lease+0x10/0x10 [ 2582.245919][ T1131] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2582.252078][ T1131] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2582.257358][ T1131] ? mem_cgroup_iter+0x422/0x560 [ 2582.262374][ T1131] try_charge_memcg+0xda2/0x18a0 [ 2582.267590][ T1131] ? __pfx_try_charge_memcg+0x10/0x10 [ 2582.273217][ T1131] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2582.279013][ T1131] ? __pfx_lock_release+0x10/0x10 [ 2582.284129][ T1131] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2582.290211][ T1131] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2582.296013][ T1131] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2582.301898][ T1131] obj_cgroup_charge+0x389/0x630 [ 2582.306911][ T1131] ? obj_cgroup_charge+0x121/0x630 [ 2582.312093][ T1131] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2582.317620][ T1131] ? kmalloc_trace+0x4e/0x360 [ 2582.322381][ T1131] ? __pfx___might_resched+0x10/0x10 [ 2582.327746][ T1131] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2582.333633][ T1131] ? copy_semundo+0xb5/0x240 [ 2582.338286][ T1131] kmalloc_trace+0x216/0x360 [ 2582.342947][ T1131] ? __asan_memcpy+0x40/0x70 [ 2582.347880][ T1131] copy_semundo+0xb5/0x240 [ 2582.352373][ T1131] copy_process+0x1bc3/0x3fc0 [ 2582.357128][ T1131] ? copy_process+0x9c3/0x3fc0 [ 2582.361967][ T1131] ? __pfx_copy_process+0x10/0x10 [ 2582.367056][ T1131] ? __might_fault+0xc5/0x120 [ 2582.371981][ T1131] ? __asan_memset+0x23/0x50 [ 2582.376647][ T1131] kernel_clone+0x21d/0x8d0 [ 2582.381215][ T1131] ? __pfx_kernel_clone+0x10/0x10 [ 2582.386335][ T1131] __se_sys_clone3+0x2cb/0x350 [ 2582.391172][ T1131] ? __pfx___se_sys_clone3+0x10/0x10 [ 2582.396560][ T1131] ? do_syscall_64+0x108/0x240 [ 2582.401396][ T1131] ? do_syscall_64+0xb4/0x240 [ 2582.406222][ T1131] do_syscall_64+0xf9/0x240 [ 2582.410796][ T1131] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2582.416766][ T1131] RIP: 0033:0x7f0f5b4a9b99 [ 2582.421238][ T1131] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2582.440913][ T1131] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2582.449407][ T1131] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 12:18:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) accept(r0, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000240)=0x80) (async) r1 = accept(r0, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@private2, 0x0}, &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r2, @rand_addr=0x64010102, @multicast2}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x4, {{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x1, 0x9, [{{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e23, @loopback}}]}, 0x510) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="2fcd50ba310b30a1a89dbdd2de369162f8e0c4fa18516c42db2a9cf3750860de16ae0e926d", 0x25}, {&(0x7f0000000500)="981ddb4e1002d5f12c017004dac109fb41a5dc03994a7d79909b7a72398666d80175abaa2262b2cdcefcd8fc399ec45f472a8641613abe7496566fcca7f6cf1aa8588c7abf56ddf596baf7b5a5ce52956ab8cdd139ea6c09812a596bea87b0c22938e9a0a64024a813fc6349a947273182302c29be8691cfa67eec49be4bdd47eef2d3e631647513d8c53df143eeb035843efb7c23cc31ad9ac517ca3f7c05fd6850", 0xa2}], 0x2}}], 0x1, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="2fcd50ba310b30a1a89dbdd2de369162f8e0c4fa18516c42db2a9cf3750860de16ae0e926d", 0x25}, {&(0x7f0000000500)="981ddb4e1002d5f12c017004dac109fb41a5dc03994a7d79909b7a72398666d80175abaa2262b2cdcefcd8fc399ec45f472a8641613abe7496566fcca7f6cf1aa8588c7abf56ddf596baf7b5a5ce52956ab8cdd139ea6c09812a596bea87b0c22938e9a0a64024a813fc6349a947273182302c29be8691cfa67eec49be4bdd47eef2d3e631647513d8c53df143eeb035843efb7c23cc31ad9ac517ca3f7c05fd6850", 0xa2}], 0x2}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba780500faf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001c40)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001c40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002c40)={r4, 0x0, "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", "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"}) 12:18:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2582.465601][ T1131] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2582.473650][ T1131] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2582.481783][ T1131] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2582.489820][ T1131] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2582.497878][ T1131] [ 2582.549446][ T1131] memory: usage 307200kB, limit 307200kB, failcnt 119637 [ 2582.578687][ T1131] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2582.609581][ T1131] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2582.633407][ T1131] Memory cgroup stats for /syz0: [ 2582.633578][ T1131] cache 0 [ 2582.655723][ T1131] rss 0 [ 2582.663084][ T1131] rss_huge 0 [ 2582.673883][ T1131] shmem 0 [ 2582.682977][ T1131] mapped_file 0 [ 2582.698104][ T1131] dirty 0 [ 2582.701123][ T1131] writeback 0 [ 2582.712097][ T1131] workingset_refault_anon 36521 [ 2582.728361][ T1131] workingset_refault_file 2 12:18:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = accept(r0, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@private2, 0x0}, &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r2, @rand_addr=0x64010102, @multicast2}, 0xc) (async) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r2, @rand_addr=0x64010102, @multicast2}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x4, {{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x1, 0x9, [{{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}, {{0x2, 0x4e23, @loopback}}]}, 0x510) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="2fcd50ba310b30a1a89dbdd2de369162f8e0c4fa18516c42db2a9cf3750860de16ae0e926d", 0x25}, {&(0x7f0000000500)="981ddb4e1002d5f12c017004dac109fb41a5dc03994a7d79909b7a72398666d80175abaa2262b2cdcefcd8fc399ec45f472a8641613abe7496566fcca7f6cf1aa8588c7abf56ddf596baf7b5a5ce52956ab8cdd139ea6c09812a596bea87b0c22938e9a0a64024a813fc6349a947273182302c29be8691cfa67eec49be4bdd47eef2d3e631647513d8c53df143eeb035843efb7c23cc31ad9ac517ca3f7c05fd6850", 0xa2}], 0x2}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x7, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba780500faf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001c40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002c40)={r4, 0x0, "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", "67c8be7819c1e0f391ea85bc647cf97296df8096f3f1f0dec91f14dcd99259330fb4718e6472b8d44517970a1f62252963c0b9f1f95834b48129fbe8a0919ef808c0b3c9f939c30aa81507f37fa8da5859e590b3c4bdb0fa9c06c77d9b8d5d120f1c2150c9a65232b6122ca7e4f521693fde7ed5d55878598e353c19d80d7cc4974ea751f3ca43f0d0bed5e3f695d3c323273243ead2d6953db9d760b79fd44aa0593a07785d9174c3847af8a8b49d49050525b464f7a86c529bd848ae9aff498aaa9594615e7a6bdca80368b211563dd845945aabaf3cdf8eff6bfbb39e4b0796a3e1a4555a2a0cf30cd40db2faa5730b062961078de758cde46038a580c7ead56d31f62eaa1bdebec677b9a0fa71f138d68014765e7a00d21c89ef993d082ca4d7a8b54220dd145df5332a170b02513c6aa069338c3045be921d698a84d8f9105dc73915464444023437ad333f308e468b92ec9fa08c12f9f33bbffcdd9ce86e44cce11a17619f43be0cdde8533ddef9c74057731a0337ed82fa6fbe92188f01e596a1bbce892679ebe8e387e0490c0844a0a8e125f35af374e3a8962ebbbd6b97d4f28697c4931e8209483e20ea2b214889fca83f3aa2475c1f32fc895368b16c7dc0cf6a630324e3c52c020ed2515d6bd27dd3bbca5f79d7250fc58d2b4e98b90ac13def84bea8cf86bc9fb4734ff3536af09bd00fd15459496b7a07465d98d0702ecef7b114d3076e89d6f2dce7188c433cebd40f3e26b9c29ddc40026eecf1ade51ca988c34dfd2b0ba2779654d4e655aedf75a5f42772abb4766ce95d8dbbfa5f79d478fba2c46cfe788dc97cd4372f12f90ebc9019862d46b05b7797570504abae7f931efc7eb09f3bf55033c7eedac0d30bf52bbe589be66f41874c926a56a5c92cee484f858d19d2e4bb7c50bbd790faef820b5075d4887426d852ccbc0e9ae1a52f9c6ffa676350708615a3fc4a99af3692609ae600a5d69c33fa48429853a2fa72f0b5740403281df393473041521848c4f23961fd9d397ed36a9f04bdc54717ab9a1e4fbb1ca499514e76cafcf4941385c2787f303e5b73fe14a82e5ae34e2c45d355cf52f12017514c63bd84d525766304afac501d24d53c6692ae21a49b6540ebe72a2174af337edab3804b5895598917c2b9f9dfa9ee7f2df8b58aaa0809829901fc805daf1ce0f563b61d01ec612c45e003fd117e40789ee9062d5dbd14ed7a569040ce41224db06ed8197a0a2880663a856d49dd4421f40b70a41de1b1205221f282b2f17193c3b732d48932fa72addb6cee179eaadeccd918f4ecd63f34853f872207c8a4b41fde5fa9ad3a6eb7288faaba6440ed59f55970de65b011d6d51fa7c3e8f8147a2cc288990c6da6316073afe4c39540adf478ded1fd20a16f3ddd2244857e828bdcae3fad9fea3b719f0e01f7524a6057bce54bbc838c58a7a44481c86f5e469e1f5c322a022288cf8d2f75014e7b738002b8e07d543f897a87e774d8522cf62799d2642bf46065c5bac30d39e702da821694bd4289481a1731e7497598931c3d738062a6267b17dbd6f24a67fb64f67a78c5d4e4ebf89d75ff4d4e8dd3045a27902b2c431932cd531333182e1c0e43903aa11bbd362492ebce64669010c17499f6da601e849286a548c5cca7f91fdbcf207fb2924d5daaf61572476a67a56727b304092aedfa92cf4d0c6dced363403c0c25e20b572dce8db3a73f4af559912020e43430b270a63c952ebb8d32297f610d97182e63395cef80e500c9b6a751bcfdb04f6ecceca3acbfb2b1aab8ab56d55898bdda8f4419d8e099756448c2d175fab82fe46cba1eb9418a45269f0b9140e762f485cdfc957884013478296c6e06c832fa33969d047bb4e9e51112d1ff61c69d9029730b0cffe3097f29de815328f8e191b2d69ccddc90b11787d10c9231e6a1da45f453c0eb31a6453b8713b542dd364aa909625ba224ac9d6cb1a940c0ba3f4cd1de7e72b83a3d558dde508d1e43bbed74538fadaaae875d463afe41a192ac650a278e141fa6444629561500d033d69cb37eae8aefd6187059e8a71d0611b93267e702e70d26de4c3b0ff5b1f0aae43f5d1580ad34c8391489283a7b852b918951116391f85d87b06e7fa4bd43183f6ba2605eab0acaecd3176761851d9615a53c450b2129ec46d5b9735d5f76b3b7416b14fdfb42678b53daa5351bc6cf6a9695957d90f4d9e84d2d1fb385be0370fc01f3732ef5eb34e6f70e6a19637fa604f754380c4158d62d6a8f955cdc10064a2f13af7cab0ee501d1743fd8100e439e143e2f437121117986e617abb28d18ccdc687c234e1ba6a894b7fa94b8fbbeb49fe992dde38a9885f099a8d0da931e6a403244442d7c48763d90b8d2a3b201fd76bd6da6df91f8fcf6da573cb421f4538b863f6aeb12f1ab418e4c8f799607ba88ab1c248a3d25a6435e42cfae313efc4b99b455fb413f0d694a5386eb92c6a17581a76b7b982fc9244b9dd3725f8baf0de49808d9bd292ea98e5a73ddc3cbd2b9000a54c07d12573abccf883821a0409337d8db6e365914a81db3996c9b95c29998e38bafe9a7d6493436563cab039b48063bb92622947680579f1492551c9e603a5062afdaecfd9c9e5f271714cf15d1e4f7e4cbf40a81e615e66ab474cde0d9742d875d45844a4a9446b5d3c83e280ace5de885fb6638189178589215829d99d9fdf5a84f4f1ed10025015cebf5f14b3ced0e91cc6faa97c1990996782347de4c3e442836fb7155bee4e1ca8543b4d4138a493790a97fce026c882256fc3a48df472a9b91582d3255448f6cb0e0b1c4eb07bf4836da9257ec9f0389ed7d0fdbc90c6d903896cdebb9d772c9a67f3bf5042f511a03f67504238c3e651ec496d79cf8b8af1d035385bf8e2ba7b45f7e51688afa2bd9ed6c40e2dad59af1530728951ee5014c8294249ecea44350dbf3d719461853e8fe31fe84afbb81cd3454acab973317aed303f52414e22dd2c1beffbee65b2d9cae0365fd247cbe2db90b5add0521d112cac3f443755c1d6cb638f5d77070efe8995ef080af0c843e5fd3bd875f51c16e499457cc17365b021283910d08f3e1dc35462c3c1a898002f0ec4583492f6768f9da392c1d751a9dc2535b8ec8ea520e38cde69496f4ef0e2358f30357fc6a480a3066e6ad1f153b22d9a3c50295454139ece42de9fd8a2b647f9a57c9ea49e1bcca2b00bd7997a758be421f0e39e9d8afd45da38b7a25cba4f6f862ab0fe31300ed4f5c5f40605a72501c1606e4cba0c945e2d24e08c1ae6ee82a6e8c1537507f31ca83b18807d8ee9ea0ddeb1a26415aecde7724b93609f250747f85c2b082b2237c9b58221b0c7d423844b471f141dd7c915098f2a6f8a47bbf0a13a6d83ff3e9c034865c9e5e6d4c4233b873572a2673e1a8dce1f8b32e4fd1d862205a97bfe29227d6ecb887d9a8d9f841857356e4c9ebf7e1aa8b78a072bee170b7cecdd9d2e48b64329d5018c1d03d68142471e9e0ef2097d2eae77d9cc88815252fd65882612c496abd2e362e2750ebdcf8d18123c2de3f3f3497d9bcb2a1baaae5945f0bec0a2e46e87f1db0bc88655bb7b88b538cc40a54f1bbef370a81633770e54a049242845600697f780983ace29f8c93ceefbbe482975d95ba2f6341a17623cdfb9a2661bbb8a25f33d3312dd54b12e2d71e6a863b7685e8c968ac4a7b52bd0e45a5b5eaee60b645e755a4d19fc5a7f7b74608dabe41dfa355de31fc638ff594623c207c3fa60577f6e34a043e80c6ac33cb9b0a204ef26696e26119bac0dabf4a11af4d2032d3a6066817f0b60858c9bd6642e357baecdb8554712c59344759d9ee00da0e7c4c369f31a43c9d537cd13fd00908225f575b739fd55f3926ee35de23657db43ea020737438f9050ec83449021139cea81d02f3b686a1ad4b4165d8f0d9149b41461b6ac9bb949b871ada8c480794af49d96b633305b7ccc3b193c580aa3924f1b40e4ac5d36bb545a8b330992937746423c1727c607f162baabcf9b59ddafabdb936397f32f987e2b00fb1288424ebe61d22fa8a9c1c76b607dd0dd7dbe31ee3ce432ae877e6345401916ce831300fba05ac3d4a00b3b4b3c5944613a5493b19b330c06ce416c804583b77358a283dee15eea164705f3c8e00f777b67d2412f93c910673cd7b3ffb1ac69dc23669842a25241b85edd9a139bb7c4559be64fe64382f14ca08e31d9a11c4eb2a86f3800721c8f6a9444b15dd466691745665a781cda39da65749b6644d611687004775686deff14bd758539dceabc670d8fef15581c5dcecf70c15032f0a51d0d1839f13e2b9d94c3972626861edbf18ac3931ff619b3ca09b1adb3eac9182e5177c240c6f50d7d3dbf99b8b9e2b145de393f4a39b51e9c3673d77e8acce7ed7f4dd0f929676e9da3addde1b42bbfcbc57ca0d6b03cddf83f0f7d32f415b69d2e22fd5d9d2054eab4cae561a9e0624ae6d883078397eb6c0f6e3534046948402f727e198ae6e5f23ad868cebd254d59d9645e1e04e48c1d39146ab4f71d716e13db89a97e106f9b3be48cdfd0a5f6c53ac25ca3a6f0c79bf568d9e493172c24e337ca6de078d0d46c76c73132f73000ba6c699857e17ac40ae82cbdb897a322d7e77b499e76386ffbf120990239873c6d42179490e7358093c8d61ac668b12095330b8de3107194e1851405c5d09f851aae000ec4a82ea7e88d7c5df39a0bdc821cf99895bd43a1100d541ca748bb4e863ccbbc42ce2c510cde10864c0e72e2697b13c11a58e0770651588b84d85be57ec8f1e56ae0140a46ed564f9f6cf0403500713e6d76601e43bbcbb84c206db140c06218ae81dcb211702f3ffcdcf9f4ee5e2ed543aacfa17400d0efdfd3f4921ddf2e59acee8ee921d34693cfa837d5ac2822cff0349d35eef08fcb32c7eaff2c55b9b68db0cef7199f39ccf8f76489e84bcdfcfe7ad577a720b4064dd788568986e955a0ec7f9f25c8f71cb4ea6a88a34e4b4af73207b1ca0eb11cbd30030af519071f12aeed7537aff0e2457c15aa92f584b9e6e2af945e3dec71c28abe5d16e5195f00e46d2223136ec522048337f442ae721b4402c2fc99eb40c45cb14142ec851662df87a925bb6398e2b8a12b52fd93528b41e2e9c68207ed610875707248907bed7827aff7d7b19b8c39e558fdb8ba2010f874d7916d13ec5e6b6e7b03d8206758113079dff17fb681645ecf391301290dbbff1a61ab28d922be22c83e2da8688a623706155b7f5bacc7b173dfeed857b11b7c2286ffb50acf8f740d425cfee30cde2ccc356c3383e0e965192219a356e6e2ab73b1ff00e3bd5b325b626b534194d9e6d4d5dc64c86f8617a7d90790744c86eeba779e87b432024443fd016c403f8"}) [ 2582.760771][ T1131] swap 221184 [ 2582.769546][ T1131] swapcached 0 [ 2582.780600][ T1131] pgpgin 221461 [ 2582.784143][ T1131] pgpgout 221461 [ 2582.793566][ T1131] pgfault 499336 [ 2582.804405][ T1131] pgmajfault 35789 [ 2582.808199][ T1131] inactive_anon 0 [ 2582.811874][ T1131] active_anon 0 [ 2582.830460][ T1131] inactive_file 0 [ 2582.837041][ T1131] active_file 0 [ 2582.840577][ T1131] unevictable 0 [ 2582.844188][ T1131] hierarchical_memory_limit 314572800 [ 2582.872849][ T1131] hierarchical_memsw_limit 9223372036854771712 [ 2582.887345][ T1131] total_cache 0 [ 2582.891015][ T1131] total_rss 0 [ 2582.906727][ T1131] total_rss_huge 0 [ 2582.910616][ T1131] total_shmem 0 [ 2582.915173][ T1131] total_mapped_file 0 [ 2582.919213][ T1131] total_dirty 0 [ 2582.922776][ T1131] total_writeback 0 [ 2582.952404][ T1131] total_workingset_refault_anon 36521 [ 2582.958422][ T1131] total_workingset_refault_file 2 [ 2582.963601][ T1131] total_swap 221184 [ 2582.968799][ T1131] total_swapcached 0 [ 2582.972754][ T1131] total_pgpgin 221461 [ 2582.984474][ T1131] total_pgpgout 221461 [ 2582.988615][ T1131] total_pgfault 499336 [ 2582.992725][ T1131] total_pgmajfault 35789 [ 2583.004217][ T1131] total_inactive_anon 0 [ 2583.024417][ T1131] total_active_anon 0 [ 2583.028497][ T1131] total_inactive_file 0 [ 2583.032705][ T1131] total_active_file 0 [ 2583.065085][ T1131] total_unevictable 0 [ 2583.069165][ T1131] anon_cost 0 [ 2583.072494][ T1131] file_cost 0 [ 2583.086153][ T1131] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1131,uid=0 [ 2583.132200][ T1131] Memory cgroup out of memory: Killed process 1131 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000001c40)=""/4096, &(0x7f0000000000)=0x1000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202e5b0a4c1d458c5b661c479bd7e8d451de461d1829764eb8161fe129c400e8a96923f3403b0e7a2758beaced73a54c27bc7e91316efce4958170717b045c010c4800564255ff8c2d1fc641618305027f76a3d021bdfe6c6a280294b500000000"], 0x6b) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="ca0454045ee6953b8939178c8fcc6199c3aec97a6802625c5b13e6057014539287e46e3e64770fe829007098c26eab88bdfa8d2486b47d21c6c3614d3fb7274924fdd48b27a206723ab2899e1e8148813f2248916e95520b49f1e7f59047f3fefccdcd767e981302c93d10f8bff43b342957fc2d2daf29cf7406e8f6447ab8add1d13d385ac44e80beaccf0dfa06805d28f575a95ea03c38df06f927d5d0612c4d3cdcc3ae92ad", 0xa7}, {&(0x7f00000002c0)="9533e19519ae8f6f1e53bbc9cb72023d99dafd63ac3712e2ae37d89f6bc51e7b7a5e4032de3c8dabd300dd7de06681cba51abe37f8e4e41f9caf9336a90a654f2790c4dd7e8245f5f1258defdf70042c8e1c6c0772a4d6b02de3aa188feba74e9e0dfe52e5fe410073c32e1622b52b9774ec40b483884ff8c71618d650bf22a79ade67eb92e30c8f2836ac501e88d0a4", 0x90}, {&(0x7f0000000380)="07ae7b9f82fe865a7ac2e16d00460537212690354c4fccb0c938a2bb37cb0d613489177bd3ddf47957e5258d71e976e08a5f41122b694b920a32a3a71359d61913ce8113dabd358eae8adb65ee446e6e3c0d4490320b08ec53fef3e50509f6ac4bed57064b3911b5860b6603acea5b49657b9908b574a2b47e25fecf280656f0d1948989075ca24dc19f1c4eb3b5ff7e7d6c2d0e1e44f7f3fda7de0600eb6d296e819e8882ea45a0ad3b688998191f74c6fb2d03d04bb35d270b20e8d5", 0xbd}, {&(0x7f0000000440)="97e04b9f88286d76e820dd44f8730a1867974e168b75c5b17120", 0x1a}, {&(0x7f00000005c0)="49e3f7a9b07e40661efffd7ae560c91b737e6142bf1c9c59678d5ece84aa2ce6f1601feb430259206455edad59fa6bf51a0b2e3c0e7078b54a4a52ee5dd8406b68475814c8f0948951aeb34505c2dbd2c35bdac3cd4cc5444d46f7dbb4403973775a8b341de725816acec2a1f35ba418ac1b44c49c8c7ca1fe43ea0ccf509ec63b84269686314165be33abf2c538a66ea32878f4cd2d794edca8a707925457eaa27aa23d637766d62bf33ac781ee3bdf21c64b2c06bee0863589527691132336aaf97a372b3dff4c569fbc427e658ad50de674a9cbaa94fe2b48e6dce61b6e83c0eef0d5f24869e093f9450b385bb0", 0xef}], 0x5, &(0x7f0000000940)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x33, 0x1, 0xa, [{@loopback, 0x3}, {@local, 0xa870}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x14, 0xc9, 0x0, 0x3, [0x8, 0x94a, 0x9c1, 0x3]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xf0}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xe8) r4 = gettid() sendmsg$nl_generic(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000cc0)={0x3d0, 0x35, 0x800, 0x70bd2c, 0x25dfdbfb, {0x5}, [@nested={0x2dd, 0x148, 0x0, 0x1, [@generic="45cf7ae876ac19b934a0f2c7bed93571ca8a207149dba4a5c379db95ba1bf4d7", @generic="b9f059c57a471c842ea8ba2c24876d3cbc46cf40e4b402a6715333cc55c82a4ed18c4e9c3931b4cd67923d9becb722e9a5f80d9ee35ff2c80e40aeb0faff76a62abb97e1a5d0072ef0bc3deccbafbdbabd212e3dff35b8f4dbd10ebb44aeff8f7a20d2", @generic="61469ad469d38047b7e3d4d129d2bd0ff95a45e7a57d20264c4f9e56ada0b39f36eb81df82ca58891918f2fa1f143ff9ca7186134c5d5821c341096ceb5c3fe390d3b5edc0337e7feafbef09098032715a2ad83fc901b6c5938ea4ccee03effe358ac53f2a0b72f18e55204834e4cf679ec27d4d42f8d846f588e567d70a8328da12613382ff85796c73b6227fa7dcc00d89ed1a358f730f371317bb8fcce972e1d7018ecca207788616845f894f275b2021aa0d2120c7629a772dc4924f05b9b03301c11236dcb31447935ee7b4b981cc8bb63be41ce10acf4c60f3b024bec489b6c9f7e918d3ee40", @generic="e3f09f51bd447fd588b19117d679384e529d3ae3cb39644d4c131846ba4790d16328764416800cdb35edd982c62e86a4f2e7d02a7a225cd99de0573ad466e83c1171d791f12cede9849b00e004d588fc4f6207fa2f2ddc1adf068fba229537d87dcc2c31267a9b0ecbca87eaeee6f9ce8c51f89d7b61af8f14c34747836306bb2d17a7c75cde61951d7cfa4de43c1e96cceb30db64db01f532baf06fbb6348f9c0deb43c6f", @typed={0x4, 