06b20bb06fffbc237401a00b71a7b5b09edbf57ec9a466f263b3c03a8e3ee9fbb332f40b5d6c00c9e72e4bf7edffc2a1c2e7956c3fc7c428900eae1b0e2a9fdba64c86a2a0e956dc2799053a2ec86f4efc65f1a58f2f90262ffd7114e90eaf193f2beb3cba6bd670ee93e6624a8484b084af2b4a192fdb4bda642056fbe555d2e859799a555212afffdd2bc2ef346e004ac8607370bce3fa0b5da8aa513a304494d2c923a46d0a917ddc4f1384a1b1009ef2447838d6d945bc66b96e45c98976947c5265b401fc5cb2192b5e7bedace8fc14e226118c1ca359104671a1a50b72c7d5714011e170708e9567b548e59b0225fe088ea0dcfd07c577794dc0338646e011ce7125c438bdad6f9ba78f4c9de2f9e19c0421be237a07113788999c1dfb081b56f024011e81cff668f2af3a4d966b7796c477ac5d2830c3a1b5248f59dc1a4cc0f7ea4fa463dea1e7fecec0c13c4e5af87e278ebfb0a70e154914f243878ac9a0c47b4e27eb5f829217fda59901972c606aec54ab60ae60b6d1e4efdd1c9adf0275c52d88b6d35db51c028366db4c035c79e2a5e5ac51556dcede29c7363302a20c380965a40ed3f2206efb0d5afdcc32ab368e76b2a9f88440cbb4f92fa90b1ecf3c66d535978ba21c7551a6dbb1c71e00c4cbc925172223949adbbad376d39849be3b2ebf1bb54141b5c53fcdf95f1088bcd3040769acbfa89d506c5f87d9f96de18e4e84ae25fa71255026a1d342a9e1e466ca5cd0199b9258ea5edc441163f3434fe32ca895bcef7a8ca5140de207763b2916b62716adec35a6559286d459fc76fd6cba6d5cdf32ea271b59fb1f0873cc3ab29f136926f355f1ffd7ee5a0b586de3a223b2470986f0cab2d26380386a78d2309baf1fbd2046e7a15c449b27cdc6ed2e929eea5894d1a7919ff4304b423d894628b58178b346925f1d17d2a60d5339820d35669f8c874d78b3ac34a8312bc83f85a17fe8db3f1e144c86d908fd070d0f5546806aded540757dded44527ff07a2bf99c7e2adf1db249f252b617362d76bc90242f512d8f8ebf5abe74718f692353a1cb45f927bf619c490c282c4f5c76481e3b8c0344a5e50fb51dc423244cad3fafb6794303aaed6cb1e25a85de3d0b38c660b68078ff5c35af12637857f6fe34c4cff175e9485ff7cf98f321957ab99a54b9edbf6c1d0b88b808f530ac973f53231e69aaf76606dfb6bc9803e4804f85ffebf00b64ff3e4e9b98a5e3d16915db934e9dfa3130ec5bafdba705c7b8763f08208126c5a947e0cc3eb5faf6a24155f56409f7d242b73abecc5283581e1fd24da9d70478417cead780040dd8c12fa391b4aafa48edad5038d4d09237f53b38f184397d680d81fab68e743e541b27dbdb60d624fbea25d005cd14a1a4577be860d5ee3e52168a6709281a544195873cd2e6001d34ca03f2ef85de38f225c46340e0ee4ce9d89410790d36db9436c7a1e7a68098bf9337e0a06609b7ea92a006b869d740981e18a88823c366d19bd05cabe899ff2e33ad94a2e896ff5b0ae2eff018e30cd23c443f8cc0a17eeec6bb303420b3769573e20305589fd44990808a3682c57b00fad02313e15ab64951251d8698a415990aec0290b2d7da17cf9be065ef1d94a2fc822d3acf530bb75923d9b173ff44802a026f4e12dd7d69cd6ee82ac358389a43f857ebaf538f4603471108e0190d63973efbcf77368aeb13e46bc8014d1907f31ad3893b5b771f5bfef529ed563eece2224643690a51ad270450c981e9233f740425130a82377939ba0640776122a878085be43489f088dab55b923bdfc9920b563db53a08f1f4751e1f7b3f6ea13dca1c5c7e099c074b652b1c09ee536dedc6eb15cde5b988a764bd9aa23694b75d4b670bfb3e3afa9448576080db3ac68fbcf20752175a26697e5d83bb36120bcc34d98e4bb5ecf0da650eda6cc023f81c7b839820ca7bc421f6d02f40afc6c926ed6682066e6638f45589eb7d3c191d15f63f9c15f42a2fd0150460af566507dc02f451c62ef1e98671f378929e336c618bb2ba7843438a14a9219106946d4f9ea023af1483b3380f958846fcf8eb7d0ca2e5da93755a07f400ee78ba65fc7f4af34fcaaf3140232f969b0716aa131be733c3ee84f86301f3ee7cfab4d379bc66f6aec3f1668dda56990c08b0187bd9642562dfdbe94161b1b77d47103c3527b63f5c8e1285cc3fe62fad0fa3b5bdd6aebfc4d3ebf247f1237340077cdf124f581397f1e2e1865ee0234d1e709075e7cee7b3703315937c8f1c84294781f86e9192afe28d314f4c4c2ee29e63a982fbe36045529b81908127a207f680ec59e38c535b23ff2a826657c1fd889918ef5fe73e96eea5cad538d4c4b234d4163c4850c28ae285acf4863ab305f478936338442141811167ace0af42a228984615c8df448fb81318188c1b94335714cc0f6e4a6fc437906e39fd8934b20fdfa10d8587f9a4768c6b4f71d78fe15367d8f99e7bcc208a9a033cf87c53704c7a15ee9445eaa312016275cdce61d7a7bd0c0c13ff5e4e997245f5d4de9daa14e8c925df70a220325712742c74952245485d563c1bd113e5c96efcec9be425d6fcf9f4a9b9d005073cf543f41928c30a88660351c35c38abfb651900989b298d96d1b31d5fd74397a5bc051b5645771664264a8a7ae7cf641d952244c26a4d5eddd14abfc500bdc45b3889dbe653bf10e4d45a47a977682809b8b22aca155c9fbe2dcf4dab4e49912de0c46a802b2533100eddcb0543caddf9dfd25d059736c12a8b9e2f6d1db08c36fe588746be1c0ee9bc3e314362dcb0828fdd3983ebc37306da95365cb0f2caa5f6a72d5213202f4cf9bf227bc795b96bb79b1f87dbf090a9cddfd6a06f1de6b88becc36970cb02ebae82501ff8a51b5644ec8976f0f2dd3b2b5caab4220d621c267d056967e4a70cd4463281567cb4a7b219682d630edcaa45dca1306b9bc2170a912c8336ec3c810f14dbdc7dbf8900a0f737e3952278de022269487120291188406f99a4a3d9a612ab1743c2b61f81e61eb6d3d48c88539a4e00cad675e2eae9d509746f79f0149aa8f97f8ad3a8b6a32aac4f275a3bf0f723b35a41694b0a9017934d1734cc3034149e355ebf7da6c15d548605546cb4087c6e5eb426570e492c1e8be7369a6aac878190b2704c0ec680802a4db49dfb439fca859f86dcda04f535fb80745c8bf6397c74f29f98947b2f7bf20548f446894210e506a91a655f3dd5d28dcf68230d0523f8e2f02f4e656b9c050c99644900766194afb0b8346ed1071ea94706aa4b99a61a78599dd15623063a1c77c3491a59ce2b26cd0920f624f0f80fb676b4a4e3586e50f635c653030e7ff38266526fa35ac67f8fc1eb756ec698ba3ddf85ea1521c7970b936e075d1f0c44b88ba3cbf21cba63f50e31f513934cf519d5e6aad76ad1ddbc3e50e7d670ee994675ea084362ca8491109efa9843d41231e3a1f349e61093ec64b12490af2e77a5ca9ee451747578f6653aacddb399fe1cb992fe93f6552d1943ec318dee88d946136cb56c4d824d76cb8497a267d3e95e9971568a4942eec890958d2ebf4a5720338a5b43e4cbbe84cd7859e5afa71738580323554853afe3a3fa38bc426d094ef9f4c23c7241a86e272ea7edb15b221b82208732bac4715f324712a755f3e21d4de13f81f5570c42ff947984761a5a4cc3bd083dd595c0e038c0bb16accbe8a06043947a84c88c37afc0b2166d7f4bf56d14d4bfc3526b9be505d8ffe5b68b98780ae195c944d4f928b9ec0dc686f1ebc560e9fd747337189dc14b5d41f65ad2c41ac24b07d56da0d349e21359a6dad5c785fee41fdf890d92b095317bd9f68b0fe5c45d915830bdfeedf1942a53d1514bdc49fc95372c97774b5963b08826866f53e0ff5ecdcb10032dc23b025e02c95aad14aeebd755f52d6faf43f18e2d254e90940ae58aab3ad220ac207cd77e2351679ff979428b3c2b8ed5ad6cb4fb83ec607f92b3fc7a07f2ec2657482aa3a3b8a67b44cc25b1f47cedae2717fe10bf16c5bf52b7594b4e3a373d47a2d5673fa9431abcf6e8f6a4d77bc3f5777c624f924c001922db3fdb4697fe91e9399b50c36d49b77366b9bb85142c4f1c7918af3e6e8b3554720224cf53d7e01e8ffd9242c3a488af419e72ca7fddf347e3fdb535dfb9b8299a40413894e53b5550add18768fe1bb958cca366274cf0934c294127372959aa9e6f4af9071f5bca3516d610f9fbe6242964c32b064a10a16e0c5df417ce66b7f82d3ac96c5fecafa5a1fb6c1a2b4ad13b890a60ea0332299ba478b462f17678706965932807f31704c011c742da7b1a787610ebf7b15c4ff37c49c135b9146ef239f076d76b89476ad0b516ebf476e8e016bef4237a14e02171b60f6e13c8c61a9c7d79139016fa015ca9306d4f0894a621dce3c766fc91f9f69bc90487ff88b46cc31d3061739c8eb4ba52b6a1486cd2bee2d57e5441fef388954486aabcf81bd5e0ea2d02ddaa3e949ad0c6a046fac6d2356ce1fb2cd300ac4a73814599dfbb849e064403540da12fc1723d1d8e4dea7a7901f4aa91073df00d141be383e3468f7b63193eb96fde429755fbf7ecac163a5450d107041156ce8fe1f28ec42af9228d7c171311979259d1bddd1542d9ee11cafb14c9a0e30a7866152f6632203fdc5d5342fe5dd903716cfdb3471156027efb16295a82cc0e8fcff68ba06cd44a3575fddd8bdbaf2144c8250b324e4b9a8ab03ccf3a1b116df04009f6eb5243b3f119ecb65e7c72e2ebcb64241cff9f1c0fc9ec295781a42826ab3ac577359340e1f4fc90e8e2d4101d470269fd004214f19851f2ddcd289812a01ad1485445e7d9b0cffbd59d6ca196413bc0ca77e1aa1051ce995419dcbafeab5f8f18589f46140c6da9299e023b3f558e8e3e3b82d6605b19c9397ad06ff1c10e735640698cc5c011008594cba28eb47b5ed256ea9d01159090695a33888e8106e1314c5faf3b09a828b125930ee81052857b3e06c96bed0c5a0b5af495478eb177963edd1a2f4a5ee1501ef190dbffce144a208bece24384a03391a9034599a4270cf1b0c54d7703358424b8e3e59fc9f171c495390e617b48ee2d49bc7e38e0f471e94778d5531c9bbceac1b3685d5b3441bc8eccbd5104efe98818175a9f2e569a956f0881a3f1f41c6f856439edee144192ae0a50ccebadec37d55159de7dbc7d6cf37b05686fbd7c2438f94d288c0f4731355ba5ced44910b5bedd58a6af4f8890917d278a655eaf4f1a39642e19af98adffc122f8d4d3a6ba98f9d70859158ec6f0ee997d8b7b3cd50984294377afbbc313286f9b3f654284875338d33a261acb72bf7dec42926d1399c7225e48a7272c1232e4a7eba45485263f595b92971f5afa8b67723110ae18fc2356bacccf05e3295893313e0973575ce19ef01ab2972e661a68465cc259a36fec9a9b959b13b808ea199e490b39967a8772c69258b69cbeb7c68b798f5985bfa38d3c16f5374bd85843d067e63c9ff539197e8cc16762fb6a2a1194024d", @generic="8458527567f098ed0498cd4b77e87d153430798e8116dde37f4eaa77899c581a197feab00ac9067d2c4137aad88e912839561f77618be52775918433c68398aaa9bdcacc4e27ada14714b3bcdf547741e49ff491e52bede0b51e88bcb57acbb541d9715716d0dae186eb706948656e1b254415c00400abecd93e971503ae261e947493059dfc7583114b", @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@loopback}, @generic="5150154257c16595e7e9d0d3a1315ae7813c6b8b7f87ede5652d230f6f70ee19a532c49d3efaea961a4eed0981cb6830f8d6c51d8d2bfe6da17cc7e77367", @typed={0x1004, 0x44, 0x0, 0x0, @binary="c44c0d97bd652aa5d2e584e94d1b07323fb3ac34156507a3a1b2b7052e30d138e892d7e1f24fddadaeb1c793f6c6d123287f5f6717b6e56507cd527030cb63b5fe21ea52164feb45fb9699a5d258d753f9745b9a5241dbd048ddf4959941fa86958b6134ef58a27879816dbbdf9af349d8146561be302e453908cf2c65b9b12ed2b4362393353eada1cc74f48bcc2494bf96efc3094cdf49f6a8ed8e805ebb43b1535cf23a5b51bbad88a7cac18b7fc443c31b962e7a9d0d77a935e6c68333c68c32860eff88951f1325f7d0db50986eeffd7796c390cad873fc79419403b1305c15e8e72297df8a580b7448259232bdd14069b97c404954728b44d9b7544e5cb548a4f3faa64ceae0661b80570cfebe295c6c689149cd9cd7e2949ce67172c1fe0eb8905d6df939e1aa250f610fcec1539b2906480db72309710b6a03e2616cb8c393176f01cf83ae1207e8ebb73d2a4757d88711cd1576bf8af01e6476e61369efaba772ab84ac382f1a938ad35b781356f2c32f5a82b30d7cce3048691f4b9c4e7b56faab34c612857fb8aa7beee1a760354c0077b58c581956104da6e6a47e6fa0b8c986782181a1807b20a997126229b5e7d761d0e33fe14f2a636c353d8f0f114343d0c1b1c13389895e0767d2bb1e17b2fce03eb4a7d0db729b909271e046134871a517b548dc45deafb029f5451d19e9920f701e216d0e226e4326a650d6dd652eff5295d909378ea84fc8d04a16486b6621e49e3bf5a97241bca2e6a8fa2f0e99ec304ed8426d1324d456d7ef221d28014c869f6ba54863094ba6e81040a4aad2b03db0facf8f9896015002e97fab077fb2f6924aa943d48d4e4e027755ef95ec3b73e85c43743e3a6ca825c71623c00d794e265ef03448c45b0b440beb38e5120d073165d510c5f7198d47cbfbb5930cdf113c9464f6af840d30ed0392b34b9cebbcb022f1be296825f9df18da09f3faa557c1fe75361abd1a302d9ec35da43f79da4a64ad9c2ec556b60d51f571cf737115fbb99060ef420f363a87f141aae83a8ddf811bc4663ec0255108cf091d9551ee0e5e356bc63c6bf3db49a20f5445e4ca1ea6c838d0aeed086a6a6b6c0cdfcc0dc93e0ff0fe11db165503d12547f3fb40f8c333c584c3d92b91e32091f39f64c4a34b51830217d504b3ecd80a40bfe1d6deaadfee6df53c09772979f921eb1b04b03c3ea847ede45e054a8d73a5adcc9dd6f8652a9ae18c0c785fe3bd80dfbad84acbf0e05aafac2da73480a7812e07b32fd084ff9558921d5edf34f180f2ca3111a3703f13a85886450b5f132595dc63c04e9c4de166c2377844db19c519b2627b3b1210239f4e3863cfc4817b9e7f528ff01909c0ed1993438490878cfec22de7c633dee498e4a2525bcd4c6c7ba838288038490a6a30f0de9bbc3e41219dc7e5f9d72b120d2464a3c0a887d3a40d7270afdeb18b70d47e5604fe8ae7b616c70afff5f39b3ce32a987a7baeafdda17dcefdc8984e0679aed1731a83212831afe8c89ea56014554b0bd8f7680398b6190d80912f33b241cb4ad106c19c4f30fff74cb8015db11ce3594e06de28213db0deb973cc5197b5b4a81c92f9dac7926ad9cba1d86b578472b4738ef2576d0f09b08c3904052e06831cca52a8a8cdb4a61ed519e709e1fe7b2e9f84dfc4302f7b2be03208d615f85a6fc5b66692d88b6ead6a9270da2fb5c5afce347106008c9abebfaf514a8f4874007af2858ef5eca5b17f2461cd1cf95d9e2ebc769a9a06f392bcd6f9d5fe252c6d4e1060584b8ce4cd8d76e8ce179b1df3714f08da2dde4eead7b800943706047c7dca9c8279fbcf71e5e5f96ea5a0011c1a61a3ca6090602bb79c24b9f1f2f17c8dec4b2221f29c365f5db8da5d3cb435c3b4c56b5cb51130048c05e3213aa653dae115fd5487c47843eb586c9ea61c14ede05a0780194ea5c08488b04bb9864dc5ba13bef42e06efeda972de2cad0bb77941daecd5088a2d0c90269b45821556d4048291bb31b25502103b1cdb33b970f5d4926889a39350fdc487dd45eb76a4a799a6cbdf35dfb76a897af5ba74fea5fd395c145e75616713942d52673c2e24928bb550c1d9d665afa00a00f7bdefa9802174b395a81c76357fbaba603a583dd3203d6865cc179603fceaa12d846b37cc6136f535af4d3369da584f904f1462cf8a14218c8f5a89fde7dca0e3706ad341ff463a01cb8bc08aefa6e78838e485ada2eea18c8e78275f9681bc9e93454c49d958c7ca5a1b1d6fa967230b4e1b4ff201f6e609239b0b08309f120785dd67fc62b5b90bc6f77456f476c8401cfd201378c7111d47244e9bb41fc493765101c9746af05f71fd03b885f87858db7f7ed2fd62021e85f053ccb1f13bf1918ded4e3d071a47d53e32e63243ee5da67e8a76b670e298899be008ff2138fa2945c4ab86c1c7089013992b37da11ab6f1c1a38f61323a7c94f2d09eb0084d6d9f0a2b385e3225fca8a639eb3a539067adabafb29ca41683bc7f18f1d889cb9db69f8c2b2e46e98e0f8f8c90cd2009a88f430ee33f40e81a45db7c6dab5870555fee296409115ad264d19394e316ce85770e4c6c68d3b26a67c0be4ecbcc3e1e5d71242233c88a8802135fe586b7fe1ca01935da932a454af28a89458777fbe29428c9efadc23c5570d72c309c4d6190c025b3298e52fb5db38dc5a50631c6841381781b64328a27e73dbeabf6d11b784f2dfed14978ce3fca85c60706055b50d1042339769bfb830b6f4dfd195137598e568cf633b5ca10c4d821d3e9ee19479bb6c6bd0bdf1fce72f5c6590af6cf281760a7fbe45b6f60f8001439d1607beb627965b13e3e92b31f65cbe2f874606ec30c5a735169e53121f8c73dad0806dc0eacf8e8e9154e5fc8bc4b516face882f801191687ec4a37798628244028d74982df26a4b485384e30b704cf32c1cc3337a916e4b9152ee848cfcb9434e2829d800f1053a7922e4421db28a9fa61cfe3923aa337f8ba155bf172432e9fa99044c02cef5939f6753a1e39182eca708ced38b1117b21c68b31fe10a5a9fa9a74683df435a78d2e6fb419bc3cc0038eb554dc6e6ba7058cfb71aa5d3716b7b0ca4fcd13bb945dc62e7fe191805c8936ba4d05c0344297e72e2543bbf247fe39d985200e1cb851d47239881a4769406defe919acee433e2db392035ca11855543e244823f7fe9afa428f31338873b166ee23d35f994be16026f1c85c30eaf6a78d794d97e02ae4f5e74924405bfb6c82d27ec4a6186ff7029dd81dc94c3d74ff4f7cdf32b97522f8755b711c3995d55adfc91b365e87d6eef1cd310155b4c7703f6b4d62d16516ef01d78e72bb05f7d55a30492fc1acf7be25eab34accf123c5ff86732e55d17ed23824db8e03005e99421f97df101eaa2210cb158a96c3774ad5dcdb52251a9c7c98f00391a598c0b92ffb767a60ae7b4f98d784c80b088c419d12c5f0909f6f80050d950a32bddeb5dd7a6902ee5ebea30110fa6ae717d475294e65cfbfd214d44caf0c7ffc8e955fca99bae327ab0b4d3225b75dbf5dab06f2037a91b84275c8459adfc208a7f960cc7d5236f54167692a1d05074a9e791cb7bf3806991fd7ece3225106494a3c2e011bcfca9e23e0bf16bc11462445e985da6e358b63244f06c110cdd4125734441756ed873eadc082696d5b85561af64146423280f78cb669a211330ce44e2927eef267a7d622df0c1023c055a0580e0eb158ed4208aab2361dee970eac3c9e1c48f7978c34edbdc909b1aaf3a2532925e2d4febe73c4a3d26041721a49c995438e1d75f246ee2fcb64e1cfdf35ea7b5356a00a86ce0830a993caa2ad62056a5c253f4d6938894984dc067fd828c2676f0aada7485c285533ed1f5a1299b1885162620f774ae198a0064abfb219f71919c7f88df08ab4d96b014be1f41dc2dc506bde71d638bddf7139efe806d8b058b3b099810dcb530785d91bbe9563c3d53369bd8f6c592107060236ee435e478405b32119ec82eff852e8aec668bf74b3d97ee41b23de9141f2a8c46d7efc67ab62686f8ae575c9a813019aa0e3f90771e47529a1dbdce8eced6b6a6d63e7eaf5b6a12c9a57c2cb28b65544742c411ceae08d760ef5a1ffbd501e2bb7d34c112bed89183a510167e623148adde48977ae08ff0e1b4d365ab395afa152d7df1149c4aedb7057576dcd3192e3548ae52dbfd583afdfdc23c5c6668447056f9e95cb69e2985da33aa75b81a9b78482e8876ba98e927cb767064a65fef2a9e0d610fc5e3e3dc42491d76e31a019dc654adab039153e72fe9f05f462328613ecfcaa04696321df0275a84dd48edefa2ac4b776363e19ac7f6c8a0618a6d37695ad38490e81cf8d3f4e6e0543b51ea6eac1e3975eaf7e0441878e3d3a78affc75b65a8bb5dce985c3765459878d78966616e5d877efba968026ed32d2201691eb72722429a3ad203afba4c5d00fcc70b6be1418f6c270f7287ba37a3f62769aa8723aa2b55eb3016219f1067e60dc0fda2a7055434476af690ed1ea4f80600023ff8fc8e45b218f02d9fcc455b6e2ae3725f84928c70673467a2669ed65633904e2f33c612e70f1e876d60be4452b55a1ac3ca214617a148280f860654354ab26d611ad5e8e7d40f08c0ad8bab7711cf3ba6b548a7bb4200b12c192c3236ff9124fc62e16e92fb540f6dfaf882cd52385e267062998b09b078bbf3d29db0eb712fd2c2670d3d55208a7b1bde337f0e600473589ab608146c820e70e1b8e64d0b0d1eb0d5f573d7e9ef650f93e866a941a3882aae7845ecfce8145d59367758f6f267fa9891170c861d33e731beddebbf5bf57a58de72319896bf2bad806fe1fcefe4229dc27ec5d7a08740652de28df4a1d260411a969d6dff35be3bf42ce5afc31d5e2cda2cf5c1532a6e4fbda2144093b71643e0dfd0d5bebc6ea2fc0145686221bbefa55515e4601a2ecbf21d98f8a21cdd3b9e73d76a3e824261a000d0e91c2d81a3b3c9bdb15ea671b84f0114934ae842a9c5c99ca874b4fa0885c0a48ec14f43ff355ec0b8768dff325a677eade400f9bb1b6c8fbd906cd3633df3244c21bbdd0f8b1f663d5bee740e6d16f819f9a68d5a513509cb90ee217bcd5e1e1cc114393b7e924b5d8af8f28ae256ada1b9b8224129dca2c0d94fac33bb49a4780c43cfc1e1953513576df2a5462619054269ca5d7a2bde024ebe95719ef5474592df856375d746257f761366fe6bdd8d1b29590c94a3c2de50845ae8f02daae859498dbe10b3f3d4d345ce37137d93461e21a5dc288494f8302657915127c1cc68b6fab07eb3e27f900b196e9ec30db04aa3b12716b4c89d9f97be24f35bc71f1c4c483226ce89f9094eea286f61fd73912281b6eb1dc04d9e7d4b69be5004538b4677875cdeb9c94841fa5576b0a416ee45e1cf709c92285bdd2bd6888ef8ccdc17c70ca32b8a172bf02a18b5f24d3e0fecdd23272d678e4ce2f5c943b8c8667b147b75422645128b3d79cdf2de2d59c2775ce0f6c193fd89a32424c1e1e7d19d1c9a90d32430b12ed4472f010e81039e7da6694dea45aecf4a408f55319849d704d1d89acf4b687e6a9cc8f1ad564cb9eb7a3c6c8944c833ef57cc4d4b77eaaccbfe4e7f6c8cb2446017424e996f4e7184f70503fcafdbe9309f05ae6b7485ad18b936f3350bb22c1758166f3ce61cc2e30ed823af4c793ebbb89ade7fc0fc946c4173a6dc8c6824dffdeb07805069f27c8d62c8c43b892fc78adf555411c191ef4f5ce3e0df1477"}, @generic="970ba28a58672cb37885b7e3f657bb180638a93586258580f34289a91ef321879ae9ba52657f7a95c89a6d52cb1886dc6a6b919090ede4dec635bd9a44cb574b124fbebe403edecfbac68646ff8d976defa80576923eb7790a8a89d67f8c408fcbd297d7b6fc63e2c11e01388522255aa3bf7c8c3188b328a09d4458aea54e4b92ef645f230da39bdc579fe569260fca", @generic="27f8cfb8e6cec1257a3a22faed30a3ce0d272b212c6601f093d28cf3127b924046d89b39100649dbd6e62bc771b6ef77753462d1375a70c188f70cb68279fc474684b06ad5cbef5222b705bb0ddb25ee79d61768badded7fc7ed19b269a9b2803b9d16bb990ecffdfe9d5ce89a2fe236cb77e077d80f3bcf9f1e2fce9ff84d0553080b4aac44839f2581b9646b62aae9d14b3bed22208b00ae9c7abb41a3e631ec793309739e178596c12c15f96d8ded477baeae327d4481275894cfabd759c6451a1ef7a818fbc0dbbcaf31ad5b348ad5e62fd1dfd4e8b65f5f0d840d6ce299a37ae1867b0eb2481aed77706469909c9fb45e", @generic="82920d9c666eb5c7a66ad9a14952b52719d16cd84854688c8fbdd31eb963b57072e54a3b1c09cb8b4c3d5fe14c5bd35b3b491f94e10ef6b1f838a994c3e0e8df51896b2b18c31148bbc14f1004ad3ab5c40d897aa562033c657684b20df43209bb471e6f037da6b9a7243cf842a41bfe3d04c21587"]}, @generic="3f9ac597823f6f02ac09d16d48489c6cbeadeb2a052693e50e5b16eb62db5cdd76b858c3eb003c3a0301796100cfeb5d7727c85647ff88ecb61dca2434207494b53e6f93a266a164eb153dd68a5cdc492a5c8dc2aa8a1189342c2566b779e31ead47d2702ecfdeb63277c838e6056a11fa6cb0c4215e92d55381951ff62635fe23f4764f157c"]}, 0x26d8}, {&(0x7f0000000600)={0x284, 0x3e, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x42, 0x7a, 0x0, 0x1, [@generic="6d40f94864d67babd49e2224f45b442f1df15d73ce42ba3bb1b62d85693247ec818524aa37107a635500ad1be45db49f8992", @typed={0xc, 0x26, 0x0, 0x0, @u64=0x36}]}, @typed={0x8, 0x6e, 0x0, 0x0, @fd}, @generic="885dbfbdd0ce90e5459bc6af8af1c5de90e7a922e08de08d23b33d22f43fbf0e5587ee48c275e0e2a543c6c67605688673d7b45b11aa70d77e63a0643fc1d4b06db9c127542aa2349dfd792930b903cc1eb4bccdeb2af7f317f4cef5607097e32ae2cfd6b54ce78fd04f220c2e4f0ec238052812ae322d681466", @generic="40486ec067be419cdb3bcbbafbf95a756ba7a089dacacb7fc90f2930073c891c802b1d11789b68ed7fe4b40755f758a8725b8817b737c69ed5e2c03dcf3a776146b21fa44253cc3ac8228a61041831469e7f302bfb6a87bd2db069c7a363c282c004f2fc0b2103aa28b6206435d979719e4a357bfa87e79699c4edca46650f65b85cff4bfdcac5084602618b1e6ac9416df085c3441e0fced47ccb9b0aa850293054c81bf55e2dd5ee821396defb5c91f7bd65c8fcab2b410419fbe1e24788dcfe8d6961a2", @typed={0x8, 0x14, 0x0, 0x0, @uid=0xee00}, @nested={0xe0, 0x56, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @ipv4=@empty}, @generic="3108f961e9f8e4face2d4edd143dd6cfd80ec34c1933f7", @generic="c8eda2c10b7a08fffedb7e1ff91d43086cf869fd75450c838fa1910e5703bee978c69c8057ffe6f2bb9348630316e2ac62592fa8d566e7ccac29077a7f3dec36ea934b32d5b9d34eaad59a8cf09f63805ad305d9029421ef093b500034b060159f3e46bde6740334bdf17648038f1270157f5b24615d7e3e4fed491fd39e1f7b43dbc8e1df27ba335120f30eb5788234f8503283e6afc8a2dabcd14586705f026d8273065df1b42000b39fd02c4b81cd8140e24507c5147d9dfbe86baf"]}]}, 0x284}, {&(0x7f0000000900)=ANY=[@ANYBLOB="78020000f4b8004a28bd7000fedbdf258b0026801b51fe6b60d5d71cf2282431a66e1c3a2548b86f3f7fd24290a22fbfba819d964f132bd28d0aabb48b6838c42024abdf47c0d28becd8ba4597320e2d06faee6f3d3d926eafc313d0aa136fbaab7426f4466353777346d2ed8fe4123ffbec78c308a21dd498f84ae9fff8f873161bbaec3f80a7509b6918", @ANYRES32, @ANYBLOB="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"], 0x278}, {&(0x7f0000000b80)={0x120, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, "", [@nested={0x10f, 0x81, 0x0, 0x1, [@generic="401d3cf7a59df05faa674efdf1e18c1df83c356f84df18b3e5352dc2c8d916414a9b266a36212882e445c2eda0f4aecea95a37de0f4622edae5ee0b4d61b5b20cf38e8c6df0f664304a1bd61e94305412b367a6292a3a2cef8564b10695a723235b5bc634883eedbf153afa82a6226511256f58752402003", @generic="096a21cb1e0200f868d604c034b6e928484cc1526abe303dcac357f566d99ed772707d59c6b4de84dacd7104574d5ee6010857b8dbf2466dbbc38a79b7a6807147c1022fd1e77bc44ec8f72c343b5f97d664d283d76fbcf669f285749bbea5936c0af401ab7a84b0849c1adfe96931388d9618501ce8cb91434557f5c292928ef8f84a135998c55986dda8e5c8b1512d02ec6d"]}]}, 0x120}], 0x6, &(0x7f0000000e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r9}}}], 0x90, 0xc4}, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) readlinkat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x2) syz_clone(0x4000000, &(0x7f00000002c0)="aa288770377335c88bd757df77647bb1c1dd223d093eb714baf88dcb353fed9763e938afa72bc5ac09a4e8102329253628b7d4eb553af42b7b50717835f86edd32402a085279e2b723d3d3e212cc274dd1174cb696f569e22080bb2e5baafdf1628e6026f8b314bd57260e894c98fa086dbfba37751374d42c55fa3f4d1a70ab1628d5", 0x83, &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000440)="f4a3f574a2cfedbdceb4d6c72468534af685e6e3eacf5a15eccb2a7bc0f42933c8420e54459026995bef74e9b8e71b4d7637abb3bee16178a8330547410cfb53deffe9ab7511920669b6569bc53e9023080dc7e66e4871460640330a4ba6485395a1598b4c94c65ad0aebcc084003c9852a5916b99968d990aa1d857e416a32c932bf566fece138985b687b92192afc33ce43447d40e37e9e3318fb1768b8db0dc5a9abd98a09b819afb5e2ddac875f134212d822b00f12043a5d99dcb181fb04f2ccff977edd37555a92879bd0dd4c745") sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r11, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:04 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000004}) 10:23:04 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x3000) 10:23:04 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00001300ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2975.239532][ T6669] memory: usage 307200kB, limit 307200kB, failcnt 18385 [ 2975.281623][ T6669] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 10:23:05 executing program 2: prctl$PR_SET_MM(0x1e, 0x0, &(0x7f0000ffc000/0x1000)=nil) 10:23:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00002800ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2975.331985][ T6669] Memory cgroup stats for /syz3: [ 2975.332219][ T6669] anon 2908160 [ 2975.332219][ T6669] file 10280960 [ 2975.332219][ T6669] kernel 301383680 [ 2975.332219][ T6669] kernel_stack 851968 [ 2975.332219][ T6669] pagetables 1675264 [ 2975.332219][ T6669] sec_pagetables 0 [ 2975.332219][ T6669] percpu 5136672 [ 2975.332219][ T6669] sock 0 [ 2975.332219][ T6669] vmalloc 0 [ 2975.332219][ T6669] shmem 10280960 [ 2975.332219][ T6669] zswap 0 [ 2975.332219][ T6669] zswapped 0 [ 2975.332219][ T6669] file_mapped 262144 [ 2975.332219][ T6669] file_dirty 0 [ 2975.332219][ T6669] file_writeback 0 [ 2975.332219][ T6669] swapcached 0 [ 2975.332219][ T6669] anon_thp 0 [ 2975.332219][ T6669] file_thp 0 [ 2975.332219][ T6669] shmem_thp 0 [ 2975.332219][ T6669] inactive_anon 2912256 [ 2975.332219][ T6669] active_anon 10276864 [ 2975.332219][ T6669] inactive_file 0 [ 2975.332219][ T6669] active_file 0 [ 2975.332219][ T6669] unevictable 0 [ 2975.332219][ T6669] slab_reclaimable 279872 [ 2975.332219][ T6669] slab_unreclaimable 293012808 [ 2975.492783][ T6669] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6661,uid=0 [ 2975.588389][ T6669] Memory cgroup out of memory: Killed process 6661 (syz-executor.3) total-vm:54672kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2975.698399][ T6669] socket: no more sockets 10:23:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000004c0008000a000f"], 0x28}}, 0x0) 10:23:05 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x1000000000000000}, 0x0) 10:23:05 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = memfd_secret(0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0ab18e8ac9e233bd3b69ba7a3c33a5e1cfe8123519dfc585e365a25ce1f826fea3f10355bbb2fc99c02c64d031551c483144ab31944ea8", @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESHEX, @ANYBLOB=',group_id=', @ANYRESDEC]) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$getenv(0x4205, r4, 0x1, &(0x7f00000000c0)) (async) r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x40, 0x4}, 0x80, 0xffffffffffffe685, 0x1, 0x1ff, r4, r5, 0x40}) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@loopback, @in6=@remote, 0x4e20, 0x100, 0x4e24, 0x3, 0x2, 0xa0, 0x80, 0x3b}, {0x4, 0x608, 0xb99d, 0x3f, 0x7, 0xd6b9, 0x5, 0x884c00}, {0x81, 0xfff, 0x101, 0x6}, 0x0, 0x6e6bb9, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x18}, 0x2, @in6=@private1, 0x0, 0x0, 0x3, 0xd8, 0x3, 0x5, 0xfff}}, 0xe8) fstat(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r9]) (async) sendmsg$netlink(r2, &(0x7f0000000f40)={&(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)=[{&(0x7f0000002080)={0x1350, 0x37, 0x2, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x62, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc0, 0x7b, 0x0, 0x0, @binary="6b19ecb22798bbe15f7e340b8d0286ace8f271db9c680bc8f5b13b5eca85eee0011192a55d42908eb092f7c365322905a9b2310eed4967d5d920470cbf18ff3ea989762f6d70cfcdeaa814509dbf361686a0c99a23d273cf78993d38cffa3281d028427ad8c652ea54f90dbd6ce26bdaf00af90b828a7524500b40a4265d467ec7c044286b49a1a2b92837277bd19fe52f7e32a089d42d38ef3ada9182ec6047a673c0c7688d81f15715cd9cec16c2bbf53cbb717e9ddd195fecf2d5"}, @generic="a3ae6ad0ac44e31a7cf9bdc5c55e593d8ac1d3bc1b7405a612eb13e4cd18f9454de3e39228933f1d1dcf159654378cdb12769f255d6446c5ab181c2e591b6661960d2bf52cdb851624ca2de10279181517de14b5f9e1d91292f163b41110f981ec79495c22433d0926108b1f802e2e1c813dbb8618ab61b6dcc9b809289da878a0efdda11f2ffa4173910345fee22979e38b1b389b4a8dded14719dfce8b5b17c662f612475d8760b48aaf07a5e63fb189bb230bcb992c61f4609b6ccb174f029cff7439e111e98f9c64ac34242dec0f328a2eac", @nested={0x36, 0x82, 0x0, 