0xa3}, @typed={0x8, 0x50, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x6e, 0x0, 0x0, @pid=r4}, @typed={0x14, 0x129, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="faa30f6a5d37bcd6eced3a01ac39ff5492bf088f37523c8a3d8c971aa2db42958cd3de6d9d592b117d134a7622a4fc6c6b269443d646c2f389630b8a97dfcee1fe22801db741dfbfe1e92bd6504bbe9ac2f7", @generic="98bfee0afeebd624b58e4a9cb50a4e34b58d77c04e04e24c113fcdc3b822a04a60f2f7c048540d35e9949721b9b35be1b6ddb3debee35f75061465d6373dab0be5fa4ceaef4e538bdbb3b1c4d034"]}, @nested={0x4, 0xb2}, @generic="c10e127c8b8c70209d11133a634adcdae28258a706e92009888cbaff9a3b546dcb445812a8d8269a0554bf474e0523c350a801cf16ace920e31f3ce75562f7e360ae7f1fe3651e7f42fc250882c8c90ea1ad3d87f33a451bd6592c5e92b958dd80f90f5ac90fd3768256525794f102708bff9fcef756f08929eabb93261e25b6c7b9f866582c7448cc5fd7b8029bd079bc804c245d85208096a40670bd09ff243fb671dc67672137d3104a54743264f953584bfeee6b70d5da6d1933c579cc0e849b84f1bbced76d5368ab0a7074db14549ae5346570"]}, 0x3d0}, 0x1, 0x0, 0x0, 0x1}, 0x8001) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="2fcd50ba310b30a1a89dbdd2de369162f8e0c4fa18516c42db2a9cf3750860de16ae0e926d", 0x25}, {&(0x7f0000000500)="981ddb4e1002d5f12c017004dac109fb41a5dc03994a7d79909b7a72398666d80175abaa2262b2cdcefcd8fc399ec45f472a8641613abe7496566fcca7f6cf1aa8588c7abf56ddf596baf7b5a5ce52956ab8cdd139ea6c09812a596bea87b0c22938e9a0a64024a813fc6349a947273182302c29be8691cfa67eec49be4bdd47eef2d3e631647513d8c53df143eeb035843efb7c23cc31ad9ac517ca3f7c05fd6850", 0xa2}], 0x2}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 2583.856980][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2583.907313][ T5099] CPU: 0 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2583.917739][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2583.927899][ T5099] Call Trace: [ 2583.931257][ T5099] [ 2583.934240][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2583.939081][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2583.944361][ T5099] ? __pfx__printk+0x10/0x10 [ 2583.949023][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2583.953781][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2583.958909][ T5099] dump_header+0xda/0x6a0 [ 2583.963326][ T5099] oom_kill_process+0x3a7/0x930 [ 2583.968260][ T5099] out_of_memory+0xf67/0x1320 [ 2583.973020][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2583.978732][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2583.983836][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2583.989035][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2583.994664][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2583.999771][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2584.005921][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2584.011191][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2584.016199][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2584.021214][ T5099] ? mark_lock+0x9a/0x350 [ 2584.025631][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2584.031204][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2584.037446][ T5099] charge_memcg+0xa2/0x160 [ 2584.042033][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2584.048193][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2584.053729][ T5099] ? mark_lock+0x9a/0x350 [ 2584.058148][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2584.064657][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2584.070113][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2584.076085][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2584.081201][ T5099] ? xas_descend+0x37e/0x470 [ 2584.086314][ T5099] swapin_readahead+0x1ea/0x1070 [ 2584.091319][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2584.096534][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2584.101985][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2584.107353][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2584.112708][ T5099] do_swap_page+0x791/0x3f40 [ 2584.117369][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2584.122222][ T5099] ? do_swap_page+0x154/0x3f40 [ 2584.127053][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2584.132147][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2584.137694][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2584.143608][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2584.148889][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2584.154112][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2584.159666][ T5099] ? mt_find+0x226/0x850 [ 2584.164076][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2584.169462][ T5099] ? mt_find+0x62d/0x850 [ 2584.173811][ T5099] ? mt_find+0x226/0x850 [ 2584.178158][ T5099] ? find_vma+0x142/0x1c0 [ 2584.182564][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2584.187569][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2584.193628][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2584.198474][ T5099] exc_page_fault+0x2ad/0x870 [ 2584.203231][ T5099] asm_exc_page_fault+0x26/0x30 [ 2584.208237][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2584.213422][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2584.233575][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2584.239714][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2584.247749][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2584.255781][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2584.263833][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2584.271866][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2584.279923][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2584.286101][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2584.292504][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2584.298293][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2584.303999][ T5099] do_syscall_64+0x108/0x240 [ 2584.308666][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2584.314627][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2584.319100][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2584.338850][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2584.347332][ T5099] RAX: 0000000000000000 RBX: 0000000000004237 RCX: 00007f0f5b4a91b5 [ 2584.355370][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2584.363589][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2584.371624][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2584.379652][ T5099] R13: 0000000000276b42 R14: 0000000000276b42 R15: 0000000000000000 [ 2584.387700][ T5099] 12:18:13 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x8c010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e01]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x4, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2584.472069][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 119970 [ 2584.479794][ T5099] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0 [ 2584.494860][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2584.521613][ T5099] Memory cgroup stats for /syz0: [ 2584.521783][ T5099] cache 0 [ 2584.540174][ T5099] rss 8192 [ 2584.545026][ T5099] rss_huge 0 [ 2584.550755][ T5099] shmem 0 [ 2584.561945][ T5099] mapped_file 0 [ 2584.571210][ T5099] dirty 0 [ 2584.577746][ T5099] writeback 0 [ 2584.581452][ T5099] workingset_refault_anon 36633 [ 2584.591692][ T5099] workingset_refault_file 2 [ 2584.598581][ T5099] swap 249856 [ 2584.602083][ T5099] swapcached 4096 [ 2584.610679][ T5099] pgpgin 221586 [ 2584.617759][ T5099] pgpgout 221584 [ 2584.624059][ T5099] pgfault 499522 [ 2584.631669][ T5099] pgmajfault 35890 [ 2584.640470][ T5099] inactive_anon 0 [ 2584.644445][ T5099] active_anon 8192 [ 2584.648388][ T5099] inactive_file 0 [ 2584.652249][ T5099] active_file 0 [ 2584.662432][ T5099] unevictable 0 [ 2584.666274][ T5099] hierarchical_memory_limit 314572800 12:18:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async, rerun: 64) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000001c40)=""/4096, &(0x7f0000000000)=0x1000) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202e5b0a4c1d458c5b661c479bd7e8d451de461d1829764eb8161fe129c400e8a96923f3403b0e7a2758beaced73a54c27bc7e91316efce4958170717b045c010c4800564255ff8c2d1fc641618305027f76a3d021bdfe6c6a280294b500000000"], 0x6b) (async) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="ca0454045ee6953b8939178c8fcc6199c3aec97a6802625c5b13e6057014539287e46e3e64770fe829007098c26eab88bdfa8d2486b47d21c6c3614d3fb7274924fdd48b27a206723ab2899e1e8148813f2248916e95520b49f1e7f59047f3fefccdcd767e981302c93d10f8bff43b342957fc2d2daf29cf7406e8f6447ab8add1d13d385ac44e80beaccf0dfa06805d28f575a95ea03c38df06f927d5d0612c4d3cdcc3ae92ad", 0xa7}, {&(0x7f00000002c0)="9533e19519ae8f6f1e53bbc9cb72023d99dafd63ac3712e2ae37d89f6bc51e7b7a5e4032de3c8dabd300dd7de06681cba51abe37f8e4e41f9caf9336a90a654f2790c4dd7e8245f5f1258defdf70042c8e1c6c0772a4d6b02de3aa188feba74e9e0dfe52e5fe410073c32e1622b52b9774ec40b483884ff8c71618d650bf22a79ade67eb92e30c8f2836ac501e88d0a4", 0x90}, {&(0x7f0000000380)="07ae7b9f82fe865a7ac2e16d00460537212690354c4fccb0c938a2bb37cb0d613489177bd3ddf47957e5258d71e976e08a5f41122b694b920a32a3a71359d61913ce8113dabd358eae8adb65ee446e6e3c0d4490320b08ec53fef3e50509f6ac4bed57064b3911b5860b6603acea5b49657b9908b574a2b47e25fecf280656f0d1948989075ca24dc19f1c4eb3b5ff7e7d6c2d0e1e44f7f3fda7de0600eb6d296e819e8882ea45a0ad3b688998191f74c6fb2d03d04bb35d270b20e8d5", 0xbd}, {&(0x7f0000000440)="97e04b9f88286d76e820dd44f8730a1867974e168b75c5b17120", 0x1a}, {&(0x7f00000005c0)="49e3f7a9b07e40661efffd7ae560c91b737e6142bf1c9c59678d5ece84aa2ce6f1601feb430259206455edad59fa6bf51a0b2e3c0e7078b54a4a52ee5dd8406b68475814c8f0948951aeb34505c2dbd2c35bdac3cd4cc5444d46f7dbb4403973775a8b341de725816acec2a1f35ba418ac1b44c49c8c7ca1fe43ea0ccf509ec63b84269686314165be33abf2c538a66ea32878f4cd2d794edca8a707925457eaa27aa23d637766d62bf33ac781ee3bdf21c64b2c06bee0863589527691132336aaf97a372b3dff4c569fbc427e658ad50de674a9cbaa94fe2b48e6dce61b6e83c0eef0d5f24869e093f9450b385bb0", 0xef}], 0x5, &(0x7f0000000940)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x33, 0x1, 0xa, [{@loopback, 0x3}, {@local, 0xa870}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x14, 0xc9, 0x0, 0x3, [0x8, 0x94a, 0x9c1, 0x3]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xf0}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xe8) (async) r4 = gettid() sendmsg$nl_generic(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000cc0)={0x3d0, 0x35, 0x800, 0x70bd2c, 0x25dfdbfb, {0x5}, [@nested={0x2dd, 0x148, 0x0, 0x1, [@generic="45cf7ae876ac19b934a0f2c7bed93571ca8a207149dba4a5c379db95ba1bf4d7", @generic="b9f059c57a471c842ea8ba2c24876d3cbc46cf40e4b402a6715333cc55c82a4ed18c4e9c3931b4cd67923d9becb722e9a5f80d9ee35ff2c80e40aeb0faff76a62abb97e1a5d0072ef0bc3deccbafbdbabd212e3dff35b8f4dbd10ebb44aeff8f7a20d2", @generic="61469ad469d38047b7e3d4d129d2bd0ff95a45e7a57d20264c4f9e56ada0b39f36eb81df82ca58891918f2fa1f143ff9ca7186134c5d5821c341096ceb5c3fe390d3b5edc0337e7feafbef09098032715a2ad83fc901b6c5938ea4ccee03effe358ac53f2a0b72f18e55204834e4cf679ec27d4d42f8d846f588e567d70a8328da12613382ff85796c73b6227fa7dcc00d89ed1a358f730f371317bb8fcce972e1d7018ecca207788616845f894f275b2021aa0d2120c7629a772dc4924f05b9b03301c11236dcb31447935ee7b4b981cc8bb63be41ce10acf4c60f3b024bec489b6c9f7e918d3ee40", @generic="e3f09f51bd447fd588b19117d679384e529d3ae3cb39644d4c131846ba4790d16328764416800cdb35edd982c62e86a4f2e7d02a7a225cd99de0573ad466e83c1171d791f12cede9849b00e004d588fc4f6207fa2f2ddc1adf068fba229537d87dcc2c31267a9b0ecbca87eaeee6f9ce8c51f89d7b61af8f14c34747836306bb2d17a7c75cde61951d7cfa4de43c1e96cceb30db64db01f532baf06fbb6348f9c0deb43c6f", @typed={0x4, 0xa3}, @typed={0x8, 0x50, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x6e, 0x0, 0x0, @pid=r4}, @typed={0x14, 0x129, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="faa30f6a5d37bcd6eced3a01ac39ff5492bf088f37523c8a3d8c971aa2db42958cd3de6d9d592b117d134a7622a4fc6c6b269443d646c2f389630b8a97dfcee1fe22801db741dfbfe1e92bd6504bbe9ac2f7", @generic="98bfee0afeebd624b58e4a9cb50a4e34b58d77c04e04e24c113fcdc3b822a04a60f2f7c048540d35e9949721b9b35be1b6ddb3debee35f75061465d6373dab0be5fa4ceaef4e538bdbb3b1c4d034"]}, @nested={0x4, 0xb2}, @generic="c10e127c8b8c70209d11133a634adcdae28258a706e92009888cbaff9a3b546dcb445812a8d8269a0554bf474e0523c350a801cf16ace920e31f3ce75562f7e360ae7f1fe3651e7f42fc250882c8c90ea1ad3d87f33a451bd6592c5e92b958dd80f90f5ac90fd3768256525794f102708bff9fcef756f08929eabb93261e25b6c7b9f866582c7448cc5fd7b8029bd079bc804c245d85208096a40670bd09ff243fb671dc67672137d3104a54743264f953584bfeee6b70d5da6d1933c579cc0e849b84f1bbced76d5368ab0a7074db14549ae5346570"]}, 0x3d0}, 0x1, 0x0, 0x0, 0x1}, 0x8001) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="2fcd50ba310b30a1a89dbdd2de369162f8e0c4fa18516c42db2a9cf3750860de16ae0e926d", 0x25}, {&(0x7f0000000500)="981ddb4e1002d5f12c017004dac109fb41a5dc03994a7d79909b7a72398666d80175abaa2262b2cdcefcd8fc399ec45f472a8641613abe7496566fcca7f6cf1aa8588c7abf56ddf596baf7b5a5ce52956ab8cdd139ea6c09812a596bea87b0c22938e9a0a64024a813fc6349a947273182302c29be8691cfa67eec49be4bdd47eef2d3e631647513d8c53df143eeb035843efb7c23cc31ad9ac517ca3f7c05fd6850", 0xa2}], 0x2}}], 0x1, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 2584.671877][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2584.685379][ T5099] total_cache 0 [ 2584.689173][ T5099] total_rss 8192 [ 2584.692934][ T5099] total_rss_huge 0 [ 2584.702205][ T5099] total_shmem 0 [ 2584.707266][ T5099] total_mapped_file 0 [ 2584.711448][ T5099] total_dirty 0 [ 2584.751360][ T5099] total_writeback 0 [ 2584.755585][ T5099] total_workingset_refault_anon 36633 [ 2584.761505][ T5099] total_workingset_refault_file 2 [ 2584.774611][ T5099] total_swap 249856 [ 2584.778705][ T5099] total_swapcached 4096 [ 2584.783028][ T5099] total_pgpgin 221586 [ 2584.807176][ T5099] total_pgpgout 221584 [ 2584.820616][ T5099] total_pgfault 499522 [ 2584.835274][ T5099] total_pgmajfault 35890 [ 2584.845405][ T5099] total_inactive_anon 0 [ 2584.849732][ T5099] total_active_anon 8192 [ 2584.854028][ T5099] total_inactive_file 0 [ 2584.874709][ T5099] total_active_file 0 [ 2584.887156][ T5099] total_unevictable 0 [ 2584.901392][ T5099] anon_cost 0 12:18:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000001c40)=""/4096, &(0x7f0000000000)=0x1000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202e5b0a4c1d458c5b661c479bd7e8d451de461d1829764eb8161fe129c400e8a96923f3403b0e7a2758beaced73a54c27bc7e91316efce4958170717b045c010c4800564255ff8c2d1fc641618305027f76a3d021bdfe6c6a280294b500000000"], 0x6b) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)="ca0454045ee6953b8939178c8fcc6199c3aec97a6802625c5b13e6057014539287e46e3e64770fe829007098c26eab88bdfa8d2486b47d21c6c3614d3fb7274924fdd48b27a206723ab2899e1e8148813f2248916e95520b49f1e7f59047f3fefccdcd767e981302c93d10f8bff43b342957fc2d2daf29cf7406e8f6447ab8add1d13d385ac44e80beaccf0dfa06805d28f575a95ea03c38df06f927d5d0612c4d3cdcc3ae92ad", 0xa7}, {&(0x7f00000002c0)="9533e19519ae8f6f1e53bbc9cb72023d99dafd63ac3712e2ae37d89f6bc51e7b7a5e4032de3c8dabd300dd7de06681cba51abe37f8e4e41f9caf9336a90a654f2790c4dd7e8245f5f1258defdf70042c8e1c6c0772a4d6b02de3aa188feba74e9e0dfe52e5fe410073c32e1622b52b9774ec40b483884ff8c71618d650bf22a79ade67eb92e30c8f2836ac501e88d0a4", 0x90}, {&(0x7f0000000380)="07ae7b9f82fe865a7ac2e16d00460537212690354c4fccb0c938a2bb37cb0d613489177bd3ddf47957e5258d71e976e08a5f41122b694b920a32a3a71359d61913ce8113dabd358eae8adb65ee446e6e3c0d4490320b08ec53fef3e50509f6ac4bed57064b3911b5860b6603acea5b49657b9908b574a2b47e25fecf280656f0d1948989075ca24dc19f1c4eb3b5ff7e7d6c2d0e1e44f7f3fda7de0600eb6d296e819e8882ea45a0ad3b688998191f74c6fb2d03d04bb35d270b20e8d5", 0xbd}, {&(0x7f0000000440)="97e04b9f88286d76e820dd44f8730a1867974e168b75c5b17120", 0x1a}, {&(0x7f00000005c0)="49e3f7a9b07e40661efffd7ae560c91b737e6142bf1c9c59678d5ece84aa2ce6f1601feb430259206455edad59fa6bf51a0b2e3c0e7078b54a4a52ee5dd8406b68475814c8f0948951aeb34505c2dbd2c35bdac3cd4cc5444d46f7dbb4403973775a8b341de725816acec2a1f35ba418ac1b44c49c8c7ca1fe43ea0ccf509ec63b84269686314165be33abf2c538a66ea32878f4cd2d794edca8a707925457eaa27aa23d637766d62bf33ac781ee3bdf21c64b2c06bee0863589527691132336aaf97a372b3dff4c569fbc427e658ad50de674a9cbaa94fe2b48e6dce61b6e83c0eef0d5f24869e093f9450b385bb0", 0xef}], 0x5, &(0x7f0000000940)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x33, 0x1, 0xa, [{@loopback, 0x3}, {@local, 0xa870}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x14, 0xc9, 0x0, 0x3, [0x8, 0x94a, 0x9c1, 0x3]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xf0}, 0x8000) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xe8) r4 = gettid() sendmsg$nl_generic(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000cc0)={0x3d0, 0x35, 0x800, 0x70bd2c, 0x25dfdbfb, {0x5}, [@nested={0x2dd, 0x148, 0x0, 0x1, [@generic="45cf7ae876ac19b934a0f2c7bed93571ca8a207149dba4a5c379db95ba1bf4d7", @generic="b9f059c57a471c842ea8ba2c24876d3cbc46cf40e4b402a6715333cc55c82a4ed18c4e9c3931b4cd67923d9becb722e9a5f80d9ee35ff2c80e40aeb0faff76a62abb97e1a5d0072ef0bc3deccbafbdbabd212e3dff35b8f4dbd10ebb44aeff8f7a20d2", @generic="61469ad469d38047b7e3d4d129d2bd0ff95a45e7a57d20264c4f9e56ada0b39f36eb81df82ca58891918f2fa1f143ff9ca7186134c5d5821c341096ceb5c3fe390d3b5edc0337e7feafbef09098032715a2ad83fc901b6c5938ea4ccee03effe358ac53f2a0b72f18e55204834e4cf679ec27d4d42f8d846f588e567d70a8328da12613382ff85796c73b6227fa7dcc00d89ed1a358f730f371317bb8fcce972e1d7018ecca207788616845f894f275b2021aa0d2120c7629a772dc4924f05b9b03301c11236dcb31447935ee7b4b981cc8bb63be41ce10acf4c60f3b024bec489b6c9f7e918d3ee40", @generic="e3f09f51bd447fd588b19117d679384e529d3ae3cb39644d4c131846ba4790d16328764416800cdb35edd982c62e86a4f2e7d02a7a225cd99de0573ad466e83c1171d791f12cede9849b00e004d588fc4f6207fa2f2ddc1adf068fba229537d87dcc2c31267a9b0ecbca87eaeee6f9ce8c51f89d7b61af8f14c34747836306bb2d17a7c75cde61951d7cfa4de43c1e96cceb30db64db01f532baf06fbb6348f9c0deb43c6f", @typed={0x4, 0xa3}, @typed={0x8, 0x50, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x6e, 0x0, 0x0, @pid=r4}, @typed={0x14, 0x129, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="faa30f6a5d37bcd6eced3a01ac39ff5492bf088f37523c8a3d8c971aa2db42958cd3de6d9d592b117d134a7622a4fc6c6b269443d646c2f389630b8a97dfcee1fe22801db741dfbfe1e92bd6504bbe9ac2f7", @generic="98bfee0afeebd624b58e4a9cb50a4e34b58d77c04e04e24c113fcdc3b822a04a60f2f7c048540d35e9949721b9b35be1b6ddb3debee35f75061465d6373dab0be5fa4ceaef4e538bdbb3b1c4d034"]}, @nested={0x4, 0xb2}, @generic="c10e127c8b8c70209d11133a634adcdae28258a706e92009888cbaff9a3b546dcb445812a8d8269a0554bf474e0523c350a801cf16ace920e31f3ce75562f7e360ae7f1fe3651e7f42fc250882c8c90ea1ad3d87f33a451bd6592c5e92b958dd80f90f5ac90fd3768256525794f102708bff9fcef756f08929eabb93261e25b6c7b9f866582c7448cc5fd7b8029bd079bc804c245d85208096a40670bd09ff243fb671dc67672137d3104a54743264f953584bfeee6b70d5da6d1933c579cc0e849b84f1bbced76d5368ab0a7074db14549ae5346570"]}, 0x3d0}, 0x1, 0x0, 0x0, 0x1}, 0x8001) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="2fcd50ba310b30a1a89dbdd2de369162f8e0c4fa18516c42db2a9cf3750860de16ae0e926d", 