0x1, [@generic="c4458c703890eebdef7773e3277dcce03d015ad10965d8d66db9fa2f170c28bac35044f63524973bf29bb61244d4e4d8460b"]}, @generic="6fa72cd5176082f7f9d80c5bce1b494ecd1c031f35115044f9366d27886cc65f573ccd1f41654eae7aaf87cc484dd6215499735d41eec944630a889733cf07a16a1af202c10500164285ebc1d914742e171dd2d66a8a2c38a73bc7cdf146056ce2a26cf3497763d1c6886670177a6374c2b0374ef15dbd0c68d27ece029141e9e24fd4d84e026afc152b0a24d61afac9c1e95f499f8cb67eccf263ca01da3c0fc3bf7f109ee7a7f7d256e7feb49a7c2c24245993c47275ca80108a48dc0fbb31319b5b7cab72cdb7633e9ffbfd79665402b00e4af333b0ccfb5f695fe4070888fa27476d16a84df423b8da2124f4bad1e32a25dc9bf1fd33b3cfd2ce6c5975a27b96c21359c29ba41d6e77d6333f1986f29623fe75fd90012a9961e089070a84295e9eef807db8c404c09efaa87ac3dc2df328e4e2fd5b8b69eb2e25a962adc21429f812fa46269de71275594477b3211d63d8b8c81f5f3da10359a8dd4d191a400231b6a4838371868b1e5af685852289b1b8024880033ee43d278cce7bc02820dacd66a70dc41ea275fd74fbde16570ead7cb5dac81a7f14f340c01db8f30d5bb34c135bb085386a453bc0ed45184635d34a9f90cc15c37910126d1660fc3308eddd62bb621aed6a70ee2c680b09fca5c29fa17b8e9c479bef59d8964806452549c9ee187f8ec8935e557ba6418e693d85d74e13fce8ff7edfdce6edbe201bc544c592a8b240ffd0b3430cb07d43043ee043f63786afabd7a89c2352df2c79f77e534028a12f5547b70a997178c4f9fb9c42c66d4d5df6c65f91a76080503095272240f10bb81fdbade2634a409d9f5eca3c3de7de1e6ca974a411b9a23222c84a38ef194b175816ae5f28c3269ce737442266c7f5c77ca7f3b2a7c6bce4dc5e57d1f968962f7eee6b0970daa49c14c193370f54715128292b0d3044027f807200b03dbbdbdf5c05ffb51ad492e60b2a2e89b79d87e92c7332132c06f2b1fae9a1c69416f39edc4cdf8129e77ad4bee4403bcec0796f83c0e93ff0bda9f5ec4c799beda4e58bb172a6142ff29111c82e8593697acffd5abaf7285755e3505128bc957635baf4bb5666dd908169ea44401fd78a041d7cc1105afc1f1b6baf74a09a5cee69053e13e976a49a9cb9332e2a05c84774d96d2bb4b016efa07900bf21420a596fbb4181aea080b69c1a52335bbb04bd31ee3e6beeae7c4ebcbfe3193620de950082833cda204bd750d32925b9ec49aeeda94c42f2778fe92fceaac646d633a2e380b9cc3d46ee5a21899811d0873bb3f7c32198691c90b3d38767b13ebaa632557a0f393a9e8551a8f7239de44ab9785d1a1981605ea79267eeac270e5be42e3a20f86fb7928c09b18c153aaba1a40e151a328319746c4fa5a8a2f499b1a6e3dc859711f9bd5d3acfd3010399c82f75b6be659fa5b36731e8e59e6d7b7b98ee1a000768a0f6b7169c6e298525735c25424b7e6dcb69d3f4f07d9df3311d8293ed1e0be631fe86642a256855363f3cd87d054cd902424e3ae2a3fe5978f4f3e1c703a201890a2cbd312fe33d44f9911d5558bbc0608b876d74bd351878214dac7072ee0f1f32ba2dccffc322f97916161caf2d5ae477439eb67d4d20a30c2d714f1dff94f9fd110061f4c7a663899ca1ef41767f2bcfee4fdb72ba2d39f3c82cbeafe2fd464c80daf37127c57b7af88d1174e7b8aedeb03ff4db1aece81d39d2c475732f30bf876bb904d6e46b30c2ac23019da0636a3952c6966974917d9b0ca5449821ee23e546f442bd6488d1c1fb552dadc13d06eea13c4e5473044a06ea51961b6b9e5bcd3bc3cef1c99b05333576042d7b9ab423be094e681227ec077319e127cb4d4c93bb6ec53c81336dec420c5ca2cbcf71ef430d1f11b4cfd12de0be08b7bf80167241ccf36b2dde0c5e6eb0c45e5df8b26282a181810bfad96fc6d84a1311263e1c08d75e0176374fac51c9ec34fe691b51d6997c7463bd56687f1b5ac317d18811e057e9ac78266c54a14bbd48b44510ecb27a62b3e9e96de20c5d31c22520ab858a692da615e83db1fa1bfd1bd0abc29b3d9ad78b5ee55910f81095b0c1d8f9b601131e00d3d831cb277c11b766a7bfa9b63964cb1dba9fd2a52cdccedae752c45bdc5ea839fbcd3092cfc7dd023e7fd6b9ce5bf3fc1f2e0317756467e75fc258969960eb38bdbdc364056a177bca45ee352a70f6ff257f336d566e73e50d26bdd54a1e8814b4cbfa1c8e4c644140b99b386311bad533d951c8c7a46e9b892dabbe170f23ab7dfe47e39f24a75c73e7485a276a60e7a976fa796eb82cfe53afc9fef0ca07a67e57ffb21256b8df7bfa320c8574523393b9e39970d5d366fdf07f7cfb01d1aaa2f92ee6856834c65920c3f4835643256d1a4d1ba5edbfd2be71cd1de15da0f8e27a8a386418f223b0a719f9479f461e3636e9216c090c3a0266f0673d5ef984d7fc6f2ca83ef095391c976c7f613ea4e005a31b447ba5b163b8c00baa010a2ea65640c2e7a35cf9aad5a1a0cd978ce12dc4faef41b2c4234ebe5aca2af6216f7717bb158b5d1d16c610024d71b44dd455f78f87d9789a473b51b1a73a0154612fe72b566ff40fd74f4779846cb4921a914fd7a061266d53642500907b217542a6f5d4a6f67465aba177cfe70d6c8227f583e99979ba8f46b840230c291834fcecdcac707d9c33c7b3776ed24d58dd2e9286cb19933a22052b0eb6a0d2c1f685a180fcf0f612a0a3d7ed348d9c0db6a07cd0daedee3c28b4ddcc6190e8ef832131cb88fddf034ab78520f36f9f63699bd152416382782a1862ccaff05849157d6ee287b30ea1087656543c89e4b1c1b6db407c8b876b55c11e4afcef562bd9651034a7eed98d2feac1506b3b6d5eeaf39c88639ef3a9c87ca52f600bce74ac751edebe15ec5c8370e6e9fcf4a1b65407c88710cbaa3c1ef60f7c11156b72882505211e0c9891de4107e407ea0c051e0f01028d58323dcff72914a356e314ee8ee8c1e2a7673e29acd33adfceeb6e1d9571a90c4a0a5e5cc56efa0e6948f9a440e5b9e8ee039136598ca6764d7d1f17597b1f4903dff08141ed704cb8f0d66c92fa8da35965f87b62bfc7461ab28d96295ff348c39464ad29d182ac4b9cc0b8349fc4b3791196999b9c252788fa48d62c982b44f7b50c029e674e1fe33aa70ae7f2d10453b93a57a51394d93465aa7da937517cf788e2080566d5d1378bb65b64b0092601f4bc31afe1e23f80459951467f5d504cdc9860ee5c8f6e4c990e56cd6e27c0c7b6e5cd7823be28a7aa1492e3ab08002b1ff89785d6d65139529b3a2c0338b4b8099ad15712a7e99176aa17682ba83c63873d4242fac8efb2eb1634c46642c474fb8f3679cccbb471ed6ff61b52e2b0235a2c62776b2d040ac40ddd94ad2cbf97a7277423d57047801d95cdfa377540c1679ed971aa3d4eb04ed2814641a776b9f7efc8d08867f5b86d83f0fde1d12d0480d34cdf88c057c13b27cf3c1e33993f38fa104fa1a06ab9b71fe8aeb8885d2d34a1dc51dcbf3250a02f45c308449cc293e9d3b515d5216c3c17d69d6dbeea988ddb4082b3c935abf65b2f1f2a3342720a2985e0f39a636e454256d8348af7153e1c710e7b4372276fc8ba8212085b304f274fe50e4ffe0eb002a9281faf8a433fe0fe2f45d3af80f1c09101c633bb0fcc276fedda136035ea1451156c80c43b245e5bf0a20f963fbd4f0f279dd39616f0b728039365045d11d60ad04dc9e0b71ec30bdca82dd682e59ae515fa10f89d80dd9c48616722a5c01914a61cbdf869d3c61d849fe786b2f2a5bad21b5681d85246e0e156b2275ab56de18248ceffa8f6c6e6f2e42cbdd8cd5b11d9bfc4799543a97f1f1a678e433058bd40e62a7ea49e95bf7f49af09b2b35c60cd67a07761be6afa68f7520daf70b788c0e352477bb2142ac125618e1243a8aad02a10174f90083eff4afae3e7388d848e1272f7d6d7b85356639fe6002efe76f69ce80309abd7b80d34a2cb6d7046f553ae57ff113c51c5b7342e3338b5baea9bf92303447d968512c41e08142a6e6ac853422b44f1d52dd5c3ab4bebeb4679011f9381b9f8560d3dd2e28fdcd80e968f85ed1f73ae50a5849301b29d6b67a379f80e90969deb3c2f9bd0d58197777d911dfa3b17951863731fb2a07540fa4518dfd0760103a51e302c8878fc5d090ee67a58b908159588daa945651371ea3147c50c43fb382d3fb3bd999dab48c37663bb70e7d3c1a521ea4d1e7153510ded6a6da5c225cc12b895f0912f264780569742a862deff98dca5a546025b82f2fec968590c3f6b7be5b2281a1afb9534a68ca258159823dde8c6c0a2bc1f0f08caa3c2abb230d0e707f4f7cd599e2016ac2e7efa1637aa872895cc67f36c9cb50afe984a1993fa1006db8c559b6f508c585859e3bb9020be1938dbfacaff6f5a8e94fc95b4356d77b520702719902e421eae8c17a8bfd6696489814509ffa59390a997e01d6f9afe36b4d49210629f148fc2288251d0769b1b81034a51c642287843c5d90a083e05053d867fe88a8a9210b298a30c9a605f96c140c3c8364c6c31abb9116eaabf3e991b40ada376e97cbb7f10a5c461bf430ae7e0941c82452dd97074b30d68b05dee82516fc4316d65b40927650f96ecea97587d764421cb025272eec380b424e0793257cda0b8c96474469868020305516dcadee6f3e756a60d66501cee5841a2fc022d4ee6ec78cc49b1ce405050c5906651a300800cfa80e314cff65bd4a1a4f020e7d91763242476ed51dfc6cca824d22c3d1b68de18fa5c836871334c995ebe6333bfe2038cf4e9a007f36b8bedc1cd18c05727488ea438bb968f2053978e76992b4db279469ae73e0197f25ac160b56ae208cbc51d89b089e62cc6cf66fcaddfa00b5e7c35adf1cb86f01efbdd6bdac9e9d16bd4d1039430451a5c04f06e9d68a3cf9fa044e3fbb699d9851cfb65c32c1df24b0edd8cf5b38da13b614cfb73a5b8b516b3f9c3bff76bb0cba38013d00d35f2e4052cb27d93d99d67133c0a1ac3e1f672a12bdae9cdcba8cc964aadba2378bce012a3fbab3a53db633a3044052a637b913babcd0ac9d637efaffe638d49219ea237fa6536b65691661c637e2656e2d327c88d511825bc31d55b6c7d499566ea35995522eede475d1e31478dd7fb475717fd12be87ffdc7e09562a82247e06efdff10c5698ac4cba233c73f5b5c4e61af5475e3bd3b7b6acc7cadbbf2343001eb94e2f50997f891b2bec6bc73b42c07e771b5276e10a6ca2bde68d803589da6b0aced6c342ee603b268c72938b4bf003619917f0b22047edda326e55f71eaeadcf4434d48d9397b7481f1b311998bf2d55ea236d4f1e35de71b2fc687d76ef097c59db720784d075b809a88651578d1d7d6f983d641637e637c773d2cc5a86a92cbf0d5d85a3df39538bd4e3c9fad11b32ca8e5e7abcdf173c227e3a2ce6bf7ffed769843e7f7ce3a0a00dece5deb9e5cf0f9cae6e5e1c66275206fad7a3cd26f4f3cbe0c406e93de6f93be6b0a16307a3fefdca6987464a602483b558b5e13a3f6ea41f24d71bcad64bf8268451cdecdc57be550766ec9c0be9cdda4659c56726f0c84250a3ae1281686fcbdf0b1c1782dd73a53eea5f4fe8d3113df4785e285c9016aef94a7ca0ef56454be36849bc6e96c2c0644ae1ccc6144d40ac4ca2174bef3e4fac48b0674071c1e4ee236b602716df1b138f2a89110980d09cfca08af37374d3f6364afcadd8afaa481e824e85b107cd3e8d", @nested={0x76, 0x11, 0x0, 0x1, [@generic="2c6daa3093ea2836103b6f2a254a70a209131f7c64564ef19810e6ed1c2a0f568311075e1b78891ef1e0e49cd532f89b287baa2f478721b4ddf91bd09eeafcc21a4248fb8379645d21bdb8993fc720cdb4ad8fafb5d330a7f609285d431946f9a904bc62aa84916889dfbb317376ea3bafe8"]}, @nested={0xf0, 0x7a, 0x0, 0x1, [@generic="5ef853b96e68f331282cec30", @generic="680cd4836deee6b86146f552b1d800628385487d813061e8393cd075266f4e9daed5c885f619d96ac9ea5828ae7bed5b6cb00405093a0903059366985fa92b110762f577321c30e527ef4225af5666799b9caa55767dd1bc135d7a17a545e956de62d807e33b58e43422898c1c5c7549bb9fc89b7be32a00ce3f3e8a92093e244db5970ac6587d2e2fe91dfa6a7f45309cabd6c58471800a30cf1343074d7da6a246e5cfce75f29b67cfee182f0e6aa2ad4c20e8512fa7063587394d0d82392730792e334bec36297c4362c5ffd57d52588cc80241a81470f1da44900da7a473"]}, @generic="cc956f"]}, 0x1350}, {&(0x7f0000000540)={0x80, 0x3d, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@mcast2}, @generic="c44d9950aea269e9cacfa8a204e5b99e1b770fe3ca8e7374c99f9fd0ef405dbc97d6347f6cd1f4c2594d0fefd6154f5ccafa8d8827ec7bb4b67477dfa1e710f04406c50322fca563faeb932987bac6357186d7a7bcf4e3a15a"]}, 0x80}, {&(0x7f0000003400)={0x26d8, 0x12, 0x200, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0x8}, @nested={0x113, 0x7b, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x88, 0x0, 0x0, @pid}, @typed={0x8, 0x1, 0x0, 0x0, @fd}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0x7f}, @generic="f4ac7a0b746d28e608eb245dad65d06164baaf35c776bc41dbc8744fac3e8403e126f8303e1642acb0419595061dec24a0dec0b70867e04a58a7254c7454390b8dc574d08eedfa1f7a776e83d518747e75b003ac06f90b3c62dd52baac067e57ca467888b62b41ca0854888939e266c65a4857e696b89d03857f2bab776cc48a6ff40305e6ac46f659a2b86adff9e137925126a5a68c73103a898998a375cab9cb286ab309b733a5e2614c63744ff4ac6d655b94c0f99a76c336f56a1dab65a1c1557b82e8fe4ca0d2ffd6b5f326cf0161545c43763ad03f809849f9bdb674a9c681367fe71234daa4fc5c"]}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="febc1d0bcdfd6194cdc21b865c7b6823a47c9388b5374445fe9577679941e883d4", @nested={0xc, 0x77, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0x500}]}, @nested={0x11e, 0x19, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @generic="ba9168b60617da52c6e7976145c6aa9626d5d0eea5d244b78c3b5eb30da580e766406c6e4afb541a71a9440d0f7a15ca77d56ace6c570ab0e921954ee8fcda26f94405fce2d6a8924cdf0827f3654092df1f209717c1db54f0dcbc5eaa6259c31c961c2630e1fd46332067f6c7015990bb40837459d97c524f563dafd23b3b9a19ed181435", @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @typed={0x8, 0x53, 0x0, 0x0, @pid}, @generic="d87add90e7ba40f53c4ae355404699dceddb583cb9d773d5c4c5476ea8f6c1131f55a89d396c4ebdde79282dc704d3082cdfca5171ddc07de87a0724ec70b173e77a3a3b39828a46152d4cb21a08d91d28c0d554bd068ab304e203efc210a1042ac69559dd05b3555f56a70d8f9183dcec"]}, @nested={0x23cd, 0x46, 0x0, 0x1, [@typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}, @generic="f14cd95241707e2f5ed198fbeef6e5635c2257b78fdd26e9162681b0aa90815ce773a82051a3421a4a251445411af7c6a11647d2a84ec1d1a3146bfcadae9f8714e33bde39d25e89e2a7645478c8afaa5476a2acd92b53264ac1eac6fc463c07c4ef12766dc83693ca15a096889e9628e0fecafb601e950b3b2969c72a4bbe784ddd669dae67c43dac37b284bdd3ac2d5bf085b295294a6e8bc9a527ded348faf9a4f9a2d8222fb72954887ea5a634a8b1468eb977350fbab878175791af30048508389b16580930b4a82d832c7d99bc488a8c014c89487c499c31aa9376fd202ea19a8088ab801a83", @generic="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", @generic="8458527567f098ed0498cd4b77e87d153430798e8116dde37f4eaa77899c581a197feab00ac9067d2c4137aad88e912839561f77618be52775918433c68398aaa9bdcacc4e27ada14714b3bcdf547741e49ff491e52bede0b51e88bcb57acbb541d9715716d0dae186eb706948656e1b254415c00400abecd93e971503ae261e947493059dfc7583114b", @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@loopback}, @generic="5150154257c16595e7e9d0d3a1315ae7813c6b8b7f87ede5652d230f6f70ee19a532c49d3efaea961a4eed0981cb6830f8d6c51d8d2bfe6da17cc7e77367", @typed={0x1004, 0x44, 0x0, 0x0, @binary="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"}, @generic="970ba28a58672cb37885b7e3f657bb180638a93586258580f34289a91ef321879ae9ba52657f7a95c89a6d52cb1886dc6a6b919090ede4dec635bd9a44cb574b124fbebe403edecfbac68646ff8d976defa80576923eb7790a8a89d67f8c408fcbd297d7b6fc63e2c11e01388522255aa3bf7c8c3188b328a09d4458aea54e4b92ef645f230da39bdc579fe569260fca", @generic="27f8cfb8e6cec1257a3a22faed30a3ce0d272b212c6601f093d28cf3127b924046d89b39100649dbd6e62bc771b6ef77753462d1375a70c188f70cb68279fc474684b06ad5cbef5222b705bb0ddb25ee79d61768badded7fc7ed19b269a9b2803b9d16bb990ecffdfe9d5ce89a2fe236cb77e077d80f3bcf9f1e2fce9ff84d0553080b4aac44839f2581b9646b62aae9d14b3bed22208b00ae9c7abb41a3e631ec793309739e178596c12c15f96d8ded477baeae327d4481275894cfabd759c6451a1ef7a818fbc0dbbcaf31ad5b348ad5e62fd1dfd4e8b65f5f0d840d6ce299a37ae1867b0eb2481aed77706469909c9fb45e", @generic="82920d9c666eb5c7a66ad9a14952b52719d16cd84854688c8fbdd31eb963b57072e54a3b1c09cb8b4c3d5fe14c5bd35b3b491f94e10ef6b1f838a994c3e0e8df51896b2b18c31148bbc14f1004ad3ab5c40d897aa562033c657684b20df43209bb471e6f037da6b9a7243cf842a41bfe3d04c21587"]}, @generic="3f9ac597823f6f02ac09d16d48489c6cbeadeb2a052693e50e5b16eb62db5cdd76b858c3eb003c3a0301796100cfeb5d7727c85647ff88ecb61dca2434207494b53e6f93a266a164eb153dd68a5cdc492a5c8dc2aa8a1189342c2566b779e31ead47d2702ecfdeb63277c838e6056a11fa6cb0c4215e92d55381951ff62635fe23f4764f157c"]}, 0x26d8}, {&(0x7f0000000600)={0x284, 0x3e, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x42, 0x7a, 0x0, 0x1, [@generic="6d40f94864d67babd49e2224f45b442f1df15d73ce42ba3bb1b62d85693247ec818524aa37107a635500ad1be45db49f8992", @typed={0xc, 0x26, 0x0, 0x0, @u64=0x36}]}, @typed={0x8, 0x6e, 0x0, 0x0, @fd}, @generic="885dbfbdd0ce90e5459bc6af8af1c5de90e7a922e08de08d23b33d22f43fbf0e5587ee48c275e0e2a543c6c67605688673d7b45b11aa70d77e63a0643fc1d4b06db9c127542aa2349dfd792930b903cc1eb4bccdeb2af7f317f4cef5607097e32ae2cfd6b54ce78fd04f220c2e4f0ec238052812ae322d681466", @generic="40486ec067be419cdb3bcbbafbf95a756ba7a089dacacb7fc90f2930073c891c802b1d11789b68ed7fe4b40755f758a8725b8817b737c69ed5e2c03dcf3a776146b21fa44253cc3ac8228a61041831469e7f302bfb6a87bd2db069c7a363c282c004f2fc0b2103aa28b6206435d979719e4a357bfa87e79699c4edca46650f65b85cff4bfdcac5084602618b1e6ac9416df085c3441e0fced47ccb9b0aa850293054c81bf55e2dd5ee821396defb5c91f7bd65c8fcab2b410419fbe1e24788dcfe8d6961a2", @typed={0x8, 0x14, 0x0, 0x0, @uid=0xee00}, @nested={0xe0, 0x56, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @ipv4=@empty}, @generic="3108f961e9f8e4face2d4edd143dd6cfd80ec34c1933f7", @generic="c8eda2c10b7a08fffedb7e1ff91d43086cf869fd75450c838fa1910e5703bee978c69c8057ffe6f2bb9348630316e2ac62592fa8d566e7ccac29077a7f3dec36ea934b32d5b9d34eaad59a8cf09f63805ad305d9029421ef093b500034b060159f3e46bde6740334bdf17648038f1270157f5b24615d7e3e4fed491fd39e1f7b43dbc8e1df27ba335120f30eb5788234f8503283e6afc8a2dabcd14586705f026d8273065df1b42000b39fd02c4b81cd8140e24507c5147d9dfbe86baf"]}]}, 0x284}, {&(0x7f0000000900)=ANY=[@ANYBLOB="78020000f4b8004a28bd7000fedbdf258b0026801b51fe6b60d5d71cf2282431a66e1c3a2548b86f3f7fd24290a22fbfba819d964f132bd28d0aabb48b6838c42024abdf47c0d28becd8ba4597320e2d06faee6f3d3d926eafc313d0aa136fbaab7426f4466353777346d2ed8fe4123ffbec78c308a21dd498f84ae9fff8f873161bbaec3f80a7509b6918", @ANYRES32, @ANYBLOB="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"], 0x278}, {&(0x7f0000000b80)={0x120, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, "", [@nested={0x10f, 0x81, 0x0, 0x1, [@generic="401d3cf7a59df05faa674efdf1e18c1df83c356f84df18b3e5352dc2c8d916414a9b266a36212882e445c2eda0f4aecea95a37de0f4622edae5ee0b4d61b5b20cf38e8c6df0f664304a1bd61e94305412b367a6292a3a2cef8564b10695a723235b5bc634883eedbf153afa82a6226511256f58752402003", @generic="096a21cb1e0200f868d604c034b6e928484cc1526abe303dcac357f566d99ed772707d59c6b4de84dacd7104574d5ee6010857b8dbf2466dbbc38a79b7a6807147c1022fd1e77bc44ec8f72c343b5f97d664d283d76fbcf669f285749bbea5936c0af401ab7a84b0849c1adfe96931388d9618501ce8cb91434557f5c292928ef8f84a135998c55986dda8e5c8b1512d02ec6d"]}]}, 0x120}], 0x6, &(0x7f0000000e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r9}}}], 0x90, 0xc4}, 0x20000000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) (async, rerun: 64) readlinkat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0) (async, rerun: 64) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x2) (async) syz_clone(0x4000000, &(0x7f00000002c0)="aa288770377335c88bd757df77647bb1c1dd223d093eb714baf88dcb353fed9763e938afa72bc5ac09a4e8102329253628b7d4eb553af42b7b50717835f86edd32402a085279e2b723d3d3e212cc274dd1174cb696f569e22080bb2e5baafdf1628e6026f8b314bd57260e894c98fa086dbfba37751374d42c55fa3f4d1a70ab1628d5", 0x83, &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000440)="f4a3f574a2cfedbdceb4d6c72468534af685e6e3eacf5a15eccb2a7bc0f42933c8420e54459026995bef74e9b8e71b4d7637abb3bee16178a8330547410cfb53deffe9ab7511920669b6569bc53e9023080dc7e66e4871460640330a4ba6485395a1598b4c94c65ad0aebcc084003c9852a5916b99968d990aa1d857e416a32c932bf566fece138985b687b92192afc33ce43447d40e37e9e3318fb1768b8db0dc5a9abd98a09b819afb5e2ddac875f134212d822b00f12043a5d99dcb181fb04f2ccff977edd37555a92879bd0dd4c745") (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r11, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00004800ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) 10:23:05 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x3600) 10:23:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00004c00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:05 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000004840), 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 10:23:05 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = memfd_secret(0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000080)={0x10}, 0x10) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0ab18e8ac9e233bd3b69ba7a3c33a5e1cfe8123519dfc585e365a25ce1f826fea3f10355bbb2fc99c02c64d031551c483144ab31944ea8", @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESHEX, @ANYBLOB=',group_id=', @ANYRESDEC]) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getenv(0x4205, r4, 0x1, &(0x7f00000000c0)) (async) r5 = getpid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x40, 0x4}, 0x80, 0xffffffffffffe685, 0x1, 0x1ff, r4, r5, 0x40}) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@loopback, @in6=@remote, 0x4e20, 0x100, 0x4e24, 0x3, 0x2, 0xa0, 0x80, 0x3b}, {0x4, 0x608, 0xb99d, 0x3f, 0x7, 0xd6b9, 0x5, 0x884c00}, {0x81, 0xfff, 0x101, 0x6}, 0x0, 0x6e6bb9, 0x0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0x18}, 0x2, @in6=@private1, 0x0, 0x0, 0x3, 0xd8, 0x3, 0x5, 0xfff}}, 0xe8) fstat(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = getuid() (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r9]) (async) sendmsg$netlink(r2, &(0x7f0000000f40)={&(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)=[{&(0x7f0000002080)={0x1350, 0x37, 0x2, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x62, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc0, 0x7b, 0x0, 0x0, @binary="6b19ecb22798bbe15f7e340b8d0286ace8f271db9c680bc8f5b13b5eca85eee0011192a55d42908eb092f7c365322905a9b2310eed4967d5d920470cbf18ff3ea989762f6d70cfcdeaa814509dbf361686a0c99a23d273cf78993d38cffa3281d028427ad8c652ea54f90dbd6ce26bdaf00af90b828a7524500b40a4265d467ec7c044286b49a1a2b92837277bd19fe52f7e32a089d42d38ef3ada9182ec6047a673c0c7688d81f15715cd9cec16c2bbf53cbb717e9ddd195fecf2d5"}, @generic="a3ae6ad0ac44e31a7cf9bdc5c55e593d8ac1d3bc1b7405a612eb13e4cd18f9454de3e39228933f1d1dcf159654378cdb12769f255d6446c5ab181c2e591b6661960d2bf52cdb851624ca2de10279181517de14b5f9e1d91292f163b41110f981ec79495c22433d0926108b1f802e2e1c813dbb8618ab61b6dcc9b809289da878a0efdda11f2ffa4173910345fee22979e38b1b389b4a8dded14719dfce8b5b17c662f612475d8760b48aaf07a5e63fb189bb230bcb992c61f4609b6ccb174f029cff7439e111e98f9c64ac34242dec0f328a2eac", @nested={0x36, 0x82, 0x0, 0x1, [@generic="c4458c703890eebdef7773e3277dcce03d015ad10965d8d66db9fa2f170c28bac35044f63524973bf29bb61244d4e4d8460b"]}, @generic="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", @nested={0x76, 0x11, 0x0, 0x1, [@generic="2c6daa3093ea2836103b6f2a254a70a209131f7c64564ef19810e6ed1c2a0f568311075e1b78891ef1e0e49cd532f89b287baa2f478721b4ddf91bd09eeafcc21a4248fb8379645d21bdb8993fc720cdb4ad8fafb5d330a7f609285d431946f9a904bc62aa84916889dfbb317376ea3bafe8"]}, @nested={0xf0, 0x7a, 0x0, 0x1, [@generic="5ef853b96e68f331282cec30", @generic="680cd4836deee6b86146f552b1d800628385487d813061e8393cd075266f4e9daed5c885f619d96ac9ea5828ae7bed5b6cb00405093a0903059366985fa92b110762f577321c30e527ef4225af5666799b9caa55767dd1bc135d7a17a545e956de62d807e33b58e43422898c1c5c7549bb9fc89b7be32a00ce3f3e8a92093e244db5970ac6587d2e2fe91dfa6a7f45309cabd6c58471800a30cf1343074d7da6a246e5cfce75f29b67cfee182f0e6aa2ad4c20e8512fa7063587394d0d82392730792e334bec36297c4362c5ffd57d52588cc80241a81470f1da44900da7a473"]}, @generic="cc956f"]}, 0x1350}, {&(0x7f0000000540)={0x80, 0x3d, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@mcast2}, @generic="c44d9950aea269e9cacfa8a204e5b99e1b770fe3ca8e7374c99f9fd0ef405dbc97d6347f6cd1f4c2594d0fefd6154f5ccafa8d8827ec7bb4b67477dfa1e710f04406c50322fca563faeb932987bac6357186d7a7bcf4e3a15a"]}, 0x80}, {&(0x7f0000003400)={0x26d8, 0x12, 0x200, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0x8}, @nested={0x113, 0x7b, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x88, 0x0, 0x0, @pid}, @typed={0x8, 0x1, 0x0, 0x0, @fd}, @typed={0xc, 0x95, 0x0, 0x0, @u64=0x7f}, @generic="f4ac7a0b746d28e608eb245dad65d06164baaf35c776bc41dbc8744fac3e8403e126f8303e1642acb0419595061dec24a0dec0b70867e04a58a7254c7454390b8dc574d08eedfa1f7a776e83d518747e75b003ac06f90b3c62dd52baac067e57ca467888b62b41ca0854888939e266c65a4857e696b89d03857f2bab776cc48a6ff40305e6ac46f659a2b86adff9e137925126a5a68c73103a898998a375cab9cb286ab309b733a5e2614c63744ff4ac6d655b94c0f99a76c336f56a1dab65a1c1557b82e8fe4ca0d2ffd6b5f326cf0161545c43763ad03f809849f9bdb674a9c681367fe71234daa4fc5c"]}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="febc1d0bcdfd6194cdc21b865c7b6823a47c9388b5374445fe9577679941e883d4", @nested={0xc, 0x77, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0x500}]}, @nested={0x11e, 0x19, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @generic="ba9168b60617da52c6e7976145c6aa9626d5d0eea5d244b78c3b5eb30da580e766406c6e4afb541a71a9440d0f7a15ca77d56ace6c570ab0e921954ee8fcda26f94405fce2d6a8924cdf0827f3654092df1f209717c1db54f0dcbc5eaa6259c31c961c2630e1fd46332067f6c7015990bb40837459d97c524f563dafd23b3b9a19ed181435", @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @typed={0x8, 0x53, 0x0, 0x0, @pid}, @generic="d87add90e7ba40f53c4ae355404699dceddb583cb9d773d5c4c5476ea8f6c1131f55a89d396c4ebdde79282dc704d3082cdfca5171ddc07de87a0724ec70b173e77a3a3b39828a46152d4cb21a08d91d28c0d554bd068ab304e203efc210a1042ac69559dd05b3555f56a70d8f9183dcec"]}, @nested={0x23cd, 0x46, 0x0, 