0x25}, {&(0x7f0000000500)="981ddb4e1002d5f12c017004dac109fb41a5dc03994a7d79909b7a72398666d80175abaa2262b2cdcefcd8fc399ec45f472a8641613abe7496566fcca7f6cf1aa8588c7abf56ddf596baf7b5a5ce52956ab8cdd139ea6c09812a596bea87b0c22938e9a0a64024a813fc6349a947273182302c29be8691cfa67eec49be4bdd47eef2d3e631647513d8c53df143eeb035843efb7c23cc31ad9ac517ca3f7c05fd6850", 0xa2}], 0x2}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 2584.916032][ T5099] file_cost 0 [ 2584.919404][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1145,uid=0 12:18:13 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x854]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2584.950015][ T5099] Memory cgroup out of memory: Killed process 1145 (syz-executor.0) total-vm:54508kB, anon-rss:440kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2585.149657][ T1152] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2585.183927][ T1152] CPU: 0 PID: 1152 Comm: syz-executor.2 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2585.194370][ T1152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2585.204476][ T1152] Call Trace: [ 2585.207806][ T1152] [ 2585.210779][ T1152] dump_stack_lvl+0x1e7/0x2e0 [ 2585.215517][ T1152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2585.220786][ T1152] ? __pfx__printk+0x10/0x10 [ 2585.225431][ T1152] ? ___ratelimit+0x4c4/0x670 [ 2585.230444][ T1152] ? __pfx____ratelimit+0x10/0x10 [ 2585.235553][ T1152] dump_header+0xda/0x6a0 [ 2585.239968][ T1152] oom_kill_process+0x3a7/0x930 [ 2585.244899][ T1152] out_of_memory+0xf67/0x1320 [ 2585.249689][ T1152] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2585.255430][ T1152] ? __pfx___mutex_lock+0x10/0x10 [ 2585.260529][ T1152] ? __pfx_out_of_memory+0x10/0x10 [ 2585.265730][ T1152] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2585.271355][ T1152] ? __pfx_lock_release+0x10/0x10 [ 2585.276469][ T1152] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2585.282606][ T1152] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2585.287873][ T1152] ? mem_cgroup_iter+0x422/0x560 [ 2585.292884][ T1152] try_charge_memcg+0xda2/0x18a0 [ 2585.297917][ T1152] ? __pfx_try_charge_memcg+0x10/0x10 [ 2585.303443][ T1152] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2585.309225][ T1152] ? __pfx_lock_release+0x10/0x10 [ 2585.315195][ T1152] ? memcg_account_kmem+0x1e7/0x210 [ 2585.320489][ T1152] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2585.326362][ T1152] __memcg_kmem_charge_page+0xe1/0x250 [ 2585.331896][ T1152] memcg_charge_kernel_stack+0x3f8/0x550 [ 2585.337614][ T1152] dup_task_struct+0x15d/0x7d0 [ 2585.342498][ T1152] copy_process+0x5d5/0x3fc0 [ 2585.347174][ T1152] ? __might_fault+0xa9/0x120 [ 2585.351925][ T1152] ? __pfx_lock_release+0x10/0x10 [ 2585.357030][ T1152] ? __pfx_copy_process+0x10/0x10 [ 2585.362121][ T1152] ? __might_fault+0xc5/0x120 [ 2585.366879][ T1152] ? __asan_memset+0x23/0x50 [ 2585.371553][ T1152] kernel_clone+0x21d/0x8d0 [ 2585.376135][ T1152] ? __pfx_kernel_clone+0x10/0x10 [ 2585.381245][ T1152] __se_sys_clone3+0x2cb/0x350 [ 2585.386072][ T1152] ? __pfx___se_sys_clone3+0x10/0x10 [ 2585.391456][ T1152] ? do_syscall_64+0x108/0x240 [ 2585.396294][ T1152] ? do_syscall_64+0xb4/0x240 [ 2585.401028][ T1152] do_syscall_64+0xf9/0x240 [ 2585.405587][ T1152] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2585.411536][ T1152] RIP: 0033:0x7f0ef90a9b99 [ 2585.415995][ T1152] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2585.435832][ T1152] RSP: 002b:00007fff4a9fed18 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 12:18:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 2585.444316][ T1152] RAX: ffffffffffffffda RBX: 00007f0ef9052270 RCX: 00007f0ef90a9b99 [ 2585.452349][ T1152] RDX: 00007f0ef9052270 RSI: 0000000000000058 RDI: 00007fff4a9fed60 [ 2585.460379][ T1152] RBP: 00007f0ef9eb56c0 R08: 00007f0ef9eb56c0 R09: 00007fff4a9fee47 [ 2585.468420][ T1152] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2585.476535][ T1152] R13: 000000000000006e R14: 00007fff4a9fed60 R15: 00007fff4a9fee48 [ 2585.484600][ T1152] [ 2585.527837][ T1152] memory: usage 307200kB, limit 307200kB, failcnt 388563 [ 2585.535306][ T1152] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 2585.543399][ T1152] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 12:18:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2585.582336][ T1152] Memory cgroup stats for /syz2: [ 2585.582497][ T1152] cache 4096 [ 2585.613650][ T1152] rss 0 [ 2585.619885][ T1152] rss_huge 0 [ 2585.625931][ T1152] shmem 0 [ 2585.629050][ T1152] mapped_file 0 [ 2585.632674][ T1152] dirty 4096 [ 2585.638458][ T1152] writeback 0 [ 2585.641927][ T1152] workingset_refault_anon 254832 [ 2585.652153][ T1152] workingset_refault_file 3 [ 2585.659502][ T1152] swap 303104 [ 2585.663243][ T1152] swapcached 0 [ 2585.672552][ T1152] pgpgin 435120 [ 2585.677956][ T1152] pgpgout 435119 [ 2585.681680][ T1152] pgfault 749309 [ 2585.690898][ T1152] pgmajfault 251349 [ 2585.696959][ T1152] inactive_anon 0 [ 2585.700754][ T1152] active_anon 0 [ 2585.704961][ T1152] inactive_file 4096 [ 2585.709006][ T1152] active_file 0 [ 2585.712624][ T1152] unevictable 0 [ 2585.728440][ T1152] hierarchical_memory_limit 314572800 [ 2585.734125][ T1152] hierarchical_memsw_limit 9223372036854771712 [ 2585.741159][ T1152] total_cache 4096 [ 2585.757068][ T1152] total_rss 0 [ 2585.764635][ T1152] total_rss_huge 0 [ 2585.770329][ T1152] total_shmem 0 [ 2585.773978][ T1152] total_mapped_file 0 [ 2585.785308][ T1152] total_dirty 4096 [ 2585.789542][ T1152] total_writeback 0 [ 2585.793553][ T1152] total_workingset_refault_anon 254832 [ 2585.805893][ T1152] total_workingset_refault_file 3 [ 2585.811161][ T1152] total_swap 303104 [ 2585.819606][ T1152] total_swapcached 0 [ 2585.823802][ T1152] total_pgpgin 435134 [ 2585.831060][ T1152] total_pgpgout 435133 [ 2585.840124][ T1152] total_pgfault 749325 [ 2585.845278][ T1152] total_pgmajfault 251349 [ 2585.849849][ T1152] total_inactive_anon 0 [ 2585.854312][ T1152] total_active_anon 0 [ 2585.861985][ T1152] total_inactive_file 4096 [ 2585.872574][ T1152] total_active_file 0 [ 2585.878804][ T1152] total_unevictable 0 [ 2585.883012][ T1152] anon_cost 0 [ 2585.891165][ T1152] file_cost 0 [ 2585.897823][ T1152] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1152,uid=0 [ 2585.917872][ T1152] Memory cgroup out of memory: Killed process 1152 (syz-executor.2) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 12:18:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2586.110474][ T5114] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2586.154708][ T5114] CPU: 1 PID: 5114 Comm: syz-executor.2 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2586.165329][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2586.175441][ T5114] Call Trace: [ 2586.178760][ T5114] [ 2586.181751][ T5114] dump_stack_lvl+0x1e7/0x2e0 [ 2586.186591][ T5114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2586.191863][ T5114] ? __pfx__printk+0x10/0x10 [ 2586.196506][ T5114] ? ___ratelimit+0x4c4/0x670 [ 2586.201266][ T5114] ? __pfx____ratelimit+0x10/0x10 [ 2586.206361][ T5114] dump_header+0xda/0x6a0 [ 2586.210756][ T5114] oom_kill_process+0x3a7/0x930 [ 2586.215679][ T5114] out_of_memory+0xf67/0x1320 [ 2586.220422][ T5114] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2586.226112][ T5114] ? __pfx___mutex_lock+0x10/0x10 [ 2586.231173][ T5114] ? __pfx_out_of_memory+0x10/0x10 [ 2586.236750][ T5114] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2586.242318][ T5114] ? __pfx_lock_release+0x10/0x10 [ 2586.247390][ T5114] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2586.253479][ T5114] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2586.258697][ T5114] ? mem_cgroup_iter+0x422/0x560 [ 2586.263657][ T5114] try_charge_memcg+0xda2/0x18a0 [ 2586.268628][ T5114] ? mark_lock+0x9a/0x350 [ 2586.273292][ T5114] ? __pfx_try_charge_memcg+0x10/0x10 [ 2586.278738][ T5114] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2586.284930][ T5114] charge_memcg+0xa2/0x160 [ 2586.289386][ T5114] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2586.295480][ T5114] __read_swap_cache_async+0x480/0x8b0 [ 2586.300953][ T5114] ? mark_lock+0x9a/0x350 [ 2586.305316][ T5114] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2586.311313][ T5114] ? blk_start_plug+0x6f/0x1b0 [ 2586.316111][ T5114] swap_cluster_readahead+0x398/0x810 [ 2586.321510][ T5114] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2586.327530][ T5114] ? __pfx_lock_release+0x10/0x10 [ 2586.332590][ T5114] ? xas_descend+0x37e/0x470 [ 2586.337206][ T5114] swapin_readahead+0x1ea/0x1070 [ 2586.342155][ T5114] ? filemap_get_entry+0x127/0x4e0 [ 2586.347392][ T5114] ? __pfx_swapin_readahead+0x10/0x10 [ 2586.352785][ T5114] ? __filemap_get_folio+0x935/0xbc0 [ 2586.358098][ T5114] ? swap_cache_get_folio+0x9f/0x570 [ 2586.363397][ T5114] do_swap_page+0x791/0x3f40 [ 2586.368064][ T5114] ? __lock_acquire+0x1345/0x1fd0 [ 2586.373162][ T5114] ? rcu_is_watching+0x15/0xb0 [ 2586.377961][ T5114] ? do_swap_page+0x154/0x3f40 [ 2586.382919][ T5114] ? __pfx_do_swap_page+0x10/0x10 [ 2586.387960][ T5114] ? pte_offset_map_nolock+0x137/0x1f0 [ 2586.393530][ T5114] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2586.399407][ T5114] ? __pfx_validate_chain+0x10/0x10 [ 2586.404644][ T5114] __handle_mm_fault+0x15e8/0x72d0 [ 2586.409909][ T5114] ? __pfx___handle_mm_fault+0x10/0x10 [ 2586.415575][ T5114] ? mt_find+0x226/0x850 [ 2586.419839][ T5114] ? __pfx_lock_release+0x10/0x10 [ 2586.425011][ T5114] ? mt_find+0x62d/0x850 [ 2586.429358][ T5114] ? mt_find+0x226/0x850 [ 2586.433675][ T5114] ? find_vma+0x142/0x1c0 [ 2586.438054][ T5114] ? __pfx_find_vma+0x10/0x10 [ 2586.442761][ T5114] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2586.448779][ T5114] handle_mm_fault+0x3c1/0x8a0 [ 2586.453585][ T5114] exc_page_fault+0x2ad/0x870 [ 2586.458284][ T5114] asm_exc_page_fault+0x26/0x30 [ 2586.463241][ T5114] RIP: 0010:__get_user_8+0x11/0x20 [ 2586.468379][ T5114] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2586.488089][ T5114] RSP: 0018:ffffc9000486fd78 EFLAGS: 00050202 [ 2586.494173][ T5114] RAX: 0000555556d30da8 RBX: ffff8880293aee78 RCX: ffffc9000486fc03 [ 2586.502159][ T5114] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2586.511010][ T5114] RBP: ffffc9000486fec0 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2586.519001][ T5114] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000486fd80 [ 2586.526990][ T5114] R13: ffffc9000486ffd8 R14: dffffc0000000000 R15: ffff8880293ad940 [ 2586.534996][ T5114] __rseq_handle_notify_resume+0x158/0x1490 [ 2586.540925][ T5114] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2586.547274][ T5114] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2586.553102][ T5114] irqentry_exit_to_user_mode+0xbb/0x270 [ 2586.558836][ T5114] exc_page_fault+0x587/0x870 [ 2586.563532][ T5114] asm_exc_page_fault+0x26/0x30 [ 2586.568417][ T5114] RIP: 0033:0x7f0ef907a7a4 [ 2586.572853][ T5114] Code: 84 00 00 00 00 00 80 3d 71 57 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 48 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 <89> 54 24 14 48 89 74 24 08 89 7c 24 10 48 89 4c 24 18 e8 d5 a3 02 [ 2586.592564][ T5114] RSP: 002b:00007fff4a9ff130 EFLAGS: 00010206 [ 2586.598659][ T5114] RAX: 00000000000001ce RBX: 0000000000003fa1 RCX: 0000000000000000 [ 2586.606672][ T5114] RDX: 0000000040000001 RSI: 00007fff4a9ff1bc RDI: 00000000ffffffff [ 2586.614682][ T5114] RBP: 00007fff4a9ff1bc R08: 0000000000000010 R09: 00007fff4aae90b0 [ 2586.622947][ T5114] R10: 0000000000000000 R11: 0000000000078e12 R12: 0000000000000032 [ 2586.630938][ T5114] R13: 0000000000276fd9 R14: 0000000000276fd9 R15: 0000000000000000 [ 2586.638944][ T5114] 12:18:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)}}], 0x1, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (async) [ 2586.762159][ T5114] memory: usage 306992kB, limit 307200kB, failcnt 388663 [ 2586.770186][ T5114] memory+swap: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2586.831093][ T5114] kmem: usage 306988kB, limit 9007199254740988kB, failcnt 0 [ 2586.872204][ T5114] Memory cgroup stats for /syz2: [ 2586.872384][ T5114] cache 4096 [ 2586.889155][ T5114] rss 0 [ 2586.892267][ T5114] rss_huge 0 [ 2586.916873][ T5114] shmem 0 [ 2586.919902][ T5114] mapped_file 0 [ 2586.923417][ T5114] dirty 4096 [ 2586.940215][ T5114] writeback 0 [ 2586.947263][ T5114] workingset_refault_anon 254834 [ 2586.959600][ T5114] workingset_refault_file 3 [ 2586.970581][ T5114] swap 241664 [ 2586.978693][ T5114] swapcached 0 [ 2586.987057][ T5114] pgpgin 435122 [ 2586.995328][ T5114] pgpgout 435121 [ 2587.003236][ T5114] pgfault 749313 [ 2587.011579][ T5114] pgmajfault 251351 [ 2587.022113][ T5114] inactive_anon 0 [ 2587.031571][ T5114] active_anon 0 [ 2587.040907][ T5114] inactive_file 4096 [ 2587.050020][ T5114] active_file 0 [ 2587.058185][ T5114] unevictable 0 [ 2587.066426][ T5114] hierarchical_memory_limit 314572800 12:18:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) (async) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 2587.085333][ T5114] hierarchical_memsw_limit 9223372036854771712 [ 2587.091678][ T5114] total_cache 4096 [ 2587.106608][ T5114] total_rss 0 [ 2587.114822][ T5114] total_rss_huge 0 [ 2587.119827][ T5114] total_shmem 0 [ 2587.123353][ T5114] total_mapped_file 0 [ 2587.139578][ T5114] total_dirty 4096 [ 2587.143387][ T5114] total_writeback 0 [ 2587.156533][ T5114] total_workingset_refault_anon 254834 [ 2587.168537][ T5114] total_workingset_refault_file 3 [ 2587.179678][ T5114] total_swap 241664 [ 2587.189752][ T5114] total_swapcached 0 [ 2587.193731][ T5114] total_pgpgin 435136 [ 2587.212970][ T5114] total_pgpgout 435135 [ 2587.223592][ T5114] total_pgfault 749329 [ 2587.233392][ T5114] total_pgmajfault 251351 [ 2587.243971][ T5114] total_inactive_anon 0 [ 2587.253589][ T5114] total_active_anon 0 [ 2587.262805][ T5114] total_inactive_file 4096 [ 2587.272813][ T5114] total_active_file 0 [ 2587.281907][ T5114] total_unevictable 0 [ 2587.291185][ T5114] anon_cost 0 [ 2587.298974][ T5114] file_cost 0 [ 2587.306329][ T5114] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=5114,uid=0 [ 2587.339571][ T5114] Memory cgroup out of memory: Killed process 5114 (syz-executor.2) total-vm:50536kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:0 [ 2587.365172][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2587.448680][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2587.459105][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2587.469231][ T5099] Call Trace: [ 2587.472559][ T5099] [ 2587.475538][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2587.480279][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2587.485534][ T5099] ? __pfx__printk+0x10/0x10 [ 2587.490184][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2587.495022][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2587.500217][ T5099] dump_header+0xda/0x6a0 [ 2587.504620][ T5099] oom_kill_process+0x3a7/0x930 [ 2587.509562][ T5099] out_of_memory+0xf67/0x1320 [ 2587.514313][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2587.520019][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2587.525208][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2587.530404][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2587.536123][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2587.541236][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2587.547477][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2587.552748][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2587.557954][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2587.562963][ T5099] ? mark_lock+0x9a/0x350 [ 2587.567382][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2587.572860][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2587.579084][ T5099] charge_memcg+0xa2/0x160 [ 2587.583746][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2587.589891][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2587.595411][ T5099] ? mark_lock+0x9a/0x350 [ 2587.599812][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2587.605951][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2587.611394][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2587.617461][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2587.622554][ T5099] ? xas_descend+0x37e/0x470 [ 2587.627220][ T5099] swapin_readahead+0x1ea/0x1070 [ 2587.632313][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2587.637534][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2587.643071][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2587.648445][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2587.653799][ T5099] do_swap_page+0x791/0x3f40 [ 2587.658463][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2587.663318][ T5099] ? do_swap_page+0x154/0x3f40 [ 2587.668148][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2587.673260][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2587.678794][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2587.684675][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2587.689953][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2587.695273][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2587.700819][ T5099] ? mt_find+0x226/0x850 [ 2587.705129][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2587.710322][ T5099] ? mt_find+0x62d/0x850 [ 2587.714624][ T5099] ? mt_find+0x226/0x850 [ 2587.718960][ T5099] ? find_vma+0x142/0x1c0 [ 2587.723361][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2587.728897][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2587.734960][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2587.739813][ T5099] exc_page_fault+0x2ad/0x870 [ 2587.744572][ T5099] asm_exc_page_fault+0x26/0x30 [ 2587.749516][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2587.755211][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2587.774872][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2587.781091][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2587.789125][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2587.797250][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2587.805299][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2587.813340][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2587.821392][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2587.827387][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2587.833797][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2587.839590][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2587.845300][ T5099] do_syscall_64+0x108/0x240 [ 2587.849961][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2587.855922][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2587.860398][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2587.880154][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2587.888737][ T5099] RAX: 0000000000000000 RBX: 0000000000004239 RCX: 00007f0f5b4a91b5 [ 2587.896766][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2587.904797][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2587.912827][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2587.920949][ T5099] R13: 00000000002775c1 R14: 00000000002775c1 R15: 0000000000000000 [ 2587.929017][ T5099] [ 2587.944534][ T5099] memory: usage 307192kB, limit 307200kB, failcnt 120333 [ 2587.953118][ T5099] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 2587.974705][ T5099] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2587.988267][ T5099] Memory cgroup stats for /syz0: [ 2587.988431][ T5099] cache 0 12:18:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x8c010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e03]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x4, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2588.004057][ T5099] rss 16384 [ 2588.008067][ T5099] rss_huge 0 [ 2588.011515][ T5099] shmem 0 [ 2588.015327][ T5099] mapped_file 0 [ 2588.019039][ T5099] dirty 0 [ 2588.022215][ T5099] writeback 0 [ 2588.041141][ T5099] workingset_refault_anon 36721 [ 2588.046769][ T5099] workingset_refault_file 2 12:18:16 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2588.051586][ T5099] swap 225280 [ 2588.072609][ T5099] swapcached 20480 12:18:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004811}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x91b38aa55c079322) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x30}}, 0x0) sendto$inet(r0, &(0x7f0000000480)="474fcfc5642071a8ff6eec5ec34edec55536efa395ec284c7e6064d337db5559465f5affd09ae3eb5d0238", 0x2b, 0x880, &(0x7f00000004c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)="7883baf75a4ba2c33a52de7a4668d5b4b2a349728e38602b6371330f873bd8fa0fa09085019719a5d70abd3634613601213ef626a9f5a226c13ee0ed51e782921335c54aa2a16d2a1eef304906273edb8f0a2b73154ad21fe4aba57d5fd388f57d1b2357b68ce05c09d2095a4fc09c2659354d0c3862d76dc583ed50db6a3c7e2dbf0ee35dd7a68c0863bdd054df997e6da43a0f3a0dea0208b18bfe3e1375723e66c6e8a39b954c9a54d99822b5e8683613bf1ec09deb3006a68efe0fa9ce6f627201b315d10283a06b920ac1b8868fe7497dc8a418d57ede714b96bcb88a0836af3d0d0f56", 0xe6}, {&(0x7f0000000840)="88f4932ff0f53be883625f4de0aec5b91c6fe9c01b826ee7931c8b23b714d90dff9a8a868a28194a4820cf00550503417b4aae7bf1d42d89d81c34e440d72b55459b874ba86f3a6634673ea3b37b6caa3f32204b454c90b3cf", 0x59}], 0x2, &(0x7f0000000900)=[@ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x82, 0x12, "f7d6c27869856d59c5bd6bb05b501fe3"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xfd, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbf89}]}, @ra={0x94, 0x4}, @end]}}}], 0x68}}], 0x1, 0x400c410) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000700)="472d5a14c3336058bb90c9bf4abd2c8c", 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000811) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="2fcd50ba310b30a1a89dbdd2de369162f8e0c4fa18516c42db2a9cf3750860de16ae0e926d", 0x25}, {&(0x7f0000000500)="981ddb4e1002d5f12c017004dac109fb41a5dc03994a7d79909b7a72398666d80175abaa2262b2cdcefcd8fc399ec45f472a8641613abe7496566fcca7f6cf1aa8588c7abf56ddf596baf7b5a5ce52956ab8cdd139ea6c09812a596bea87b0c22938e9a0a64024a813fc6349a947273182302c29be8691cfa67eec49be4bdd47eef2d3e631647513d8c53df143eeb035843efb7c23cc31ad9ac517ca3f7c05fd6850", 0xa2}], 0x2}}], 0x1, 0x0) r6 = socket(0x1e, 0x6, 0xffffffff) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400046f7b00000227bd7000fddbdf250008000100030000000800010001000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 2588.154860][ T5099] pgpgin 221691 [ 2588.158419][ T5099] pgpgout 221686 [ 2588.162010][ T5099] pgfault 499677 [ 2588.204924][ T5099] pgmajfault 35973 [ 2588.208750][ T5099] inactive_anon 8192 [ 2588.212698][ T5099] active_anon 4096 [ 2588.259686][ T5099] inactive_file 0 [ 2588.265742][ T5099] active_file 0 [ 2588.269281][ T5099] unevictable 0 [ 2588.272789][ T5099] hierarchical_memory_limit 314572800 [ 2588.361904][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2588.391089][ T5099] total_cache 0 [ 2588.402612][ T5099] total_rss 16384 [ 2588.418280][ T5099] total_rss_huge 0 [ 2588.452560][ T5099] total_shmem 0 [ 2588.459867][ T5099] total_mapped_file 0 [ 2588.468606][ T5099] total_dirty 0 [ 2588.472143][ T5099] total_writeback 0 [ 2588.484502][ T5099] total_workingset_refault_anon 36721 [ 2588.498107][ T5099] total_workingset_refault_file 2 [ 2588.512112][ T5099] total_swap 225280 [ 2588.521349][ T5099] total_swapcached 20480 [ 2588.531939][ T5099] total_pgpgin 221691 [ 2588.561034][ T5099] total_pgpgout 221686 [ 2588.589490][ T5099] total_pgfault 499677 [ 2588.593669][ T5099] total_pgmajfault 35973 [ 2588.603852][ T5099] total_inactive_anon 8192 [ 2588.617720][ T5099] total_active_anon 4096 [ 2588.636075][ T5099] total_inactive_file 0 [ 2588.640323][ T5099] total_active_file 0 [ 2588.658301][ T5099] total_unevictable 0 [ 2588.694746][ T5099] anon_cost 0 [ 2588.698115][ T5099] file_cost 0 [ 2588.701449][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1175,uid=0 12:18:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2588.790803][ T5099] Memory cgroup out of memory: Killed process 1175 (syz-executor.0) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x8c010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7202]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x4, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54080000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004811}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x91b38aa55c079322) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x30}}, 0x0) sendto$inet(r0, &(0x7f0000000480)="474fcfc5642071a8ff6eec5ec34edec55536efa395ec284c7e6064d337db5559465f5affd09ae3eb5d0238", 0x2b, 0x880, &(0x7f00000004c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)="7883baf75a4ba2c33a52de7a4668d5b4b2a349728e38602b6371330f873bd8fa0fa09085019719a5d70abd3634613601213ef626a9f5a226c13ee0ed51e782921335c54aa2a16d2a1eef304906273edb8f0a2b73154ad21fe4aba57d5fd388f57d1b2357b68ce05c09d2095a4fc09c2659354d0c3862d76dc583ed50db6a3c7e2dbf0ee35dd7a68c0863bdd054df997e6da43a0f3a0dea0208b18bfe3e1375723e66c6e8a39b954c9a54d99822b5e8683613bf1ec09deb3006a68efe0fa9ce6f627201b315d10283a06b920ac1b8868fe7497dc8a418d57ede714b96bcb88a0836af3d0d0f56", 0xe6}, {&(0x7f0000000840)="88f4932ff0f53be883625f4de0aec5b91c6fe9c01b826ee7931c8b23b714d90dff9a8a868a28194a4820cf00550503417b4aae7bf1d42d89d81c34e440d72b55459b874ba86f3a6634673ea3b37b6caa3f32204b454c90b3cf", 0x59}], 0x2, &(0x7f0000000900)=[@ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x82, 0x12, "f7d6c27869856d59c5bd6bb05b501fe3"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xfd, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbf89}]}, @ra={0x94, 0x4}, @end]}}}], 0x68}}], 0x1, 0x400c410) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000700)="472d5a14c3336058bb90c9bf4abd2c8c", 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000811) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="2fcd50ba310b30a1a89dbdd2de369162f8e0c4fa18516c42db2a9cf3750860de16ae0e926d", 0x25}, {&(0x7f0000000500)="981ddb4e1002d5f12c017004dac109fb41a5dc03994a7d79909b7a72398666d80175abaa2262b2cdcefcd8fc399ec45f472a8641613abe7496566fcca7f6cf1aa8588c7abf56ddf596baf7b5a5ce52956ab8cdd139ea6c09812a596bea87b0c22938e9a0a64024a813fc6349a947273182302c29be8691cfa67eec49be4bdd47eef2d3e631647513d8c53df143eeb035843efb7c23cc31ad9ac517ca3f7c05fd6850", 0xa2}], 0x2}}], 0x1, 0x0) r6 = socket(0x1e, 0x6, 0xffffffff) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400046f7b00000227bd7000fddbdf250008000100030000000800010001000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 2589.219006][T21432] bridge_slave_1: left allmulticast mode [ 2589.270387][T21432] bridge_slave_1: left promiscuous mode [ 2589.283258][T21432] bridge0: port 2(bridge_slave_1) entered disabled state [ 2589.330393][T21432] bridge_slave_0: left allmulticast mode [ 2589.350655][T21432] bridge_slave_0: left promiscuous mode [ 2589.376896][T21432] bridge0: port 1(bridge_slave_0) entered disabled state [ 2589.391457][ T1198] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2589.475148][ T1198] CPU: 0 PID: 1198 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2589.485660][ T1198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2589.495771][ T1198] Call Trace: [ 2589.499103][ T1198] [ 2589.502083][ T1198] dump_stack_lvl+0x1e7/0x2e0 [ 2589.506825][ T1198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2589.512086][ T1198] ? __pfx__printk+0x10/0x10 [ 2589.516729][ T1198] ? ___ratelimit+0x4c4/0x670 [ 2589.521484][ T1198] ? __pfx____ratelimit+0x10/0x10 [ 2589.526941][ T1198] dump_header+0xda/0x6a0 [ 2589.531359][ T1198] oom_kill_process+0x3a7/0x930 [ 2589.536292][ T1198] out_of_memory+0xf67/0x1320 [ 2589.541059][ T1198] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2589.546764][ T1198] ? __pfx___mutex_lock+0x10/0x10 [ 2589.552049][ T1198] ? __pfx_out_of_memory+0x10/0x10 [ 2589.557244][ T1198] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2589.562909][ T1198] ? __pfx_lock_release+0x10/0x10 [ 2589.568028][ T1198] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2589.574174][ T1198] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2589.579444][ T1198] ? mem_cgroup_iter+0x422/0x560 [ 2589.584455][ T1198] try_charge_memcg+0xda2/0x18a0 [ 2589.589484][ T1198] ? __pfx_try_charge_memcg+0x10/0x10 [ 2589.595014][ T1198] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2589.600813][ T1198] ? __pfx_lock_release+0x10/0x10 [ 2589.605914][ T1198] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2589.611970][ T1198] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2589.617843][ T1198] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2589.623719][ T1198] obj_cgroup_charge+0x389/0x630 [ 2589.628725][ T1198] ? obj_cgroup_charge+0x121/0x630 [ 2589.634001][ T1198] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2589.639538][ T1198] ? kmalloc_trace+0x4e/0x360 [ 2589.644293][ T1198] ? __pfx___might_resched+0x10/0x10 [ 2589.649656][ T1198] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2589.655542][ T1198] ? copy_semundo+0xb5/0x240 [ 2589.660204][ T1198] kmalloc_trace+0x216/0x360 [ 2589.664863][ T1198] ? __asan_memcpy+0x40/0x70 [ 2589.669619][ T1198] copy_semundo+0xb5/0x240 [ 2589.674094][ T1198] copy_process+0x1bc3/0x3fc0 [ 2589.678976][ T1198] ? copy_process+0x9c3/0x3fc0 [ 2589.683824][ T1198] ? __pfx_copy_process+0x10/0x10 [ 2589.688906][ T1198] ? __might_fault+0xc5/0x120 [ 2589.693645][ T1198] ? __asan_memset+0x23/0x50 [ 2589.698310][ T1198] kernel_clone+0x21d/0x8d0 [ 2589.702885][ T1198] ? __pfx_kernel_clone+0x10/0x10 [ 2589.707990][ T1198] __se_sys_clone3+0x2cb/0x350 [ 2589.712827][ T1198] ? __pfx___se_sys_clone3+0x10/0x10 [ 2589.719007][ T1198] ? do_syscall_64+0x108/0x240 [ 2589.724104][ T1198] ? do_syscall_64+0xb4/0x240 [ 2589.728874][ T1198] do_syscall_64+0xf9/0x240 [ 2589.733459][ T1198] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2589.739601][ T1198] RIP: 0033:0x7f0f5b4a9b99 [ 2589.744090][ T1198] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2589.764454][ T1198] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2589.773032][ T1198] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2589.782028][ T1198] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2589.790167][ T1198] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2589.798635][ T1198] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2589.806667][ T1198] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2589.814709][ T1198] [ 2590.236153][ T1198] memory: usage 307200kB, limit 307200kB, failcnt 120604 [ 2590.268514][ T1198] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 2590.301533][ T1198] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2590.327082][ T1198] Memory cgroup stats for /syz0: [ 2590.327252][ T1198] cache 0 [ 2590.373805][ T1198] rss 8192 [ 2590.391472][ T1198] rss_huge 0 [ 2590.404110][ T1198] shmem 0 [ 2590.418375][ T1198] mapped_file 0 [ 2590.434664][ T1198] dirty 0 [ 2590.442309][ T1198] writeback 0 [ 2590.457405][ T1198] workingset_refault_anon 36804 [ 2590.472798][ T1198] workingset_refault_file 2 [ 2590.491580][ T1198] swap 258048 [ 2590.500856][ T1198] swapcached 8192 [ 2590.513098][ T1198] pgpgin 221788 [ 2590.523928][ T1198] pgpgout 221786 [ 2590.542489][ T1198] pgfault 499821 [ 2590.553338][ T1198] pgmajfault 36047 [ 2590.564235][ T1198] inactive_anon 0 [ 2590.577980][ T1198] active_anon 8192 [ 2590.589857][ T1198] inactive_file 0 [ 2590.601600][ T1198] active_file 0 [ 2590.611485][ T1198] unevictable 0 [ 2590.623192][ T1198] hierarchical_memory_limit 314572800 [ 2590.640695][ T1198] hierarchical_memsw_limit 9223372036854771712 [ 2590.658815][ T1198] total_cache 0 [ 2590.669324][ T1198] total_rss 8192 [ 2590.679844][ T1198] total_rss_huge 0 [ 2590.690617][ T1198] total_shmem 0 [ 2590.702602][ T1198] total_mapped_file 0 [ 2590.714226][ T1198] total_dirty 0 [ 2590.726249][ T1198] total_writeback 0 [ 2590.739406][ T1198] total_workingset_refault_anon 36804 [ 2590.757231][ T1198] total_workingset_refault_file 2 [ 2590.770469][ T1198] total_swap 258048 [ 2590.782525][ T1198] total_swapcached 8192 [ 2590.794071][ T1198] total_pgpgin 221788 [ 2590.808185][ T1198] total_pgpgout 221786 [ 2590.821532][ T1198] total_pgfault 499821 [ 2590.832897][ T1198] total_pgmajfault 36047 [ 2590.848573][ T1198] total_inactive_anon 0 [ 2590.860572][ T1198] total_active_anon 8192 [ 2590.874742][ T1198] total_inactive_file 0 [ 2590.888338][ T1198] total_active_file 0 [ 2590.901550][ T1198] total_unevictable 0 [ 2590.915967][ T1198] anon_cost 0 [ 2590.928702][ T1198] file_cost 0 [ 2590.939087][ T1198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1198,uid=0 [ 2590.991527][ T1198] Memory cgroup out of memory: Killed process 1198 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2591.051767][ T5104] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2591.107023][ T5104] CPU: 0 PID: 5104 Comm: syz-executor.4 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2591.117475][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2591.127587][ T5104] Call Trace: [ 2591.131013][ T5104] [ 2591.134006][ T5104] dump_stack_lvl+0x1e7/0x2e0 [ 2591.138864][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2591.144136][ T5104] ? __pfx__printk+0x10/0x10 [ 2591.148782][ T5104] ? ___ratelimit+0x4c4/0x670 [ 2591.153508][ T5104] ? __pfx____ratelimit+0x10/0x10 [ 2591.158918][ T5104] dump_header+0xda/0x6a0 [ 2591.163365][ T5104] oom_kill_process+0x3a7/0x930 [ 2591.168258][ T5104] out_of_memory+0xf67/0x1320 [ 2591.172962][ T5104] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2591.178619][ T5104] ? __pfx___mutex_lock+0x10/0x10 [ 2591.183670][ T5104] ? __pfx_out_of_memory+0x10/0x10 [ 2591.188810][ T5104] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2591.194380][ T5104] ? __pfx_lock_release+0x10/0x10 [ 2591.199523][ T5104] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2591.205620][ T5104] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2591.210834][ T5104] ? mem_cgroup_iter+0x3e9/0x560 [ 2591.215795][ T5104] try_charge_memcg+0xda2/0x18a0 [ 2591.220837][ T5104] ? mark_lock+0x9a/0x350 [ 2591.225212][ T5104] ? __pfx_try_charge_memcg+0x10/0x10 [ 2591.230718][ T5104] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2591.236978][ T5104] charge_memcg+0xa2/0x160 [ 2591.241420][ T5104] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2591.247511][ T5104] __read_swap_cache_async+0x480/0x8b0 [ 2591.252984][ T5104] ? mark_lock+0x9a/0x350 [ 2591.257358][ T5104] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2591.263363][ T5104] swap_cluster_readahead+0x67c/0x810 [ 2591.268760][ T5104] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2591.274674][ T5104] ? __pfx_lock_release+0x10/0x10 [ 2591.279724][ T5104] ? xas_descend+0x37e/0x470 [ 2591.284340][ T5104] swapin_readahead+0x1ea/0x1070 [ 2591.289301][ T5104] ? filemap_get_entry+0x127/0x4e0 [ 2591.294450][ T5104] ? __pfx_swapin_readahead+0x10/0x10 [ 2591.299841][ T5104] ? __filemap_get_folio+0x935/0xbc0 [ 2591.305156][ T5104] ? swap_cache_get_folio+0x9f/0x570 [ 2591.310459][ T5104] do_swap_page+0x791/0x3f40 [ 2591.315070][ T5104] ? __lock_acquire+0x1345/0x1fd0 [ 2591.320119][ T5104] ? rcu_is_watching+0x15/0xb0 [ 2591.324919][ T5104] ? do_swap_page+0x154/0x3f40 [ 2591.329801][ T5104] ? __pfx_do_swap_page+0x10/0x10 [ 2591.334848][ T5104] ? pte_offset_map_nolock+0x137/0x1f0 [ 2591.340333][ T5104] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2591.346174][ T5104] ? __pfx_validate_chain+0x10/0x10 [ 2591.351394][ T5104] __handle_mm_fault+0x15e8/0x72d0 [ 2591.356555][ T5104] ? __pfx___handle_mm_fault+0x10/0x10 [ 2591.362042][ T5104] ? mt_find+0x226/0x850 [ 2591.366310][ T5104] ? __pfx_lock_release+0x10/0x10 [ 2591.371377][ T5104] ? mt_find+0x62d/0x850 [ 2591.375639][ T5104] ? mt_find+0x226/0x850 [ 2591.379921][ T5104] ? find_vma+0x142/0x1c0 [ 2591.384447][ T5104] ? __pfx_find_vma+0x10/0x10 [ 2591.389144][ T5104] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2591.395217][ T5104] handle_mm_fault+0x3c1/0x8a0 [ 2591.400013][ T5104] exc_page_fault+0x2ad/0x870 [ 2591.404716][ T5104] asm_exc_page_fault+0x26/0x30 [ 2591.409704][ T5104] RIP: 0010:__get_user_8+0x11/0x20 [ 2591.414834][ T5104] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2591.434642][ T5104] RSP: 0018:ffffc900047cfd78 EFLAGS: 00050202 [ 2591.440741][ T5104] RAX: 0000555556e73da8 RBX: ffff8880183132f8 RCX: ffffc900047cfc03 [ 2591.448729][ T5104] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2591.456715][ T5104] RBP: ffffc900047cfec0 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2591.464734][ T5104] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc900047cfd80 [ 2591.472720][ T5104] R13: ffffc900047cffd8 R14: dffffc0000000000 R15: ffff888018311dc0 [ 2591.480726][ T5104] __rseq_handle_notify_resume+0x158/0x1490 [ 2591.486653][ T5104] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2591.493011][ T5104] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2591.498838][ T5104] irqentry_exit_to_user_mode+0xbb/0x270 [ 2591.504488][ T5104] exc_page_fault+0x587/0x870 [ 2591.509185][ T5104] asm_exc_page_fault+0x26/0x30 [ 2591.514051][ T5104] RIP: 0033:0x7f6f5b8a4c15 [ 2591.518574][ T5104] Code: 00 00 f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b 66 2e 0f 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 8b 90 [ 2591.538287][ T5104] RSP: 002b:00007fff3bf17ce8 EFLAGS: 00010297 [ 2591.544387][ T5104] RAX: 0000000000000002 RBX: 0000000000003e99 RCX: 0000000000000000 [ 2591.552377][ T5104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556e73788 [ 2591.560361][ T5104] RBP: 00007fff3bf17dbc R08: 0000000000000000 R09: 00007fff3bfdf0b0 [ 2591.568344][ T5104] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2591.576326][ T5104] R13: 0000000000278254 R14: 0000000000277e24 R15: 0000000000000004 [ 2591.584325][ T5104] [ 2591.619340][ T5104] memory: usage 307200kB, limit 307200kB, failcnt 400828 [ 2591.638185][ T5104] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 2591.699793][ T5104] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 2591.722749][ T5104] Memory cgroup stats for /syz4: [ 2591.723566][ T5104] cache 0 [ 2591.759981][ T5104] rss 4096 [ 2591.769479][ T5104] rss_huge 0 [ 2591.781337][ T5104] shmem 0 [ 2591.794089][ T5104] mapped_file 0 [ 2591.812812][ T5104] dirty 0 [ 2591.826500][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.833150][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.836186][ T5104] writeback 0 [ 2591.842764][ T5104] workingset_refault_anon 273491 [ 2591.874794][ T5104] workingset_refault_file 63 [ 2591.879478][ T5104] swap 249856 [ 2591.882804][ T5104] swapcached 4096 [ 2591.911453][ T5104] pgpgin 456134 [ 2591.916011][ T5104] pgpgout 456133 [ 2591.919726][ T5104] pgfault 747126 [ 2591.923423][ T5104] pgmajfault 260394 [ 2591.927833][ T5104] inactive_anon 0 [ 2591.931559][ T5104] active_anon 4096 [ 2591.935863][ T5104] inactive_file 0 [ 2591.939705][ T5104] active_file 0 [ 2591.943345][ T5104] unevictable 0 [ 2591.947501][ T5104] hierarchical_memory_limit 314572800 [ 2591.953066][ T5104] hierarchical_memsw_limit 9223372036854771712 [ 2591.960100][ T5104] total_cache 0 [ 2591.963948][ T5104] total_rss 4096 [ 2591.968154][ T5104] total_rss_huge 0 [ 2591.972061][ T5104] total_shmem 0 [ 2591.976225][ T5104] total_mapped_file 0 [ 2591.980631][ T5104] total_dirty 0 [ 2591.984248][ T5104] total_writeback 0 [ 2591.988331][ T5104] total_workingset_refault_anon 273491 [ 2591.994875][ T5104] total_workingset_refault_file 63 [ 2592.000287][ T5104] total_swap 249856 [ 2592.004256][ T5104] total_swapcached 4096 [ 2592.008770][ T5104] total_pgpgin 456134 [ 2592.013301][ T5104] total_pgpgout 456133 [ 2592.018118][ T5104] total_pgfault 747126 [ 2592.022356][ T5104] total_pgmajfault 260394 [ 2592.028753][ T5104] total_inactive_anon 0 [ 2592.033087][ T5104] total_active_anon 4096 [ 2592.041980][ T5104] total_inactive_file 0 [ 2592.062303][ T5104] total_active_file 0 [ 2592.082819][ T5104] total_unevictable 0 [ 2592.093804][ T5104] anon_cost 0 [ 2592.106829][ T5104] file_cost 0 [ 2592.122769][ T5104] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=1190,uid=0 [ 2592.175954][ T5104] Memory cgroup out of memory: Killed process 1190 (syz-executor.4) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 12:18:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5683398b]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2592.486010][ T1205] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2592.502403][ T1205] CPU: 1 PID: 1205 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2592.512826][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2592.523028][ T1205] Call Trace: [ 2592.526363][ T1205] [ 2592.529342][ T1205] dump_stack_lvl+0x1e7/0x2e0 [ 2592.534102][ T1205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2592.539361][ T1205] ? __pfx__printk+0x10/0x10 [ 2592.544005][ T1205] ? ___ratelimit+0x4c4/0x670 [ 2592.548756][ T1205] ? __pfx____ratelimit+0x10/0x10 [ 2592.553868][ T1205] dump_header+0xda/0x6a0 [ 2592.558286][ T1205] oom_kill_process+0x3a7/0x930 [ 2592.563212][ T1205] out_of_memory+0xf67/0x1320 [ 2592.567973][ T1205] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2592.573672][ T1205] ? __pfx___mutex_lock+0x10/0x10 [ 2592.579643][ T1205] ? __pfx_out_of_memory+0x10/0x10 [ 2592.584946][ T1205] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2592.590575][ T1205] ? __pfx_lock_release+0x10/0x10 [ 2592.595683][ T1205] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2592.601832][ T1205] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2592.607114][ T1205] ? mem_cgroup_iter+0x422/0x560 [ 2592.612140][ T1205] try_charge_memcg+0xda2/0x18a0 [ 2592.617180][ T1205] ? __pfx_try_charge_memcg+0x10/0x10 [ 2592.622632][ T1205] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2592.628419][ T1205] ? __pfx_lock_release+0x10/0x10 [ 2592.633525][ T1205] ? memcg_account_kmem+0x1e7/0x210 [ 2592.638816][ T1205] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2592.644713][ T1205] __memcg_kmem_charge_page+0xe1/0x250 [ 2592.650247][ T1205] memcg_charge_kernel_stack+0x304/0x550 [ 2592.655963][ T1205] dup_task_struct+0x15d/0x7d0 [ 2592.660888][ T1205] copy_process+0x5d5/0x3fc0 [ 2592.665567][ T1205] ? __might_fault+0xa9/0x120 [ 2592.670333][ T1205] ? __pfx_lock_release+0x10/0x10 [ 2592.675434][ T1205] ? __pfx_copy_process+0x10/0x10 [ 2592.680611][ T1205] ? __might_fault+0xc5/0x120 [ 2592.685369][ T1205] ? __asan_memset+0x23/0x50 [ 2592.690042][ T1205] kernel_clone+0x21d/0x8d0 [ 2592.694704][ T1205] ? __pfx_kernel_clone+0x10/0x10 [ 2592.699812][ T1205] __se_sys_clone3+0x2cb/0x350 [ 2592.704655][ T1205] ? __pfx___se_sys_clone3+0x10/0x10 [ 2592.710020][ T1205] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2592.716112][ T1205] ? exc_page_fault+0x587/0x870 [ 2592.721031][ T1205] ? do_syscall_64+0xb4/0x240 [ 2592.725772][ T1205] do_syscall_64+0xf9/0x240 [ 2592.730864][ T1205] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2592.736830][ T1205] RIP: 0033:0x7f0f5b4a9b99 [ 2592.741308][ T1205] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2592.760976][ T1205] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2592.769461][ T1205] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2592.777497][ T1205] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2592.785530][ T1205] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2592.793563][ T1205] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2592.801591][ T1205] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2592.809737][ T1205] [ 2592.824110][ T1205] memory: usage 307200kB, limit 307200kB, failcnt 120827 [ 2592.831886][ T1205] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2592.856334][ T1205] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2592.876345][ T1205] Memory cgroup stats for /syz0: [ 2592.876522][ T1205] cache 0 [ 2592.900157][ T1205] rss 12288 [ 2592.903354][ T1205] rss_huge 0 [ 2592.920939][ T1205] shmem 0 [ 2592.929313][ T1205] mapped_file 0 [ 2592.932854][ T1205] dirty 0 [ 2592.947541][ T1205] writeback 0 [ 2592.951089][ T1205] workingset_refault_anon 36876 [ 2592.974522][ T1205] workingset_refault_file 2 [ 2592.979117][ T1205] swap 208896 [ 2592.982471][ T1205] swapcached 8192 [ 2593.004656][ T1205] pgpgin 221871 [ 2593.008200][ T1205] pgpgout 221868 [ 2593.011786][ T1205] pgfault 499938 [ 2593.036391][ T1205] pgmajfault 36099 [ 2593.040187][ T1205] inactive_anon 4096 [ 2593.044116][ T1205] active_anon 8192 [ 2593.070684][ T1205] inactive_file 0 [ 2593.087768][ T1205] active_file 0 [ 2593.091307][ T1205] unevictable 0 [ 2593.111451][ T1205] hierarchical_memory_limit 314572800 [ 2593.131470][ T1205] hierarchical_memsw_limit 9223372036854771712 [ 2593.153146][ T1205] total_cache 0 [ 2593.166568][ T1205] total_rss 12288 [ 2593.180390][ T1205] total_rss_huge 0 [ 2593.184189][ T1205] total_shmem 0 [ 2593.205979][ T1205] total_mapped_file 0 [ 2593.210102][ T1205] total_dirty 0 [ 2593.213769][ T1205] total_writeback 0 [ 2593.239687][ T1205] total_workingset_refault_anon 36876 [ 2593.258815][ T1205] total_workingset_refault_file 2 [ 2593.278162][ T1205] total_swap 208896 [ 2593.282070][ T1205] total_swapcached 8192 [ 2593.295560][ T1205] total_pgpgin 221871 [ 2593.300314][ T1205] total_pgpgout 221868 [ 2593.309961][ T1205] total_pgfault 499938 [ 2593.314113][ T1205] total_pgmajfault 36099 [ 2593.332935][ T1205] total_inactive_anon 4096 [ 2593.356972][ T1205] total_active_anon 8192 [ 2593.379296][ T1205] total_inactive_file 0 [ 2593.383629][ T1205] total_active_file 0 [ 2593.405327][ T1205] total_unevictable 0 [ 2593.409688][ T1205] anon_cost 0 [ 2593.413029][ T1205] file_cost 0 [ 2593.430828][ T1205] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1205,uid=0 [ 2593.463771][ T1205] Memory cgroup out of memory: Killed process 1205 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a020000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2593.785929][ T1210] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2593.798384][ T1210] CPU: 0 PID: 1210 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2593.808864][ T1210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2593.819074][ T1210] Call Trace: [ 2593.822397][ T1210] [ 2593.825364][ T1210] dump_stack_lvl+0x1e7/0x2e0 [ 2593.830100][ T1210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2593.835349][ T1210] ? __pfx__printk+0x10/0x10 [ 2593.840003][ T1210] ? ___ratelimit+0x4c4/0x670 [ 2593.844764][ T1210] ? __pfx____ratelimit+0x10/0x10 [ 2593.849873][ T1210] dump_header+0xda/0x6a0 [ 2593.854346][ T1210] oom_kill_process+0x3a7/0x930 [ 2593.859238][ T1210] out_of_memory+0xf67/0x1320 [ 2593.863965][ T1210] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2593.869623][ T1210] ? __pfx___mutex_lock+0x10/0x10 [ 2593.874686][ T1210] ? __pfx_out_of_memory+0x10/0x10 [ 2593.879838][ T1210] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2593.885405][ T1210] ? __pfx_lock_release+0x10/0x10 [ 2593.890451][ T1210] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2593.896546][ T1210] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2593.901773][ T1210] ? mem_cgroup_iter+0x422/0x560 [ 2593.906815][ T1210] try_charge_memcg+0xda2/0x18a0 [ 2593.911780][ T1210] ? mark_lock+0x9a/0x350 [ 2593.916152][ T1210] ? __pfx_try_charge_memcg+0x10/0x10 [ 2593.921570][ T1210] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2593.927744][ T1210] charge_memcg+0xa2/0x160 [ 2593.932268][ T1210] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2593.938531][ T1210] __read_swap_cache_async+0x480/0x8b0 [ 2593.944001][ T1210] ? mark_lock+0x9a/0x350 [ 2593.948351][ T1210] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2593.954361][ T1210] swap_cluster_readahead+0x67c/0x810 [ 2593.959862][ T1210] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2593.965773][ T1210] ? __pfx_lock_release+0x10/0x10 [ 2593.970836][ T1210] ? xas_descend+0x37e/0x470 [ 2593.975478][ T1210] swapin_readahead+0x1ea/0x1070 [ 2593.980429][ T1210] ? filemap_get_entry+0x127/0x4e0 [ 2593.985576][ T1210] ? __pfx_swapin_readahead+0x10/0x10 [ 2593.990965][ T1210] ? __filemap_get_folio+0x935/0xbc0 [ 2593.996279][ T1210] ? swap_cache_get_folio+0x9f/0x570 [ 2594.001581][ T1210] do_swap_page+0x791/0x3f40 [ 2594.006190][ T1210] ? rcu_is_watching+0x15/0xb0 [ 2594.010988][ T1210] ? do_swap_page+0x154/0x3f40 [ 2594.015766][ T1210] ? __pfx_do_swap_page+0x10/0x10 [ 2594.020812][ T1210] ? pte_offset_map_nolock+0x137/0x1f0 [ 2594.026299][ T1210] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2594.032126][ T1210] ? __pfx_validate_chain+0x10/0x10 [ 2594.037345][ T1210] __handle_mm_fault+0x15e8/0x72d0 [ 2594.042678][ T1210] ? __pfx___handle_mm_fault+0x10/0x10 [ 2594.048207][ T1210] ? mt_find+0x226/0x850 [ 2594.052465][ T1210] ? __pfx_lock_release+0x10/0x10 [ 2594.057529][ T1210] ? mt_find+0x62d/0x850 [ 2594.061785][ T1210] ? mt_find+0x226/0x850 [ 2594.066069][ T1210] ? find_vma+0x142/0x1c0 [ 2594.070415][ T1210] ? __pfx_find_vma+0x10/0x10 [ 2594.075629][ T1210] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2594.081639][ T1210] handle_mm_fault+0x3c1/0x8a0 [ 2594.086439][ T1210] exc_page_fault+0x2ad/0x870 [ 2594.091138][ T1210] asm_exc_page_fault+0x26/0x30 [ 2594.096008][ T1210] RIP: 0010:__put_user_4+0x11/0x20 [ 2594.101129][ T1210] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 2594.120837][ T1210] RSP: 0018:ffffc9000319fbd8 EFLAGS: 00050206 [ 2594.126925][ T1210] RAX: 000000000000423f RBX: 0000000000000000 RCX: 00007f0f5c2c8990 [ 2594.134909][ T1210] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2594.142915][ T1210] RBP: ffffc9000319fd10 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2594.150927][ T1210] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000319fd78 [ 2594.158917][ T1210] R13: 00000000003d0f00 R14: ffffc9000319fc40 R15: dffffc0000000000 [ 2594.166929][ T1210] kernel_clone+0x363/0x8d0 [ 2594.171529][ T1210] ? __pfx_kernel_clone+0x10/0x10 [ 2594.176587][ T1210] __se_sys_clone3+0x2cb/0x350 [ 2594.181373][ T1210] ? __pfx___se_sys_clone3+0x10/0x10 [ 2594.186965][ T1210] ? do_syscall_64+0x108/0x240 [ 2594.191747][ T1210] ? do_syscall_64+0xb4/0x240 [ 2594.196444][ T1210] do_syscall_64+0xf9/0x240 [ 2594.200976][ T1210] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2594.206912][ T1210] RIP: 0033:0x7f0f5b4a9b99 [ 2594.211357][ T1210] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2594.231091][ T1210] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2594.239539][ T1210] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2594.247523][ T1210] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2594.255505][ T1210] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2594.263487][ T1210] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2594.271508][ T1210] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2594.279520][ T1210] [ 2594.393714][ T30] oom_reaper: reaped process 1190 (syz-executor.4), now anon-rss:24kB, file-rss:8084kB, shmem-rss:0kB [ 2594.486543][ T1210] memory: usage 307200kB, limit 307200kB, failcnt 120975 [ 2594.497405][ T1210] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2594.508655][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2594.517857][ T1210] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2594.521181][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2594.535418][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2594.544237][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2594.552838][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2594.554846][ T1210] Memory cgroup stats for [ 2594.561725][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2594.576714][ T1210] /syz0: [ 2594.576869][ T1210] cache 0 [ 2594.582916][ T1210] rss 40960 [ 2594.608052][ T1210] rss_huge 0 [ 2594.611338][ T1210] shmem 0 [ 2594.614317][ T1210] mapped_file 0 [ 2594.617999][ T1210] dirty 0 [ 2594.620974][ T1210] writeback 0 [ 2594.624295][ T1210] workingset_refault_anon 36928 [ 2594.635000][ T1210] workingset_refault_file 2 [ 2594.639591][ T1210] swap 221184 [ 2594.642929][ T1210] swapcached 24576 [ 2594.652943][ T1210] pgpgin 221936 [ 2594.657888][ T1210] pgpgout 221926 [ 2594.661630][ T1210] pgfault 500042 [ 2594.670065][ T1210] pgmajfault 36148 [ 2594.673992][ T1210] inactive_anon 0 [ 2594.678350][ T1210] active_anon 40960 [ 2594.683545][ T1210] inactive_file 0 [ 2594.692288][ T1210] active_file 0 [ 2594.696030][ T1210] unevictable 0 [ 2594.700115][ T1210] hierarchical_memory_limit 314572800 [ 2594.726337][ T1210] hierarchical_memsw_limit 9223372036854771712 [ 2594.732588][ T1210] total_cache 0 [ 2594.740328][ T1210] total_rss 40960 [ 2594.744036][ T1210] total_rss_huge 0 [ 2594.757404][ T1210] total_shmem 0 [ 2594.760954][ T1210] total_mapped_file 0 [ 2594.775735][ T1210] total_dirty 0 [ 2594.779287][ T1210] total_writeback 0 [ 2594.783115][ T1210] total_workingset_refault_anon 36928 [ 2594.804936][ T1210] total_workingset_refault_file 2 [ 2594.810031][ T1210] total_swap 221184 [ 2594.813885][ T1210] total_swapcached 24576 [ 2594.835218][ T1210] total_pgpgin 221936 [ 2594.839291][ T1210] total_pgpgout 221926 [ 2594.843415][ T1210] total_pgfault 500042 [ 2594.863680][ T1210] total_pgmajfault 36148 [ 2594.877043][ T1210] total_inactive_anon 0 [ 2594.881303][ T1210] total_active_anon 40960 [ 2594.895470][ T1210] total_inactive_file 0 [ 2594.899713][ T1210] total_active_file 0 [ 2594.903738][ T1210] total_unevictable 0 [ 2594.925924][ T1210] anon_cost 0 [ 2594.929292][ T1210] file_cost 0 [ 2594.932620][ T1210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1210,uid=0 [ 2594.974832][ T1210] Memory cgroup out of memory: Killed process 1210 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2595.759139][ T1217] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2595.788436][ T1217] CPU: 0 PID: 1217 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2595.798860][ T1217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2595.808964][ T1217] Call Trace: [ 2595.812285][ T1217] [ 2595.815250][ T1217] dump_stack_lvl+0x1e7/0x2e0 [ 2595.819979][ T1217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2595.825218][ T1217] ? __pfx__printk+0x10/0x10 [ 2595.829913][ T1217] ? ___ratelimit+0x4c4/0x670 [ 2595.834619][ T1217] ? __pfx____ratelimit+0x10/0x10 [ 2595.839674][ T1217] dump_header+0xda/0x6a0 [ 2595.844033][ T1217] oom_kill_process+0x3a7/0x930 [ 2595.848911][ T1217] out_of_memory+0xf67/0x1320 [ 2595.853613][ T1217] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2595.859266][ T1217] ? __pfx___mutex_lock+0x10/0x10 [ 2595.864316][ T1217] ? __pfx_out_of_memory+0x10/0x10 [ 2595.869464][ T1217] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2595.875034][ T1217] ? __pfx_lock_release+0x10/0x10 [ 2595.880110][ T1217] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2595.886204][ T1217] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2595.891422][ T1217] ? mem_cgroup_iter+0x422/0x560 [ 2595.896731][ T1217] try_charge_memcg+0xda2/0x18a0 [ 2595.901717][ T1217] ? __pfx_try_charge_memcg+0x10/0x10 [ 2595.907111][ T1217] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2595.912846][ T1217] ? __pfx_lock_release+0x10/0x10 [ 2595.917901][ T1217] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2595.923911][ T1217] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2595.929649][ T1217] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2595.935566][ T1217] obj_cgroup_charge+0x389/0x630 [ 2595.940615][ T1217] ? obj_cgroup_charge+0x121/0x630 [ 2595.945757][ T1217] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2595.951579][ T1217] ? kmalloc_trace+0x4e/0x360 [ 2595.956277][ T1217] ? __pfx___might_resched+0x10/0x10 [ 2595.961589][ T1217] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2595.967602][ T1217] ? copy_semundo+0xb5/0x240 [ 2595.972213][ T1217] kmalloc_trace+0x216/0x360 [ 2595.976846][ T1217] ? __asan_memcpy+0x40/0x70 [ 2595.981470][ T1217] copy_semundo+0xb5/0x240 [ 2595.985917][ T1217] copy_process+0x1bc3/0x3fc0 [ 2595.990624][ T1217] ? copy_process+0x9c3/0x3fc0 [ 2595.995505][ T1217] ? __pfx_copy_process+0x10/0x10 [ 2596.000578][ T1217] ? __might_fault+0xc5/0x120 [ 2596.005658][ T1217] ? __asan_memset+0x23/0x50 [ 2596.010297][ T1217] kernel_clone+0x21d/0x8d0 [ 2596.014843][ T1217] ? __pfx_kernel_clone+0x10/0x10 [ 2596.019906][ T1217] __se_sys_clone3+0x2cb/0x350 [ 2596.024700][ T1217] ? __pfx___se_sys_clone3+0x10/0x10 [ 2596.030027][ T1217] ? do_syscall_64+0x108/0x240 [ 2596.034808][ T1217] ? do_syscall_64+0xb4/0x240 [ 2596.039522][ T1217] do_syscall_64+0xf9/0x240 [ 2596.044046][ T1217] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2596.049959][ T1217] RIP: 0033:0x7f0f5b4a9b99 [ 2596.054391][ T1217] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2596.074018][ T1217] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2596.082451][ T1217] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2596.090536][ T1217] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2596.098548][ T1217] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2596.106551][ T1217] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2596.114544][ T1217] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2596.122580][ T1217] [ 2596.151227][ T1217] memory: usage 307200kB, limit 307200kB, failcnt 121460 [ 2596.158714][ T1217] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 2596.177983][ T1217] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2596.194030][ T1217] Memory cgroup stats for /syz0: [ 2596.194210][ T1217] cache 0 [ 2596.203695][ T1217] rss 0 [ 2596.212335][ T1217] rss_huge 0 [ 2596.216306][ T1217] shmem 0 [ 2596.221225][ T1217] mapped_file 0 [ 2596.226943][ T1217] dirty 0 [ 2596.234967][ T1217] writeback 0 [ 2596.238648][ T1217] workingset_refault_anon 37015 [ 2596.243542][ T1217] workingset_refault_file 2 [ 2596.263925][ T1217] swap 262144 [ 2596.268034][ T1217] swapcached 0 [ 2596.271468][ T1217] pgpgin 222034 [ 2596.281518][ T1217] pgpgout 222034 [ 2596.286019][ T1217] pgfault 