0x1, [@typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}, @generic="f14cd95241707e2f5ed198fbeef6e5635c2257b78fdd26e9162681b0aa90815ce773a82051a3421a4a251445411af7c6a11647d2a84ec1d1a3146bfcadae9f8714e33bde39d25e89e2a7645478c8afaa5476a2acd92b53264ac1eac6fc463c07c4ef12766dc83693ca15a096889e9628e0fecafb601e950b3b2969c72a4bbe784ddd669dae67c43dac37b284bdd3ac2d5bf085b295294a6e8bc9a527ded348faf9a4f9a2d8222fb72954887ea5a634a8b1468eb977350fbab878175791af30048508389b16580930b4a82d832c7d99bc488a8c014c89487c499c31aa9376fd202ea19a8088ab801a83", @generic="87c1c8ab42dfe6c51cf4b63171bed423b22a1be5f07c738ba701a793c5fcd369de773579829a2a2685c30fb34238ab276873b077cb12296f92e2a30d80776b475a40b6562dd6197a65082f7d79fe32b9c52881373310614227c2bf6b15b123e512782674f1e34f93e8eabb7f1e318f612e9ec2f4b0505979556b77332f72b44f068e255b275c06d352c1b9134f28c002ef4cba2c44072eabf8a751b57332f06b20bb06fffbc237401a00b71a7b5b09edbf57ec9a466f263b3c03a8e3ee9fbb332f40b5d6c00c9e72e4bf7edffc2a1c2e7956c3fc7c428900eae1b0e2a9fdba64c86a2a0e956dc2799053a2ec86f4efc65f1a58f2f90262ffd7114e90eaf193f2beb3cba6bd670ee93e6624a8484b084af2b4a192fdb4bda642056fbe555d2e859799a555212afffdd2bc2ef346e004ac8607370bce3fa0b5da8aa513a304494d2c923a46d0a917ddc4f1384a1b1009ef2447838d6d945bc66b96e45c98976947c5265b401fc5cb2192b5e7bedace8fc14e226118c1ca359104671a1a50b72c7d5714011e170708e9567b548e59b0225fe088ea0dcfd07c577794dc0338646e011ce7125c438bdad6f9ba78f4c9de2f9e19c0421be237a07113788999c1dfb081b56f024011e81cff668f2af3a4d966b7796c477ac5d2830c3a1b5248f59dc1a4cc0f7ea4fa463dea1e7fecec0c13c4e5af87e278ebfb0a70e154914f243878ac9a0c47b4e27eb5f829217fda59901972c606aec54ab60ae60b6d1e4efdd1c9adf0275c52d88b6d35db51c028366db4c035c79e2a5e5ac51556dcede29c7363302a20c380965a40ed3f2206efb0d5afdcc32ab368e76b2a9f88440cbb4f92fa90b1ecf3c66d535978ba21c7551a6dbb1c71e00c4cbc925172223949adbbad376d39849be3b2ebf1bb54141b5c53fcdf95f1088bcd3040769acbfa89d506c5f87d9f96de18e4e84ae25fa71255026a1d342a9e1e466ca5cd0199b9258ea5edc441163f3434fe32ca895bcef7a8ca5140de207763b2916b62716adec35a6559286d459fc76fd6cba6d5cdf32ea271b59fb1f0873cc3ab29f136926f355f1ffd7ee5a0b586de3a223b2470986f0cab2d26380386a78d2309baf1fbd2046e7a15c449b27cdc6ed2e929eea5894d1a7919ff4304b423d894628b58178b346925f1d17d2a60d5339820d35669f8c874d78b3ac34a8312bc83f85a17fe8db3f1e144c86d908fd070d0f5546806aded540757dded44527ff07a2bf99c7e2adf1db249f252b617362d76bc90242f512d8f8ebf5abe74718f692353a1cb45f927bf619c490c282c4f5c76481e3b8c0344a5e50fb51dc423244cad3fafb6794303aaed6cb1e25a85de3d0b38c660b68078ff5c35af12637857f6fe34c4cff175e9485ff7cf98f321957ab99a54b9edbf6c1d0b88b808f530ac973f53231e69aaf76606dfb6bc9803e4804f85ffebf00b64ff3e4e9b98a5e3d16915db934e9dfa3130ec5bafdba705c7b8763f08208126c5a947e0cc3eb5faf6a24155f56409f7d242b73abecc5283581e1fd24da9d70478417cead780040dd8c12fa391b4aafa48edad5038d4d09237f53b38f184397d680d81fab68e743e541b27dbdb60d624fbea25d005cd14a1a4577be860d5ee3e52168a6709281a544195873cd2e6001d34ca03f2ef85de38f225c46340e0ee4ce9d89410790d36db9436c7a1e7a68098bf9337e0a06609b7ea92a006b869d740981e18a88823c366d19bd05cabe899ff2e33ad94a2e896ff5b0ae2eff018e30cd23c443f8cc0a17eeec6bb303420b3769573e20305589fd44990808a3682c57b00fad02313e15ab64951251d8698a415990aec0290b2d7da17cf9be065ef1d94a2fc822d3acf530bb75923d9b173ff44802a026f4e12dd7d69cd6ee82ac358389a43f857ebaf538f4603471108e0190d63973efbcf77368aeb13e46bc8014d1907f31ad3893b5b771f5bfef529ed563eece2224643690a51ad270450c981e9233f740425130a82377939ba0640776122a878085be43489f088dab55b923bdfc9920b563db53a08f1f4751e1f7b3f6ea13dca1c5c7e099c074b652b1c09ee536dedc6eb15cde5b988a764bd9aa23694b75d4b670bfb3e3afa9448576080db3ac68fbcf20752175a26697e5d83bb36120bcc34d98e4bb5ecf0da650eda6cc023f81c7b839820ca7bc421f6d02f40afc6c926ed6682066e6638f45589eb7d3c191d15f63f9c15f42a2fd0150460af566507dc02f451c62ef1e98671f378929e336c618bb2ba7843438a14a9219106946d4f9ea023af1483b3380f958846fcf8eb7d0ca2e5da93755a07f400ee78ba65fc7f4af34fcaaf3140232f969b0716aa131be733c3ee84f86301f3ee7cfab4d379bc66f6aec3f1668dda56990c08b0187bd9642562dfdbe94161b1b77d47103c3527b63f5c8e1285cc3fe62fad0fa3b5bdd6aebfc4d3ebf247f1237340077cdf124f581397f1e2e1865ee0234d1e709075e7cee7b3703315937c8f1c84294781f86e9192afe28d314f4c4c2ee29e63a982fbe36045529b81908127a207f680ec59e38c535b23ff2a826657c1fd889918ef5fe73e96eea5cad538d4c4b234d4163c4850c28ae285acf4863ab305f478936338442141811167ace0af42a228984615c8df448fb81318188c1b94335714cc0f6e4a6fc437906e39fd8934b20fdfa10d8587f9a4768c6b4f71d78fe15367d8f99e7bcc208a9a033cf87c53704c7a15ee9445eaa312016275cdce61d7a7bd0c0c13ff5e4e997245f5d4de9daa14e8c925df70a220325712742c74952245485d563c1bd113e5c96efcec9be425d6fcf9f4a9b9d005073cf543f41928c30a88660351c35c38abfb651900989b298d96d1b31d5fd74397a5bc051b5645771664264a8a7ae7cf641d952244c26a4d5eddd14abfc500bdc45b3889dbe653bf10e4d45a47a977682809b8b22aca155c9fbe2dcf4dab4e49912de0c46a802b2533100eddcb0543caddf9dfd25d059736c12a8b9e2f6d1db08c36fe588746be1c0ee9bc3e314362dcb0828fdd3983ebc37306da95365cb0f2caa5f6a72d5213202f4cf9bf227bc795b96bb79b1f87dbf090a9cddfd6a06f1de6b88becc36970cb02ebae82501ff8a51b5644ec8976f0f2dd3b2b5caab4220d621c267d056967e4a70cd4463281567cb4a7b219682d630edcaa45dca1306b9bc2170a912c8336ec3c810f14dbdc7dbf8900a0f737e3952278de022269487120291188406f99a4a3d9a612ab1743c2b61f81e61eb6d3d48c88539a4e00cad675e2eae9d509746f79f0149aa8f97f8ad3a8b6a32aac4f275a3bf0f723b35a41694b0a9017934d1734cc3034149e355ebf7da6c15d548605546cb4087c6e5eb426570e492c1e8be7369a6aac878190b2704c0ec680802a4db49dfb439fca859f86dcda04f535fb80745c8bf6397c74f29f98947b2f7bf20548f446894210e506a91a655f3dd5d28dcf68230d0523f8e2f02f4e656b9c050c99644900766194afb0b8346ed1071ea94706aa4b99a61a78599dd15623063a1c77c3491a59ce2b26cd0920f624f0f80fb676b4a4e3586e50f635c653030e7ff38266526fa35ac67f8fc1eb756ec698ba3ddf85ea1521c7970b936e075d1f0c44b88ba3cbf21cba63f50e31f513934cf519d5e6aad76ad1ddbc3e50e7d670ee994675ea084362ca8491109efa9843d41231e3a1f349e61093ec64b12490af2e77a5ca9ee451747578f6653aacddb399fe1cb992fe93f6552d1943ec318dee88d946136cb56c4d824d76cb8497a267d3e95e9971568a4942eec890958d2ebf4a5720338a5b43e4cbbe84cd7859e5afa71738580323554853afe3a3fa38bc426d094ef9f4c23c7241a86e272ea7edb15b221b82208732bac4715f324712a755f3e21d4de13f81f5570c42ff947984761a5a4cc3bd083dd595c0e038c0bb16accbe8a06043947a84c88c37afc0b2166d7f4bf56d14d4bfc3526b9be505d8ffe5b68b98780ae195c944d4f928b9ec0dc686f1ebc560e9fd747337189dc14b5d41f65ad2c41ac24b07d56da0d349e21359a6dad5c785fee41fdf890d92b095317bd9f68b0fe5c45d915830bdfeedf1942a53d1514bdc49fc95372c97774b5963b08826866f53e0ff5ecdcb10032dc23b025e02c95aad14aeebd755f52d6faf43f18e2d254e90940ae58aab3ad220ac207cd77e2351679ff979428b3c2b8ed5ad6cb4fb83ec607f92b3fc7a07f2ec2657482aa3a3b8a67b44cc25b1f47cedae2717fe10bf16c5bf52b7594b4e3a373d47a2d5673fa9431abcf6e8f6a4d77bc3f5777c624f924c001922db3fdb4697fe91e9399b50c36d49b77366b9bb85142c4f1c7918af3e6e8b3554720224cf53d7e01e8ffd9242c3a488af419e72ca7fddf347e3fdb535dfb9b8299a40413894e53b5550add18768fe1bb958cca366274cf0934c294127372959aa9e6f4af9071f5bca3516d610f9fbe6242964c32b064a10a16e0c5df417ce66b7f82d3ac96c5fecafa5a1fb6c1a2b4ad13b890a60ea0332299ba478b462f17678706965932807f31704c011c742da7b1a787610ebf7b15c4ff37c49c135b9146ef239f076d76b89476ad0b516ebf476e8e016bef4237a14e02171b60f6e13c8c61a9c7d79139016fa015ca9306d4f0894a621dce3c766fc91f9f69bc90487ff88b46cc31d3061739c8eb4ba52b6a1486cd2bee2d57e5441fef388954486aabcf81bd5e0ea2d02ddaa3e949ad0c6a046fac6d2356ce1fb2cd300ac4a73814599dfbb849e064403540da12fc1723d1d8e4dea7a7901f4aa91073df00d141be383e3468f7b63193eb96fde429755fbf7ecac163a5450d107041156ce8fe1f28ec42af9228d7c171311979259d1bddd1542d9ee11cafb14c9a0e30a7866152f6632203fdc5d5342fe5dd903716cfdb3471156027efb16295a82cc0e8fcff68ba06cd44a3575fddd8bdbaf2144c8250b324e4b9a8ab03ccf3a1b116df04009f6eb5243b3f119ecb65e7c72e2ebcb64241cff9f1c0fc9ec295781a42826ab3ac577359340e1f4fc90e8e2d4101d470269fd004214f19851f2ddcd289812a01ad1485445e7d9b0cffbd59d6ca196413bc0ca77e1aa1051ce995419dcbafeab5f8f18589f46140c6da9299e023b3f558e8e3e3b82d6605b19c9397ad06ff1c10e735640698cc5c011008594cba28eb47b5ed256ea9d01159090695a33888e8106e1314c5faf3b09a828b125930ee81052857b3e06c96bed0c5a0b5af495478eb177963edd1a2f4a5ee1501ef190dbffce144a208bece24384a03391a9034599a4270cf1b0c54d7703358424b8e3e59fc9f171c495390e617b48ee2d49bc7e38e0f471e94778d5531c9bbceac1b3685d5b3441bc8eccbd5104efe98818175a9f2e569a956f0881a3f1f41c6f856439edee144192ae0a50ccebadec37d55159de7dbc7d6cf37b05686fbd7c2438f94d288c0f4731355ba5ced44910b5bedd58a6af4f8890917d278a655eaf4f1a39642e19af98adffc122f8d4d3a6ba98f9d70859158ec6f0ee997d8b7b3cd50984294377afbbc313286f9b3f654284875338d33a261acb72bf7dec42926d1399c7225e48a7272c1232e4a7eba45485263f595b92971f5afa8b67723110ae18fc2356bacccf05e3295893313e0973575ce19ef01ab2972e661a68465cc259a36fec9a9b959b13b808ea199e490b39967a8772c69258b69cbeb7c68b798f5985bfa38d3c16f5374bd85843d067e63c9ff539197e8cc16762fb6a2a1194024d", @generic="8458527567f098ed0498cd4b77e87d153430798e8116dde37f4eaa77899c581a197feab00ac9067d2c4137aad88e912839561f77618be52775918433c68398aaa9bdcacc4e27ada14714b3bcdf547741e49ff491e52bede0b51e88bcb57acbb541d9715716d0dae186eb706948656e1b254415c00400abecd93e971503ae261e947493059dfc7583114b", @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@loopback}, @generic="5150154257c16595e7e9d0d3a1315ae7813c6b8b7f87ede5652d230f6f70ee19a532c49d3efaea961a4eed0981cb6830f8d6c51d8d2bfe6da17cc7e77367", @typed={0x1004, 0x44, 0x0, 0x0, @binary="c44c0d97bd652aa5d2e584e94d1b07323fb3ac34156507a3a1b2b7052e30d138e892d7e1f24fddadaeb1c793f6c6d123287f5f6717b6e56507cd527030cb63b5fe21ea52164feb45fb9699a5d258d753f9745b9a5241dbd048ddf4959941fa86958b6134ef58a27879816dbbdf9af349d8146561be302e453908cf2c65b9b12ed2b4362393353eada1cc74f48bcc2494bf96efc3094cdf49f6a8ed8e805ebb43b1535cf23a5b51bbad88a7cac18b7fc443c31b962e7a9d0d77a935e6c68333c68c32860eff88951f1325f7d0db50986eeffd7796c390cad873fc79419403b1305c15e8e72297df8a580b7448259232bdd14069b97c404954728b44d9b7544e5cb548a4f3faa64ceae0661b80570cfebe295c6c689149cd9cd7e2949ce67172c1fe0eb8905d6df939e1aa250f610fcec1539b2906480db72309710b6a03e2616cb8c393176f01cf83ae1207e8ebb73d2a4757d88711cd1576bf8af01e6476e61369efaba772ab84ac382f1a938ad35b781356f2c32f5a82b30d7cce3048691f4b9c4e7b56faab34c612857fb8aa7beee1a760354c0077b58c581956104da6e6a47e6fa0b8c986782181a1807b20a997126229b5e7d761d0e33fe14f2a636c353d8f0f114343d0c1b1c13389895e0767d2bb1e17b2fce03eb4a7d0db729b909271e046134871a517b548dc45deafb029f5451d19e9920f701e216d0e226e4326a650d6dd652eff5295d909378ea84fc8d04a16486b6621e49e3bf5a97241bca2e6a8fa2f0e99ec304ed8426d1324d456d7ef221d28014c869f6ba54863094ba6e81040a4aad2b03db0facf8f9896015002e97fab077fb2f6924aa943d48d4e4e027755ef95ec3b73e85c43743e3a6ca825c71623c00d794e265ef03448c45b0b440beb38e5120d073165d510c5f7198d47cbfbb5930cdf113c9464f6af840d30ed0392b34b9cebbcb022f1be296825f9df18da09f3faa557c1fe75361abd1a302d9ec35da43f79da4a64ad9c2ec556b60d51f571cf737115fbb99060ef420f363a87f141aae83a8ddf811bc4663ec0255108cf091d9551ee0e5e356bc63c6bf3db49a20f5445e4ca1ea6c838d0aeed086a6a6b6c0cdfcc0dc93e0ff0fe11db165503d12547f3fb40f8c333c584c3d92b91e32091f39f64c4a34b51830217d504b3ecd80a40bfe1d6deaadfee6df53c09772979f921eb1b04b03c3ea847ede45e054a8d73a5adcc9dd6f8652a9ae18c0c785fe3bd80dfbad84acbf0e05aafac2da73480a7812e07b32fd084ff9558921d5edf34f180f2ca3111a3703f13a85886450b5f132595dc63c04e9c4de166c2377844db19c519b2627b3b1210239f4e3863cfc4817b9e7f528ff01909c0ed1993438490878cfec22de7c633dee498e4a2525bcd4c6c7ba838288038490a6a30f0de9bbc3e41219dc7e5f9d72b120d2464a3c0a887d3a40d7270afdeb18b70d47e5604fe8ae7b616c70afff5f39b3ce32a987a7baeafdda17dcefdc8984e0679aed1731a83212831afe8c89ea56014554b0bd8f7680398b6190d80912f33b241cb4ad106c19c4f30fff74cb8015db11ce3594e06de28213db0deb973cc5197b5b4a81c92f9dac7926ad9cba1d86b578472b4738ef2576d0f09b08c3904052e06831cca52a8a8cdb4a61ed519e709e1fe7b2e9f84dfc4302f7b2be03208d615f85a6fc5b66692d88b6ead6a9270da2fb5c5afce347106008c9abebfaf514a8f4874007af2858ef5eca5b17f2461cd1cf95d9e2ebc769a9a06f392bcd6f9d5fe252c6d4e1060584b8ce4cd8d76e8ce179b1df3714f08da2dde4eead7b800943706047c7dca9c8279fbcf71e5e5f96ea5a0011c1a61a3ca6090602bb79c24b9f1f2f17c8dec4b2221f29c365f5db8da5d3cb435c3b4c56b5cb51130048c05e3213aa653dae115fd5487c47843eb586c9ea61c14ede05a0780194ea5c08488b04bb9864dc5ba13bef42e06efeda972de2cad0bb77941daecd5088a2d0c90269b45821556d4048291bb31b25502103b1cdb33b970f5d4926889a39350fdc487dd45eb76a4a799a6cbdf35dfb76a897af5ba74fea5fd395c145e75616713942d52673c2e24928bb550c1d9d665afa00a00f7bdefa9802174b395a81c76357fbaba603a583dd3203d6865cc179603fceaa12d846b37cc6136f535af4d3369da584f904f1462cf8a14218c8f5a89fde7dca0e3706ad341ff463a01cb8bc08aefa6e78838e485ada2eea18c8e78275f9681bc9e93454c49d958c7ca5a1b1d6fa967230b4e1b4ff201f6e609239b0b08309f120785dd67fc62b5b90bc6f77456f476c8401cfd201378c7111d47244e9bb41fc493765101c9746af05f71fd03b885f87858db7f7ed2fd62021e85f053ccb1f13bf1918ded4e3d071a47d53e32e63243ee5da67e8a76b670e298899be008ff2138fa2945c4ab86c1c7089013992b37da11ab6f1c1a38f61323a7c94f2d09eb0084d6d9f0a2b385e3225fca8a639eb3a539067adabafb29ca41683bc7f18f1d889cb9db69f8c2b2e46e98e0f8f8c90cd2009a88f430ee33f40e81a45db7c6dab5870555fee296409115ad264d19394e316ce85770e4c6c68d3b26a67c0be4ecbcc3e1e5d71242233c88a8802135fe586b7fe1ca01935da932a454af28a89458777fbe29428c9efadc23c5570d72c309c4d6190c025b3298e52fb5db38dc5a50631c6841381781b64328a27e73dbeabf6d11b784f2dfed14978ce3fca85c60706055b50d1042339769bfb830b6f4dfd195137598e568cf633b5ca10c4d821d3e9ee19479bb6c6bd0bdf1fce72f5c6590af6cf281760a7fbe45b6f60f8001439d1607beb627965b13e3e92b31f65cbe2f874606ec30c5a735169e53121f8c73dad0806dc0eacf8e8e9154e5fc8bc4b516face882f801191687ec4a37798628244028d74982df26a4b485384e30b704cf32c1cc3337a916e4b9152ee848cfcb9434e2829d800f1053a7922e4421db28a9fa61cfe3923aa337f8ba155bf172432e9fa99044c02cef5939f6753a1e39182eca708ced38b1117b21c68b31fe10a5a9fa9a74683df435a78d2e6fb419bc3cc0038eb554dc6e6ba7058cfb71aa5d3716b7b0ca4fcd13bb945dc62e7fe191805c8936ba4d05c0344297e72e2543bbf247fe39d985200e1cb851d47239881a4769406defe919acee433e2db392035ca11855543e244823f7fe9afa428f31338873b166ee23d35f994be16026f1c85c30eaf6a78d794d97e02ae4f5e74924405bfb6c82d27ec4a6186ff7029dd81dc94c3d74ff4f7cdf32b97522f8755b711c3995d55adfc91b365e87d6eef1cd310155b4c7703f6b4d62d16516ef01d78e72bb05f7d55a30492fc1acf7be25eab34accf123c5ff86732e55d17ed23824db8e03005e99421f97df101eaa2210cb158a96c3774ad5dcdb52251a9c7c98f00391a598c0b92ffb767a60ae7b4f98d784c80b088c419d12c5f0909f6f80050d950a32bddeb5dd7a6902ee5ebea30110fa6ae717d475294e65cfbfd214d44caf0c7ffc8e955fca99bae327ab0b4d3225b75dbf5dab06f2037a91b84275c8459adfc208a7f960cc7d5236f54167692a1d05074a9e791cb7bf3806991fd7ece3225106494a3c2e011bcfca9e23e0bf16bc11462445e985da6e358b63244f06c110cdd4125734441756ed873eadc082696d5b85561af64146423280f78cb669a211330ce44e2927eef267a7d622df0c1023c055a0580e0eb158ed4208aab2361dee970eac3c9e1c48f7978c34edbdc909b1aaf3a2532925e2d4febe73c4a3d26041721a49c995438e1d75f246ee2fcb64e1cfdf35ea7b5356a00a86ce0830a993caa2ad62056a5c253f4d6938894984dc067fd828c2676f0aada7485c285533ed1f5a1299b1885162620f774ae198a0064abfb219f71919c7f88df08ab4d96b014be1f41dc2dc506bde71d638bddf7139efe806d8b058b3b099810dcb530785d91bbe9563c3d53369bd8f6c592107060236ee435e478405b32119ec82eff852e8aec668bf74b3d97ee41b23de9141f2a8c46d7efc67ab62686f8ae575c9a813019aa0e3f90771e47529a1dbdce8eced6b6a6d63e7eaf5b6a12c9a57c2cb28b65544742c411ceae08d760ef5a1ffbd501e2bb7d34c112bed89183a510167e623148adde48977ae08ff0e1b4d365ab395afa152d7df1149c4aedb7057576dcd3192e3548ae52dbfd583afdfdc23c5c6668447056f9e95cb69e2985da33aa75b81a9b78482e8876ba98e927cb767064a65fef2a9e0d610fc5e3e3dc42491d76e31a019dc654adab039153e72fe9f05f462328613ecfcaa04696321df0275a84dd48edefa2ac4b776363e19ac7f6c8a0618a6d37695ad38490e81cf8d3f4e6e0543b51ea6eac1e3975eaf7e0441878e3d3a78affc75b65a8bb5dce985c3765459878d78966616e5d877efba968026ed32d2201691eb72722429a3ad203afba4c5d00fcc70b6be1418f6c270f7287ba37a3f62769aa8723aa2b55eb3016219f1067e60dc0fda2a7055434476af690ed1ea4f80600023ff8fc8e45b218f02d9fcc455b6e2ae3725f84928c70673467a2669ed65633904e2f33c612e70f1e876d60be4452b55a1ac3ca214617a148280f860654354ab26d611ad5e8e7d40f08c0ad8bab7711cf3ba6b548a7bb4200b12c192c3236ff9124fc62e16e92fb540f6dfaf882cd52385e267062998b09b078bbf3d29db0eb712fd2c2670d3d55208a7b1bde337f0e600473589ab608146c820e70e1b8e64d0b0d1eb0d5f573d7e9ef650f93e866a941a3882aae7845ecfce8145d59367758f6f267fa9891170c861d33e731beddebbf5bf57a58de72319896bf2bad806fe1fcefe4229dc27ec5d7a08740652de28df4a1d260411a969d6dff35be3bf42ce5afc31d5e2cda2cf5c1532a6e4fbda2144093b71643e0dfd0d5bebc6ea2fc0145686221bbefa55515e4601a2ecbf21d98f8a21cdd3b9e73d76a3e824261a000d0e91c2d81a3b3c9bdb15ea671b84f0114934ae842a9c5c99ca874b4fa0885c0a48ec14f43ff355ec0b8768dff325a677eade400f9bb1b6c8fbd906cd3633df3244c21bbdd0f8b1f663d5bee740e6d16f819f9a68d5a513509cb90ee217bcd5e1e1cc114393b7e924b5d8af8f28ae256ada1b9b8224129dca2c0d94fac33bb49a4780c43cfc1e1953513576df2a5462619054269ca5d7a2bde024ebe95719ef5474592df856375d746257f761366fe6bdd8d1b29590c94a3c2de50845ae8f02daae859498dbe10b3f3d4d345ce37137d93461e21a5dc288494f8302657915127c1cc68b6fab07eb3e27f900b196e9ec30db04aa3b12716b4c89d9f97be24f35bc71f1c4c483226ce89f9094eea286f61fd73912281b6eb1dc04d9e7d4b69be5004538b4677875cdeb9c94841fa5576b0a416ee45e1cf709c92285bdd2bd6888ef8ccdc17c70ca32b8a172bf02a18b5f24d3e0fecdd23272d678e4ce2f5c943b8c8667b147b75422645128b3d79cdf2de2d59c2775ce0f6c193fd89a32424c1e1e7d19d1c9a90d32430b12ed4472f010e81039e7da6694dea45aecf4a408f55319849d704d1d89acf4b687e6a9cc8f1ad564cb9eb7a3c6c8944c833ef57cc4d4b77eaaccbfe4e7f6c8cb2446017424e996f4e7184f70503fcafdbe9309f05ae6b7485ad18b936f3350bb22c1758166f3ce61cc2e30ed823af4c793ebbb89ade7fc0fc946c4173a6dc8c6824dffdeb07805069f27c8d62c8c43b892fc78adf555411c191ef4f5ce3e0df1477"}, @generic="970ba28a58672cb37885b7e3f657bb180638a93586258580f34289a91ef321879ae9ba52657f7a95c89a6d52cb1886dc6a6b919090ede4dec635bd9a44cb574b124fbebe403edecfbac68646ff8d976defa80576923eb7790a8a89d67f8c408fcbd297d7b6fc63e2c11e01388522255aa3bf7c8c3188b328a09d4458aea54e4b92ef645f230da39bdc579fe569260fca", @generic="27f8cfb8e6cec1257a3a22faed30a3ce0d272b212c6601f093d28cf3127b924046d89b39100649dbd6e62bc771b6ef77753462d1375a70c188f70cb68279fc474684b06ad5cbef5222b705bb0ddb25ee79d61768badded7fc7ed19b269a9b2803b9d16bb990ecffdfe9d5ce89a2fe236cb77e077d80f3bcf9f1e2fce9ff84d0553080b4aac44839f2581b9646b62aae9d14b3bed22208b00ae9c7abb41a3e631ec793309739e178596c12c15f96d8ded477baeae327d4481275894cfabd759c6451a1ef7a818fbc0dbbcaf31ad5b348ad5e62fd1dfd4e8b65f5f0d840d6ce299a37ae1867b0eb2481aed77706469909c9fb45e", @generic="82920d9c666eb5c7a66ad9a14952b52719d16cd84854688c8fbdd31eb963b57072e54a3b1c09cb8b4c3d5fe14c5bd35b3b491f94e10ef6b1f838a994c3e0e8df51896b2b18c31148bbc14f1004ad3ab5c40d897aa562033c657684b20df43209bb471e6f037da6b9a7243cf842a41bfe3d04c21587"]}, @generic="3f9ac597823f6f02ac09d16d48489c6cbeadeb2a052693e50e5b16eb62db5cdd76b858c3eb003c3a0301796100cfeb5d7727c85647ff88ecb61dca2434207494b53e6f93a266a164eb153dd68a5cdc492a5c8dc2aa8a1189342c2566b779e31ead47d2702ecfdeb63277c838e6056a11fa6cb0c4215e92d55381951ff62635fe23f4764f157c"]}, 0x26d8}, {&(0x7f0000000600)={0x284, 0x3e, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x42, 0x7a, 0x0, 0x1, [@generic="6d40f94864d67babd49e2224f45b442f1df15d73ce42ba3bb1b62d85693247ec818524aa37107a635500ad1be45db49f8992", @typed={0xc, 0x26, 0x0, 0x0, @u64=0x36}]}, @typed={0x8, 0x6e, 0x0, 0x0, @fd}, @generic="885dbfbdd0ce90e5459bc6af8af1c5de90e7a922e08de08d23b33d22f43fbf0e5587ee48c275e0e2a543c6c67605688673d7b45b11aa70d77e63a0643fc1d4b06db9c127542aa2349dfd792930b903cc1eb4bccdeb2af7f317f4cef5607097e32ae2cfd6b54ce78fd04f220c2e4f0ec238052812ae322d681466", @generic="40486ec067be419cdb3bcbbafbf95a756ba7a089dacacb7fc90f2930073c891c802b1d11789b68ed7fe4b40755f758a8725b8817b737c69ed5e2c03dcf3a776146b21fa44253cc3ac8228a61041831469e7f302bfb6a87bd2db069c7a363c282c004f2fc0b2103aa28b6206435d979719e4a357bfa87e79699c4edca46650f65b85cff4bfdcac5084602618b1e6ac9416df085c3441e0fced47ccb9b0aa850293054c81bf55e2dd5ee821396defb5c91f7bd65c8fcab2b410419fbe1e24788dcfe8d6961a2", @typed={0x8, 0x14, 0x0, 0x0, @uid=0xee00}, @nested={0xe0, 0x56, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @ipv4=@empty}, @generic="3108f961e9f8e4face2d4edd143dd6cfd80ec34c1933f7", @generic="c8eda2c10b7a08fffedb7e1ff91d43086cf869fd75450c838fa1910e5703bee978c69c8057ffe6f2bb9348630316e2ac62592fa8d566e7ccac29077a7f3dec36ea934b32d5b9d34eaad59a8cf09f63805ad305d9029421ef093b500034b060159f3e46bde6740334bdf17648038f1270157f5b24615d7e3e4fed491fd39e1f7b43dbc8e1df27ba335120f30eb5788234f8503283e6afc8a2dabcd14586705f026d8273065df1b42000b39fd02c4b81cd8140e24507c5147d9dfbe86baf"]}]}, 0x284}, {&(0x7f0000000900)=ANY=[@ANYBLOB="78020000f4b8004a28bd7000fedbdf258b0026801b51fe6b60d5d71cf2282431a66e1c3a2548b86f3f7fd24290a22fbfba819d964f132bd28d0aabb48b6838c42024abdf47c0d28becd8ba4597320e2d06faee6f3d3d926eafc313d0aa136fbaab7426f4466353777346d2ed8fe4123ffbec78c308a21dd498f84ae9fff8f873161bbaec3f80a7509b6918", @ANYRES32, @ANYBLOB="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"], 0x278}, {&(0x7f0000000b80)={0x120, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, "", [@nested={0x10f, 0x81, 0x0, 0x1, [@generic="401d3cf7a59df05faa674efdf1e18c1df83c356f84df18b3e5352dc2c8d916414a9b266a36212882e445c2eda0f4aecea95a37de0f4622edae5ee0b4d61b5b20cf38e8c6df0f664304a1bd61e94305412b367a6292a3a2cef8564b10695a723235b5bc634883eedbf153afa82a6226511256f58752402003", @generic="096a21cb1e0200f868d604c034b6e928484cc1526abe303dcac357f566d99ed772707d59c6b4de84dacd7104574d5ee6010857b8dbf2466dbbc38a79b7a6807147c1022fd1e77bc44ec8f72c343b5f97d664d283d76fbcf669f285749bbea5936c0af401ab7a84b0849c1adfe96931388d9618501ce8cb91434557f5c292928ef8f84a135998c55986dda8e5c8b1512d02ec6d"]}]}, 0x120}], 0x6, &(0x7f0000000e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r9}}}], 0x90, 0xc4}, 0x20000000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) readlinkat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r11 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x2) (async) syz_clone(0x4000000, &(0x7f00000002c0)="aa288770377335c88bd757df77647bb1c1dd223d093eb714baf88dcb353fed9763e938afa72bc5ac09a4e8102329253628b7d4eb553af42b7b50717835f86edd32402a085279e2b723d3d3e212cc274dd1174cb696f569e22080bb2e5baafdf1628e6026f8b314bd57260e894c98fa086dbfba37751374d42c55fa3f4d1a70ab1628d5", 0x83, &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000440)="f4a3f574a2cfedbdceb4d6c72468534af685e6e3eacf5a15eccb2a7bc0f42933c8420e54459026995bef74e9b8e71b4d7637abb3bee16178a8330547410cfb53deffe9ab7511920669b6569bc53e9023080dc7e66e4871460640330a4ba6485395a1598b4c94c65ad0aebcc084003c9852a5916b99968d990aa1d857e416a32c932bf566fece138985b687b92192afc33ce43447d40e37e9e3318fb1768b8db0dc5a9abd98a09b819afb5e2ddac875f134212d822b00f12043a5d99dcb181fb04f2ccff977edd37555a92879bd0dd4c745") (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r11, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:05 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00006000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) 10:23:05 executing program 2: setuid(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) [ 2976.187127][ T6721] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2976.219061][ T6721] CPU: 0 PID: 6721 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2976.229475][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2976.239613][ T6721] Call Trace: [ 2976.243011][ T6721] [ 2976.245974][ T6721] dump_stack_lvl+0xd1/0x138 [ 2976.250624][ T6721] dump_header+0x10b/0x85f [ 2976.255106][ T6721] oom_kill_process.cold+0x10/0x15 [ 2976.260291][ T6721] out_of_memory+0x35c/0x14a0 [ 2976.265041][ T6721] ? find_held_lock+0x2d/0x110 [ 2976.269866][ T6721] ? oom_killer_disable+0x280/0x280 [ 2976.275133][ T6721] ? find_held_lock+0x2d/0x110 [ 2976.279950][ T6721] mem_cgroup_out_of_memory+0x206/0x270 [ 2976.285545][ T6721] ? mem_cgroup_margin+0x130/0x130 [ 2976.290711][ T6721] ? lock_downgrade+0x6e0/0x6e0 [ 2976.295627][ T6721] try_charge_memcg+0xefb/0x12f0 [ 2976.300623][ T6721] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2976.306664][ T6721] ? lock_downgrade+0x6e0/0x6e0 [ 2976.311573][ T6721] charge_memcg+0x90/0x3b0 [ 2976.316067][ T6721] __mem_cgroup_charge+0x2b/0x90 [ 2976.321053][ T6721] ? _compound_head+0x5d/0x150 [ 2976.326124][ T6721] __handle_mm_fault+0x187d/0x3c90 [ 2976.331286][ T6721] ? vm_iomap_memory+0x190/0x190 [ 2976.336300][ T6721] handle_mm_fault+0x1b6/0x850 [ 2976.341114][ T6721] do_user_addr_fault+0x475/0x1210 [ 2976.346262][ T6721] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2976.351859][ T6721] exc_page_fault+0x98/0x170 [ 2976.356486][ T6721] asm_exc_page_fault+0x26/0x30 [ 2976.361369][ T6721] RIP: 0033:0x7fd887030e0c [ 2976.365816][ T6721] Code: c0 e8 98 5a ff ff b8 ff ff ff ff e9 33 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 54 31 c0 55 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 30 6c 0a 00 48 89 34 24 48 8b 14 24 48 8b [ 2976.385459][ T6721] RSP: 002b:00007fd887ea60e0 EFLAGS: 00010202 [ 2976.391558][ T6721] RAX: 0000000000000000 RBX: 00007fd8871abf80 RCX: 0000000000000000 [ 2976.399574][ T6721] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000200005c0 [ 2976.407589][ T6721] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2976.415601][ T6721] R10: 00000000200005c0 R11: 0000000000000000 R12: 0000000000000000 [ 2976.423617][ T6721] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2976.431651][ T6721] [ 2976.474167][ T6721] memory: usage 307200kB, limit 307200kB, failcnt 18534 [ 2976.481331][ T6721] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2976.495178][ T6721] Memory cgroup stats for /syz3: [ 2976.495414][ T6721] anon 2904064 [ 2976.495414][ T6721] file 10280960 [ 2976.495414][ T6721] kernel 301387776 [ 2976.495414][ T6721] kernel_stack 851968 [ 2976.495414][ T6721] pagetables 1675264 [ 2976.495414][ T6721] sec_pagetables 0 [ 2976.495414][ T6721] percpu 5136672 [ 2976.495414][ T6721] sock 0 [ 2976.495414][ T6721] vmalloc 0 [ 2976.495414][ T6721] shmem 10280960 [ 2976.495414][ T6721] zswap 0 [ 2976.495414][ T6721] zswapped 0 [ 2976.495414][ T6721] file_mapped 262144 [ 2976.495414][ T6721] file_dirty 0 [ 2976.495414][ T6721] file_writeback 0 [ 2976.495414][ T6721] swapcached 0 [ 2976.495414][ T6721] anon_thp 0 [ 2976.495414][ T6721] file_thp 0 [ 2976.495414][ T6721] shmem_thp 0 [ 2976.495414][ T6721] inactive_anon 2908160 [ 2976.495414][ T6721] active_anon 10276864 [ 2976.495414][ T6721] inactive_file 0 [ 2976.495414][ T6721] active_file 0 [ 2976.495414][ T6721] unevictable 0 [ 2976.495414][ T6721] slab_reclaimable 281800 [ 2976.495414][ T6721] slab_unreclaimable 293012592 [ 2976.633206][ T6721] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6714,uid=0 [ 2976.665298][ T6721] Memory cgroup out of memory: Killed process 6714 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 10:23:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000600008000a000f"], 0x28}}, 0x0) 10:23:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00006800ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:06 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x6000000000000000}, 0x0) 10:23:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x108}, 0x98) 10:23:06 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="142a000400028100000000000000000800000000"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@empty, 0x0}, &(0x7f00000002c0)=0x14) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d4f4ff00", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400090d000008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040000087f07060000000000330302000000f7ff403f01000000000008050700000003000601010000000700010337ee0000180303080200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="a80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002000904010000000300050901000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000040004003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="8400028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="0800dd44060100000000000000000000e5daa5d37ccd0eea8679a0f5d4b48422000000", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f400000008000100", @ANYRES32=r10, @ANYBLOB="4401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003005000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000300063f00000000080020010800000002000203000000000100ea00050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001040000"], 0x5d4}, 0x1, 0x0, 0x0, 0xec99d9dcb499c7d0}, 0x40) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r15, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r15, 0x0) r16 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@exit, @map_val={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit]}, &(0x7f00000001c0)='GPL\x00', 0xfffffff8, 0xe3, &(0x7f00000002c0)=""/227, 0x40f00, 0x11, '\x00', 0x0, 0x9, r14, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xe, 0x0, 0x101}, 0x10, 0x0, r15, 0x0, &(0x7f0000000500)=[r1, r16]}, 0x80) 10:23:06 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x3c00) 10:23:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) 10:23:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00006c00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:06 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x3f00) 10:23:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/142, 0x8e}, 0x40003) 10:23:06 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00007400ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:06 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x6558000000000000}, 0x0) [ 2977.060928][ T6746] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2977.155228][ T6746] CPU: 0 PID: 6746 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2977.165636][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2977.175740][ T6746] Call Trace: [ 2977.179041][ T6746] [ 2977.181990][ T6746] dump_stack_lvl+0xd1/0x138 [ 2977.186620][ T6746] dump_header+0x10b/0x85f [ 2977.191089][ T6746] oom_kill_process.cold+0x10/0x15 [ 2977.196257][ T6746] out_of_memory+0x35c/0x14a0 [ 2977.200992][ T6746] ? find_held_lock+0x2d/0x110 [ 2977.205799][ T6746] ? oom_killer_disable+0x280/0x280 [ 2977.211050][ T6746] ? find_held_lock+0x2d/0x110 [ 2977.215872][ T6746] mem_cgroup_out_of_memory+0x206/0x270 [ 2977.221460][ T6746] ? mem_cgroup_margin+0x130/0x130 [ 2977.226615][ T6746] ? lock_downgrade+0x6e0/0x6e0 [ 2977.231530][ T6746] try_charge_memcg+0xefb/0x12f0 [ 2977.236518][ T6746] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2977.242558][ T6746] ? lock_downgrade+0x6e0/0x6e0 [ 2977.247475][ T6746] charge_memcg+0x90/0x3b0 [ 2977.251936][ T6746] __mem_cgroup_charge+0x2b/0x90 [ 2977.257702][ T6746] ? copy_mc_to_kernel+0x3e/0x90 [ 2977.262688][ T6746] do_wp_page+0x7ec/0x3370 [ 2977.267159][ T6746] ? lock_release+0x810/0x810 [ 2977.271873][ T6746] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2977.277284][ T6746] ? do_raw_spin_lock+0x124/0x2b0 [ 2977.282364][ T6746] ? rwlock_bug.part.0+0x90/0x90 [ 2977.287350][ T6746] ? lock_chain_count+0x20/0x20 [ 2977.292247][ T6746] __handle_mm_fault+0x1f58/0x3c90 [ 2977.297412][ T6746] ? vm_iomap_memory+0x190/0x190 [ 2977.302541][ T6746] handle_mm_fault+0x1b6/0x850 [ 2977.307362][ T6746] do_user_addr_fault+0x475/0x1210 [ 2977.312517][ T6746] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2977.318128][ T6746] exc_page_fault+0x98/0x170 [ 2977.322759][ T6746] asm_exc_page_fault+0x26/0x30 [ 2977.327646][ T6746] RIP: 0033:0x7fd887036645 [ 2977.332084][ T6746] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d 7e 1a 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 2d 73 17 00 48 8b 53 10 4c 8d 81 00 [ 2977.351737][ T6746] RSP: 002b:00007fd8872cfb70 EFLAGS: 00010206 [ 2977.357851][ T6746] RAX: 0000000000000003 RBX: 00007fd8871abf80 RCX: 00007fd8871a80c0 [ 2977.365865][ T6746] RDX: 00007fd8871a80c0 RSI: 0000000000000080 RDI: 00007fd8871abf80 [ 2977.373880][ T6746] RBP: 00007fd8871abf80 R08: 00007ffda7993080 R09: 0000000000000000 [ 2977.381898][ T6746] R10: 00007fd8872cfc80 R11: 0000000000000246 R12: 00000000002d6ca8 [ 2977.389916][ T6746] R13: 00007fd8872cfc80 R14: 00007fd8871abf80 R15: 0000000000000032 [ 2977.397953][ T6746] [ 2977.537572][ T6746] memory: usage 307164kB, limit 307200kB, failcnt 18603 [ 2977.552125][ T6746] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2977.561878][ T6746] Memory cgroup stats for /syz3: [ 2977.562096][ T6746] anon 2863104 [ 2977.562096][ T6746] file 10280960 [ 2977.562096][ T6746] kernel 301391872 [ 2977.562096][ T6746] kernel_stack 851968 [ 2977.562096][ T6746] pagetables 1667072 [ 2977.562096][ T6746] sec_pagetables 0 [ 2977.562096][ T6746] percpu 5136736 [ 2977.562096][ T6746] sock 0 [ 2977.562096][ T6746] vmalloc 0 [ 2977.562096][ T6746] shmem 10280960 [ 2977.562096][ T6746] zswap 0 [ 2977.562096][ T6746] zswapped 0 [ 2977.562096][ T6746] file_mapped 262144 [ 2977.562096][ T6746] file_dirty 0 [ 2977.562096][ T6746] file_writeback 0 [ 2977.562096][ T6746] swapcached 0 [ 2977.562096][ T6746] anon_thp 0 [ 2977.562096][ T6746] file_thp 0 [ 2977.562096][ T6746] shmem_thp 0 [ 2977.562096][ T6746] inactive_anon 2867200 [ 2977.562096][ T6746] active_anon 10276864 [ 2977.562096][ T6746] inactive_file 0 [ 2977.562096][ T6746] active_file 0 [ 2977.562096][ T6746] unevictable 0 [ 2977.562096][ T6746] slab_reclaimable 279872 [ 2977.562096][ T6746] slab_unreclaimable 293023328 [ 2977.690399][ T6746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6746,uid=0 [ 2977.730147][ T6746] Memory cgroup out of memory: Killed process 6746 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000680008000a000f"], 0x28}}, 0x0) 10:23:07 executing program 2: setpriority(0x0, 0x7, 0x0) 10:23:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00007a00ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:07 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x4e1c) 10:23:07 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x8100000000000000}, 0x0) 10:23:07 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = memfd_secret(0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="142a000400028100000000000000000800000000"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@empty, 0x0}, &(0x7f00000002c0)=0x14) r11 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d4f4ff00", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400090d000008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040000087f07060000000000330302000000f7ff403f01000000000008050700000003000601010000000700010337ee0000180303080200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="a80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002000904010000000300050901000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000040004003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="8400028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="0800dd44060100000000000000000000e5daa5d37ccd0eea8679a0f5d4b48422000000", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f400000008000100", @ANYRES32=r10, @ANYBLOB="4401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003005000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000300063f00000000080020010800000002000203000000000100ea00050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001040000"], 0x5d4}, 0x1, 0x0, 0x0, 0xec99d9dcb499c7d0}, 0x40) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r15, &(0x7f0000000080)={0x10}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r15, 0x0) (async) r16 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@exit, @map_val={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit]}, &(0x7f00000001c0)='GPL\x00', 0xfffffff8, 0xe3, &(0x7f00000002c0)=""/227, 0x40f00, 0x11, '\x00', 0x0, 0x9, r14, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xe, 0x0, 0x101}, 0x10, 0x0, r15, 0x0, &(0x7f0000000500)=[r1, r16]}, 0x80) 10:23:07 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f00000003c0)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 10:23:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000f000ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:07 executing program 2: socket$kcm(0x2, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="e0d81fb8e8cbc6c4a9987bff9ed07a0039540d09c36753b5017c6d01f876f8b3aec38ee2c5818baeee83252709ab21572deb9c24006470055cbcb9", &(0x7f00000000c0)=""/160, &(0x7f0000000180)="d50414084914cb86ce2f65f3ff908c59f0591d168a7cab3041d6a065f0eddd22", &(0x7f00000001c0)="1fafe52942cdde2940ba2293f056334ce79c7734857891c3e1ffbbab160d7faefbf08e1e1a7104b88203f197e41489e022f002521e83d93ae0ab86d428baae0dada618417343676c8e8a120d04391686b5a79bd4c0d2fa7401a43b513cef925343e49d52055937052957b84622d8f4682e0968dc29ad166eac92f122fcb5278fc2d09decd6701fb9e55c779022f218de54c568975c0c44db2f27392bf5e3ef659bbddfdadc83bab9f5e31082471bbc27ee321c31de300b881ac235483d3ea938ed0fbca8fa36", 0x1, r0, 0x4}, 0x38) r2 = openat$cgroup_ro(r0, &(0x7f0000000340)='memory.stat\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000300)='./file0\x00', r2}, 0x10) sendmsg$inet(r1, &(0x7f0000003040)={&(0x7f0000001e00)={0x2, 0x0, @private}, 0x10, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003740)={0xffffffffffffffff, 0xe0, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000034c0)=[0x0, 0x0], &(0x7f0000003500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f0000003580), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000003600)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003940)={0x6, 0x7, &(0x7f0000003300)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000003340)='GPL\x00', 0x5, 0xc7, &(0x7f0000003380)=""/199, 0x40f00, 0x18, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000037c0)={0x3, 0x5, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000440)=r4) mkdirat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x1ff) 10:23:07 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000003ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2978.131362][ T6775] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2978.211405][ T6775] CPU: 1 PID: 6775 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2978.221819][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2978.231921][ T6775] Call Trace: [ 2978.235233][ T6775] [ 2978.238197][ T6775] dump_stack_lvl+0xd1/0x138 [ 2978.242838][ T6775] dump_header+0x10b/0x85f [ 2978.247298][ T6775] oom_kill_process.cold+0x10/0x15 [ 2978.252462][ T6775] out_of_memory+0x35c/0x14a0 10:23:07 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = memfd_secret(0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="142a000400028100000000000000000800000000"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@empty, 0x0}, &(0x7f00000002c0)=0x14) (async) r11 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d4f4ff00", @ANYRES16=0x0, @ANYBLOB="000827bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="e001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400090d000008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040000087f07060000000000330302000000f7ff403f01000000000008050700000003000601010000000700010337ee0000180303080200000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="a80102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040002000904010000000300050901000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000040004003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="8400028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="0800dd44060100000000000000000000e5daa5d37ccd0eea8679a0f5d4b48422000000", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f400000008000100", @ANYRES32=r10, @ANYBLOB="4401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003005000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000300063f00000000080020010800000002000203000000000100ea00050000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001040000"], 0x5d4}, 0x1, 0x0, 0x0, 0xec99d9dcb499c7d0}, 0x40) (async) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r15, &(0x7f0000000080)={0x10}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r15, 0x0) (async) r16 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@exit, @map_val={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit]}, &(0x7f00000001c0)='GPL\x00', 0xfffffff8, 0xe3, &(0x7f00000002c0)=""/227, 0x40f00, 0x11, '\x00', 0x0, 0x9, r14, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xe, 0x0, 0x101}, 0x10, 0x0, r15, 0x0, &(0x7f0000000500)=[r1, r16]}, 0x80) 10:23:07 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x88a8ffff00000000}, 0x0) [ 2978.257191][ T6775] ? find_held_lock+0x2d/0x110 [ 2978.261994][ T6775] ? oom_killer_disable+0x280/0x280 [ 2978.267242][ T6775] ? find_held_lock+0x2d/0x110 [ 2978.272064][ T6775] mem_cgroup_out_of_memory+0x206/0x270 [ 2978.277706][ T6775] ? mem_cgroup_margin+0x130/0x130 [ 2978.282866][ T6775] ? lock_downgrade+0x6e0/0x6e0 [ 2978.287770][ T6775] try_charge_memcg+0xefb/0x12f0 [ 2978.292759][ T6775] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2978.298782][ T6775] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2978.304558][ T6775] ? lock_downgrade+0x6e0/0x6e0 [ 2978.309443][ T6775] ? lock_downgrade+0x6e0/0x6e0 [ 2978.314525][ T6775] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2978.320127][ T6775] __alloc_pages+0x1f3/0x5b0 [ 2978.324773][ T6775] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2978.331613][ T6775] alloc_pages+0x1aa/0x270 [ 2978.336081][ T6775] __pmd_alloc+0x3f/0x5d0 [ 2978.340464][ T6775] __handle_mm_fault+0x932/0x3c90 [ 2978.345533][ T6775] ? vm_iomap_memory+0x190/0x190 [ 2978.350550][ T6775] handle_mm_fault+0x1b6/0x850 [ 2978.355369][ T6775] do_user_addr_fault+0x475/0x1210 [ 2978.360522][ T6775] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2978.366119][ T6775] exc_page_fault+0x98/0x170 [ 2978.370833][ T6775] asm_exc_page_fault+0x26/0x30 [ 2978.375721][ T6775] RIP: 0033:0x7fd887086c25 [ 2978.380164][ T6775] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2978.399812][ T6775] RSP: 002b:00007fd8872cfb98 EFLAGS: 00010202 [ 2978.405921][ T6775] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2978.413931][ T6775] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 2978.421941][ T6775] RBP: 00007fd8872cfc58 R08: 00007fd887000000 R09: 00007fd886c00000 [ 2978.429955][ T6775] R10: 00007fd886c000c8 R11: 000000000008e4b6 R12: 00000000002d70d2 [ 2978.437967][ T6775] R13: 00007fd8872cfc80 R14: 00007fd8872cfca0 R15: 0000000000000032 [ 2978.445999][ T6775] [ 2978.526009][ T6775] memory: usage 307200kB, limit 307200kB, failcnt 18687 [ 2978.536979][ T6775] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2978.546936][ T6775] Memory cgroup stats for /syz3: [ 2978.547238][ T6775] anon 2899968 [ 2978.547238][ T6775] file 10280960 [ 2978.547238][ T6775] kernel 301391872 [ 2978.547238][ T6775] kernel_stack 851968 [ 2978.547238][ T6775] pagetables 1667072 [ 2978.547238][ T6775] sec_pagetables 0 [ 2978.547238][ T6775] percpu 5136736 [ 2978.547238][ T6775] sock 0 [ 2978.547238][ T6775] vmalloc 0 [ 2978.547238][ T6775] shmem 10280960 [ 2978.547238][ T6775] zswap 0 [ 2978.547238][ T6775] zswapped 0 [ 2978.547238][ T6775] file_mapped 262144 [ 2978.547238][ T6775] file_dirty 0 [ 2978.547238][ T6775] file_writeback 0 [ 2978.547238][ T6775] swapcached 0 [ 2978.547238][ T6775] anon_thp 0 [ 2978.547238][ T6775] file_thp 0 [ 2978.547238][ T6775] shmem_thp 0 [ 2978.547238][ T6775] inactive_anon 2904064 [ 2978.547238][ T6775] active_anon 10276864 [ 2978.547238][ T6775] inactive_file 0 [ 2978.547238][ T6775] active_file 0 [ 2978.547238][ T6775] unevictable 0 [ 2978.547238][ T6775] slab_reclaimable 279872 [ 2978.547238][ T6775] slab_unreclaimable 293023328 [ 2978.685519][ T6775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6775,uid=0 [ 2978.717676][ T6775] Memory cgroup out of memory: Killed process 6775 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000006c0008000a000f"], 0x28}}, 0x0) 10:23:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000005ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:08 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r3, r1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x28, &(0x7f0000000100)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77622a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x78}}}], 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r7, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2978.759986][ T6778] socket: no more sockets 10:23:08 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x4f1c) 10:23:08 executing program 2: socketpair(0xf, 0x0, 0x0, &(0x7f0000001c80)) 10:23:08 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x9effffff00000000}, 0x0) 10:23:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000006ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, 0x0) [ 2978.900666][ T6809] binder: 6800:6809 ioctl c0306201 20001480 returned -14 10:23:08 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002740)={0x6, 0x3, &(0x7f00000015c0)=@framed, &(0x7f0000001640)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000001680)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) [ 2978.946998][ T6809] binder: transaction release 8 bad handle 1, ret = -22 10:23:08 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000007ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netpci0\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x401054d5, 0x0) [ 2979.071204][ T6812] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2979.139801][ T6812] CPU: 0 PID: 6812 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2979.150294][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2979.160392][ T6812] Call Trace: [ 2979.163702][ T6812] [ 2979.166662][ T6812] dump_stack_lvl+0xd1/0x138 [ 2979.171304][ T6812] dump_header+0x10b/0x85f [ 2979.175776][ T6812] oom_kill_process.cold+0x10/0x15 [ 2979.181735][ T6812] out_of_memory+0x35c/0x14a0 10:23:08 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x5865) [ 2979.187265][ T6812] ? find_held_lock+0x2d/0x110 [ 2979.192090][ T6812] ? oom_killer_disable+0x280/0x280 [ 2979.197356][ T6812] ? find_held_lock+0x2d/0x110 [ 2979.202170][ T6812] mem_cgroup_out_of_memory+0x206/0x270 [ 2979.207762][ T6812] ? mem_cgroup_margin+0x130/0x130 [ 2979.212930][ T6812] ? lock_downgrade+0x6e0/0x6e0 [ 2979.217853][ T6812] try_charge_memcg+0xefb/0x12f0 [ 2979.222845][ T6812] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2979.229576][ T6812] ? lock_downgrade+0x6e0/0x6e0 [ 2979.234486][ T6812] charge_memcg+0x90/0x3b0 [ 2979.238954][ T6812] __mem_cgroup_charge+0x2b/0x90 [ 2979.243947][ T6812] do_wp_page+0x7ec/0x3370 [ 2979.248417][ T6812] ? lock_release+0x810/0x810 [ 2979.253122][ T6812] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2979.258539][ T6812] ? do_raw_spin_lock+0x124/0x2b0 [ 2979.263601][ T6812] ? rwlock_bug.part.0+0x90/0x90 [ 2979.268576][ T6812] ? lock_chain_count+0x20/0x20 [ 2979.273464][ T6812] __handle_mm_fault+0x1f58/0x3c90 [ 2979.278625][ T6812] ? vm_iomap_memory+0x190/0x190 [ 2979.283627][ T6812] handle_mm_fault+0x1b6/0x850 [ 2979.288421][ T6812] do_user_addr_fault+0x475/0x1210 [ 2979.293546][ T6812] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2979.299137][ T6812] exc_page_fault+0x98/0x170 [ 2979.303780][ T6812] asm_exc_page_fault+0x26/0x30 [ 2979.308635][ T6812] RIP: 0033:0x7fd887039570 [ 2979.313064][ T6812] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2979.332694][ T6812] RSP: 002b:00007fd8872cfac0 EFLAGS: 00010246 [ 2979.338809][ T6812] RAX: 00000000eadebcff RBX: 00007fd8871ac018 RCX: 0000001b32520000 [ 2979.346827][ T6812] RDX: 0000000000000000 RSI: 0000001b32520018 RDI: 000000000c5b1641 [ 2979.354840][ T6812] RBP: 00000000eadebcff R08: 0000000000001cff R09: 00000000eadebd03 [ 2979.362855][ T6812] R10: 00007fd8872cfc80 R11: 0000000000000246 R12: 00007fd8871a0000 [ 2979.370853][ T6812] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff87bee812 [ 2979.378824][ T6812] ? __sock_create+0x62/0x790 [ 2979.383516][ T6812] [ 2979.432099][ T6812] memory: usage 307184kB, limit 307200kB, failcnt 18795 [ 2979.446270][ T6812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2979.459547][ T6812] Memory cgroup stats for /syz3: [ 2979.459775][ T6812] anon 2883584 [ 2979.459775][ T6812] file 10280960 [ 2979.459775][ T6812] kernel 301391872 [ 2979.459775][ T6812] kernel_stack 851968 [ 2979.459775][ T6812] pagetables 1667072 [ 2979.459775][ T6812] sec_pagetables 0 [ 2979.459775][ T6812] percpu 5136736 [ 2979.459775][ T6812] sock 0 [ 2979.459775][ T6812] vmalloc 0 [ 2979.459775][ T6812] shmem 10280960 [ 2979.459775][ T6812] zswap 0 [ 2979.459775][ T6812] zswapped 0 [ 2979.459775][ T6812] file_mapped 262144 [ 2979.459775][ T6812] file_dirty 0 [ 2979.459775][ T6812] file_writeback 0 [ 2979.459775][ T6812] swapcached 0 [ 2979.459775][ T6812] anon_thp 0 [ 2979.459775][ T6812] file_thp 0 [ 2979.459775][ T6812] shmem_thp 0 [ 2979.459775][ T6812] inactive_anon 2887680 [ 2979.459775][ T6812] active_anon 10276864 [ 2979.459775][ T6812] inactive_file 0 [ 2979.459775][ T6812] active_file 0 [ 2979.459775][ T6812] unevictable 0 [ 2979.459775][ T6812] slab_reclaimable 279872 [ 2979.459775][ T6812] slab_unreclaimable 293023328 10:23:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000740008000a000f"], 0x28}}, 0x0) 10:23:09 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xc00e000000000000}, 0x0) 10:23:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000009ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:09 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r3, r1) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x28, &(0x7f0000000100)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77622a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x78}}}], 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r7, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:09 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x6000) [ 2979.588520][ T6812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6812,uid=0 [ 2979.610885][ T6812] Memory cgroup out of memory: Killed process 6812 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:09 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:23:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000000affffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:09 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000003240)={'bond_slave_0\x00', @link_local}) [ 2979.815646][ T6963] binder: 6961:6963 ioctl c0306201 20001480 returned -14 10:23:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000000bffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2979.946982][ T6968] binder: transaction release 15 bad handle 1, ret = -22 10:23:09 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r3, r1) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x28, &(0x7f0000000100)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77622a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x78}}}], 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r7, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:09 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000003240)={'bond_slave_0\x00', @link_local}) [ 2979.990901][ T6972] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2980.040784][ T6972] CPU: 1 PID: 6972 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2980.051195][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2980.061291][ T6972] Call Trace: [ 2980.064595][ T6972] [ 2980.067560][ T6972] dump_stack_lvl+0xd1/0x138 [ 2980.072194][ T6972] dump_header+0x10b/0x85f [ 2980.076663][ T6972] oom_kill_process.cold+0x10/0x15 [ 2980.081839][ T6972] out_of_memory+0x35c/0x14a0 [ 2980.086576][ T6972] ? find_held_lock+0x2d/0x110 [ 2980.091390][ T6972] ? oom_killer_disable+0x280/0x280 [ 2980.096648][ T6972] ? find_held_lock+0x2d/0x110 [ 2980.101474][ T6972] mem_cgroup_out_of_memory+0x206/0x270 [ 2980.107070][ T6972] ? mem_cgroup_margin+0x130/0x130 [ 2980.112218][ T6972] ? lock_downgrade+0x6e0/0x6e0 [ 2980.117097][ T6972] try_charge_memcg+0xefb/0x12f0 [ 2980.122044][ T6972] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2980.128040][ T6972] ? lock_downgrade+0x6e0/0x6e0 [ 2980.132906][ T6972] charge_memcg+0x90/0x3b0 [ 2980.137325][ T6972] __mem_cgroup_charge+0x2b/0x90 [ 2980.142266][ T6972] do_wp_page+0x7ec/0x3370 [ 2980.147138][ T6972] ? lock_release+0x810/0x810 [ 2980.151898][ T6972] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2980.157278][ T6972] ? do_raw_spin_lock+0x124/0x2b0 [ 2980.162304][ T6972] ? rwlock_bug.part.0+0x90/0x90 [ 2980.167245][ T6972] ? lock_chain_count+0x20/0x20 [ 2980.172107][ T6972] __handle_mm_fault+0x1f58/0x3c90 [ 2980.177239][ T6972] ? vm_iomap_memory+0x190/0x190 [ 2980.182201][ T6972] handle_mm_fault+0x1b6/0x850 [ 2980.186977][ T6972] do_user_addr_fault+0x475/0x1210 [ 2980.192095][ T6972] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2980.197738][ T6972] exc_page_fault+0x98/0x170 [ 2980.202329][ T6972] asm_exc_page_fault+0x26/0x30 [ 2980.207180][ T6972] RIP: 0033:0x7fd887039570 [ 2980.211592][ T6972] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2980.231201][ T6972] RSP: 002b:00007fd8872cfac0 EFLAGS: 00010246 10:23:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000000fffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2980.237269][ T6972] RAX: 00000000e2ddf611 RBX: 00007fd8871ac018 RCX: 0000001b32520000 [ 2980.245238][ T6972] RDX: 0000000000000000 RSI: 0000001b32520018 RDI: 000000000c5ae1f9 [ 2980.253213][ T6972] RBP: 00000000e2ddf611 R08: 0000000000001611 R09: 00000000e2ddf615 [ 2980.261188][ T6972] R10: 00007fd8872cfc80 R11: 0000000000000246 R12: 00007fd8871a0000 [ 2980.269155][ T6972] R13: 0000000000000001 R14: 000000000000001a R15: ffffffff81e5c1af [ 2980.277123][ T6972] ? new_inode_pseudo+0xf/0x80 [ 2980.281910][ T6972] [ 2980.357375][ T6972] memory: usage 307196kB, limit 307200kB, failcnt 18888 [ 2980.376938][ T6990] binder: 6988:6990 ioctl c0306201 20001480 returned -14 [ 2980.392327][ T6972] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2980.405973][ T6989] binder: transaction release 22 bad handle 1, ret = -22 [ 2980.417842][ T6972] Memory cgroup stats for /syz3: [ 2980.418139][ T6972] anon 2895872 [ 2980.418139][ T6972] file 10280960 [ 2980.418139][ T6972] kernel 301391872 [ 2980.418139][ T6972] kernel_stack 851968 [ 2980.418139][ T6972] pagetables 1667072 [ 2980.418139][ T6972] sec_pagetables 0 [ 2980.418139][ T6972] percpu 5136736 [ 2980.418139][ T6972] sock 0 [ 2980.418139][ T6972] vmalloc 0 [ 2980.418139][ T6972] shmem 10280960 [ 2980.418139][ T6972] zswap 0 [ 2980.418139][ T6972] zswapped 0 [ 2980.418139][ T6972] file_mapped 262144 [ 2980.418139][ T6972] file_dirty 0 [ 2980.418139][ T6972] file_writeback 0 [ 2980.418139][ T6972] swapcached 0 [ 2980.418139][ T6972] anon_thp 0 [ 2980.418139][ T6972] file_thp 0 [ 2980.418139][ T6972] shmem_thp 0 [ 2980.418139][ T6972] inactive_anon 2899968 [ 2980.418139][ T6972] active_anon 10276864 [ 2980.418139][ T6972] inactive_file 0 [ 2980.418139][ T6972] active_file 0 [ 2980.418139][ T6972] unevictable 0 [ 2980.418139][ T6972] slab_reclaimable 279872 [ 2980.418139][ T6972] slab_unreclaimable 293023328 [ 2980.565350][ T6972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6972,uid=0 10:23:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="0000230000007a0008000a000f"], 0x28}}, 0x0) 10:23:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, 0x0) 10:23:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000011ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:10 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xd347000000000000}, 0x0) 10:23:10 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x6558) 10:23:10 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) memfd_secret(0x80000) r1 = dup(r0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = memfd_secret(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x14}], 0x1}, 0xd1) lseek(r1, 0x9, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x401000, 0x0, 0x0, 0x41100, 0x5, '\x00', r8, 0x0, r3, 0x8, &(0x7f0000000300)={0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x401, 0x7cd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, r9, r9]}, 0x80) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xcb, 0xfffffffa, 0x7, 0x5, 0x3}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2980.599108][ T6972] Memory cgroup out of memory: Killed process 6972 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:10 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002f40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8933, &(0x7f0000003240)={'bond_slave_0\x00', @link_local}) 10:23:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000013ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2980.876317][ T7001] syz-executor.3 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 10:23:10 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xf0ffffff00000000}, 0x0) 10:23:10 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) memfd_secret(0x80000) r1 = dup(r0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = memfd_secret(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x14}], 0x1}, 0xd1) lseek(r1, 0x9, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x401000, 0x0, 0x0, 0x41100, 0x5, '\x00', r8, 0x0, r3, 0x8, &(0x7f0000000300)={0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x401, 0x7cd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, r9, r9]}, 0x80) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xcb, 0xfffffffa, 0x7, 0x5, 0x3}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) memfd_secret(0x80000) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x14}], 0x1}, 0xd1) (async) lseek(r1, 0x9, 0x3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x401000, 0x0, 0x0, 0x41100, 0x5, '\x00', r8, 0x0, r3, 0x8, &(0x7f0000000300)={0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x401, 0x7cd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, r9, r9]}, 0x80) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xcb, 0xfffffffa, 0x7, 0x5, 0x3}) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:23:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086602, &(0x7f0000000380)={'netpci0\x00'}) 10:23:10 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@fwd={0x4}, @volatile]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000100)=""/231, 0x36, 0xe7, 0x1}, 0x20) [ 2981.016198][ T7001] CPU: 0 PID: 7001 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2981.026622][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2981.036725][ T7001] Call Trace: [ 2981.040046][ T7001] [ 2981.043013][ T7001] dump_stack_lvl+0xd1/0x138 [ 2981.047652][ T7001] dump_header+0x10b/0x85f [ 2981.052120][ T7001] oom_kill_process.cold+0x10/0x15 [ 2981.057272][ T7001] out_of_memory+0x35c/0x14a0 [ 2981.062003][ T7001] ? find_held_lock+0x2d/0x110 [ 2981.066819][ T7001] ? oom_killer_disable+0x280/0x280 [ 2981.072075][ T7001] ? find_held_lock+0x2d/0x110 [ 2981.076902][ T7001] mem_cgroup_out_of_memory+0x206/0x270 [ 2981.082504][ T7001] ? mem_cgroup_margin+0x130/0x130 [ 2981.087654][ T7001] ? lock_downgrade+0x6e0/0x6e0 [ 2981.092527][ T7001] try_charge_memcg+0xefb/0x12f0 [ 2981.097475][ T7001] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2981.103459][ T7001] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2981.109190][ T7001] ? lock_downgrade+0x6e0/0x6e0 [ 2981.114043][ T7001] ? lock_downgrade+0x6e0/0x6e0 [ 2981.118900][ T7001] ? rcu_read_unlock+0x9/0x60 [ 2981.123605][ T7001] obj_cgroup_charge+0x2af/0x5e0 [ 2981.128572][ T7001] ? __alloc_file+0x21/0x270 [ 2981.133190][ T7001] kmem_cache_alloc+0xb5/0x430 [ 2981.137968][ T7001] ? d_instantiate+0x79/0xa0 [ 2981.142567][ T7001] __alloc_file+0x21/0x270 [ 2981.146989][ T7001] alloc_empty_file+0x71/0x170 [ 2981.151763][ T7001] alloc_file+0x59/0x800 [ 2981.156017][ T7001] alloc_file_pseudo+0x169/0x250 [ 2981.160960][ T7001] ? alloc_file+0x800/0x800 [ 2981.165559][ T7001] ? alloc_fd+0x2d8/0x6d0 [ 2981.169896][ T7001] sock_alloc_file+0x53/0x190 [ 2981.174582][ T7001] __sys_socket+0x1a8/0x250 [ 2981.179125][ T7001] ? __sys_socket_file+0x1f0/0x1f0 [ 2981.184297][ T7001] __x64_sys_socket+0x73/0xb0 [ 2981.189014][ T7001] do_syscall_64+0x39/0xb0 [ 2981.193448][ T7001] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2981.199354][ T7001] RIP: 0033:0x7fd88708c0c9 [ 2981.203790][ T7001] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2981.223429][ T7001] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2981.231854][ T7001] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2981.239849][ T7001] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2981.247856][ T7001] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2981.255875][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2981.263874][ T7001] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2981.271873][ T7001] [ 2981.479713][ T7001] memory: usage 307200kB, limit 307200kB, failcnt 18998 [ 2981.500454][ T7001] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2981.510575][ T7001] Memory cgroup stats for /syz3: [ 2981.510812][ T7001] anon 2899968 [ 2981.510812][ T7001] file 10280960 [ 2981.510812][ T7001] kernel 301391872 [ 2981.510812][ T7001] kernel_stack 851968 [ 2981.510812][ T7001] pagetables 1667072 [ 2981.510812][ T7001] sec_pagetables 0 [ 2981.510812][ T7001] percpu 5136736 [ 2981.510812][ T7001] sock 0 [ 2981.510812][ T7001] vmalloc 0 [ 2981.510812][ T7001] shmem 10280960 [ 2981.510812][ T7001] zswap 0 [ 2981.510812][ T7001] zswapped 0 [ 2981.510812][ T7001] file_mapped 262144 [ 2981.510812][ T7001] file_dirty 0 [ 2981.510812][ T7001] file_writeback 0 [ 2981.510812][ T7001] swapcached 0 [ 2981.510812][ T7001] anon_thp 0 [ 2981.510812][ T7001] file_thp 0 [ 2981.510812][ T7001] shmem_thp 0 [ 2981.510812][ T7001] inactive_anon 2904064 [ 2981.510812][ T7001] active_anon 10276864 [ 2981.510812][ T7001] inactive_file 0 [ 2981.510812][ T7001] active_file 0 [ 2981.510812][ T7001] unevictable 0 [ 2981.510812][ T7001] slab_reclaimable 281800 [ 2981.510812][ T7001] slab_unreclaimable 293023328 10:23:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000f00008000a000f"], 0x28}}, 0x0) 10:23:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x118}, 0x48) 10:23:11 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x8100) 10:23:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000001fffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:11 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) memfd_secret(0x80000) r1 = dup(r0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = memfd_secret(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x14}], 0x1}, 0xd1) lseek(r1, 0x9, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x401000, 0x0, 0x0, 0x41100, 0x5, '\x00', r8, 0x0, r3, 0x8, &(0x7f0000000300)={0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x401, 0x7cd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, r9, r9]}, 0x80) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xcb, 0xfffffffa, 0x7, 0x5, 0x3}) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) memfd_secret(0x80000) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x14}], 0x1}, 0xd1) (async) lseek(r1, 0x9, 0x3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x401000, 0x0, 0x0, 0x41100, 0x5, '\x00', r8, 0x0, r3, 0x8, &(0x7f0000000300)={0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x401, 0x7cd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3, r9, r9]}, 0x80) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0xcb, 0xfffffffa, 0x7, 0x5, 0x3}) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:23:11 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xffffff7f00000000}, 0x0) [ 2981.635687][ T7001] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=6994,uid=0 [ 2981.655801][ T7001] Memory cgroup out of memory: Killed process 6994 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', @link_local}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) 10:23:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000020ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) 10:23:11 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) fgetxattr(r1, &(0x7f00000005c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000600)=""/115, 0x73) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c0000000131b9187402730a3f25d3ac7ca685ae4bfbb8c35d9c9640f6c68bde334c1962b83ea45dfb8c6d4b059b3d51364f873164b8b9ec837225783110569c07701bf034902f0b77e66aa8fd322ecb870f1e932c00c20a356d12abe583521f58a9caaad971e05ced2241800d988416ad8ded62e5117ff811cc9f4dc76b1794f129955c74f1dbd817746ef4f7617cdc6b3f915cf9f0c4dba7a4de9e4459afd0dce0be17e9c71c76e4c27a3dd8ddc4b2c44732c49c21aa89f00"/196], &(0x7f00000003c0)=0xc8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={r2, 0x1b, "7d8776838662989ccdc643b7ee023f6bad3dd4f30e9e349a0f77c7"}, &(0x7f0000000480)=0x23) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = memfd_secret(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x40010, r4, 0x8000000) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x2) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) r11 = fsmount(r3, 0x0, 0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x20, 0x0, r11, 0x0, &(0x7f0000000180)='./file0\x00', 0x40, 0x0, 0x1, {0x0, r12}}, 0x19cc) sendmsg$netlink(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) connect$vsock_stream(r13, &(0x7f0000000500)={0x28, 0x0, 0x2710, @host}, 0x10) r14 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r14, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2981.975933][ T7044] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:23:11 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00004e23ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2982.105543][ T7044] CPU: 0 PID: 7044 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2982.115949][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2982.126047][ T7044] Call Trace: [ 2982.129352][ T7044] [ 2982.132302][ T7044] dump_stack_lvl+0xd1/0x138 [ 2982.136929][ T7044] dump_header+0x10b/0x85f [ 2982.141404][ T7044] oom_kill_process.cold+0x10/0x15 [ 2982.146574][ T7044] out_of_memory+0x35c/0x14a0 10:23:11 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) [ 2982.151315][ T7044] ? find_held_lock+0x2d/0x110 [ 2982.156143][ T7044] ? oom_killer_disable+0x280/0x280 [ 2982.161399][ T7044] ? find_held_lock+0x2d/0x110 [ 2982.166213][ T7044] mem_cgroup_out_of_memory+0x206/0x270 [ 2982.171811][ T7044] ? mem_cgroup_margin+0x130/0x130 [ 2982.176961][ T7044] ? lock_downgrade+0x6e0/0x6e0 [ 2982.181865][ T7044] try_charge_memcg+0xefb/0x12f0 [ 2982.186846][ T7044] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2982.192948][ T7044] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2982.198714][ T7044] ? lock_downgrade+0x6e0/0x6e0 [ 2982.203611][ T7044] ? lock_downgrade+0x6e0/0x6e0 [ 2982.208513][ T7044] obj_cgroup_charge+0x2af/0x5e0 [ 2982.213505][ T7044] kmem_cache_alloc_lru+0x145/0x760 [ 2982.218735][ T7044] ? sock_alloc_inode+0x27/0x1d0 [ 2982.223718][ T7044] sock_alloc_inode+0x27/0x1d0 [ 2982.228511][ T7044] ? sock_free_inode+0x30/0x30 [ 2982.233284][ T7044] alloc_inode+0x61/0x230 [ 2982.237623][ T7044] new_inode_pseudo+0x17/0x80 [ 2982.242310][ T7044] sock_alloc+0x40/0x260 [ 2982.246558][ T7044] __sock_create+0xbd/0x790 [ 2982.251078][ T7044] __sys_socket+0x133/0x250 [ 2982.255591][ T7044] ? __sys_socket_file+0x1f0/0x1f0 [ 2982.260720][ T7044] __x64_sys_socket+0x73/0xb0 [ 2982.265403][ T7044] do_syscall_64+0x39/0xb0 [ 2982.269829][ T7044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2982.275732][ T7044] RIP: 0033:0x7fd88708c0c9 [ 2982.280145][ T7044] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2982.299753][ T7044] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2982.308167][ T7044] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2982.316136][ T7044] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2982.324103][ T7044] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2982.332081][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2982.340047][ T7044] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2982.348033][ T7044] [ 2982.435047][ T7044] memory: usage 307200kB, limit 307200kB, failcnt 19124 [ 2982.442159][ T7044] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2982.451669][ T7044] Memory cgroup stats for /syz3: [ 2982.451903][ T7044] anon 2899968 [ 2982.451903][ T7044] file 10280960 [ 2982.451903][ T7044] kernel 301391872 [ 2982.451903][ T7044] kernel_stack 851968 [ 2982.451903][ T7044] pagetables 1667072 [ 2982.451903][ T7044] sec_pagetables 0 [ 2982.451903][ T7044] percpu 5136736 [ 2982.451903][ T7044] sock 0 [ 2982.451903][ T7044] vmalloc 0 [ 2982.451903][ T7044] shmem 10280960 [ 2982.451903][ T7044] zswap 0 [ 2982.451903][ T7044] zswapped 0 [ 2982.451903][ T7044] file_mapped 262144 [ 2982.451903][ T7044] file_dirty 0 [ 2982.451903][ T7044] file_writeback 0 [ 2982.451903][ T7044] swapcached 0 [ 2982.451903][ T7044] anon_thp 0 [ 2982.451903][ T7044] file_thp 0 [ 2982.451903][ T7044] shmem_thp 0 [ 2982.451903][ T7044] inactive_anon 2904064 [ 2982.451903][ T7044] active_anon 10276864 [ 2982.451903][ T7044] inactive_file 0 [ 2982.451903][ T7044] active_file 0 [ 2982.451903][ T7044] unevictable 0 [ 2982.451903][ T7044] slab_reclaimable 279872 [ 2982.451903][ T7044] slab_unreclaimable 293023328 [ 2982.582573][ T7044] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7038,uid=0 [ 2982.607610][ T7044] Memory cgroup out of memory: Killed process 7038 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000308000a000f"], 0x28}}, 0x0) 10:23:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000028ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:12 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xe51b) 10:23:12 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 10:23:12 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0xfffffffffffff000}, 0x0) 10:23:12 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) fgetxattr(r1, &(0x7f00000005c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000600)=""/115, 0x73) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c0000000131b9187402730a3f25d3ac7ca685ae4bfbb8c35d9c9640f6c68bde334c1962b83ea45dfb8c6d4b059b3d51364f873164b8b9ec837225783110569c07701bf034902f0b77e66aa8fd322ecb870f1e932c00c20a356d12abe583521f58a9caaad971e05ced2241800d988416ad8ded62e5117ff811cc9f4dc76b1794f129955c74f1dbd817746ef4f7617cdc6b3f915cf9f0c4dba7a4de9e4459afd0dce0be17e9c71c76e4c27a3dd8ddc4b2c44732c49c21aa89f00"/196], &(0x7f00000003c0)=0xc8) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={r2, 0x1b, "7d8776838662989ccdc643b7ee023f6bad3dd4f30e9e349a0f77c7"}, &(0x7f0000000480)=0x23) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = memfd_secret(0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x40010, r4, 0x8000000) (async) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x2) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) (async) r11 = fsmount(r3, 0x0, 0x0) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x20, 0x0, r11, 0x0, &(0x7f0000000180)='./file0\x00', 0x40, 0x0, 0x1, {0x0, r12}}, 0x19cc) (async, rerun: 32) sendmsg$netlink(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r13 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) connect$vsock_stream(r13, &(0x7f0000000500)={0x28, 0x0, 0x2710, @host}, 0x10) (async) r14 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r14, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2982.647535][ T7044] socket: no more sockets 10:23:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000048ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:12 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) fgetxattr(r1, &(0x7f00000005c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000600)=""/115, 0x73) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c0000000131b9187402730a3f25d3ac7ca685ae4bfbb8c35d9c9640f6c68bde334c1962b83ea45dfb8c6d4b059b3d51364f873164b8b9ec837225783110569c07701bf034902f0b77e66aa8fd322ecb870f1e932c00c20a356d12abe583521f58a9caaad971e05ced2241800d988416ad8ded62e5117ff811cc9f4dc76b1794f129955c74f1dbd817746ef4f7617cdc6b3f915cf9f0c4dba7a4de9e4459afd0dce0be17e9c71c76e4c27a3dd8ddc4b2c44732c49c21aa89f00"/196], &(0x7f00000003c0)=0xc8) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={r2, 0x1b, "7d8776838662989ccdc643b7ee023f6bad3dd4f30e9e349a0f77c7"}, &(0x7f0000000480)=0x23) (async, rerun: 32) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 32) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = memfd_secret(0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x40010, r4, 0x8000000) (async) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x2) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}}, 0x0) r11 = fsmount(r3, 0x0, 0x0) (async, rerun: 32) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r7, r9, &(0x7f00000001c0)=@IORING_OP_MKDIRAT={0x25, 0x20, 0x0, r11, 0x0, &(0x7f0000000180)='./file0\x00', 0x40, 0x0, 0x1, {0x0, r12}}, 0x19cc) (async) sendmsg$netlink(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r13 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) connect$vsock_stream(r13, &(0x7f0000000500)={0x28, 0x0, 0x2710, @host}, 0x10) r14 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r15, r16, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r14, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x1000000}]}}, &(0x7f0000000380)=""/145, 0x26, 0x91, 0x1}, 0x20) 10:23:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000004cffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:12 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x2}, 0x0) [ 2982.988524][ T7080] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:23:12 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2983.061827][ T7080] CPU: 0 PID: 7080 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2983.072236][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2983.082339][ T7080] Call Trace: [ 2983.085654][ T7080] [ 2983.088623][ T7080] dump_stack_lvl+0xd1/0x138 [ 2983.093274][ T7080] dump_header+0x10b/0x85f [ 2983.097747][ T7080] oom_kill_process.cold+0x10/0x15 [ 2983.102922][ T7080] out_of_memory+0x35c/0x14a0 [ 2983.107676][ T7080] ? find_held_lock+0x2d/0x110 [ 2983.112488][ T7080] ? oom_killer_disable+0x280/0x280 [ 2983.117746][ T7080] ? find_held_lock+0x2d/0x110 [ 2983.122559][ T7080] mem_cgroup_out_of_memory+0x206/0x270 [ 2983.128154][ T7080] ? mem_cgroup_margin+0x130/0x130 [ 2983.133317][ T7080] ? lock_downgrade+0x6e0/0x6e0 [ 2983.138319][ T7080] try_charge_memcg+0xefb/0x12f0 [ 2983.143320][ T7080] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2983.149353][ T7080] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2983.155133][ T7080] ? lock_downgrade+0x6e0/0x6e0 [ 2983.160032][ T7080] ? lock_downgrade+0x6e0/0x6e0 [ 2983.164942][ T7080] obj_cgroup_charge+0x2af/0x5e0 [ 2983.169925][ T7080] kmem_cache_alloc_lru+0x145/0x760 [ 2983.175153][ T7080] ? sock_alloc_inode+0x27/0x1d0 [ 2983.180138][ T7080] sock_alloc_inode+0x27/0x1d0 [ 2983.184933][ T7080] ? sock_free_inode+0x30/0x30 [ 2983.189734][ T7080] alloc_inode+0x61/0x230 [ 2983.194111][ T7080] new_inode_pseudo+0x17/0x80 [ 2983.198842][ T7080] sock_alloc+0x40/0x260 [ 2983.203135][ T7080] __sock_create+0xbd/0x790 [ 2983.207689][ T7080] __sys_socket+0x133/0x250 [ 2983.212238][ T7080] ? __sys_socket_file+0x1f0/0x1f0 [ 2983.217413][ T7080] __x64_sys_socket+0x73/0xb0 [ 2983.222127][ T7080] do_syscall_64+0x39/0xb0 [ 2983.226584][ T7080] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2983.232512][ T7080] RIP: 0033:0x7fd88708c0c9 [ 2983.236962][ T7080] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2983.256618][ T7080] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2983.265079][ T7080] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2983.273085][ T7080] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2983.281088][ T7080] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2983.289090][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2983.297095][ T7080] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2983.305129][ T7080] [ 2983.349415][ T7080] memory: usage 307200kB, limit 307200kB, failcnt 19265 [ 2983.365371][ T7080] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2983.372286][ T7080] Memory cgroup stats for /syz3: [ 2983.372507][ T7080] anon 2899968 [ 2983.372507][ T7080] file 10280960 [ 2983.372507][ T7080] kernel 301391872 [ 2983.372507][ T7080] kernel_stack 851968 [ 2983.372507][ T7080] pagetables 1667072 [ 2983.372507][ T7080] sec_pagetables 0 [ 2983.372507][ T7080] percpu 5136736 [ 2983.372507][ T7080] sock 0 [ 2983.372507][ T7080] vmalloc 0 [ 2983.372507][ T7080] shmem 10280960 [ 2983.372507][ T7080] zswap 0 [ 2983.372507][ T7080] zswapped 0 [ 2983.372507][ T7080] file_mapped 262144 [ 2983.372507][ T7080] file_dirty 0 [ 2983.372507][ T7080] file_writeback 0 [ 2983.372507][ T7080] swapcached 0 [ 2983.372507][ T7080] anon_thp 0 [ 2983.372507][ T7080] file_thp 0 [ 2983.372507][ T7080] shmem_thp 0 [ 2983.372507][ T7080] inactive_anon 2904064 [ 2983.372507][ T7080] active_anon 10276864 [ 2983.372507][ T7080] inactive_file 0 [ 2983.372507][ T7080] active_file 0 [ 2983.372507][ T7080] unevictable 0 [ 2983.372507][ T7080] slab_reclaimable 279872 [ 2983.372507][ T7080] slab_unreclaimable 293023328 10:23:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001900000000000c"], &(0x7f0000000100)=""/231, 0x26, 0xe7, 0x1}, 0x20) 10:23:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000508000a000f"], 0x28}}, 0x0) 10:23:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000234effffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:13 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf000) 10:23:13 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:23:13 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x3}, 0x0) [ 2983.508502][ T7080] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7072,uid=0 [ 2983.529144][ T7080] Memory cgroup out of memory: Killed process 7072 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000060ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000080)="b5f6ddf519e00826f6a138ba7f6340343df497d637f6846c808dfbe7124c3fcee5922a35a13af9ba03ac94c9af633638b03c4ae065e834e18773007bd2893eaf8b784fba55370f9353516150129f3d2de5bfb9d0b6c03e74f9ba37db41cb36525811e6bc36986d505a8c60333e74de532174b307bf27656e24583554486b04902e7268bc490f23deb65a56a4a635e04921e2db1eb67f8cc1cf46", 0x9a}, {&(0x7f0000000140)="385d2577c8738c206d166c29b5a365259713968dd44b9295e0e9221cf3c11c736c83300044184c68947b584263c70b8ade81543d98785a814d36afd6a23951bafc7ab0cdce3016e571e1d8bc4a2d3145d31b8b0550a46c981db3610ab22be194d09f32684761fbd690dbdaff3e1e4a1f627b1f8c3cbd4ad15b1aca813fad1bed7ee360450d731422e50b6881965166aaef62df9f4ea84fc0fb005e0d25c7b01b05de022f9213ab2f23666a67882e004c1957", 0xb2}, {&(0x7f0000000200)="53802b6b7c9fa9800533889b0adedb9b2ac8e7279bfda4c24ad3f6468c1fc0dc5923803d7247bbeeed9c", 0x2a}, {&(0x7f0000000240)="1d7fb37073681dd5698d5e78b2c166e5d0f81a7416c66e6f6656325a57f7fe8e985c1bf68419e5b36de4e1a484651fbd0a5944953be3fd3331b6629675e74ac2638c14cf5cc2bbb6e46c11b2f48e6cb7490f430d3bf69dd56ef4b45b780659dead538eb997780b8b9741b2d59bef7ffe6e9852f485d93902f2189e8e06a43f6c2a37be3d227a3923c1f2d93fd38272", 0x8f}, {&(0x7f0000000300)="a2392d184800f454bdd27ac50a24cef6c22b7104fe0cf33fcdf22f43666c5c50bf3e0901d00d6000859e08c6b3ca7fe46c70690cea2964afba98e6f39dd6a8a264a00f6c150d714d535b06eb80b40d36df1f6c6034917341e13a8596c9cf47d2727261be6b931c8aa0aa5d1f361472b1ea11fb5d79f875f44fb79cffab344059c993d55b9cfe5cdc8dda4a3c0015714848d4ca4ed601c2b8b7836cf634", 0x9d}, {&(0x7f00000003c0)="e54f9b72151b4001ccd4514d8ebd1695d5e9c59ee3d83f1b8e842729da3da165fa6092fce5bb7700574a197b8bc94b5801ade6a2ff902fad6f1604cd5bdd004588d44da575370cdf14f2efa62ca7bb04b39db8d6f9ff8251d203645b3fb4b4f5b24006a3d6fdc0eea2c194a043581bc85d58465f61666f1dadbe3aade296781ead2cbe17392a81d5247be2a8caab2db7e3dbe13fcfcf88d80986c04b3317db9c2cb693cf3fef035f779f47f00db06c9e7a6867a04049f329f1c87bfe12", 0xbd}, {&(0x7f0000000480)="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", 0xca2}], 0x7}, 0x0) 10:23:13 executing program 2: utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000001140)={{0x0, 0xfffffffffffffffe}}, 0x0) 10:23:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000a665ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:13 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x4}, 0x0) [ 2983.850908][ T7112] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2983.912073][ T7112] CPU: 0 PID: 7112 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2983.922479][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2983.932571][ T7112] Call Trace: [ 2983.935870][ T7112] [ 2983.938820][ T7112] dump_stack_lvl+0xd1/0x138 [ 2983.943455][ T7112] dump_header+0x10b/0x85f [ 2983.947923][ T7112] oom_kill_process.cold+0x10/0x15 [ 2983.953082][ T7112] out_of_memory+0x35c/0x14a0 [ 2983.957816][ T7112] ? find_held_lock+0x2d/0x110 [ 2983.962627][ T7112] ? oom_killer_disable+0x280/0x280 [ 2983.968050][ T7112] ? find_held_lock+0x2d/0x110 [ 2983.972858][ T7112] mem_cgroup_out_of_memory+0x206/0x270 [ 2983.978447][ T7112] ? mem_cgroup_margin+0x130/0x130 [ 2983.983596][ T7112] ? lock_downgrade+0x6e0/0x6e0 [ 2983.988492][ T7112] try_charge_memcg+0xefb/0x12f0 [ 2983.993473][ T7112] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2983.999491][ T7112] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2984.005255][ T7112] ? lock_downgrade+0x6e0/0x6e0 [ 2984.010110][ T7112] ? lock_downgrade+0x6e0/0x6e0 [ 2984.014974][ T7112] obj_cgroup_charge+0x2af/0x5e0 [ 2984.019928][ T7112] kmem_cache_alloc_lru+0x145/0x760 [ 2984.025125][ T7112] ? sock_alloc_inode+0x27/0x1d0 [ 2984.030076][ T7112] sock_alloc_inode+0x27/0x1d0 [ 2984.034841][ T7112] ? sock_free_inode+0x30/0x30 [ 2984.039608][ T7112] alloc_inode+0x61/0x230 [ 2984.043946][ T7112] new_inode_pseudo+0x17/0x80 [ 2984.048630][ T7112] sock_alloc+0x40/0x260 [ 2984.052879][ T7112] __sock_create+0xbd/0x790 [ 2984.057396][ T7112] __sys_socket+0x133/0x250 [ 2984.061992][ T7112] ? __sys_socket_file+0x1f0/0x1f0 [ 2984.067127][ T7112] __x64_sys_socket+0x73/0xb0 [ 2984.071810][ T7112] do_syscall_64+0x39/0xb0 [ 2984.076240][ T7112] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2984.082137][ T7112] RIP: 0033:0x7fd88708c0c9 [ 2984.086555][ T7112] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2984.106163][ T7112] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2984.114577][ T7112] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2984.122550][ T7112] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2984.130517][ T7112] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2984.138486][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2984.146455][ T7112] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2984.154438][ T7112] 10:23:13 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:13 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1a000) [ 2984.285639][ T7112] memory: usage 307200kB, limit 307200kB, failcnt 19385 [ 2984.298301][ T7112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2984.311846][ T7112] Memory cgroup stats for /syz3: [ 2984.312229][ T7112] anon 2899968 [ 2984.312229][ T7112] file 10280960 [ 2984.312229][ T7112] kernel 301391872 [ 2984.312229][ T7112] kernel_stack 851968 [ 2984.312229][ T7112] pagetables 1667072 [ 2984.312229][ T7112] sec_pagetables 0 [ 2984.312229][ T7112] percpu 5136736 [ 2984.312229][ T7112] sock 0 [ 2984.312229][ T7112] vmalloc 0 [ 2984.312229][ T7112] shmem 10280960 [ 2984.312229][ T7112] zswap 0 [ 2984.312229][ T7112] zswapped 0 [ 2984.312229][ T7112] file_mapped 262144 [ 2984.312229][ T7112] file_dirty 0 [ 2984.312229][ T7112] file_writeback 0 [ 2984.312229][ T7112] swapcached 0 [ 2984.312229][ T7112] anon_thp 0 [ 2984.312229][ T7112] file_thp 0 [ 2984.312229][ T7112] shmem_thp 0 [ 2984.312229][ T7112] inactive_anon 2904064 [ 2984.312229][ T7112] active_anon 10276864 [ 2984.312229][ T7112] inactive_file 0 [ 2984.312229][ T7112] active_file 0 [ 2984.312229][ T7112] unevictable 0 [ 2984.312229][ T7112] slab_reclaimable 279872 [ 2984.312229][ T7112] slab_unreclaimable 293023328 [ 2984.458902][ T7112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7104,uid=0 [ 2984.479937][ T7112] Memory cgroup out of memory: Killed process 7104 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000608000a000f"], 0x28}}, 0x0) 10:23:14 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0) 10:23:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000068ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:14 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2) fstat(r2, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:14 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x6}, 0x0) 10:23:14 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x34000) 10:23:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000006cffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={&(0x7f00000001c0)=@file={0xa}, 0xa, 0x0}, 0x0) 10:23:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 10:23:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000074ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2984.806272][ T7144] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:23:14 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000007affffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:14 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x8}, 0x0) [ 2984.911908][ T7144] CPU: 0 PID: 7144 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2984.922322][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2984.932423][ T7144] Call Trace: [ 2984.935733][ T7144] [ 2984.938700][ T7144] dump_stack_lvl+0xd1/0x138 [ 2984.943342][ T7144] dump_header+0x10b/0x85f [ 2984.947817][ T7144] oom_kill_process.cold+0x10/0x15 [ 2984.952981][ T7144] out_of_memory+0x35c/0x14a0 [ 2984.957711][ T7144] ? find_held_lock+0x2d/0x110 [ 2984.962520][ T7144] ? oom_killer_disable+0x280/0x280 [ 2984.967770][ T7144] ? find_held_lock+0x2d/0x110 [ 2984.972581][ T7144] mem_cgroup_out_of_memory+0x206/0x270 [ 2984.978165][ T7144] ? mem_cgroup_margin+0x130/0x130 [ 2984.983311][ T7144] ? lock_downgrade+0x6e0/0x6e0 [ 2984.988206][ T7144] try_charge_memcg+0xefb/0x12f0 [ 2984.993180][ T7144] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2984.999189][ T7144] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2985.004924][ T7144] ? lock_downgrade+0x6e0/0x6e0 [ 2985.009778][ T7144] ? lock_downgrade+0x6e0/0x6e0 [ 2985.014642][ T7144] obj_cgroup_charge+0x2af/0x5e0 [ 2985.019590][ T7144] kmem_cache_alloc_lru+0x145/0x760 [ 2985.024792][ T7144] ? sock_alloc_inode+0x27/0x1d0 [ 2985.029742][ T7144] sock_alloc_inode+0x27/0x1d0 [ 2985.034508][ T7144] ? sock_free_inode+0x30/0x30 [ 2985.039274][ T7144] alloc_inode+0x61/0x230 [ 2985.043613][ T7144] new_inode_pseudo+0x17/0x80 [ 2985.048304][ T7144] sock_alloc+0x40/0x260 [ 2985.052554][ T7144] __sock_create+0xbd/0x790 [ 2985.057073][ T7144] __sys_socket+0x133/0x250 [ 2985.061581][ T7144] ? __sys_socket_file+0x1f0/0x1f0 [ 2985.066713][ T7144] __x64_sys_socket+0x73/0xb0 [ 2985.071570][ T7144] do_syscall_64+0x39/0xb0 [ 2985.076022][ T7144] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2985.081921][ T7144] RIP: 0033:0x7fd88708c0c9 [ 2985.086336][ T7144] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2985.106032][ T7144] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2985.114446][ T7144] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2985.122415][ T7144] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2985.130391][ T7144] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2985.138358][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2985.146328][ T7144] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2985.154314][ T7144] [ 2985.237742][ T7144] memory: usage 307200kB, limit 307200kB, failcnt 19522 [ 2985.264977][ T7144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2985.297946][ T7144] Memory cgroup stats for /syz3: [ 2985.302407][ T7144] anon 2899968 [ 2985.302407][ T7144] file 10280960 [ 2985.302407][ T7144] kernel 301391872 [ 2985.302407][ T7144] kernel_stack 851968 [ 2985.302407][ T7144] pagetables 1667072 [ 2985.302407][ T7144] sec_pagetables 0 [ 2985.302407][ T7144] percpu 5136736 [ 2985.302407][ T7144] sock 0 [ 2985.302407][ T7144] vmalloc 0 [ 2985.302407][ T7144] shmem 10280960 [ 2985.302407][ T7144] zswap 0 [ 2985.302407][ T7144] zswapped 0 [ 2985.302407][ T7144] file_mapped 262144 [ 2985.302407][ T7144] file_dirty 0 [ 2985.302407][ T7144] file_writeback 0 [ 2985.302407][ T7144] swapcached 0 [ 2985.302407][ T7144] anon_thp 0 [ 2985.302407][ T7144] file_thp 0 [ 2985.302407][ T7144] shmem_thp 0 [ 2985.302407][ T7144] inactive_anon 2904064 [ 2985.302407][ T7144] active_anon 10276864 [ 2985.302407][ T7144] inactive_file 0 [ 2985.302407][ T7144] active_file 0 [ 2985.302407][ T7144] unevictable 0 [ 2985.302407][ T7144] slab_reclaimable 279872 [ 2985.302407][ T7144] slab_unreclaimable 293023328 10:23:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000708000a000f"], 0x28}}, 0x0) 10:23:15 executing program 2: sendmsg$tipc(0xffffffffffffffff, 0x0, 0xfa09154ca500cba) 10:23:15 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x400300) 10:23:15 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2) fstat(r2, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2) (async) fstat(r2, &(0x7f0000000180)) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:23:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000065a6ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:15 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x9}, 0x0) [ 2985.446769][ T7144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7143,uid=0 [ 2985.466981][ T7144] Memory cgroup out of memory: Killed process 7143 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:15 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @remote, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @remote, "", @remote, "99c5d11dfab0fd0a8ee55fae4fdef452"}}}}, 0x0) 10:23:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000000f0ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000700)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[{0x10}], 0x10}, 0x0) 10:23:15 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000002ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2985.771592][ T7180] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:23:15 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x800000) 10:23:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x1, &(0x7f0000000040)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc) [ 2985.897910][ T7180] CPU: 1 PID: 7180 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2985.908320][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2985.918418][ T7180] Call Trace: [ 2985.921726][ T7180] [ 2985.924681][ T7180] dump_stack_lvl+0xd1/0x138 [ 2985.929323][ T7180] dump_header+0x10b/0x85f [ 2985.933791][ T7180] oom_kill_process.cold+0x10/0x15 [ 2985.938961][ T7180] out_of_memory+0x35c/0x14a0 [ 2985.943713][ T7180] ? find_held_lock+0x2d/0x110 [ 2985.948532][ T7180] ? oom_killer_disable+0x280/0x280 [ 2985.953794][ T7180] ? find_held_lock+0x2d/0x110 [ 2985.958705][ T7180] mem_cgroup_out_of_memory+0x206/0x270 [ 2985.964353][ T7180] ? mem_cgroup_margin+0x130/0x130 [ 2985.969510][ T7180] ? lock_downgrade+0x6e0/0x6e0 [ 2985.974414][ T7180] try_charge_memcg+0xefb/0x12f0 [ 2985.979392][ T7180] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2985.985408][ T7180] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2985.991173][ T7180] ? lock_downgrade+0x6e0/0x6e0 [ 2985.996069][ T7180] ? lock_downgrade+0x6e0/0x6e0 [ 2986.000974][ T7180] obj_cgroup_charge+0x2af/0x5e0 [ 2986.005956][ T7180] kmem_cache_alloc_lru+0x145/0x760 [ 2986.011181][ T7180] ? sock_alloc_inode+0x27/0x1d0 [ 2986.016139][ T7180] sock_alloc_inode+0x27/0x1d0 [ 2986.020910][ T7180] ? sock_free_inode+0x30/0x30 [ 2986.025691][ T7180] alloc_inode+0x61/0x230 [ 2986.030032][ T7180] new_inode_pseudo+0x17/0x80 [ 2986.034725][ T7180] sock_alloc+0x40/0x260 [ 2986.038990][ T7180] __sock_create+0xbd/0x790 [ 2986.043515][ T7180] __sys_socket+0x133/0x250 [ 2986.048045][ T7180] ? __sys_socket_file+0x1f0/0x1f0 [ 2986.053182][ T7180] __x64_sys_socket+0x73/0xb0 [ 2986.057879][ T7180] do_syscall_64+0x39/0xb0 [ 2986.062304][ T7180] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2986.068204][ T7180] RIP: 0033:0x7fd88708c0c9 [ 2986.072627][ T7180] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2986.092262][ T7180] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2986.100689][ T7180] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2986.108670][ T7180] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2986.116647][ T7180] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2986.124623][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2986.132592][ T7180] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2986.140578][ T7180] [ 2986.281339][ T7180] memory: usage 307200kB, limit 307200kB, failcnt 19645 [ 2986.300561][ T7180] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2986.320004][ T7180] Memory cgroup stats for /syz3: [ 2986.320222][ T7180] anon 2899968 [ 2986.320222][ T7180] file 10280960 [ 2986.320222][ T7180] kernel 301391872 [ 2986.320222][ T7180] kernel_stack 851968 [ 2986.320222][ T7180] pagetables 1667072 [ 2986.320222][ T7180] sec_pagetables 0 [ 2986.320222][ T7180] percpu 5136736 [ 2986.320222][ T7180] sock 0 [ 2986.320222][ T7180] vmalloc 0 [ 2986.320222][ T7180] shmem 10280960 [ 2986.320222][ T7180] zswap 0 [ 2986.320222][ T7180] zswapped 0 [ 2986.320222][ T7180] file_mapped 262144 [ 2986.320222][ T7180] file_dirty 0 [ 2986.320222][ T7180] file_writeback 0 [ 2986.320222][ T7180] swapcached 0 [ 2986.320222][ T7180] anon_thp 0 [ 2986.320222][ T7180] file_thp 0 [ 2986.320222][ T7180] shmem_thp 0 [ 2986.320222][ T7180] inactive_anon 2904064 [ 2986.320222][ T7180] active_anon 10276864 [ 2986.320222][ T7180] inactive_file 0 [ 2986.320222][ T7180] active_file 0 [ 2986.320222][ T7180] unevictable 0 [ 2986.320222][ T7180] slab_reclaimable 279872 [ 2986.320222][ T7180] slab_unreclaimable 293023328 10:23:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000000908000a000f"], 0x28}}, 0x0) 10:23:16 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2) fstat(r2, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10}, 0x10) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0) (async) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2) (async) fstat(r2, &(0x7f0000000180)) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:23:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000003ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:16 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xa}, 0x0) 10:23:16 executing program 2: semop(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) 10:23:16 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xa00100) [ 2986.470407][ T7180] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7174,uid=0 [ 2986.496612][ T7180] Memory cgroup out of memory: Killed process 7174 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:16 executing program 2: linkat(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 10:23:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000004ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:16 executing program 2: setrlimit(0x1, &(0x7f0000000000)={0x0, 0xfffffffffffffffc}) 10:23:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000005ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:16 executing program 2: semget(0x0, 0x154, 0x207) syz_extract_tcp_res(&(0x7f0000000000), 0x6, 0x3561) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) syz_extract_tcp_res$synack(0xffffffffffffffff, 0x1, 0x0) 10:23:16 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xc}, 0x0) [ 2986.910571][ T7219] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2986.980853][ T7219] CPU: 1 PID: 7219 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2986.991261][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2987.001348][ T7219] Call Trace: [ 2987.004913][ T7219] [ 2987.007862][ T7219] dump_stack_lvl+0xd1/0x138 [ 2987.012512][ T7219] dump_header+0x10b/0x85f [ 2987.016964][ T7219] oom_kill_process.cold+0x10/0x15 [ 2987.022094][ T7219] out_of_memory+0x35c/0x14a0 [ 2987.026790][ T7219] ? find_held_lock+0x2d/0x110 [ 2987.031569][ T7219] ? oom_killer_disable+0x280/0x280 [ 2987.036784][ T7219] ? find_held_lock+0x2d/0x110 [ 2987.041561][ T7219] mem_cgroup_out_of_memory+0x206/0x270 [ 2987.047128][ T7219] ? mem_cgroup_margin+0x130/0x130 [ 2987.052246][ T7219] ? lock_downgrade+0x6e0/0x6e0 [ 2987.057115][ T7219] try_charge_memcg+0xefb/0x12f0 [ 2987.062065][ T7219] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2987.068056][ T7219] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2987.073796][ T7219] ? lock_downgrade+0x6e0/0x6e0 [ 2987.078660][ T7219] ? lock_downgrade+0x6e0/0x6e0 [ 2987.083617][ T7219] obj_cgroup_charge+0x2af/0x5e0 [ 2987.088578][ T7219] kmem_cache_alloc_lru+0x145/0x760 [ 2987.093782][ T7219] ? sock_alloc_inode+0x27/0x1d0 [ 2987.098748][ T7219] sock_alloc_inode+0x27/0x1d0 [ 2987.103520][ T7219] ? sock_free_inode+0x30/0x30 [ 2987.108300][ T7219] alloc_inode+0x61/0x230 [ 2987.112643][ T7219] new_inode_pseudo+0x17/0x80 [ 2987.117343][ T7219] sock_alloc+0x40/0x260 [ 2987.121598][ T7219] __sock_create+0xbd/0x790 [ 2987.126120][ T7219] __sys_socket+0x133/0x250 [ 2987.130630][ T7219] ? __sys_socket_file+0x1f0/0x1f0 [ 2987.135758][ T7219] __x64_sys_socket+0x73/0xb0 [ 2987.140445][ T7219] do_syscall_64+0x39/0xb0 [ 2987.144878][ T7219] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2987.150789][ T7219] RIP: 0033:0x7fd88708c0c9 [ 2987.155205][ T7219] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2987.174822][ T7219] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2987.183257][ T7219] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2987.191238][ T7219] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2987.199232][ T7219] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2987.207377][ T7219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2987.215347][ T7219] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2987.223353][ T7219] [ 2987.440025][ T7219] memory: usage 307200kB, limit 307200kB, failcnt 19754 [ 2987.451072][ T7219] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2987.461198][ T7219] Memory cgroup stats for /syz3: [ 2987.461411][ T7219] anon 2899968 [ 2987.461411][ T7219] file 10280960 [ 2987.461411][ T7219] kernel 301391872 [ 2987.461411][ T7219] kernel_stack 851968 [ 2987.461411][ T7219] pagetables 1667072 [ 2987.461411][ T7219] sec_pagetables 0 [ 2987.461411][ T7219] percpu 5136736 [ 2987.461411][ T7219] sock 0 [ 2987.461411][ T7219] vmalloc 0 [ 2987.461411][ T7219] shmem 10280960 [ 2987.461411][ T7219] zswap 0 [ 2987.461411][ T7219] zswapped 0 [ 2987.461411][ T7219] file_mapped 262144 [ 2987.461411][ T7219] file_dirty 0 [ 2987.461411][ T7219] file_writeback 0 [ 2987.461411][ T7219] swapcached 0 [ 2987.461411][ T7219] anon_thp 0 [ 2987.461411][ T7219] file_thp 0 [ 2987.461411][ T7219] shmem_thp 0 [ 2987.461411][ T7219] inactive_anon 2904064 [ 2987.461411][ T7219] active_anon 10276864 [ 2987.461411][ T7219] inactive_file 0 [ 2987.461411][ T7219] active_file 0 [ 2987.461411][ T7219] unevictable 0 [ 2987.461411][ T7219] slab_reclaimable 279872 [ 2987.461411][ T7219] slab_unreclaimable 293023328 10:23:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000411108000a000f"], 0x28}}, 0x0) 10:23:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x28a}, 0x98) 10:23:17 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='svc_xprt_enqueue\x00', r2}, 0x10) 10:23:17 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf0ffff) 10:23:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000006ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:17 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xe}, 0x0) [ 2987.582362][ T7219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7209,uid=0 [ 2987.605644][ T7219] Memory cgroup out of memory: Killed process 7209 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000007ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:17 executing program 2: setrlimit(0x4, &(0x7f0000000080)={0x35fa25a8}) 10:23:17 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e, 0x0, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='svc_xprt_enqueue\x00', r2}, 0x10) (rerun: 64) 10:23:17 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000008ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:17 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0x8, 0x1}, 0x8) 10:23:17 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x7784, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e, 0x0, 0x1}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='svc_xprt_enqueue\x00', r2}, 0x10) [ 2987.881338][ T7244] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2988.035506][ T7244] CPU: 0 PID: 7244 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2988.045898][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2988.055945][ T7244] Call Trace: [ 2988.059214][ T7244] [ 2988.062137][ T7244] dump_stack_lvl+0xd1/0x138 [ 2988.066728][ T7244] dump_header+0x10b/0x85f [ 2988.071143][ T7244] oom_kill_process.cold+0x10/0x15 [ 2988.076261][ T7244] out_of_memory+0x35c/0x14a0 [ 2988.080944][ T7244] ? find_held_lock+0x2d/0x110 [ 2988.085709][ T7244] ? oom_killer_disable+0x280/0x280 [ 2988.090923][ T7244] ? find_held_lock+0x2d/0x110 [ 2988.095705][ T7244] mem_cgroup_out_of_memory+0x206/0x270 [ 2988.101289][ T7244] ? mem_cgroup_margin+0x130/0x130 [ 2988.106437][ T7244] ? lock_downgrade+0x6e0/0x6e0 [ 2988.111329][ T7244] try_charge_memcg+0xefb/0x12f0 [ 2988.116305][ T7244] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2988.123111][ T7244] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2988.128865][ T7244] ? lock_downgrade+0x6e0/0x6e0 [ 2988.133882][ T7244] ? lock_downgrade+0x6e0/0x6e0 [ 2988.138728][ T7244] obj_cgroup_charge+0x2af/0x5e0 [ 2988.143678][ T7244] kmem_cache_alloc_lru+0x145/0x760 [ 2988.148900][ T7244] ? sock_alloc_inode+0x27/0x1d0 [ 2988.153881][ T7244] sock_alloc_inode+0x27/0x1d0 [ 2988.158669][ T7244] ? sock_free_inode+0x30/0x30 [ 2988.163445][ T7244] alloc_inode+0x61/0x230 [ 2988.167783][ T7244] new_inode_pseudo+0x17/0x80 [ 2988.172467][ T7244] sock_alloc+0x40/0x260 [ 2988.176716][ T7244] __sock_create+0xbd/0x790 [ 2988.181235][ T7244] __sys_socket+0x133/0x250 [ 2988.185746][ T7244] ? __sys_socket_file+0x1f0/0x1f0 [ 2988.190871][ T7244] __x64_sys_socket+0x73/0xb0 [ 2988.195615][ T7244] do_syscall_64+0x39/0xb0 [ 2988.200062][ T7244] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2988.205970][ T7244] RIP: 0033:0x7fd88708c0c9 [ 2988.210395][ T7244] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2988.230039][ T7244] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2988.238471][ T7244] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2988.246444][ T7244] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2988.254411][ T7244] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2988.262393][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2988.270363][ T7244] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2988.278351][ T7244] [ 2988.351486][ T7244] memory: usage 307200kB, limit 307200kB, failcnt 19836 [ 2988.368317][ T7244] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2988.380701][ T7244] Memory cgroup stats for /syz3: [ 2988.380820][ T7244] anon 2899968 [ 2988.380820][ T7244] file 10280960 [ 2988.380820][ T7244] kernel 301391872 [ 2988.380820][ T7244] kernel_stack 851968 [ 2988.380820][ T7244] pagetables 1667072 [ 2988.380820][ T7244] sec_pagetables 0 [ 2988.380820][ T7244] percpu 5136736 [ 2988.380820][ T7244] sock 0 [ 2988.380820][ T7244] vmalloc 0 [ 2988.380820][ T7244] shmem 10280960 [ 2988.380820][ T7244] zswap 0 [ 2988.380820][ T7244] zswapped 0 [ 2988.380820][ T7244] file_mapped 262144 [ 2988.380820][ T7244] file_dirty 0 [ 2988.380820][ T7244] file_writeback 0 [ 2988.380820][ T7244] swapcached 0 [ 2988.380820][ T7244] anon_thp 0 [ 2988.380820][ T7244] file_thp 0 [ 2988.380820][ T7244] shmem_thp 0 [ 2988.380820][ T7244] inactive_anon 2904064 [ 2988.380820][ T7244] active_anon 10276864 [ 2988.380820][ T7244] inactive_file 0 [ 2988.380820][ T7244] active_file 0 [ 2988.380820][ T7244] unevictable 0 [ 2988.380820][ T7244] slab_reclaimable 279872 [ 2988.380820][ T7244] slab_unreclaimable 293023328 10:23:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000241208000a000f"], 0x28}}, 0x0) 10:23:18 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xf}, 0x0) 10:23:18 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x1000000) 10:23:18 executing program 2: accept4$inet(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) 10:23:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000009ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:18 executing program 5: getrlimit(0x0, 0xfffffffffffffffc) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r3 = signalfd4(r1, &(0x7f0000000180)={[0x5]}, 0x8, 0x0) dup(r3) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f00000001c0)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2988.532345][ T7244] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7242,uid=0 [ 2988.556584][ T7244] Memory cgroup out of memory: Killed process 7242 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:18 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x0) 10:23:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000000affffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:18 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) 10:23:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000000bffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:18 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x10}, 0x0) 10:23:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080)={0xffffffffffffffff}, 0x10) [ 2988.890081][ T7274] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2988.956295][ T7274] CPU: 1 PID: 7274 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2988.966696][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2988.976771][ T7274] Call Trace: [ 2988.980055][ T7274] [ 2988.982987][ T7274] dump_stack_lvl+0xd1/0x138 [ 2988.987593][ T7274] dump_header+0x10b/0x85f [ 2988.992029][ T7274] oom_kill_process.cold+0x10/0x15 [ 2988.997152][ T7274] out_of_memory+0x35c/0x14a0 [ 2989.001843][ T7274] ? find_held_lock+0x2d/0x110 [ 2989.006620][ T7274] ? oom_killer_disable+0x280/0x280 [ 2989.011840][ T7274] ? find_held_lock+0x2d/0x110 [ 2989.016616][ T7274] mem_cgroup_out_of_memory+0x206/0x270 [ 2989.022177][ T7274] ? mem_cgroup_margin+0x130/0x130 [ 2989.027293][ T7274] ? lock_downgrade+0x6e0/0x6e0 [ 2989.032154][ T7274] try_charge_memcg+0xefb/0x12f0 [ 2989.037099][ T7274] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2989.043080][ T7274] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2989.048812][ T7274] ? lock_downgrade+0x6e0/0x6e0 [ 2989.053668][ T7274] ? lock_downgrade+0x6e0/0x6e0 [ 2989.058535][ T7274] obj_cgroup_charge+0x2af/0x5e0 [ 2989.063655][ T7274] kmem_cache_alloc_lru+0x145/0x760 [ 2989.068854][ T7274] ? sock_alloc_inode+0x27/0x1d0 [ 2989.073803][ T7274] sock_alloc_inode+0x27/0x1d0 [ 2989.079787][ T7274] ? sock_free_inode+0x30/0x30 [ 2989.084551][ T7274] alloc_inode+0x61/0x230 [ 2989.088889][ T7274] new_inode_pseudo+0x17/0x80 [ 2989.093573][ T7274] sock_alloc+0x40/0x260 [ 2989.097820][ T7274] __sock_create+0xbd/0x790 [ 2989.102343][ T7274] __sys_socket+0x133/0x250 [ 2989.106851][ T7274] ? __sys_socket_file+0x1f0/0x1f0 [ 2989.111987][ T7274] __x64_sys_socket+0x73/0xb0 [ 2989.116672][ T7274] do_syscall_64+0x39/0xb0 [ 2989.121097][ T7274] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2989.126990][ T7274] RIP: 0033:0x7fd88708c0c9 [ 2989.131404][ T7274] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2989.151017][ T7274] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2989.159432][ T7274] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2989.167403][ T7274] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2989.175371][ T7274] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2989.183340][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2989.191309][ T7274] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2989.199291][ T7274] [ 2989.349312][ T7274] memory: usage 307200kB, limit 307200kB, failcnt 19933 [ 2989.439441][ T7274] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2989.450049][ T7274] Memory cgroup stats for /syz3: [ 2989.450250][ T7274] anon 2899968 [ 2989.450250][ T7274] file 10280960 [ 2989.450250][ T7274] kernel 301391872 [ 2989.450250][ T7274] kernel_stack 851968 [ 2989.450250][ T7274] pagetables 1667072 [ 2989.450250][ T7274] sec_pagetables 0 [ 2989.450250][ T7274] percpu 5136736 [ 2989.450250][ T7274] sock 0 [ 2989.450250][ T7274] vmalloc 0 [ 2989.450250][ T7274] shmem 10280960 [ 2989.450250][ T7274] zswap 0 [ 2989.450250][ T7274] zswapped 0 [ 2989.450250][ T7274] file_mapped 262144 [ 2989.450250][ T7274] file_dirty 0 [ 2989.450250][ T7274] file_writeback 0 [ 2989.450250][ T7274] swapcached 0 [ 2989.450250][ T7274] anon_thp 0 [ 2989.450250][ T7274] file_thp 0 [ 2989.450250][ T7274] shmem_thp 0 [ 2989.450250][ T7274] inactive_anon 2904064 [ 2989.450250][ T7274] active_anon 10276864 [ 2989.450250][ T7274] inactive_file 0 [ 2989.450250][ T7274] active_file 0 [ 2989.450250][ T7274] unevictable 0 [ 2989.450250][ T7274] slab_reclaimable 279872 [ 2989.450250][ T7274] slab_unreclaimable 293023328 10:23:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000001f08000a000f"], 0x28}}, 0x0) 10:23:19 executing program 5: getrlimit(0x0, 0xfffffffffffffffc) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r3 = signalfd4(r1, &(0x7f0000000180)={[0x5]}, 0x8, 0x0) dup(r3) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f00000001c0)=0x6) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000000fffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:19 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2000000) 10:23:19 executing program 2: select(0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0x2}) 10:23:19 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x60}, 0x0) [ 2989.590939][ T7274] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7270,uid=0 [ 2989.611529][ T7274] Memory cgroup out of memory: Killed process 7270 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:19 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000040), 0x4) 10:23:19 executing program 5: getrlimit(0x0, 0xfffffffffffffffc) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) r3 = signalfd4(r1, &(0x7f0000000180)={[0x5]}, 0x8, 0x0) dup(r3) (async, rerun: 64) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f00000001c0)=0x6) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (rerun: 32) io_uring_enter(r4, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000010ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:19 executing program 2: mlock(&(0x7f0000491000/0x2000)=nil, 0x2000) munlock(&(0x7f0000491000/0x4000)=nil, 0x4000) msync(&(0x7f0000491000/0x2000)=nil, 0x2000, 0x4) 10:23:19 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xf0}, 0x0) 10:23:19 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000011ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2989.891019][ T7306] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2990.038347][ T7306] CPU: 1 PID: 7306 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2990.048765][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2990.058837][ T7306] Call Trace: [ 2990.062119][ T7306] [ 2990.065058][ T7306] dump_stack_lvl+0xd1/0x138 [ 2990.069676][ T7306] dump_header+0x10b/0x85f [ 2990.074115][ T7306] oom_kill_process.cold+0x10/0x15 [ 2990.079251][ T7306] out_of_memory+0x35c/0x14a0 [ 2990.083952][ T7306] ? find_held_lock+0x2d/0x110 [ 2990.088738][ T7306] ? oom_killer_disable+0x280/0x280 [ 2990.093960][ T7306] ? find_held_lock+0x2d/0x110 [ 2990.098751][ T7306] mem_cgroup_out_of_memory+0x206/0x270 [ 2990.104318][ T7306] ? mem_cgroup_margin+0x130/0x130 [ 2990.109447][ T7306] ? lock_downgrade+0x6e0/0x6e0 [ 2990.114330][ T7306] try_charge_memcg+0xefb/0x12f0 [ 2990.119291][ T7306] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2990.125273][ T7306] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2990.131004][ T7306] ? lock_downgrade+0x6e0/0x6e0 [ 2990.135860][ T7306] ? lock_downgrade+0x6e0/0x6e0 [ 2990.140722][ T7306] obj_cgroup_charge+0x2af/0x5e0 [ 2990.145671][ T7306] kmem_cache_alloc_lru+0x145/0x760 [ 2990.150867][ T7306] ? sock_alloc_inode+0x27/0x1d0 [ 2990.155907][ T7306] sock_alloc_inode+0x27/0x1d0 [ 2990.160677][ T7306] ? sock_free_inode+0x30/0x30 [ 2990.165452][ T7306] alloc_inode+0x61/0x230 [ 2990.171281][ T7306] new_inode_pseudo+0x17/0x80 [ 2990.176142][ T7306] sock_alloc+0x40/0x260 [ 2990.180395][ T7306] __sock_create+0xbd/0x790 [ 2990.184927][ T7306] __sys_socket+0x133/0x250 [ 2990.189448][ T7306] ? __sys_socket_file+0x1f0/0x1f0 [ 2990.194589][ T7306] __x64_sys_socket+0x73/0xb0 [ 2990.199305][ T7306] do_syscall_64+0x39/0xb0 [ 2990.203757][ T7306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2990.209698][ T7306] RIP: 0033:0x7fd88708c0c9 [ 2990.214214][ T7306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2990.233828][ T7306] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2990.242278][ T7306] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2990.250270][ T7306] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2990.258334][ T7306] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2990.266323][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2990.274291][ T7306] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2990.282321][ T7306] [ 2990.418196][ T7306] memory: usage 307200kB, limit 307200kB, failcnt 20034 [ 2990.452280][ T7306] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2990.481345][ T7306] Memory cgroup stats for /syz3: [ 2990.481576][ T7306] anon 2899968 [ 2990.481576][ T7306] file 10280960 [ 2990.481576][ T7306] kernel 301391872 [ 2990.481576][ T7306] kernel_stack 851968 [ 2990.481576][ T7306] pagetables 1667072 [ 2990.481576][ T7306] sec_pagetables 0 [ 2990.481576][ T7306] percpu 5136736 [ 2990.481576][ T7306] sock 0 [ 2990.481576][ T7306] vmalloc 0 [ 2990.481576][ T7306] shmem 10280960 [ 2990.481576][ T7306] zswap 0 [ 2990.481576][ T7306] zswapped 0 [ 2990.481576][ T7306] file_mapped 262144 [ 2990.481576][ T7306] file_dirty 0 [ 2990.481576][ T7306] file_writeback 0 [ 2990.481576][ T7306] swapcached 0 [ 2990.481576][ T7306] anon_thp 0 [ 2990.481576][ T7306] file_thp 0 [ 2990.481576][ T7306] shmem_thp 0 [ 2990.481576][ T7306] inactive_anon 2904064 [ 2990.481576][ T7306] active_anon 10276864 [ 2990.481576][ T7306] inactive_file 0 [ 2990.481576][ T7306] active_file 0 [ 2990.481576][ T7306] unevictable 0 [ 2990.481576][ T7306] slab_reclaimable 279872 [ 2990.481576][ T7306] slab_unreclaimable 293023328 [ 2990.609359][ T7306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7301,uid=0 10:23:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000002008000a000f"], 0x28}}, 0x0) 10:23:20 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240)={0x0, 0xfffffffd}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:20 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x3000000) 10:23:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000013ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:20 executing program 2: faccessat(0xffffffffffffffff, 0x0, 0x0) 10:23:20 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x300}, 0x0) [ 2990.639996][ T7306] Memory cgroup out of memory: Killed process 7301 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x1, 0x0, &(0x7f0000000140)) 10:23:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000048ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 10:23:20 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x600}, 0x0) [ 2990.874292][ T7335] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 10:23:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000004cffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:20 executing program 2: syz_emit_ethernet(0x9f, &(0x7f0000000000)={@remote, @empty, @val, {@ipv6}}, 0x0) [ 2991.006829][ T7335] CPU: 1 PID: 7335 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2991.017238][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2991.027331][ T7335] Call Trace: [ 2991.030615][ T7335] [ 2991.033550][ T7335] dump_stack_lvl+0xd1/0x138 [ 2991.038170][ T7335] dump_header+0x10b/0x85f [ 2991.042609][ T7335] oom_kill_process.cold+0x10/0x15 [ 2991.047744][ T7335] out_of_memory+0x35c/0x14a0 [ 2991.052438][ T7335] ? find_held_lock+0x2d/0x110 [ 2991.057217][ T7335] ? oom_killer_disable+0x280/0x280 [ 2991.062428][ T7335] ? find_held_lock+0x2d/0x110 [ 2991.067206][ T7335] mem_cgroup_out_of_memory+0x206/0x270 [ 2991.072770][ T7335] ? mem_cgroup_margin+0x130/0x130 [ 2991.077904][ T7335] ? lock_downgrade+0x6e0/0x6e0 [ 2991.082782][ T7335] try_charge_memcg+0xefb/0x12f0 [ 2991.087741][ T7335] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2991.093732][ T7335] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2991.099479][ T7335] ? lock_downgrade+0x6e0/0x6e0 [ 2991.104340][ T7335] ? lock_downgrade+0x6e0/0x6e0 [ 2991.109209][ T7335] obj_cgroup_charge+0x2af/0x5e0 [ 2991.114162][ T7335] kmem_cache_alloc_lru+0x145/0x760 [ 2991.119370][ T7335] ? sock_alloc_inode+0x27/0x1d0 [ 2991.124323][ T7335] sock_alloc_inode+0x27/0x1d0 [ 2991.129089][ T7335] ? sock_free_inode+0x30/0x30 [ 2991.133853][ T7335] alloc_inode+0x61/0x230 [ 2991.138191][ T7335] new_inode_pseudo+0x17/0x80 [ 2991.142878][ T7335] sock_alloc+0x40/0x260 [ 2991.147127][ T7335] __sock_create+0xbd/0x790 [ 2991.151640][ T7335] __sys_socket+0x133/0x250 [ 2991.156147][ T7335] ? __sys_socket_file+0x1f0/0x1f0 [ 2991.161276][ T7335] __x64_sys_socket+0x73/0xb0 [ 2991.165960][ T7335] do_syscall_64+0x39/0xb0 [ 2991.170384][ T7335] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2991.176277][ T7335] RIP: 0033:0x7fd88708c0c9 [ 2991.180689][ T7335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2991.200299][ T7335] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2991.208716][ T7335] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2991.216684][ T7335] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2991.224672][ T7335] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2991.232675][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2991.240688][ T7335] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2991.248699][ T7335] [ 2991.420303][ T7335] memory: usage 307200kB, limit 307200kB, failcnt 20120 [ 2991.504283][ T7335] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2991.512075][ T7335] Memory cgroup stats for /syz3: [ 2991.512245][ T7335] anon 2899968 [ 2991.512245][ T7335] file 10280960 [ 2991.512245][ T7335] kernel 301391872 [ 2991.512245][ T7335] kernel_stack 851968 [ 2991.512245][ T7335] pagetables 1667072 [ 2991.512245][ T7335] sec_pagetables 0 [ 2991.512245][ T7335] percpu 5136736 [ 2991.512245][ T7335] sock 0 [ 2991.512245][ T7335] vmalloc 0 [ 2991.512245][ T7335] shmem 10280960 [ 2991.512245][ T7335] zswap 0 [ 2991.512245][ T7335] zswapped 0 [ 2991.512245][ T7335] file_mapped 262144 [ 2991.512245][ T7335] file_dirty 0 [ 2991.512245][ T7335] file_writeback 0 [ 2991.512245][ T7335] swapcached 0 [ 2991.512245][ T7335] anon_thp 0 [ 2991.512245][ T7335] file_thp 0 [ 2991.512245][ T7335] shmem_thp 0 [ 2991.512245][ T7335] inactive_anon 2904064 [ 2991.512245][ T7335] active_anon 10276864 [ 2991.512245][ T7335] inactive_file 0 [ 2991.512245][ T7335] active_file 0 [ 2991.512245][ T7335] unevictable 0 [ 2991.512245][ T7335] slab_reclaimable 279872 [ 2991.512245][ T7335] slab_unreclaimable 293023328 [ 2991.638283][ T7335] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7332,uid=0 10:23:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000002408000a000f"], 0x28}}, 0x0) 10:23:21 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240)={0x0, 0xfffffffd}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f00000004c0)={@multicast1, @local={0xac, 0x14, 0x0}}, 0xc) 10:23:21 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x4000000) 10:23:21 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x900}, 0x0) 10:23:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000060ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2991.670711][ T7335] Memory cgroup out of memory: Killed process 7332 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:21 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x20, 0x0, 0x0) 10:23:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000068ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:21 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 10:23:21 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240)={0x0, 0xfffffffd}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:21 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xa00}, 0x0) 10:23:21 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000006cffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:21 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x5000000) [ 2992.199008][ T7352] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2992.296670][ T7352] CPU: 0 PID: 7352 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2992.307070][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2992.317131][ T7352] Call Trace: [ 2992.320406][ T7352] [ 2992.323335][ T7352] dump_stack_lvl+0xd1/0x138 [ 2992.327937][ T7352] dump_header+0x10b/0x85f [ 2992.332373][ T7352] oom_kill_process.cold+0x10/0x15 [ 2992.337497][ T7352] out_of_memory+0x35c/0x14a0 [ 2992.342186][ T7352] ? find_held_lock+0x2d/0x110 [ 2992.346965][ T7352] ? oom_killer_disable+0x280/0x280 [ 2992.352174][ T7352] ? find_held_lock+0x2d/0x110 [ 2992.356973][ T7352] mem_cgroup_out_of_memory+0x206/0x270 [ 2992.362567][ T7352] ? mem_cgroup_margin+0x130/0x130 [ 2992.367711][ T7352] ? lock_downgrade+0x6e0/0x6e0 [ 2992.372583][ T7352] try_charge_memcg+0xefb/0x12f0 [ 2992.377566][ T7352] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2992.383594][ T7352] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2992.389350][ T7352] ? lock_downgrade+0x6e0/0x6e0 [ 2992.394215][ T7352] ? lock_downgrade+0x6e0/0x6e0 [ 2992.399084][ T7352] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2992.404637][ T7352] __alloc_pages+0x1f3/0x5b0 [ 2992.409258][ T7352] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2992.416094][ T7352] alloc_pages+0x1aa/0x270 [ 2992.420547][ T7352] __pmd_alloc+0x3f/0x5d0 [ 2992.424895][ T7352] __handle_mm_fault+0x932/0x3c90 [ 2992.429934][ T7352] ? vm_iomap_memory+0x190/0x190 [ 2992.434899][ T7352] handle_mm_fault+0x1b6/0x850 [ 2992.439673][ T7352] do_user_addr_fault+0x475/0x1210 [ 2992.444796][ T7352] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2992.450396][ T7352] exc_page_fault+0x98/0x170 [ 2992.455012][ T7352] asm_exc_page_fault+0x26/0x30 [ 2992.460568][ T7352] RIP: 0033:0x7fd887086c25 [ 2992.464997][ T7352] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2992.484612][ T7352] RSP: 002b:00007fd8872cfb98 EFLAGS: 00010202 [ 2992.490688][ T7352] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2992.498657][ T7352] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 2992.506627][ T7352] RBP: 00007fd8872cfc58 R08: 00007fd887000000 R09: 00007fd886c00000 [ 2992.514597][ T7352] R10: 00007fd886c000c8 R11: 000000000008edf8 R12: 00000000002da77c [ 2992.522586][ T7352] R13: 00007fd8872cfc80 R14: 00007fd8872cfca0 R15: 0000000000000032 [ 2992.530617][ T7352] [ 2992.650307][ T7352] memory: usage 307200kB, limit 307200kB, failcnt 20231 [ 2992.669160][ T7352] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2992.681465][ T7352] Memory cgroup stats for /syz3: [ 2992.681684][ T7352] anon 2899968 [ 2992.681684][ T7352] file 10280960 [ 2992.681684][ T7352] kernel 301391872 [ 2992.681684][ T7352] kernel_stack 851968 [ 2992.681684][ T7352] pagetables 1667072 [ 2992.681684][ T7352] sec_pagetables 0 [ 2992.681684][ T7352] percpu 5136736 [ 2992.681684][ T7352] sock 0 [ 2992.681684][ T7352] vmalloc 0 [ 2992.681684][ T7352] shmem 10280960 [ 2992.681684][ T7352] zswap 0 [ 2992.681684][ T7352] zswapped 0 [ 2992.681684][ T7352] file_mapped 262144 [ 2992.681684][ T7352] file_dirty 0 [ 2992.681684][ T7352] file_writeback 0 [ 2992.681684][ T7352] swapcached 0 [ 2992.681684][ T7352] anon_thp 0 [ 2992.681684][ T7352] file_thp 0 [ 2992.681684][ T7352] shmem_thp 0 [ 2992.681684][ T7352] inactive_anon 2904064 [ 2992.681684][ T7352] active_anon 10276864 [ 2992.681684][ T7352] inactive_file 0 [ 2992.681684][ T7352] active_file 0 [ 2992.681684][ T7352] unevictable 0 [ 2992.681684][ T7352] slab_reclaimable 279872 [ 2992.681684][ T7352] slab_unreclaimable 293023328 10:23:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000122408000a000f"], 0x28}}, 0x0) 10:23:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 10:23:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000074ffffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:22 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xc00}, 0x0) 10:23:22 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x6000000) 10:23:22 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="14000000120021030000000000000000040000805b6485bd83b50dd0f714c61e71ec53050a727edc32a88c87a85a409546d634892d2ea38e2f74103a995afc0944b7c9d006565696c78c9b8daadd60096533606f55d4a88c1351e64f12094d5663d675417fefc5f6276c23d8a86bf7b13dc72668157dda2f85dcb5299e240f8d1bb3e62be32a088d101189e99584c943fbe20488268c511cc22e8c4d073425e790000000000000e2d6d3c860bf3544326d85"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2992.831588][ T7352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7352,uid=0 [ 2992.852112][ T7352] Memory cgroup out of memory: Killed process 7352 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(r0) close(r1) 10:23:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="0000007affffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000000000e000000000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)="d5", 0x1}], 0x1}, 0x0) 10:23:22 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xe00}, 0x0) 10:23:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="000000000000000e000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2993.259223][ T7398] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2993.350160][ T7398] CPU: 0 PID: 7398 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2993.360573][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2993.370674][ T7398] Call Trace: [ 2993.373979][ T7398] [ 2993.376940][ T7398] dump_stack_lvl+0xd1/0x138 [ 2993.381606][ T7398] dump_header+0x10b/0x85f [ 2993.386083][ T7398] oom_kill_process.cold+0x10/0x15 [ 2993.391257][ T7398] out_of_memory+0x35c/0x14a0 [ 2993.395996][ T7398] ? find_held_lock+0x2d/0x110 [ 2993.400811][ T7398] ? oom_killer_disable+0x280/0x280 [ 2993.406069][ T7398] ? find_held_lock+0x2d/0x110 [ 2993.410882][ T7398] mem_cgroup_out_of_memory+0x206/0x270 [ 2993.416490][ T7398] ? mem_cgroup_margin+0x130/0x130 [ 2993.421615][ T7398] ? lock_downgrade+0x6e0/0x6e0 [ 2993.426480][ T7398] try_charge_memcg+0xefb/0x12f0 [ 2993.431454][ T7398] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2993.437498][ T7398] ? lock_downgrade+0x6e0/0x6e0 [ 2993.442385][ T7398] charge_memcg+0x90/0x3b0 [ 2993.446813][ T7398] __mem_cgroup_charge+0x2b/0x90 [ 2993.451756][ T7398] do_wp_page+0x7ec/0x3370 [ 2993.456187][ T7398] ? lock_release+0x810/0x810 [ 2993.460867][ T7398] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2993.466244][ T7398] ? do_raw_spin_lock+0x124/0x2b0 [ 2993.471272][ T7398] ? rwlock_bug.part.0+0x90/0x90 [ 2993.476214][ T7398] ? lock_chain_count+0x20/0x20 [ 2993.481073][ T7398] __handle_mm_fault+0x1f58/0x3c90 [ 2993.486202][ T7398] ? vm_iomap_memory+0x190/0x190 [ 2993.491168][ T7398] handle_mm_fault+0x1b6/0x850 [ 2993.495948][ T7398] do_user_addr_fault+0x475/0x1210 [ 2993.501069][ T7398] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2993.506626][ T7398] exc_page_fault+0x98/0x170 [ 2993.511221][ T7398] asm_exc_page_fault+0x26/0x30 [ 2993.516074][ T7398] RIP: 0033:0x7fd887039570 [ 2993.520492][ T7398] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2993.540219][ T7398] RSP: 002b:00007fd8872cfac0 EFLAGS: 00010246 [ 2993.546305][ T7398] RAX: 0000000076a5b09d RBX: 00007fd8871ac018 RCX: 0000001b32520000 [ 2993.554302][ T7398] RDX: 0000000000000000 RSI: 0000001b32520018 RDI: 000000000a202c83 [ 2993.562306][ T7398] RBP: 0000000076a5b09d R08: 000000000000109d R09: 0000000076a5b0a1 [ 2993.570287][ T7398] R10: 00007fd8872cfc80 R11: 0000000000000246 R12: 00007fd8871a0000 [ 2993.578341][ T7398] R13: 0000000000000001 R14: 0000000000000009 R15: ffffffff83d0c512 [ 2993.586308][ T7398] ? apparmor_socket_create+0x22/0x660 [ 2993.591790][ T7398] [ 2993.651423][ T7398] memory: usage 307192kB, limit 307200kB, failcnt 20316 [ 2993.684131][ T7398] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2993.703413][ T7398] Memory cgroup stats for /syz3: [ 2993.703646][ T7398] anon 2891776 [ 2993.703646][ T7398] file 10280960 [ 2993.703646][ T7398] kernel 301391872 [ 2993.703646][ T7398] kernel_stack 851968 [ 2993.703646][ T7398] pagetables 1667072 [ 2993.703646][ T7398] sec_pagetables 0 [ 2993.703646][ T7398] percpu 5136736 [ 2993.703646][ T7398] sock 0 [ 2993.703646][ T7398] vmalloc 0 [ 2993.703646][ T7398] shmem 10280960 [ 2993.703646][ T7398] zswap 0 [ 2993.703646][ T7398] zswapped 0 [ 2993.703646][ T7398] file_mapped 262144 [ 2993.703646][ T7398] file_dirty 0 [ 2993.703646][ T7398] file_writeback 0 [ 2993.703646][ T7398] swapcached 0 [ 2993.703646][ T7398] anon_thp 0 [ 2993.703646][ T7398] file_thp 0 [ 2993.703646][ T7398] shmem_thp 0 [ 2993.703646][ T7398] inactive_anon 2895872 [ 2993.703646][ T7398] active_anon 10276864 [ 2993.703646][ T7398] inactive_file 0 [ 2993.703646][ T7398] active_file 0 [ 2993.703646][ T7398] unevictable 0 [ 2993.703646][ T7398] slab_reclaimable 279872 [ 2993.703646][ T7398] slab_unreclaimable 293023328 [ 2993.849753][ T7398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7398,uid=0 10:23:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000b22508000a000f"], 0x28}}, 0x0) 10:23:23 executing program 2: recvmsg$unix(0xffffffffffffffff, 0x0, 0x2042) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004ac0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:23:23 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async, rerun: 64) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 64) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="14000000120021030000000000000000040000805b6485bd83b50dd0f714c61e71ec53050a727edc32a88c87a85a409546d634892d2ea38e2f74103a995afc0944b7c9d006565696c78c9b8daadd60096533606f55d4a88c1351e64f12094d5663d675417fefc5f6276c23d8a86bf7b13dc72668157dda2f85dcb5299e240f8d1bb3e62be32a088d101189e99584c943fbe20488268c511cc22e8c4d073425e790000000000000e2d6d3c860bf3544326d85"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 32) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000fffffffe000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:23 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x7000000) 10:23:23 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xec0}, 0x0) [ 2993.887962][ T7398] Memory cgroup out of memory: Killed process 7398 (syz-executor.3) total-vm:54540kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000feffffff000000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:23 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x2) 10:23:23 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="14000000120021030000000000000000040000805b6485bd83b50dd0f714c61e71ec53050a727edc32a88c87a85a409546d634892d2ea38e2f74103a995afc0944b7c9d006565696c78c9b8daadd60096533606f55d4a88c1351e64f12094d5663d675417fefc5f6276c23d8a86bf7b13dc72668157dda2f85dcb5299e240f8d1bb3e62be32a088d101189e99584c943fbe20488268c511cc22e8c4d073425e790000000000000e2d6d3c860bf3544326d85"], 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:23 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff020000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:23 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) 10:23:23 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x5d4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1c6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2994.260210][ T7428] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2994.310351][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2994.337049][ T7428] CPU: 1 PID: 7428 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2994.347450][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2994.357550][ T7428] Call Trace: [ 2994.360859][ T7428] [ 2994.363815][ T7428] dump_stack_lvl+0xd1/0x138 [ 2994.368457][ T7428] dump_header+0x10b/0x85f [ 2994.372925][ T7428] oom_kill_process.cold+0x10/0x15 [ 2994.378095][ T7428] out_of_memory+0x35c/0x14a0 [ 2994.383085][ T7428] ? find_held_lock+0x2d/0x110 [ 2994.387883][ T7428] ? oom_killer_disable+0x280/0x280 [ 2994.393110][ T7428] ? find_held_lock+0x2d/0x110 [ 2994.397903][ T7428] mem_cgroup_out_of_memory+0x206/0x270 [ 2994.403470][ T7428] ? mem_cgroup_margin+0x130/0x130 [ 2994.408601][ T7428] ? lock_downgrade+0x6e0/0x6e0 [ 2994.413474][ T7428] try_charge_memcg+0xefb/0x12f0 [ 2994.418428][ T7428] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2994.424419][ T7428] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2994.430176][ T7428] ? lock_downgrade+0x6e0/0x6e0 [ 2994.435047][ T7428] ? lock_downgrade+0x6e0/0x6e0 [ 2994.439926][ T7428] __memcg_kmem_charge_page+0x16e/0x3b0 [ 2994.446186][ T7428] __alloc_pages+0x1f3/0x5b0 [ 2994.450781][ T7428] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2994.457569][ T7428] alloc_pages+0x1aa/0x270 [ 2994.461995][ T7428] __pmd_alloc+0x3f/0x5d0 [ 2994.466342][ T7428] __handle_mm_fault+0x932/0x3c90 [ 2994.471379][ T7428] ? vm_iomap_memory+0x190/0x190 [ 2994.476343][ T7428] handle_mm_fault+0x1b6/0x850 [ 2994.481127][ T7428] do_user_addr_fault+0x475/0x1210 [ 2994.486245][ T7428] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2994.491805][ T7428] exc_page_fault+0x98/0x170 [ 2994.496399][ T7428] asm_exc_page_fault+0x26/0x30 [ 2994.501259][ T7428] RIP: 0033:0x7fd887086c25 [ 2994.505672][ T7428] Code: 12 80 fa 04 73 1e 80 fa 01 77 26 72 05 0f b6 0e 88 0f c3 48 8b 4c 16 f8 48 8b 36 48 89 4c 17 f8 48 89 37 c3 8b 4c 16 fc 8b 36 <89> 4c 17 fc 89 37 c3 0f b7 4c 16 fe 0f b7 36 66 89 4c 17 fe 66 89 [ 2994.525381][ T7428] RSP: 002b:00007fd8872cfb98 EFLAGS: 00010202 [ 2994.532229][ T7428] RAX: 00000000200005c0 RBX: 0000000000000000 RCX: 0000000000535650 [ 2994.540199][ T7428] RDX: 0000000000000005 RSI: 0000000053565049 RDI: 00000000200005c0 [ 2994.548166][ T7428] RBP: 00007fd8872cfc58 R08: 00007fd887000000 R09: 00007fd886c00000 [ 2994.556136][ T7428] R10: 00007fd886c000c8 R11: 000000000008ef30 R12: 00000000002daf98 [ 2994.564104][ T7428] R13: 00007fd8872cfc80 R14: 00007fd8872cfca0 R15: 0000000000000032 [ 2994.572089][ T7428] [ 2994.631915][ T7428] memory: usage 307200kB, limit 307200kB, failcnt 20402 [ 2994.676026][ T7428] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2994.686678][ T7428] Memory cgroup stats for /syz3: [ 2994.686895][ T7428] anon 2899968 [ 2994.686895][ T7428] file 10280960 [ 2994.686895][ T7428] kernel 301391872 [ 2994.686895][ T7428] kernel_stack 851968 [ 2994.686895][ T7428] pagetables 1667072 [ 2994.686895][ T7428] sec_pagetables 0 [ 2994.686895][ T7428] percpu 5136736 [ 2994.686895][ T7428] sock 0 [ 2994.686895][ T7428] vmalloc 0 [ 2994.686895][ T7428] shmem 10280960 [ 2994.686895][ T7428] zswap 0 [ 2994.686895][ T7428] zswapped 0 [ 2994.686895][ T7428] file_mapped 262144 [ 2994.686895][ T7428] file_dirty 0 [ 2994.686895][ T7428] file_writeback 0 [ 2994.686895][ T7428] swapcached 0 [ 2994.686895][ T7428] anon_thp 0 [ 2994.686895][ T7428] file_thp 0 [ 2994.686895][ T7428] shmem_thp 0 [ 2994.686895][ T7428] inactive_anon 2904064 [ 2994.686895][ T7428] active_anon 10276864 [ 2994.686895][ T7428] inactive_file 0 [ 2994.686895][ T7428] active_file 0 [ 2994.686895][ T7428] unevictable 0 [ 2994.686895][ T7428] slab_reclaimable 279872 [ 2994.686895][ T7428] slab_unreclaimable 293023328 [ 2994.885646][ T7428] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7428,uid=0 [ 2994.907518][ T7428] Memory cgroup out of memory: Killed process 7428 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:24 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 10:23:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000003f08000a000f"], 0x28}}, 0x0) 10:23:24 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x8000000) 10:23:24 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0xf00}, 0x0) 10:23:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff030000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:24 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x5d4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1c6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2994.942497][ T7434] socket: no more sockets 10:23:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000002540)=@base={0x5, 0xfdd, 0x8, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 10:23:24 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x5d4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1c6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2995.031091][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 10:23:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff040000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:24 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x23, 0x0, 0x0) 10:23:24 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x47d3}, 0x0) [ 2995.202091][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 10:23:24 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff050000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:24 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) syz_io_uring_setup(0x5ca5, &(0x7f0000000180)={0x0, 0x5d5a, 0x80, 0x2, 0x367}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 2995.271423][ T7472] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2995.382888][ T7472] CPU: 1 PID: 7472 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2995.393299][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2995.403391][ T7472] Call Trace: [ 2995.406682][ T7472] [ 2995.409614][ T7472] dump_stack_lvl+0xd1/0x138 [ 2995.414228][ T7472] dump_header+0x10b/0x85f [ 2995.418682][ T7472] oom_kill_process.cold+0x10/0x15 [ 2995.423816][ T7472] out_of_memory+0x35c/0x14a0 [ 2995.428544][ T7472] ? find_held_lock+0x2d/0x110 [ 2995.433323][ T7472] ? oom_killer_disable+0x280/0x280 [ 2995.438566][ T7472] ? find_held_lock+0x2d/0x110 [ 2995.443363][ T7472] mem_cgroup_out_of_memory+0x206/0x270 [ 2995.448962][ T7472] ? mem_cgroup_margin+0x130/0x130 [ 2995.454113][ T7472] ? lock_downgrade+0x6e0/0x6e0 [ 2995.459015][ T7472] try_charge_memcg+0xefb/0x12f0 [ 2995.463981][ T7472] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2995.469981][ T7472] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2995.475714][ T7472] ? lock_downgrade+0x6e0/0x6e0 [ 2995.480568][ T7472] ? lock_downgrade+0x6e0/0x6e0 [ 2995.485431][ T7472] obj_cgroup_charge+0x2af/0x5e0 [ 2995.490378][ T7472] kmem_cache_alloc_lru+0x145/0x760 [ 2995.495581][ T7472] ? sock_alloc_inode+0x27/0x1d0 [ 2995.500533][ T7472] sock_alloc_inode+0x27/0x1d0 [ 2995.505316][ T7472] ? sock_free_inode+0x30/0x30 [ 2995.510092][ T7472] alloc_inode+0x61/0x230 [ 2995.514461][ T7472] new_inode_pseudo+0x17/0x80 [ 2995.519202][ T7472] sock_alloc+0x40/0x260 [ 2995.523477][ T7472] __sock_create+0xbd/0x790 [ 2995.528021][ T7472] __sys_socket+0x133/0x250 [ 2995.532537][ T7472] ? __sys_socket_file+0x1f0/0x1f0 [ 2995.537670][ T7472] __x64_sys_socket+0x73/0xb0 [ 2995.542356][ T7472] do_syscall_64+0x39/0xb0 [ 2995.546788][ T7472] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2995.552692][ T7472] RIP: 0033:0x7fd88708c0c9 [ 2995.557119][ T7472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2995.578050][ T7472] RSP: 002b:00007fd887ea7168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2995.586476][ T7472] RAX: ffffffffffffffda RBX: 00007fd8871abf80 RCX: 00007fd88708c0c9 [ 2995.594457][ T7472] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2995.602453][ T7472] RBP: 00007fd8870e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 2995.610462][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2995.618471][ T7472] R13: 00007fd8872cfb1f R14: 00007fd887ea7300 R15: 0000000000022000 [ 2995.626487][ T7472] [ 2995.677041][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2995.735144][ T7472] memory: usage 307200kB, limit 307200kB, failcnt 20522 [ 2995.742213][ T7472] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2995.767638][ T7472] Memory cgroup stats for /syz3: [ 2995.767868][ T7472] anon 2899968 [ 2995.767868][ T7472] file 10280960 [ 2995.767868][ T7472] kernel 301391872 [ 2995.767868][ T7472] kernel_stack 851968 [ 2995.767868][ T7472] pagetables 1667072 [ 2995.767868][ T7472] sec_pagetables 0 [ 2995.767868][ T7472] percpu 5136736 [ 2995.767868][ T7472] sock 0 [ 2995.767868][ T7472] vmalloc 0 [ 2995.767868][ T7472] shmem 10280960 [ 2995.767868][ T7472] zswap 0 [ 2995.767868][ T7472] zswapped 0 [ 2995.767868][ T7472] file_mapped 262144 [ 2995.767868][ T7472] file_dirty 0 [ 2995.767868][ T7472] file_writeback 0 [ 2995.767868][ T7472] swapcached 0 [ 2995.767868][ T7472] anon_thp 0 [ 2995.767868][ T7472] file_thp 0 [ 2995.767868][ T7472] shmem_thp 0 [ 2995.767868][ T7472] inactive_anon 2904064 [ 2995.767868][ T7472] active_anon 10276864 [ 2995.767868][ T7472] inactive_file 0 [ 2995.767868][ T7472] active_file 0 [ 2995.767868][ T7472] unevictable 0 [ 2995.767868][ T7472] slab_reclaimable 279872 [ 2995.767868][ T7472] slab_unreclaimable 293023328 [ 2995.870730][ T7472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7465,uid=0 [ 2995.908166][ T7472] Memory cgroup out of memory: Killed process 7465 (syz-executor.3) total-vm:54540kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 10:23:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r7], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r4, @ANYBLOB="000023000000114108000a000f"], 0x28}}, 0x0) 10:23:25 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x9000000) 10:23:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x4000081) 10:23:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff060000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2995.967949][ T7472] socket: no more sockets 10:23:25 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) syz_io_uring_setup(0x5ca5, &(0x7f0000000180)={0x0, 0x5d5a, 0x80, 0x2, 0x367}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) (async) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000040)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) syz_io_uring_setup(0x5ca5, &(0x7f0000000180)={0x0, 0x5d5a, 0x80, 0x2, 0x367}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) 10:23:25 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x23) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000080)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newchain={0x24, 0x2e, 0xfb06c2beea0ba7e1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x5865}, 0x0) 10:23:25 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) [ 2996.021206][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 10:23:25 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff070000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) [ 2996.210729][ T7495] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2996.232097][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2996.235843][ T7495] CPU: 0 PID: 7495 Comm: syz-executor.3 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2996.252542][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2996.262644][ T7495] Call Trace: [ 2996.266054][ T7495] [ 2996.269003][ T7495] dump_stack_lvl+0xd1/0x138 [ 2996.273642][ T7495] dump_header+0x10b/0x85f [ 2996.278102][ T7495] oom_kill_process.cold+0x10/0x15 [ 2996.283256][ T7495] out_of_memory+0x35c/0x14a0 [ 2996.287981][ T7495] ? find_held_lock+0x2d/0x110 [ 2996.292792][ T7495] ? oom_killer_disable+0x280/0x280 [ 2996.298041][ T7495] ? find_held_lock+0x2d/0x110 [ 2996.302857][ T7495] mem_cgroup_out_of_memory+0x206/0x270 [ 2996.308447][ T7495] ? mem_cgroup_margin+0x130/0x130 [ 2996.313595][ T7495] ? lock_downgrade+0x6e0/0x6e0 [ 2996.318493][ T7495] try_charge_memcg+0xefb/0x12f0 [ 2996.323459][ T7495] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2996.329475][ T7495] ? lock_downgrade+0x6e0/0x6e0 [ 2996.334372][ T7495] charge_memcg+0x90/0x3b0 [ 2996.338824][ T7495] __mem_cgroup_charge+0x2b/0x90 [ 2996.344056][ T7495] do_wp_page+0x7ec/0x3370 [ 2996.348518][ T7495] ? lock_release+0x810/0x810 [ 2996.353217][ T7495] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2996.358615][ T7495] ? do_raw_spin_lock+0x124/0x2b0 [ 2996.363663][ T7495] ? rwlock_bug.part.0+0x90/0x90 [ 2996.368623][ T7495] ? lock_chain_count+0x20/0x20 [ 2996.373505][ T7495] __handle_mm_fault+0x1f58/0x3c90 [ 2996.378683][ T7495] ? vm_iomap_memory+0x190/0x190 [ 2996.383704][ T7495] handle_mm_fault+0x1b6/0x850 [ 2996.388510][ T7495] do_user_addr_fault+0x475/0x1210 [ 2996.393655][ T7495] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2996.399240][ T7495] exc_page_fault+0x98/0x170 [ 2996.403856][ T7495] asm_exc_page_fault+0x26/0x30 10:23:26 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000024000bc0440000000000000060000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff080000000d00010066715f636f64656c00000000140002"], 0x48}}, 0x0) 10:23:26 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xa000000) [ 2996.408729][ T7495] RIP: 0033:0x7fd887039570 [ 2996.413160][ T7495] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2996.426438][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2996.432771][ T7495] RSP: 002b:00007fd8872cfac0 EFLAGS: 00010246 10:23:26 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(r0) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) memfd_secret(0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)={0x14, 0x12, 0x321, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x7784, &(0x7f0000000240), &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) (async) syz_io_uring_setup(0x5ca5, &(0x7f0000000180)={0x0, 0x5d5a, 0x80, 0x2, 0x367}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:23:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="8e", 0x1}], 0x1}, 0x0) [ 2996.432802][ T7495] RAX: 00000000e2ddf611 RBX: 00007fd8871ac018 RCX: 0000001b32520000 [ 2996.432818][ T7495] RDX: 0000000000000000 RSI: 0000001b32520018 RDI: 000000000c5ae1f9 [ 2996.432833][ T7495] RBP: 00000000e2ddf611 R08: 0000000000001611 R09: 00000000e2ddf615 [ 2996.432848][ T7495] R10: 00007fd8872cfc80 R11: 0000000000000246 R12: 00007fd8871a0000 [ 2996.432861][ T7495] R13: 0000000000000001 R14: 000000000000001a R15: ffffffff81e5c1af [ 2996.432875][ T7495] ? new_inode_pseudo+0xf/0x80 [ 2996.432934][ T7495] [ 2996.547011][ T7495] memory: usage 307196kB, limit 307200kB, failcnt 20644 [ 2996.557142][ T7495] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2996.572734][ T7495] Memory cgroup stats for /syz3: [ 2996.572967][ T7495] anon 2895872 [ 2996.572967][ T7495] file 10280960 [ 2996.572967][ T7495] kernel 301391872 [ 2996.572967][ T7495] kernel_stack 851968 [ 2996.572967][ T7495] pagetables 1667072 [ 2996.572967][ T7495] sec_pagetables 0 [ 2996.572967][ T7495] percpu 5136736 [ 2996.572967][ T7495] sock 0 [ 2996.572967][ T7495] vmalloc 0 [ 2996.572967][ T7495] shmem 10280960 [ 2996.572967][ T7495] zswap 0 [ 2996.572967][ T7495] zswapped 0 [ 2996.572967][ T7495] file_mapped 262144 [ 2996.572967][ T7495] file_dirty 0 [ 2996.572967][ T7495] file_writeback 0 [ 2996.572967][ T7495] swapcached 0 [ 2996.572967][ T7495] anon_thp 0 [ 2996.572967][ T7495] file_thp 0 [ 2996.572967][ T7495] shmem_thp 0 [ 2996.572967][ T7495] inactive_anon 2899968 [ 2996.572967][ T7495] active_anon 10276864 [ 2996.572967][ T7495] inactive_file 0 [ 2996.572967][ T7495] active_file 0 [ 2996.572967][ T7495] unevictable 0 [ 2996.572967][ T7495] slab_reclaimable 279872 [ 2996.572967][ T7495] slab_unreclaimable 293023328 [ 2996.668647][ T7520] ================================================================== [ 2996.676759][ T7520] BUG: KASAN: use-after-free in io_wq_worker_running+0x114/0x130 [ 2996.685053][ T7520] Read of size 4 at addr ffff88809f6d7c04 by task iou-wrk-7514/7520 [ 2996.693053][ T7520] [ 2996.695381][ T7520] CPU: 0 PID: 7520 Comm: iou-wrk-7514 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2996.705523][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2996.715568][ T7520] Call Trace: [ 2996.718837][ T7520] [ 2996.721759][ T7520] dump_stack_lvl+0xd1/0x138 [ 2996.726355][ T7520] print_report+0x15e/0x45d [ 2996.730893][ T7520] ? __phys_addr+0xc8/0x140 [ 2996.735398][ T7520] ? io_wq_worker_running+0x114/0x130 [ 2996.740775][ T7520] kasan_report+0xbf/0x1f0 [ 2996.745202][ T7520] ? io_wq_worker_running+0x114/0x130 [ 2996.750578][ T7520] io_wq_worker_running+0x114/0x130 [ 2996.756998][ T7520] schedule_timeout+0x1e1/0x2a0 [ 2996.761844][ T7520] ? usleep_range_state+0x1b0/0x1b0 [ 2996.767122][ T7520] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2996.772933][ T7520] ? lockdep_hardirqs_on+0x7d/0x100 [ 2996.778127][ T7520] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2996.783929][ T7520] ? prepare_to_wait_exclusive+0xdf/0x2c0 [ 2996.789656][ T7520] __skb_wait_for_more_packets+0x3f8/0x5e0 [ 2996.795462][ T7520] ? datagram_poll+0x4d0/0x4d0 [ 2996.800218][ T7520] ? proto_seq_start+0x50/0x50 [ 2996.804988][ T7520] ? skb_attempt_defer_free+0x3e0/0x3e0 [ 2996.810540][ T7520] __skb_recv_datagram+0x175/0x220 [ 2996.815647][ T7520] ? __skb_try_recv_datagram+0x4f0/0x4f0 [ 2996.821280][ T7520] skb_recv_datagram+0x89/0xb0 [ 2996.826044][ T7520] ? __skb_recv_datagram+0x220/0x220 [ 2996.831325][ T7520] netlink_recvmsg+0xdd/0xe50 [ 2996.836014][ T7520] ? netlink_dump+0xc50/0xc50 [ 2996.840690][ T7520] ? aa_file_perm+0x592/0x1210 [ 2996.845448][ T7520] ? aa_af_perm+0x240/0x240 [ 2996.849947][ T7520] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2996.855235][ T7520] ? security_socket_recvmsg+0x93/0xc0 [ 2996.860697][ T7520] sock_read_iter+0x348/0x480 [ 2996.865373][ T7520] ? ____sys_recvmsg+0x610/0x610 [ 2996.870309][ T7520] ? __io_import_iovec+0x1ff/0x450 [ 2996.876115][ T7520] ? security_file_permission+0xaf/0xd0 [ 2996.881662][ T7520] ? ____sys_recvmsg+0x610/0x610 [ 2996.886653][ T7520] io_read+0x323/0x1420 [ 2996.890812][ T7520] ? io_writev_prep_async+0x270/0x270 [ 2996.896186][ T7520] ? __lock_acquire+0x166e/0x56d0 [ 2996.901208][ T7520] ? find_held_lock+0x2d/0x110 [ 2996.905977][ T7520] ? io_writev_prep_async+0x270/0x270 [ 2996.911348][ T7520] io_issue_sqe+0x156/0x1220 [ 2996.915954][ T7520] ? do_raw_spin_lock+0x124/0x2b0 [ 2996.920975][ T7520] io_wq_submit_work+0x29c/0xdc0 [ 2996.925916][ T7520] io_worker_handle_work+0xc41/0x1c60 [ 2996.931294][ T7520] io_wqe_worker+0xa5b/0xe40 [ 2996.935887][ T7520] ? io_worker_handle_work+0x1c60/0x1c60 [ 2996.941520][ T7520] ? ret_from_fork+0x8/0x30 [ 2996.946021][ T7520] ? lock_downgrade+0x6e0/0x6e0 [ 2996.950892][ T7520] ? do_raw_spin_lock+0x124/0x2b0 [ 2996.956085][ T7520] ? rwlock_bug.part.0+0x90/0x90 [ 2996.961022][ T7520] ? _raw_spin_unlock_irq+0x23/0x50 [ 2996.966215][ T7520] ? io_worker_handle_work+0x1c60/0x1c60 [ 2996.971847][ T7520] ret_from_fork+0x1f/0x30 [ 2996.976274][ T7520] [ 2996.979288][ T7520] [ 2996.981600][ T7520] Allocated by task 7514: [ 2996.985911][ T7520] kasan_save_stack+0x22/0x40 [ 2996.990583][ T7520] kasan_set_track+0x25/0x30 [ 2996.995163][ T7520] __kasan_kmalloc+0xa5/0xb0 [ 2996.999755][ T7520] create_io_worker+0x10c/0x630 [ 2997.004606][ T7520] io_wqe_enqueue+0x6c3/0xbc0 [ 2997.009280][ T7520] io_queue_iowq+0x282/0x5c0 [ 2997.013871][ T7520] io_queue_async+0x1e9/0x5b0 [ 2997.018631][ T7520] io_req_task_submit+0x1c4/0x220 [ 2997.023686][ T7520] io_poll_task_func+0xa3a/0x1180 [ 2997.028700][ T7520] handle_tw_list+0xa8/0x420 [ 2997.033286][ T7520] tctx_task_work+0x12e/0x520 [ 2997.037965][ T7520] task_work_run+0x16f/0x270 [ 2997.042551][ T7520] get_signal+0x1c7/0x2450 [ 2997.046967][ T7520] arch_do_signal_or_restart+0x79/0x5c0 [ 2997.052517][ T7520] exit_to_user_mode_prepare+0x15f/0x250 [ 2997.058151][ T7520] syscall_exit_to_user_mode+0x1d/0x50 [ 2997.063606][ T7520] do_syscall_64+0x46/0xb0 [ 2997.068027][ T7520] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2997.073915][ T7520] [ 2997.076231][ T7520] Freed by task 7520: [ 2997.080196][ T7520] kasan_save_stack+0x22/0x40 [ 2997.084867][ T7520] kasan_set_track+0x25/0x30 [ 2997.089448][ T7520] kasan_save_free_info+0x2e/0x40 [ 2997.094468][ T7520] ____kasan_slab_free+0x160/0x1c0 [ 2997.099572][ T7520] slab_free_freelist_hook+0x8b/0x1c0 [ 2997.104964][ T7520] __kmem_cache_free+0xaf/0x3b0 [ 2997.109806][ T7520] io_queue_worker_create+0x567/0x660 [ 2997.115183][ T7520] io_wqe_dec_running+0x1e4/0x240 [ 2997.120202][ T7520] io_wq_worker_sleeping+0xa6/0xc0 [ 2997.125318][ T7520] schedule+0x16e/0x1b0 [ 2997.129472][ T7520] schedule_timeout+0x1e1/0x2a0 [ 2997.134319][ T7520] __skb_wait_for_more_packets+0x3f8/0x5e0 [ 2997.140120][ T7520] __skb_recv_datagram+0x175/0x220 [ 2997.145226][ T7520] skb_recv_datagram+0x89/0xb0 [ 2997.149981][ T7520] netlink_recvmsg+0xdd/0xe50 [ 2997.154675][ T7520] sock_read_iter+0x348/0x480 [ 2997.159519][ T7520] io_read+0x323/0x1420 [ 2997.163951][ T7520] io_issue_sqe+0x156/0x1220 [ 2997.168542][ T7520] io_wq_submit_work+0x29c/0xdc0 [ 2997.173473][ T7520] io_worker_handle_work+0xc41/0x1c60 [ 2997.178850][ T7520] io_wqe_worker+0xa5b/0xe40 [ 2997.183440][ T7520] ret_from_fork+0x1f/0x30 [ 2997.187853][ T7520] [ 2997.190184][ T7520] Last potentially related work creation: [ 2997.195970][ T7520] kasan_save_stack+0x22/0x40 [ 2997.200639][ T7520] __kasan_record_aux_stack+0xbc/0xd0 [ 2997.206006][ T7520] task_work_add+0x7f/0x2c0 [ 2997.211987][ T7520] io_queue_worker_create+0x41d/0x660 [ 2997.217357][ T7520] io_wqe_dec_running+0x1e4/0x240 [ 2997.222376][ T7520] io_wq_worker_sleeping+0xa6/0xc0 [ 2997.227486][ T7520] schedule+0x16e/0x1b0 [ 2997.231638][ T7520] schedule_timeout+0x1e1/0x2a0 [ 2997.236575][ T7520] __skb_wait_for_more_packets+0x3f8/0x5e0 [ 2997.242394][ T7520] __skb_recv_datagram+0x175/0x220 [ 2997.247531][ T7520] skb_recv_datagram+0x89/0xb0 [ 2997.252310][ T7520] netlink_recvmsg+0xdd/0xe50 [ 2997.256997][ T7520] sock_read_iter+0x348/0x480 [ 2997.261669][ T7520] io_read+0x323/0x1420 [ 2997.265823][ T7520] io_issue_sqe+0x156/0x1220 [ 2997.270410][ T7520] io_wq_submit_work+0x29c/0xdc0 [ 2997.275348][ T7520] io_worker_handle_work+0xc41/0x1c60 [ 2997.280716][ T7520] io_wqe_worker+0xa5b/0xe40 [ 2997.285305][ T7520] ret_from_fork+0x1f/0x30 [ 2997.289717][ T7520] [ 2997.292028][ T7520] Second to last potentially related work creation: [ 2997.298600][ T7520] kasan_save_stack+0x22/0x40 [ 2997.303270][ T7520] __kasan_record_aux_stack+0xbc/0xd0 [ 2997.308634][ T7520] insert_work+0x48/0x350 [ 2997.312955][ T7520] __queue_work+0x693/0x13b0 [ 2997.317537][ T7520] call_timer_fn+0x1da/0x7c0 [ 2997.322125][ T7520] expire_timers+0xbb/0x5c0 [ 2997.326710][ T7520] run_timer_softirq+0x326/0x910 [ 2997.331644][ T7520] __do_softirq+0x1fb/0xadc [ 2997.336150][ T7520] [ 2997.338463][ T7520] The buggy address belongs to the object at ffff88809f6d7c00 [ 2997.338463][ T7520] which belongs to the cache kmalloc-512 of size 512 [ 2997.352592][ T7520] The buggy address is located 4 bytes inside of [ 2997.352592][ T7520] 512-byte region [ffff88809f6d7c00, ffff88809f6d7e00) [ 2997.365685][ T7520] [ 2997.367994][ T7520] The buggy address belongs to the physical page: [ 2997.374388][ T7520] page:ffffea00027db500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x9f6d4 [ 2997.384528][ T7520] head:ffffea00027db500 order:2 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0 [ 2997.394583][ T7520] anon flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2997.402996][ T7520] raw: 00fff00000010200 ffff888012441c80 0000000000000000 dead000000000001 [ 2997.411571][ T7520] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 2997.420141][ T7520] page dumped because: kasan: bad access detected [ 2997.426536][ T7520] page_owner tracks the page as allocated [ 2997.432256][ T7520] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 30287, tgid 30286 (syz-executor.3), ts 2708627017595, free_ts 2693495974264 [ 2997.455813][ T7520] get_page_from_freelist+0x119c/0x2ce0 [ 2997.461457][ T7520] __alloc_pages+0x1cb/0x5b0 [ 2997.466040][ T7520] alloc_pages+0x1aa/0x270 [ 2997.470450][ T7520] allocate_slab+0x25f/0x350 [ 2997.475040][ T7520] ___slab_alloc+0xa91/0x1400 [ 2997.479706][ T7520] __slab_alloc.constprop.0+0x56/0xa0 [ 2997.485069][ T7520] __kmem_cache_alloc_node+0x1a4/0x430 [ 2997.490519][ T7520] __kmalloc_node_track_caller+0x4b/0xc0 [ 2997.496167][ T7520] __alloc_skb+0xe9/0x310 [ 2997.500529][ T7520] ethnl_default_notify+0x241/0x610 [ 2997.505808][ T7520] ethtool_notify+0xc1/0x1f0 [ 2997.510400][ T7520] ethnl_netdev_event+0x5a/0x70 [ 2997.515249][ T7520] notifier_call_chain+0xb5/0x200 [ 2997.520273][ T7520] call_netdevice_notifiers_info+0xb5/0x130 [ 2997.526169][ T7520] netdev_change_features+0x82/0xb0 [ 2997.531542][ T7520] bond_compute_features+0x4f6/0x900 [ 2997.536822][ T7520] page last free stack trace: [ 2997.541480][ T7520] free_pcp_prepare+0x65c/0xc00 [ 2997.546328][ T7520] free_unref_page+0x1d/0x490 [ 2997.550998][ T7520] __vunmap+0x85d/0xd30 [ 2997.555144][ T7520] free_work+0x5c/0x80 [ 2997.559202][ T7520] process_one_work+0x9bf/0x1710 [ 2997.564138][ T7520] worker_thread+0x669/0x1090 [ 2997.568809][ T7520] kthread+0x2e8/0x3a0 [ 2997.572870][ T7520] ret_from_fork+0x1f/0x30 [ 2997.577283][ T7520] [ 2997.579593][ T7520] Memory state around the buggy address: [ 2997.585211][ T7520] ffff88809f6d7b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2997.593287][ T7520] ffff88809f6d7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2997.601360][ T7520] >ffff88809f6d7c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2997.609418][ T7520] ^ [ 2997.614346][ T7520] ffff88809f6d7c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2997.622395][ T7520] ffff88809f6d7d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2997.630439][ T7520] ================================================================== [ 2997.693984][ T7520] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2997.701234][ T7520] CPU: 0 PID: 7520 Comm: iou-wrk-7514 Not tainted 6.2.0-rc3-syzkaller-00008-g1fe4fd6f5cad #0 [ 2997.711422][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2997.721511][ T7520] Call Trace: [ 2997.724804][ T7520] [ 2997.727755][ T7520] dump_stack_lvl+0xd1/0x138 [ 2997.732383][ T7495] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3 [ 2997.732383][ T7520] panic+0x2cc/0x626 [ 2997.732446][ T7520] ? panic_print_sys_info.part.0+0x110/0x110 [ 2997.732474][ T7520] ? preempt_schedule_thunk+0x1a/0x20 [ 2997.732510][ T7520] ? preempt_schedule_common+0x59/0xc0 [ 2997.732543][ T7520] check_panic_on_warn.cold+0x19/0x35 [ 2997.732569][ T7520] end_report.part.0+0x36/0x73 [ 2997.732597][ T7520] ? io_wq_worker_running+0x114/0x130 [ 2997.732624][ T7520] kasan_report.cold+0xa/0xf [ 2997.732652][ T7520] ? io_wq_worker_running+0x114/0x130 [ 2997.732680][ T7520] io_wq_worker_running+0x114/0x130 [ 2997.732706][ T7520] schedule_timeout+0x1e1/0x2a0 [ 2997.732727][ T7520] ? usleep_range_state+0x1b0/0x1b0 [ 2997.732748][ T7520] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2997.732771][ T7520] ? lockdep_hardirqs_on+0x7d/0x100 [ 2997.732790][ T7520] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 2997.732813][ T7520] ? prepare_to_wait_exclusive+0xdf/0x2c0 [ 2997.732834][ T7520] __skb_wait_for_more_packets+0x3f8/0x5e0 [ 2997.732859][ T7520] ? datagram_poll+0x4d0/0x4d0 [ 2997.732877][ T7520] ? proto_seq_start+0x50/0x50 [ 2997.732896][ T7520] ? skb_attempt_defer_free+0x3e0/0x3e0 [ 2997.732919][ T7520] __skb_recv_datagram+0x175/0x220 [ 2997.732941][ T7520] ? __skb_try_recv_datagram+0x4f0/0x4f0 [ 2997.732966][ T7520] skb_recv_datagram+0x89/0xb0 [ 2997.732985][ T7520] ? __skb_recv_datagram+0x220/0x220 [ 2997.733008][ T7520] netlink_recvmsg+0xdd/0xe50 [ 2997.733038][ T7520] ? netlink_dump+0xc50/0xc50 [ 2997.733065][ T7520] ? aa_file_perm+0x592/0x1210 [ 2997.733085][ T7520] ? aa_af_perm+0x240/0x240 [ 2997.733110][ T7520] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2997.733139][ T7520] ? security_socket_recvmsg+0x93/0xc0 [ 2997.733169][ T7520] sock_read_iter+0x348/0x480 [ 2997.733194][ T7520] ? ____sys_recvmsg+0x610/0x610 [ 2997.733218][ T7520] ? __io_import_iovec+0x1ff/0x450 [ 2997.733245][ T7520] ? security_file_permission+0xaf/0xd0 [ 2997.733272][ T7520] ? ____sys_recvmsg+0x610/0x610 [ 2997.733296][ T7520] io_read+0x323/0x1420 [ 2997.733323][ T7520] ? io_writev_prep_async+0x270/0x270 [ 2997.733351][ T7520] ? __lock_acquire+0x166e/0x56d0 [ 2997.733372][ T7520] ? find_held_lock+0x2d/0x110 [ 2997.733401][ T7520] ? io_writev_prep_async+0x270/0x270 [ 2997.733425][ T7520] io_issue_sqe+0x156/0x1220 [ 2997.733450][ T7520] ? do_raw_spin_lock+0x124/0x2b0 [ 2997.733471][ T7520] io_wq_submit_work+0x29c/0xdc0 [ 2997.733502][ T7520] io_worker_handle_work+0xc41/0x1c60 [ 2997.733535][ T7520] io_wqe_worker+0xa5b/0xe40 [ 2997.733562][ T7520] ? io_worker_handle_work+0x1c60/0x1c60 [ 2997.733589][ T7520] ? ret_from_fork+0x8/0x30 [ 2997.733613][ T7520] ? lock_downgrade+0x6e0/0x6e0 [ 2997.733630][ T7520] ? do_raw_spin_lock+0x124/0x2b0 [ 2997.733649][ T7520] ? rwlock_bug.part.0+0x90/0x90 [ 2997.733669][ T7520] ? _raw_spin_unlock_irq+0x23/0x50 [ 2997.733691][ T7520] ? io_worker_handle_work+0x1c60/0x1c60 [ 2997.733718][ T7520] ret_from_fork+0x1f/0x30 [ 2997.733747][ T7520] [ 2997.740454][ T7520] Kernel Offset: disabled [ 2998.020836][ T7520] Rebooting in 86400 seconds..