500196 [ 2596.289623][ T1217] pgmajfault 36226 [ 2596.293377][ T1217] inactive_anon 0 [ 2596.303898][ T1217] active_anon 0 [ 2596.312705][ T1217] inactive_file 0 [ 2596.331062][ T1217] active_file 0 [ 2596.339883][ T1217] unevictable 0 [ 2596.343427][ T1217] hierarchical_memory_limit 314572800 [ 2596.361675][ T1217] hierarchical_memsw_limit 9223372036854771712 [ 2596.377273][ T1217] total_cache 0 [ 2596.380806][ T1217] total_rss 0 [ 2596.384109][ T1217] total_rss_huge 0 [ 2596.402241][ T1217] total_shmem 0 [ 2596.411615][ T1217] total_mapped_file 0 [ 2596.424156][ T1217] total_dirty 0 [ 2596.433364][ T1217] total_writeback 0 [ 2596.442515][ T1217] total_workingset_refault_anon 37015 [ 2596.457727][ T1217] total_workingset_refault_file 2 [ 2596.462837][ T1217] total_swap 262144 [ 2596.479017][ T1217] total_swapcached 0 [ 2596.482995][ T1217] total_pgpgin 222034 [ 2596.497172][ T1217] total_pgpgout 222034 [ 2596.501317][ T1217] total_pgfault 500196 [ 2596.517405][ T1217] total_pgmajfault 36226 [ 2596.522046][ T1217] total_inactive_anon 0 [ 2596.537946][ T1217] total_active_anon 0 [ 2596.542016][ T1217] total_inactive_file 0 [ 2596.557089][ T1217] total_active_file 0 [ 2596.561160][ T1217] total_unevictable 0 [ 2596.602895][ T1217] anon_cost 0 [ 2596.611480][ T1217] file_cost 0 [ 2596.619644][ T1217] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1217,uid=0 [ 2596.655069][ T1217] Memory cgroup out of memory: Killed process 1217 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2596.684595][ T5101] Bluetooth: hci4: command 0x0409 tx timeout 12:18:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2597.227004][ T1220] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2597.257831][ T1220] CPU: 0 PID: 1220 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2597.268263][ T1220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2597.278465][ T1220] Call Trace: [ 2597.281788][ T1220] [ 2597.284778][ T1220] dump_stack_lvl+0x1e7/0x2e0 [ 2597.289524][ T1220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2597.294775][ T1220] ? __pfx__printk+0x10/0x10 [ 2597.299414][ T1220] ? ___ratelimit+0x4c4/0x670 [ 2597.304155][ T1220] ? __pfx____ratelimit+0x10/0x10 [ 2597.309248][ T1220] dump_header+0xda/0x6a0 [ 2597.313641][ T1220] oom_kill_process+0x3a7/0x930 [ 2597.318564][ T1220] out_of_memory+0xf67/0x1320 [ 2597.323315][ T1220] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2597.329109][ T1220] ? __pfx___mutex_lock+0x10/0x10 [ 2597.334385][ T1220] ? __pfx_out_of_memory+0x10/0x10 [ 2597.339588][ T1220] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2597.345207][ T1220] ? __pfx_lock_release+0x10/0x10 [ 2597.350302][ T1220] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2597.356411][ T1220] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2597.361635][ T1220] ? mem_cgroup_iter+0x422/0x560 [ 2597.366691][ T1220] try_charge_memcg+0xda2/0x18a0 [ 2597.371671][ T1220] ? __pfx_try_charge_memcg+0x10/0x10 [ 2597.377060][ T1220] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2597.382794][ T1220] ? __pfx_lock_release+0x10/0x10 [ 2597.387851][ T1220] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2597.393857][ T1220] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2597.399596][ T1220] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2597.405426][ T1220] obj_cgroup_charge+0x389/0x630 [ 2597.410478][ T1220] ? obj_cgroup_charge+0x121/0x630 [ 2597.415601][ T1220] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2597.421073][ T1220] ? kmalloc_trace+0x4e/0x360 [ 2597.425768][ T1220] ? __pfx___might_resched+0x10/0x10 [ 2597.431188][ T1220] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2597.437022][ T1220] ? copy_semundo+0xb5/0x240 [ 2597.441628][ T1220] kmalloc_trace+0x216/0x360 [ 2597.447119][ T1220] ? __asan_memcpy+0x40/0x70 [ 2597.451737][ T1220] copy_semundo+0xb5/0x240 [ 2597.456172][ T1220] copy_process+0x1bc3/0x3fc0 [ 2597.460903][ T1220] ? copy_process+0x9c3/0x3fc0 [ 2597.465686][ T1220] ? __pfx_copy_process+0x10/0x10 [ 2597.470727][ T1220] ? __might_fault+0xc5/0x120 [ 2597.475426][ T1220] ? __asan_memset+0x23/0x50 [ 2597.480076][ T1220] kernel_clone+0x21d/0x8d0 [ 2597.484657][ T1220] ? __pfx_kernel_clone+0x10/0x10 [ 2597.489807][ T1220] __se_sys_clone3+0x2cb/0x350 [ 2597.494589][ T1220] ? __might_fault+0xa9/0x120 [ 2597.499294][ T1220] ? __pfx___se_sys_clone3+0x10/0x10 [ 2597.504634][ T1220] ? do_syscall_64+0x108/0x240 [ 2597.509500][ T1220] ? do_syscall_64+0xb4/0x240 [ 2597.514194][ T1220] do_syscall_64+0xf9/0x240 [ 2597.518720][ T1220] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2597.524812][ T1220] RIP: 0033:0x7f0f5b4a9b99 [ 2597.529349][ T1220] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2597.549066][ T1220] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2597.557503][ T1220] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2597.565490][ T1220] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2597.573478][ T1220] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2597.581464][ T1220] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2597.589451][ T1220] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2597.597451][ T1220] [ 2597.829495][ T1220] memory: usage 307200kB, limit 307200kB, failcnt 121781 [ 2597.852266][ T1220] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 2597.876302][ T1220] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2597.898811][ T1220] Memory cgroup stats for /syz0: [ 2597.899401][ T1220] cache 0 [ 2597.914662][ T1220] rss 0 [ 2597.917508][ T1220] rss_huge 0 [ 2597.920738][ T1220] shmem 0 [ 2597.923710][ T1220] mapped_file 0 [ 2597.942008][ T1220] dirty 0 [ 2597.949185][ T1220] writeback 0 [ 2597.952572][ T1220] workingset_refault_anon 37103 [ 2597.967350][ T1220] workingset_refault_file 2 [ 2597.971941][ T1220] swap 237568 [ 2597.985116][ T1220] swapcached 4096 [ 2597.992906][ T1220] pgpgin 222133 [ 2598.001525][ T1220] pgpgout 222132 [ 2598.009650][ T1220] pgfault 500345 [ 2598.018331][ T1220] pgmajfault 36309 [ 2598.022119][ T1220] inactive_anon 0 [ 2598.034874][ T1220] active_anon 0 [ 2598.038432][ T1220] inactive_file 0 [ 2598.042101][ T1220] active_file 0 [ 2598.055166][ T1220] unevictable 0 [ 2598.058845][ T1220] hierarchical_memory_limit 314572800 [ 2598.066996][ T1220] hierarchical_memsw_limit 9223372036854771712 [ 2598.081829][ T1220] total_cache 0 [ 2598.086739][ T1220] total_rss 0 [ 2598.090215][ T1220] total_rss_huge 0 [ 2598.094173][ T1220] total_shmem 0 [ 2598.098866][ T1220] total_mapped_file 0 [ 2598.107606][ T1220] total_dirty 0 [ 2598.113633][ T1220] total_writeback 0 [ 2598.119534][ T1220] total_workingset_refault_anon 37103 [ 2598.131408][ T1220] total_workingset_refault_file 2 [ 2598.139013][ T1220] total_swap 237568 [ 2598.148719][ T1220] total_swapcached 4096 [ 2598.153108][ T1220] total_pgpgin 222133 [ 2598.160680][ T1220] total_pgpgout 222132 [ 2598.189008][ T1220] total_pgfault 500345 [ 2598.204174][ T1220] total_pgmajfault 36309 [ 2598.226477][ T1220] total_inactive_anon 0 [ 2598.235120][ T1220] total_active_anon 0 [ 2598.252094][ T1220] total_inactive_file 0 [ 2598.264912][ T1220] total_active_file 0 [ 2598.268997][ T1220] total_unevictable 0 [ 2598.273019][ T1220] anon_cost 0 [ 2598.300137][ T1220] file_cost 0 [ 2598.303526][ T1220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1220,uid=0 [ 2598.325101][ T1220] Memory cgroup out of memory: Killed process 1220 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72020000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2598.785046][ T5101] Bluetooth: hci4: command 0x041b tx timeout [ 2598.837693][ T1221] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2598.850441][ T1221] CPU: 0 PID: 1221 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2598.860840][ T1221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2598.870952][ T1221] Call Trace: [ 2598.874271][ T1221] [ 2598.877244][ T1221] dump_stack_lvl+0x1e7/0x2e0 [ 2598.881973][ T1221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2598.887318][ T1221] ? __pfx__printk+0x10/0x10 [ 2598.892136][ T1221] ? ___ratelimit+0x4c4/0x670 [ 2598.896901][ T1221] ? __pfx____ratelimit+0x10/0x10 [ 2598.901994][ T1221] dump_header+0xda/0x6a0 [ 2598.906441][ T1221] oom_kill_process+0x3a7/0x930 [ 2598.911366][ T1221] out_of_memory+0xf67/0x1320 [ 2598.916096][ T1221] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2598.921757][ T1221] ? __pfx___mutex_lock+0x10/0x10 [ 2598.926809][ T1221] ? __pfx_out_of_memory+0x10/0x10 [ 2598.931959][ T1221] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2598.937535][ T1221] ? __pfx_lock_release+0x10/0x10 [ 2598.942673][ T1221] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2598.948770][ T1221] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2598.953983][ T1221] ? mem_cgroup_iter+0x422/0x560 [ 2598.958947][ T1221] try_charge_memcg+0xda2/0x18a0 [ 2598.963929][ T1221] ? __pfx_try_charge_memcg+0x10/0x10 [ 2598.969408][ T1221] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2598.975155][ T1221] ? __pfx_lock_release+0x10/0x10 [ 2598.980207][ T1221] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2598.986215][ T1221] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2598.991951][ T1221] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2598.997772][ T1221] obj_cgroup_charge+0x389/0x630 [ 2599.002732][ T1221] ? obj_cgroup_charge+0x121/0x630 [ 2599.007881][ T1221] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2599.013639][ T1221] ? kmalloc_trace+0x4e/0x360 [ 2599.018360][ T1221] ? __pfx___might_resched+0x10/0x10 [ 2599.023681][ T1221] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2599.029868][ T1221] ? copy_semundo+0xb5/0x240 [ 2599.034491][ T1221] kmalloc_trace+0x216/0x360 [ 2599.039205][ T1221] ? __asan_memcpy+0x40/0x70 [ 2599.043817][ T1221] copy_semundo+0xb5/0x240 [ 2599.048259][ T1221] copy_process+0x1bc3/0x3fc0 [ 2599.053049][ T1221] ? copy_process+0x9c3/0x3fc0 [ 2599.057835][ T1221] ? __pfx_copy_process+0x10/0x10 [ 2599.062875][ T1221] ? __might_fault+0xc5/0x120 [ 2599.067578][ T1221] ? __asan_memset+0x23/0x50 [ 2599.072196][ T1221] kernel_clone+0x21d/0x8d0 [ 2599.076720][ T1221] ? __pfx_kernel_clone+0x10/0x10 [ 2599.081773][ T1221] __se_sys_clone3+0x2cb/0x350 [ 2599.086557][ T1221] ? __pfx___se_sys_clone3+0x10/0x10 [ 2599.091896][ T1221] ? do_syscall_64+0x108/0x240 [ 2599.096680][ T1221] ? do_syscall_64+0xb4/0x240 [ 2599.101372][ T1221] do_syscall_64+0xf9/0x240 [ 2599.105893][ T1221] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2599.111803][ T1221] RIP: 0033:0x7f0f5b4a9b99 [ 2599.116231][ T1221] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2599.136287][ T1221] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2599.144809][ T1221] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2599.153321][ T1221] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2599.161395][ T1221] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2599.169381][ T1221] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2599.177451][ T1221] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2599.185452][ T1221] [ 2599.211011][ T1221] memory: usage 307200kB, limit 307200kB, failcnt 122057 [ 2599.227475][ T1221] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 2599.248726][ T1221] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2599.268694][ T1221] Memory cgroup stats for /syz0: [ 2599.268869][ T1221] cache 0 [ 2599.287762][ T1221] rss 0 [ 2599.290620][ T1221] rss_huge 0 [ 2599.293844][ T1221] shmem 0 [ 2599.308616][ T1221] mapped_file 0 [ 2599.312180][ T1221] dirty 0 [ 2599.328434][ T1221] writeback 0 [ 2599.331803][ T1221] workingset_refault_anon 37195 [ 2599.337296][ T1221] workingset_refault_file 2 [ 2599.341858][ T1221] swap 253952 [ 2599.351830][ T1221] swapcached 0 [ 2599.355711][ T1221] pgpgin 222236 [ 2599.359397][ T1221] pgpgout 222236 [ 2599.362984][ T1221] pgfault 500507 [ 2599.375282][ T1221] pgmajfault 36397 [ 2599.379090][ T1221] inactive_anon 0 [ 2599.383463][ T1221] active_anon 0 [ 2599.392203][ T1221] inactive_file 0 [ 2599.396347][ T1221] active_file 0 [ 2599.399876][ T1221] unevictable 0 [ 2599.403370][ T1221] hierarchical_memory_limit 314572800 [ 2599.415589][ T1221] hierarchical_memsw_limit 9223372036854771712 [ 2599.421825][ T1221] total_cache 0 [ 2599.450766][ T1221] total_rss 0 [ 2599.454151][ T1221] total_rss_huge 0 [ 2599.472802][ T1221] total_shmem 0 [ 2599.481976][ T1221] total_mapped_file 0 [ 2599.491865][ T1221] total_dirty 0 [ 2599.498479][ T1221] total_writeback 0 [ 2599.502356][ T1221] total_workingset_refault_anon 37195 [ 2599.519222][ T1221] total_workingset_refault_file 2 [ 2599.529855][ T1221] total_swap 253952 [ 2599.533930][ T1221] total_swapcached 0 [ 2599.546816][ T1221] total_pgpgin 222236 [ 2599.550872][ T1221] total_pgpgout 222236 [ 2599.563997][ T1221] total_pgfault 500507 [ 2599.574479][ T1221] total_pgmajfault 36397 [ 2599.578818][ T1221] total_inactive_anon 0 [ 2599.583364][ T1221] total_active_anon 0 [ 2599.602203][ T1221] total_inactive_file 0 [ 2599.611371][ T1221] total_active_file 0 [ 2599.620931][ T1221] total_unevictable 0 [ 2599.629125][ T1221] anon_cost 0 [ 2599.632498][ T1221] file_cost 0 [ 2599.643781][ T1221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1221,uid=0 [ 2599.677286][ T1221] Memory cgroup out of memory: Killed process 1221 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2600.354214][ T1224] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2600.386126][ T1224] CPU: 1 PID: 1224 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2600.396556][ T1224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2600.406930][ T1224] Call Trace: [ 2600.410265][ T1224] [ 2600.413234][ T1224] dump_stack_lvl+0x1e7/0x2e0 [ 2600.417969][ T1224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2600.423235][ T1224] ? __pfx__printk+0x10/0x10 [ 2600.427974][ T1224] ? ___ratelimit+0x4c4/0x670 [ 2600.432826][ T1224] ? __pfx____ratelimit+0x10/0x10 [ 2600.437942][ T1224] dump_header+0xda/0x6a0 [ 2600.442348][ T1224] oom_kill_process+0x3a7/0x930 [ 2600.447877][ T1224] out_of_memory+0xf67/0x1320 [ 2600.452591][ T1224] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2600.458250][ T1224] ? __pfx___mutex_lock+0x10/0x10 [ 2600.463296][ T1224] ? __pfx_out_of_memory+0x10/0x10 [ 2600.468438][ T1224] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2600.474262][ T1224] ? __pfx_lock_release+0x10/0x10 [ 2600.479304][ T1224] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2600.485394][ T1224] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2600.490605][ T1224] ? mem_cgroup_iter+0x422/0x560 [ 2600.495570][ T1224] try_charge_memcg+0xda2/0x18a0 [ 2600.500560][ T1224] ? __pfx_try_charge_memcg+0x10/0x10 [ 2600.505955][ T1224] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2600.511687][ T1224] ? __pfx_lock_release+0x10/0x10 [ 2600.516732][ T1224] ? memcg_account_kmem+0x1e7/0x210 [ 2600.521957][ T1224] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2600.527779][ T1224] __memcg_kmem_charge_page+0xe1/0x250 [ 2600.533253][ T1224] memcg_charge_kernel_stack+0x210/0x550 [ 2600.538914][ T1224] dup_task_struct+0x15d/0x7d0 [ 2600.543786][ T1224] copy_process+0x5d5/0x3fc0 [ 2600.548408][ T1224] ? __might_fault+0xa9/0x120 [ 2600.553103][ T1224] ? __pfx_lock_release+0x10/0x10 [ 2600.558153][ T1224] ? __pfx_copy_process+0x10/0x10 [ 2600.563189][ T1224] ? __might_fault+0xc5/0x120 [ 2600.567889][ T1224] ? __asan_memset+0x23/0x50 [ 2600.572516][ T1224] kernel_clone+0x21d/0x8d0 [ 2600.577060][ T1224] ? __pfx_kernel_clone+0x10/0x10 [ 2600.582114][ T1224] __se_sys_clone3+0x2cb/0x350 [ 2600.586899][ T1224] ? __pfx___se_sys_clone3+0x10/0x10 [ 2600.592209][ T1224] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2600.598230][ T1224] ? exc_page_fault+0x587/0x870 [ 2600.603100][ T1224] ? do_syscall_64+0xb4/0x240 [ 2600.607791][ T1224] do_syscall_64+0xf9/0x240 [ 2600.612313][ T1224] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2600.618344][ T1224] RIP: 0033:0x7f0f5b4a9b99 [ 2600.622775][ T1224] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2600.642654][ T1224] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2600.651182][ T1224] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2600.659181][ T1224] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2600.667170][ T1224] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2600.675178][ T1224] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2600.683179][ T1224] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2600.691207][ T1224] [ 2600.702505][ T1224] memory: usage 307200kB, limit 307200kB, failcnt 122441 [ 2600.712523][ T1224] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2600.720987][ T1224] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2600.734553][ T1224] Memory cgroup stats for /syz0: [ 2600.734725][ T1224] cache 0 [ 2600.743223][ T1224] rss 4096 [ 2600.751502][ T1224] rss_huge 0 [ 2600.760474][ T1224] shmem 0 [ 2600.770309][ T1224] mapped_file 0 [ 2600.777924][ T1224] dirty 0 [ 2600.784874][ T1224] writeback 0 [ 2600.796463][ T1224] workingset_refault_anon 37347 [ 2600.814273][ T1224] workingset_refault_file 2 [ 2600.826300][ T1224] swap 217088 [ 2600.833161][ T1224] swapcached 4096 [ 2600.844689][ T1224] pgpgin 222401 [ 2600.852891][ T1224] pgpgout 222400 [ 2600.864491][ T5101] Bluetooth: hci4: command 0x040f tx timeout [ 2600.885599][ T1224] pgfault 500752 [ 2600.889716][ T1224] pgmajfault 36541 [ 2600.895947][ T1224] inactive_anon 0 [ 2600.903212][ T1224] active_anon 4096 [ 2600.908139][ T1224] inactive_file 0 [ 2600.911920][ T1224] active_file 0 [ 2600.917067][ T1224] unevictable 0 [ 2600.923383][ T1224] hierarchical_memory_limit 314572800 [ 2600.929596][ T1224] hierarchical_memsw_limit 9223372036854771712 [ 2600.936638][ T1224] total_cache 0 [ 2600.940273][ T1224] total_rss 4096 [ 2600.944234][ T1224] total_rss_huge 0 [ 2600.949197][ T1224] total_shmem 0 [ 2600.952852][ T1224] total_mapped_file 0 [ 2600.957545][ T1224] total_dirty 0 [ 2600.961181][ T1224] total_writeback 0 [ 2600.965750][ T1224] total_workingset_refault_anon 37347 [ 2600.972560][ T1224] total_workingset_refault_file 2 [ 2600.979254][ T1224] total_swap 217088 [ 2600.983271][ T1224] total_swapcached 4096 [ 2600.988275][ T1224] total_pgpgin 222401 [ 2600.992753][ T1224] total_pgpgout 222400 [ 2600.997753][ T1224] total_pgfault 500752 [ 2601.002041][ T1224] total_pgmajfault 36541 [ 2601.010450][ T1224] total_inactive_anon 0 [ 2601.015235][ T1224] total_active_anon 4096 [ 2601.019647][ T1224] total_inactive_file 0 [ 2601.023950][ T1224] total_active_file 0 [ 2601.030432][ T1224] total_unevictable 0 [ 2601.038041][ T1224] anon_cost 0 [ 2601.041495][ T1224] file_cost 0 [ 2601.045776][ T1224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1224,uid=0 12:18:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2601.061932][ T1224] Memory cgroup out of memory: Killed process 1224 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2601.781069][ T1226] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2601.792232][ T1226] CPU: 0 PID: 1226 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2601.802627][ T1226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2601.812742][ T1226] Call Trace: [ 2601.816065][ T1226] [ 2601.819039][ T1226] dump_stack_lvl+0x1e7/0x2e0 [ 2601.824131][ T1226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2601.829476][ T1226] ? __pfx__printk+0x10/0x10 [ 2601.834129][ T1226] ? ___ratelimit+0x4c4/0x670 [ 2601.838890][ T1226] ? __pfx____ratelimit+0x10/0x10 [ 2601.843973][ T1226] dump_header+0xda/0x6a0 [ 2601.848364][ T1226] oom_kill_process+0x3a7/0x930 [ 2601.853301][ T1226] out_of_memory+0xf67/0x1320 [ 2601.858052][ T1226] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2601.863839][ T1226] ? __pfx___mutex_lock+0x10/0x10 [ 2601.868925][ T1226] ? __pfx_out_of_memory+0x10/0x10 [ 2601.874075][ T1226] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2601.879652][ T1226] ? __pfx_lock_release+0x10/0x10 [ 2601.884707][ T1226] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2601.890894][ T1226] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2601.896259][ T1226] ? mem_cgroup_iter+0x422/0x560 [ 2601.901240][ T1226] try_charge_memcg+0xda2/0x18a0 [ 2601.906652][ T1226] ? __pfx_try_charge_memcg+0x10/0x10 [ 2601.912046][ T1226] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2601.917788][ T1226] ? __pfx_lock_release+0x10/0x10 [ 2601.922888][ T1226] ? memcg_account_kmem+0x1e7/0x210 [ 2601.928128][ T1226] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2601.934401][ T1226] __memcg_kmem_charge_page+0xe1/0x250 [ 2601.939898][ T1226] memcg_charge_kernel_stack+0x304/0x550 [ 2601.945562][ T1226] dup_task_struct+0x15d/0x7d0 [ 2601.950352][ T1226] copy_process+0x5d5/0x3fc0 [ 2601.954971][ T1226] ? __might_fault+0xa9/0x120 [ 2601.959673][ T1226] ? __pfx_lock_release+0x10/0x10 [ 2601.964724][ T1226] ? __pfx_copy_process+0x10/0x10 [ 2601.969762][ T1226] ? __might_fault+0xc5/0x120 [ 2601.974464][ T1226] ? __asan_memset+0x23/0x50 [ 2601.979084][ T1226] kernel_clone+0x21d/0x8d0 [ 2601.983607][ T1226] ? __pfx_kernel_clone+0x10/0x10 [ 2601.988842][ T1226] __se_sys_clone3+0x2cb/0x350 [ 2601.993627][ T1226] ? __pfx___se_sys_clone3+0x10/0x10 [ 2601.998955][ T1226] ? do_syscall_64+0x108/0x240 [ 2602.003738][ T1226] ? do_syscall_64+0xb4/0x240 [ 2602.008692][ T1226] do_syscall_64+0xf9/0x240 [ 2602.013234][ T1226] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2602.019171][ T1226] RIP: 0033:0x7f0f5b4a9b99 [ 2602.023636][ T1226] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2602.044407][ T1226] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2602.052853][ T1226] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2602.060845][ T1226] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2602.068931][ T1226] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2602.076921][ T1226] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2602.084915][ T1226] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2602.092915][ T1226] [ 2602.205097][ T1226] memory: usage 307196kB, limit 307200kB, failcnt 122811 [ 2602.212247][ T1226] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2602.236321][ T1226] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2602.244948][ T1226] Memory cgroup stats for /syz0: [ 2602.245107][ T1226] cache 0 [ 2602.253833][ T1226] rss 12288 [ 2602.257397][ T1226] rss_huge 0 [ 2602.260641][ T1226] shmem 0 [ 2602.263875][ T1226] mapped_file 0 [ 2602.267774][ T1226] dirty 0 [ 2602.270986][ T1226] writeback 0 [ 2602.274522][ T1226] workingset_refault_anon 37501 [ 2602.279602][ T1226] workingset_refault_file 2 [ 2602.284744][ T1226] swap 208896 [ 2602.288850][ T1226] swapcached 4096 [ 2602.292999][ T1226] pgpgin 222566 [ 2602.297364][ T1226] pgpgout 222563 [ 2602.301051][ T1226] pgfault 501011 [ 2602.305533][ T1226] pgmajfault 36689 [ 2602.309490][ T1226] inactive_anon 12288 [ 2602.313603][ T1226] active_anon 0 [ 2602.318145][ T1226] inactive_file 0 [ 2602.322017][ T1226] active_file 0 [ 2602.326435][ T1226] unevictable 0 [ 2602.330130][ T1226] hierarchical_memory_limit 314572800 [ 2602.336806][ T1226] hierarchical_memsw_limit 9223372036854771712 [ 2602.343183][ T1226] total_cache 0 [ 2602.347779][ T1226] total_rss 12288 [ 2602.351585][ T1226] total_rss_huge 0 [ 2602.356154][ T1226] total_shmem 0 [ 2602.359799][ T1226] total_mapped_file 0 [ 2602.363925][ T1226] total_dirty 0 [ 2602.368684][ T1226] total_writeback 0 [ 2602.372650][ T1226] total_workingset_refault_anon 37501 [ 2602.382245][ T1226] total_workingset_refault_file 2 [ 2602.394666][ T1226] total_swap 208896 [ 2602.408790][ T1226] total_swapcached 4096 [ 2602.424282][ T1226] total_pgpgin 222566 [ 2602.433971][ T1226] total_pgpgout 222563 [ 2602.444784][ T1226] total_pgfault 501011 [ 2602.460961][ T1226] total_pgmajfault 36689 [ 2602.481320][ T1226] total_inactive_anon 12288 [ 2602.503705][ T1226] total_active_anon 0 [ 2602.513545][ T1226] total_inactive_file 0 [ 2602.518946][ T1226] total_active_file 0 [ 2602.523196][ T1226] total_unevictable 0 [ 2602.528122][ T1226] anon_cost 0 [ 2602.531667][ T1226] file_cost 0 [ 2602.536037][ T1226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1226,uid=0 [ 2602.553031][ T1226] Memory cgroup out of memory: Killed process 1226 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2602.935037][ T5101] Bluetooth: hci4: command 0x0419 tx timeout [ 2603.267781][ T1231] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2603.288145][ T1231] CPU: 0 PID: 1231 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2603.298691][ T1231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2603.308894][ T1231] Call Trace: [ 2603.312225][ T1231] [ 2603.315201][ T1231] dump_stack_lvl+0x1e7/0x2e0 [ 2603.319925][ T1231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2603.325357][ T1231] ? __pfx__printk+0x10/0x10 [ 2603.329964][ T1231] ? ___ratelimit+0x4c4/0x670 [ 2603.334757][ T1231] ? __pfx____ratelimit+0x10/0x10 [ 2603.339807][ T1231] dump_header+0xda/0x6a0 [ 2603.344167][ T1231] oom_kill_process+0x3a7/0x930 [ 2603.349043][ T1231] out_of_memory+0xf67/0x1320 [ 2603.353754][ T1231] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2603.359408][ T1231] ? __pfx___mutex_lock+0x10/0x10 [ 2603.364468][ T1231] ? __pfx_out_of_memory+0x10/0x10 [ 2603.369607][ T1231] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2603.375171][ T1231] ? __pfx_lock_release+0x10/0x10 [ 2603.380217][ T1231] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2603.386316][ T1231] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2603.391527][ T1231] ? mem_cgroup_iter+0x422/0x560 [ 2603.396486][ T1231] try_charge_memcg+0xda2/0x18a0 [ 2603.401467][ T1231] ? __pfx_try_charge_memcg+0x10/0x10 [ 2603.406861][ T1231] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2603.413554][ T1231] ? __pfx_lock_release+0x10/0x10 [ 2603.418600][ T1231] ? memcg_account_kmem+0x1e7/0x210 [ 2603.423832][ T1231] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2603.429665][ T1231] __memcg_kmem_charge_page+0xe1/0x250 [ 2603.435234][ T1231] memcg_charge_kernel_stack+0x304/0x550 [ 2603.440980][ T1231] dup_task_struct+0x40d/0x7d0 [ 2603.445773][ T1231] copy_process+0x5d5/0x3fc0 [ 2603.450386][ T1231] ? __might_fault+0xa9/0x120 [ 2603.455087][ T1231] ? __pfx_lock_release+0x10/0x10 [ 2603.460312][ T1231] ? __pfx_copy_process+0x10/0x10 [ 2603.465353][ T1231] ? __might_fault+0xc5/0x120 [ 2603.470060][ T1231] ? __asan_memset+0x23/0x50 [ 2603.474677][ T1231] kernel_clone+0x21d/0x8d0 [ 2603.479201][ T1231] ? __pfx_kernel_clone+0x10/0x10 [ 2603.484258][ T1231] __se_sys_clone3+0x2cb/0x350 [ 2603.489134][ T1231] ? __pfx___se_sys_clone3+0x10/0x10 [ 2603.494468][ T1231] ? do_syscall_64+0x108/0x240 [ 2603.499253][ T1231] ? do_syscall_64+0xb4/0x240 [ 2603.503946][ T1231] do_syscall_64+0xf9/0x240 [ 2603.508466][ T1231] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2603.514385][ T1231] RIP: 0033:0x7f0f5b4a9b99 [ 2603.518911][ T1231] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2603.539068][ T1231] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2603.547510][ T1231] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2603.555492][ T1231] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2603.563473][ T1231] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2603.571458][ T1231] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2603.579442][ T1231] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2603.587790][ T1231] [ 2603.665562][ T1231] memory: usage 307200kB, limit 307200kB, failcnt 123173 [ 2603.674736][ T1231] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 2603.703003][ T1231] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2603.722991][ T1231] Memory cgroup stats for /syz0: [ 2603.723166][ T1231] cache 0 [ 2603.746100][ T1231] rss 12288 [ 2603.749572][ T1231] rss_huge 0 [ 2603.756104][ T1231] shmem 0 [ 2603.763892][ T1231] mapped_file 0 [ 2603.777000][ T1231] dirty 0 [ 2603.783949][ T1231] writeback 0 [ 2603.796043][ T1231] workingset_refault_anon 37609 [ 2603.803878][ T1231] workingset_refault_file 2 [ 2603.815488][ T1231] swap 212992 [ 2603.823190][ T1231] swapcached 8192 [ 2603.831940][ T1231] pgpgin 222685 [ 2603.840600][ T1231] pgpgout 222682 [ 2603.854570][ T1231] pgfault 501188 [ 2603.858197][ T1231] pgmajfault 36789 [ 2603.861966][ T1231] inactive_anon 0 [ 2603.882529][ T1231] active_anon 12288 [ 2603.895196][ T1231] inactive_file 0 [ 2603.898907][ T1231] active_file 0 [ 2603.902411][ T1231] unevictable 0 [ 2603.930698][ T1231] hierarchical_memory_limit 314572800 [ 2603.947957][ T1231] hierarchical_memsw_limit 9223372036854771712 [ 2603.954201][ T1231] total_cache 0 [ 2603.976194][ T1231] total_rss 12288 [ 2603.979916][ T1231] total_rss_huge 0 [ 2603.983750][ T1231] total_shmem 0 [ 2604.004682][ T1231] total_mapped_file 0 [ 2604.008859][ T1231] total_dirty 0 [ 2604.012368][ T1231] total_writeback 0 [ 2604.030487][ T1231] total_workingset_refault_anon 37609 [ 2604.047728][ T1231] total_workingset_refault_file 2 [ 2604.052842][ T1231] total_swap 212992 [ 2604.069866][ T1231] total_swapcached 8192 [ 2604.074124][ T1231] total_pgpgin 222685 [ 2604.091485][ T1231] total_pgpgout 222682 [ 2604.102005][ T1231] total_pgfault 501188 [ 2604.111885][ T1231] total_pgmajfault 36789 [ 2604.122506][ T1231] total_inactive_anon 0 [ 2604.135852][ T1231] total_active_anon 12288 [ 2604.140295][ T1231] total_inactive_file 0 [ 2604.155797][ T1231] total_active_file 0 [ 2604.159866][ T1231] total_unevictable 0 [ 2604.163900][ T1231] anon_cost 0 [ 2604.184104][ T1231] file_cost 0 [ 2604.192869][ T1231] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1231,uid=0 [ 2604.215356][ T1231] Memory cgroup out of memory: Killed process 1231 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b398356]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2604.704247][ T1233] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2604.723706][ T1233] CPU: 0 PID: 1233 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2604.734116][ T1233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2604.744193][ T1233] Call Trace: [ 2604.747495][ T1233] [ 2604.750439][ T1233] dump_stack_lvl+0x1e7/0x2e0 [ 2604.755138][ T1233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2604.760354][ T1233] ? __pfx__printk+0x10/0x10 [ 2604.764966][ T1233] ? ___ratelimit+0x4c4/0x670 [ 2604.769669][ T1233] ? __pfx____ratelimit+0x10/0x10 [ 2604.774721][ T1233] dump_header+0xda/0x6a0 [ 2604.779077][ T1233] oom_kill_process+0x3a7/0x930 [ 2604.783962][ T1233] out_of_memory+0xf67/0x1320 [ 2604.788749][ T1233] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2604.794494][ T1233] ? __pfx___mutex_lock+0x10/0x10 [ 2604.799537][ T1233] ? __pfx_out_of_memory+0x10/0x10 [ 2604.804679][ T1233] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2604.810245][ T1233] ? __pfx_lock_release+0x10/0x10 [ 2604.815287][ T1233] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2604.821376][ T1233] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2604.826589][ T1233] ? mem_cgroup_iter+0x422/0x560 [ 2604.831594][ T1233] try_charge_memcg+0xda2/0x18a0 [ 2604.836576][ T1233] ? __pfx_try_charge_memcg+0x10/0x10 [ 2604.842052][ T1233] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2604.847796][ T1233] ? __pfx_lock_release+0x10/0x10 [ 2604.852849][ T1233] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2604.858858][ T1233] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2604.864609][ T1233] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2604.870448][ T1233] obj_cgroup_charge+0x389/0x630 [ 2604.875402][ T1233] ? obj_cgroup_charge+0x121/0x630 [ 2604.880523][ T1233] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2604.885996][ T1233] ? kmalloc_trace+0x4e/0x360 [ 2604.890712][ T1233] ? __pfx___might_resched+0x10/0x10 [ 2604.896035][ T1233] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2604.901865][ T1233] ? copy_semundo+0xb5/0x240 [ 2604.906468][ T1233] kmalloc_trace+0x216/0x360 [ 2604.911077][ T1233] ? __asan_memcpy+0x40/0x70 [ 2604.915689][ T1233] copy_semundo+0xb5/0x240 [ 2604.920226][ T1233] copy_process+0x1bc3/0x3fc0 [ 2604.925446][ T1233] ? copy_process+0x9c3/0x3fc0 [ 2604.930309][ T1233] ? __pfx_copy_process+0x10/0x10 [ 2604.935345][ T1233] ? __might_fault+0xc5/0x120 [ 2604.940046][ T1233] ? __asan_memset+0x23/0x50 [ 2604.944660][ T1233] kernel_clone+0x21d/0x8d0 [ 2604.949196][ T1233] ? __pfx_kernel_clone+0x10/0x10 [ 2604.954250][ T1233] __se_sys_clone3+0x2cb/0x350 [ 2604.959036][ T1233] ? __pfx___se_sys_clone3+0x10/0x10 [ 2604.964373][ T1233] ? do_syscall_64+0x108/0x240 [ 2604.969166][ T1233] ? do_syscall_64+0xb4/0x240 [ 2604.973857][ T1233] do_syscall_64+0xf9/0x240 [ 2604.978386][ T1233] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2604.984478][ T1233] RIP: 0033:0x7f0f5b4a9b99 [ 2604.988908][ T1233] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2605.008621][ T1233] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2605.017066][ T1233] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2605.025116][ T1233] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2605.033118][ T1233] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2605.041118][ T1233] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 12:18:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2605.049105][ T1233] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2605.057111][ T1233] [ 2605.075809][ T1233] memory: usage 307200kB, limit 307200kB, failcnt 123474 [ 2605.083029][ T1233] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2605.102685][ T1233] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2605.124971][ T1233] Memory cgroup stats for /syz0: [ 2605.125151][ T1233] cache 0 [ 2605.133684][ T1233] rss 12288 [ 2605.142222][ T1233] rss_huge 0 [ 2605.147673][ T1233] shmem 0 [ 2605.150666][ T1233] mapped_file 0 [ 2605.154164][ T1233] dirty 0 [ 2605.161862][ T1233] writeback 0 [ 2605.167293][ T1233] workingset_refault_anon 37695 [ 2605.172199][ T1233] workingset_refault_file 2 [ 2605.182027][ T1233] swap 208896 [ 2605.187541][ T1233] swapcached 8192 [ 2605.191224][ T1233] pgpgin 222784 [ 2605.208247][ T1233] pgpgout 222781 [ 2605.211883][ T1233] pgfault 501348 [ 2605.216469][ T1233] pgmajfault 36873 [ 2605.220256][ T1233] inactive_anon 0 [ 2605.224065][ T1233] active_anon 12288 [ 2605.232596][ T1233] inactive_file 0 [ 2605.236861][ T1233] active_file 0 [ 2605.240369][ T1233] unevictable 0 [ 2605.243864][ T1233] hierarchical_memory_limit 314572800 [ 2605.256448][ T1233] hierarchical_memsw_limit 9223372036854771712 [ 2605.262687][ T1233] total_cache 0 [ 2605.270918][ T1233] total_rss 12288 [ 2605.277913][ T1233] total_rss_huge 0 [ 2605.281698][ T1233] total_shmem 0 [ 2605.286323][ T1233] total_mapped_file 0 [ 2605.290350][ T1233] total_dirty 0 [ 2605.293841][ T1233] total_writeback 0 [ 2605.298714][ T1233] total_workingset_refault_anon 37695 [ 2605.304128][ T1233] total_workingset_refault_file 2 [ 2605.310068][ T1233] total_swap 208896 [ 2605.313931][ T1233] total_swapcached 8192 [ 2605.318886][ T1233] total_pgpgin 222784 [ 2605.322974][ T1233] total_pgpgout 222781 [ 2605.328128][ T1233] total_pgfault 501348 [ 2605.332361][ T1233] total_pgmajfault 36873 [ 2605.337441][ T1233] total_inactive_anon 0 [ 2605.341651][ T1233] total_active_anon 12288 [ 2605.353954][ T1233] total_inactive_file 0 [ 2605.358646][ T1233] total_active_file 0 [ 2605.362699][ T1233] total_unevictable 0 [ 2605.373502][ T1233] anon_cost 0 [ 2605.377872][ T1233] file_cost 0 [ 2605.381208][ T1233] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1233,uid=0 12:18:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91020000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2605.397986][ T1233] Memory cgroup out of memory: Killed process 1233 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2606.052794][ T1236] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2606.063660][ T1236] CPU: 0 PID: 1236 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2606.074238][ T1236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2606.084436][ T1236] Call Trace: [ 2606.087756][ T1236] [ 2606.090719][ T1236] dump_stack_lvl+0x1e7/0x2e0 [ 2606.095452][ T1236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2606.100709][ T1236] ? __pfx__printk+0x10/0x10 [ 2606.105354][ T1236] ? ___ratelimit+0x4c4/0x670 [ 2606.110120][ T1236] ? __pfx____ratelimit+0x10/0x10 [ 2606.115222][ T1236] dump_header+0xda/0x6a0 [ 2606.119631][ T1236] oom_kill_process+0x3a7/0x930 [ 2606.124658][ T1236] out_of_memory+0xf67/0x1320 [ 2606.129402][ T1236] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2606.135099][ T1236] ? __pfx___mutex_lock+0x10/0x10 [ 2606.140190][ T1236] ? __pfx_out_of_memory+0x10/0x10 [ 2606.145372][ T1236] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2606.150974][ T1236] ? __pfx_lock_release+0x10/0x10 [ 2606.156147][ T1236] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2606.162251][ T1236] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2606.167478][ T1236] ? mem_cgroup_iter+0x422/0x560 [ 2606.172444][ T1236] try_charge_memcg+0xda2/0x18a0 [ 2606.177447][ T1236] ? __pfx_try_charge_memcg+0x10/0x10 [ 2606.182864][ T1236] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2606.188619][ T1236] ? __pfx_lock_release+0x10/0x10 [ 2606.193690][ T1236] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2606.199515][ T1236] __memcg_kmem_charge_page+0xe1/0x250 [ 2606.205009][ T1236] memcg_charge_kernel_stack+0xa7/0x550 [ 2606.210576][ T1236] dup_task_struct+0x40d/0x7d0 [ 2606.215357][ T1236] copy_process+0x5d5/0x3fc0 [ 2606.219976][ T1236] ? __might_fault+0xa9/0x120 [ 2606.224672][ T1236] ? __pfx_lock_release+0x10/0x10 [ 2606.229717][ T1236] ? __pfx_copy_process+0x10/0x10 [ 2606.234752][ T1236] ? __might_fault+0xc5/0x120 [ 2606.239450][ T1236] ? __asan_memset+0x23/0x50 [ 2606.244062][ T1236] kernel_clone+0x21d/0x8d0 [ 2606.248681][ T1236] ? __pfx_kernel_clone+0x10/0x10 [ 2606.253732][ T1236] __se_sys_clone3+0x2cb/0x350 [ 2606.258514][ T1236] ? __pfx___se_sys_clone3+0x10/0x10 [ 2606.263849][ T1236] ? rcu_is_watching+0x15/0xb0 [ 2606.268640][ T1236] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2606.274648][ T1236] ? exc_page_fault+0x587/0x870 [ 2606.279510][ T1236] ? do_syscall_64+0xb4/0x240 [ 2606.284198][ T1236] do_syscall_64+0xf9/0x240 [ 2606.288731][ T1236] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2606.294642][ T1236] RIP: 0033:0x7f0f5b4a9b99 [ 2606.299078][ T1236] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2606.318708][ T1236] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2606.327173][ T1236] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2606.335330][ T1236] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2606.343310][ T1236] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2606.351553][ T1236] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2606.359537][ T1236] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2606.367538][ T1236] [ 2606.420459][ T1236] memory: usage 307180kB, limit 307200kB, failcnt 123979 [ 2606.428246][ T1236] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 2606.442442][ T1236] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2606.474472][ T1236] Memory cgroup stats for /syz0: [ 2606.474645][ T1236] cache 0 [ 2606.485343][ T1236] rss 12288 [ 2606.493091][ T1236] rss_huge 0 [ 2606.503728][ T1236] shmem 0 [ 2606.507376][ T1236] mapped_file 0 [ 2606.511025][ T1236] dirty 0 [ 2606.514116][ T1236] writeback 0 [ 2606.523644][ T1236] workingset_refault_anon 37894 [ 2606.533572][ T1236] workingset_refault_file 2 [ 2606.544611][ T1236] swap 245760 [ 2606.560168][ T1236] swapcached 8192 [ 2606.569169][ T1236] pgpgin 222994 [ 2606.572800][ T1236] pgpgout 222991 [ 2606.583005][ T1236] pgfault 501672 [ 2606.588061][ T1236] pgmajfault 37065 [ 2606.591944][ T1236] inactive_anon 12288 [ 2606.605123][ T1236] active_anon 0 [ 2606.608911][ T1236] inactive_file 0 [ 2606.631399][ T1236] active_file 0 [ 2606.643935][ T1236] unevictable 0 [ 2606.648117][ T1236] hierarchical_memory_limit 314572800 [ 2606.653540][ T1236] hierarchical_memsw_limit 9223372036854771712 [ 2606.674477][ T1236] total_cache 0 [ 2606.678149][ T1236] total_rss 12288 [ 2606.681866][ T1236] total_rss_huge 0 [ 2606.686364][ T1236] total_shmem 0 [ 2606.690514][ T1236] total_mapped_file 0 [ 2606.695070][ T1236] total_dirty 0 [ 2606.698742][ T1236] total_writeback 0 [ 2606.702742][ T1236] total_workingset_refault_anon 37894 [ 2606.709310][ T1236] total_workingset_refault_file 2 [ 2606.715451][ T1236] total_swap 245760 [ 2606.719461][ T1236] total_swapcached 8192 [ 2606.723811][ T1236] total_pgpgin 222994 [ 2606.729473][ T1236] total_pgpgout 222991 [ 2606.741563][ T1236] total_pgfault 501672 [ 2606.746409][ T1236] total_pgmajfault 37065 [ 2606.750838][ T1236] total_inactive_anon 12288 [ 2606.763002][ T1236] total_active_anon 0 [ 2606.769207][ T1236] total_inactive_file 0 [ 2606.775569][ T1236] total_active_file 0 [ 2606.784668][ T1236] total_unevictable 0 [ 2606.789873][ T1236] anon_cost 0 [ 2606.793285][ T1236] file_cost 0 [ 2606.801218][ T1236] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1236,uid=0 [ 2606.817323][ T1236] Memory cgroup out of memory: Killed process 1236 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2607.521275][ T1237] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2607.533332][ T1237] CPU: 1 PID: 1237 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2607.543738][ T1237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2607.553934][ T1237] Call Trace: [ 2607.557268][ T1237] [ 2607.560242][ T1237] dump_stack_lvl+0x1e7/0x2e0 [ 2607.564983][ T1237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2607.570236][ T1237] ? __pfx__printk+0x10/0x10 [ 2607.574875][ T1237] ? ___ratelimit+0x4c4/0x670 [ 2607.579629][ T1237] ? __pfx____ratelimit+0x10/0x10 [ 2607.584748][ T1237] dump_header+0xda/0x6a0 [ 2607.589133][ T1237] oom_kill_process+0x3a7/0x930 [ 2607.594019][ T1237] out_of_memory+0xf67/0x1320 [ 2607.598854][ T1237] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2607.604517][ T1237] ? __pfx___mutex_lock+0x10/0x10 [ 2607.609562][ T1237] ? __pfx_out_of_memory+0x10/0x10 [ 2607.614717][ T1237] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2607.620285][ T1237] ? __pfx_lock_release+0x10/0x10 [ 2607.625331][ T1237] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2607.631429][ T1237] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2607.636651][ T1237] ? mem_cgroup_iter+0x422/0x560 [ 2607.641704][ T1237] try_charge_memcg+0xda2/0x18a0 [ 2607.646680][ T1237] ? __pfx_try_charge_memcg+0x10/0x10 [ 2607.652069][ T1237] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2607.657803][ T1237] ? __pfx_lock_release+0x10/0x10 [ 2607.662846][ T1237] ? memcg_account_kmem+0x1e7/0x210 [ 2607.668070][ T1237] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2607.673891][ T1237] __memcg_kmem_charge_page+0xe1/0x250 [ 2607.679364][ T1237] memcg_charge_kernel_stack+0x304/0x550 [ 2607.685107][ T1237] dup_task_struct+0x15d/0x7d0 [ 2607.689913][ T1237] copy_process+0x5d5/0x3fc0 [ 2607.694532][ T1237] ? __might_fault+0xa9/0x120 [ 2607.699229][ T1237] ? __pfx_lock_release+0x10/0x10 [ 2607.704275][ T1237] ? __pfx_copy_process+0x10/0x10 [ 2607.709310][ T1237] ? __might_fault+0xc5/0x120 [ 2607.714006][ T1237] ? __asan_memset+0x23/0x50 [ 2607.718620][ T1237] kernel_clone+0x21d/0x8d0 [ 2607.723143][ T1237] ? __pfx_kernel_clone+0x10/0x10 [ 2607.728282][ T1237] __se_sys_clone3+0x2cb/0x350 [ 2607.733066][ T1237] ? __pfx___se_sys_clone3+0x10/0x10 [ 2607.738389][ T1237] ? do_syscall_64+0x108/0x240 [ 2607.743172][ T1237] ? do_syscall_64+0xb4/0x240 [ 2607.747859][ T1237] do_syscall_64+0xf9/0x240 [ 2607.752379][ T1237] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2607.758291][ T1237] RIP: 0033:0x7f0f5b4a9b99 [ 2607.762735][ T1237] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2607.782355][ T1237] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2607.790807][ T1237] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2607.798791][ T1237] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2607.806772][ T1237] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2607.814754][ T1237] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2607.822753][ T1237] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2607.830747][ T1237] [ 2607.851943][ T1237] memory: usage 307200kB, limit 307200kB, failcnt 124427 [ 2607.866650][ T1237] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 2607.878734][ T1237] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2607.888038][ T1237] Memory cgroup stats for /syz0: [ 2607.888192][ T1237] cache 0 [ 2607.906004][ T1237] rss 12288 [ 2607.912098][ T1237] rss_huge 0 [ 2607.924860][ T1237] shmem 0 [ 2607.927986][ T1237] mapped_file 0 [ 2607.932147][ T1237] dirty 0 [ 2607.941956][ T1237] writeback 0 [ 2607.946328][ T1237] workingset_refault_anon 38070 [ 2607.951656][ T1237] workingset_refault_file 2 [ 2607.956987][ T1237] swap 229376 [ 2607.960919][ T1237] swapcached 8192 [ 2607.970937][ T1237] pgpgin 223181 [ 2607.975300][ T1237] pgpgout 223178 [ 2607.979003][ T1237] pgfault 501964 [ 2607.982700][ T1237] pgmajfault 37240 [ 2607.993382][ T1237] inactive_anon 0 [ 2607.997633][ T1237] active_anon 12288 [ 2608.001683][ T1237] inactive_file 0 [ 2608.006657][ T1237] active_file 0 [ 2608.012443][ T1237] unevictable 0 [ 2608.019515][ T1237] hierarchical_memory_limit 314572800 [ 2608.027956][ T1237] hierarchical_memsw_limit 9223372036854771712 [ 2608.038890][ T1237] total_cache 0 [ 2608.042534][ T1237] total_rss 12288 [ 2608.048915][ T1237] total_rss_huge 0 [ 2608.052828][ T1237] total_shmem 0 [ 2608.060984][ T1237] total_mapped_file 0 [ 2608.067595][ T1237] total_dirty 0 [ 2608.072522][ T1237] total_writeback 0 [ 2608.081043][ T1237] total_workingset_refault_anon 38070 [ 2608.089546][ T1237] total_workingset_refault_file 2 [ 2608.095571][ T1237] total_swap 229376 [ 2608.102829][ T1237] total_swapcached 8192 [ 2608.110099][ T1237] total_pgpgin 223181 [ 2608.114242][ T1237] total_pgpgout 223178 [ 2608.119189][ T1237] total_pgfault 501964 [ 2608.126616][ T1237] total_pgmajfault 37240 [ 2608.131034][ T1237] total_inactive_anon 0 [ 2608.140048][ T1237] total_active_anon 12288 [ 2608.147080][ T1237] total_inactive_file 0 [ 2608.154161][ T1237] total_active_file 0 [ 2608.162229][ T1237] total_unevictable 0 [ 2608.167271][ T1237] anon_cost 0 [ 2608.172561][ T1237] file_cost 0 12:18:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2608.180089][ T1237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1237,uid=0 [ 2608.202978][ T1237] Memory cgroup out of memory: Killed process 1237 (syz-executor.0) total-vm:54508kB, anon-rss:428kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2608.904127][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2608.917112][ T5099] CPU: 0 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2608.927514][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2608.937646][ T5099] Call Trace: [ 2608.940963][ T5099] [ 2608.943931][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2608.948761][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2608.954018][ T5099] ? __pfx__printk+0x10/0x10 [ 2608.958661][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2608.963403][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2608.968500][ T5099] dump_header+0xda/0x6a0 [ 2608.972910][ T5099] oom_kill_process+0x3a7/0x930 [ 2608.977833][ T5099] out_of_memory+0xf67/0x1320 [ 2608.982587][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2608.988287][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2608.993382][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2608.998564][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2609.004165][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2609.009250][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2609.015393][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2609.020647][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2609.025658][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2609.030660][ T5099] ? mark_lock+0x9a/0x350 [ 2609.035072][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2609.040538][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2609.046751][ T5099] charge_memcg+0xa2/0x160 [ 2609.051221][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2609.057349][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2609.062850][ T5099] ? mark_lock+0x9a/0x350 [ 2609.067235][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2609.073363][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2609.078795][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2609.084752][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2609.089841][ T5099] ? xas_descend+0x37e/0x470 [ 2609.094492][ T5099] swapin_readahead+0x1ea/0x1070 [ 2609.099477][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2609.104660][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2609.110091][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2609.115553][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2609.120886][ T5099] do_swap_page+0x791/0x3f40 [ 2609.125531][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2609.130363][ T5099] ? do_swap_page+0x154/0x3f40 [ 2609.135180][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2609.140253][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2609.145788][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2609.151653][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2609.156925][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2609.162149][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2609.167680][ T5099] ? mt_find+0x226/0x850 [ 2609.171974][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2609.177075][ T5099] ? mt_find+0x62d/0x850 [ 2609.181454][ T5099] ? mt_find+0x226/0x850 [ 2609.185769][ T5099] ? find_vma+0x142/0x1c0 [ 2609.190166][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2609.194896][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2609.200940][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2609.205770][ T5099] exc_page_fault+0x2ad/0x870 [ 2609.210523][ T5099] asm_exc_page_fault+0x26/0x30 [ 2609.215544][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2609.220717][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2609.240386][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2609.246516][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2609.254717][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2609.262745][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2609.270772][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2609.278802][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2609.286853][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2609.292829][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2609.299227][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2609.305007][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2609.310709][ T5099] do_syscall_64+0x108/0x240 [ 2609.315377][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2609.321330][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2609.325883][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2609.345548][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2609.354028][ T5099] RAX: 0000000000000000 RBX: 000000000000424a RCX: 00007f0f5b4a91b5 [ 2609.362144][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2609.370169][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2609.378196][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2609.386494][ T5099] R13: 000000000027cca1 R14: 000000000027cca1 R15: 0000000000000000 [ 2609.394542][ T5099] [ 2609.439606][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 124930 [ 2609.449137][ T5099] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2609.458205][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2609.466177][ T5099] Memory cgroup stats for /syz0: [ 2609.466347][ T5099] cache 0 [ 2609.474316][ T5099] rss 12288 [ 2609.478177][ T5099] rss_huge 0 [ 2609.481405][ T5099] shmem 0 [ 2609.493342][ T5099] mapped_file 0 [ 2609.497230][ T5099] dirty 0 [ 2609.500217][ T5099] writeback 0 [ 2609.503805][ T5099] workingset_refault_anon 38246 [ 2609.510213][ T5099] workingset_refault_file 2 [ 2609.515857][ T5099] swap 208896 [ 2609.519539][ T5099] swapcached 8192 [ 2609.523206][ T5099] pgpgin 223368 [ 2609.527442][ T5099] pgpgout 223365 [ 2609.531035][ T5099] pgfault 502253 [ 2609.535309][ T5099] pgmajfault 37407 [ 2609.539077][ T5099] inactive_anon 12288 [ 2609.543086][ T5099] active_anon 0 [ 2609.547783][ T5099] inactive_file 0 [ 2609.551463][ T5099] active_file 0 [ 2609.555630][ T5099] unevictable 0 [ 2609.559136][ T5099] hierarchical_memory_limit 314572800 [ 2609.565440][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2609.571646][ T5099] total_cache 0 [ 2609.576199][ T5099] total_rss 12288 [ 2609.579885][ T5099] total_rss_huge 0 [ 2609.583651][ T5099] total_shmem 0 [ 2609.588110][ T5099] total_mapped_file 0 [ 2609.592135][ T5099] total_dirty 0 [ 2609.596278][ T5099] total_writeback 0 [ 2609.600136][ T5099] total_workingset_refault_anon 38246 [ 2609.606160][ T5099] total_workingset_refault_file 2 [ 2609.611300][ T5099] total_swap 208896 [ 2609.615716][ T5099] total_swapcached 8192 [ 2609.619915][ T5099] total_pgpgin 223368 [ 2609.623925][ T5099] total_pgpgout 223365 [ 2609.628843][ T5099] total_pgfault 502253 [ 2609.633093][ T5099] total_pgmajfault 37407 [ 2609.638880][ T5099] total_inactive_anon 12288 [ 2609.643535][ T5099] total_active_anon 0 [ 2609.648439][ T5099] total_inactive_file 0 [ 2609.652700][ T5099] total_active_file 0 [ 2609.657388][ T5099] total_unevictable 0 [ 2609.661472][ T5099] anon_cost 0 [ 2609.665317][ T5099] file_cost 0 [ 2609.668627][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1240,uid=0 12:18:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2609.684172][ T5099] Memory cgroup out of memory: Killed process 1240 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2609.853269][ T1241] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2609.865727][ T1241] CPU: 0 PID: 1241 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2609.876219][ T1241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2609.886382][ T1241] Call Trace: [ 2609.889672][ T1241] [ 2609.892714][ T1241] dump_stack_lvl+0x1e7/0x2e0 [ 2609.897415][ T1241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2609.902628][ T1241] ? __pfx__printk+0x10/0x10 [ 2609.907242][ T1241] ? ___ratelimit+0x4c4/0x670 [ 2609.912035][ T1241] ? __pfx____ratelimit+0x10/0x10 [ 2609.917086][ T1241] dump_header+0xda/0x6a0 [ 2609.921440][ T1241] oom_kill_process+0x3a7/0x930 [ 2609.926319][ T1241] out_of_memory+0xf67/0x1320 [ 2609.931106][ T1241] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2609.936759][ T1241] ? __pfx___mutex_lock+0x10/0x10 [ 2609.941802][ T1241] ? __pfx_out_of_memory+0x10/0x10 [ 2609.946941][ T1241] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2609.952512][ T1241] ? __pfx_lock_release+0x10/0x10 [ 2609.957557][ T1241] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2609.963645][ T1241] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2609.968949][ T1241] ? mem_cgroup_iter+0x422/0x560 [ 2609.973913][ T1241] try_charge_memcg+0xda2/0x18a0 [ 2609.978869][ T1241] ? mark_lock+0x9a/0x350 [ 2609.983313][ T1241] ? __pfx_try_charge_memcg+0x10/0x10 [ 2609.988735][ T1241] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2609.994904][ T1241] charge_memcg+0xa2/0x160 [ 2609.999335][ T1241] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2610.005428][ T1241] __read_swap_cache_async+0x480/0x8b0 [ 2610.010988][ T1241] ? mark_lock+0x9a/0x350 [ 2610.015364][ T1241] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2610.021413][ T1241] swap_cluster_readahead+0x67c/0x810 [ 2610.026829][ T1241] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2610.032748][ T1241] ? __pfx_lock_release+0x10/0x10 [ 2610.037798][ T1241] ? xas_descend+0x37e/0x470 [ 2610.042420][ T1241] swapin_readahead+0x1ea/0x1070 [ 2610.047371][ T1241] ? filemap_get_entry+0x127/0x4e0 [ 2610.052517][ T1241] ? __pfx_swapin_readahead+0x10/0x10 [ 2610.058084][ T1241] ? __filemap_get_folio+0x935/0xbc0 [ 2610.063395][ T1241] ? swap_cache_get_folio+0x9f/0x570 [ 2610.068740][ T1241] do_swap_page+0x791/0x3f40 [ 2610.073436][ T1241] ? rcu_is_watching+0x15/0xb0 [ 2610.078236][ T1241] ? do_swap_page+0x154/0x3f40 [ 2610.083053][ T1241] ? __pfx_do_swap_page+0x10/0x10 [ 2610.088100][ T1241] ? pte_offset_map_nolock+0x137/0x1f0 [ 2610.093592][ T1241] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2610.099429][ T1241] __handle_mm_fault+0x15e8/0x72d0 [ 2610.104591][ T1241] ? reacquire_held_locks+0x3eb/0x690 [ 2610.109980][ T1241] ? __pfx___handle_mm_fault+0x10/0x10 [ 2610.115467][ T1241] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2610.121212][ T1241] ? mtree_range_walk+0x6fd/0x8e0 [ 2610.126260][ T1241] ? lock_vma_under_rcu+0x18a/0x730 [ 2610.131475][ T1241] ? __pfx_lock_release+0x10/0x10 [ 2610.136517][ T1241] ? lock_vma_under_rcu+0x2f9/0x730 [ 2610.141752][ T1241] ? lock_vma_under_rcu+0x18a/0x730 [ 2610.146968][ T1241] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2610.152532][ T1241] handle_mm_fault+0x3c1/0x8a0 [ 2610.157321][ T1241] exc_page_fault+0x456/0x870 [ 2610.162100][ T1241] asm_exc_page_fault+0x26/0x30 [ 2610.166965][ T1241] RIP: 0033:0x7f0f5b4526f4 [ 2610.171390][ T1241] Code: 66 0f 1f 44 00 00 41 57 41 56 41 55 41 54 55 53 48 81 ec 08 01 00 00 48 89 7c 24 10 48 89 34 24 48 89 54 24 18 48 89 4c 24 20 <64> 48 8b 04 25 28 00 00 00 48 89 84 24 f8 00 00 00 31 c0 80 3d ea [ 2610.191005][ T1241] RSP: 002b:00007ffcec9e0fd0 EFLAGS: 00010202 [ 2610.197086][ T1241] RAX: 0000000000000000 RBX: 00007ffcec9e1270 RCX: 00007f0f5b5abf80 [ 2610.205087][ T1241] RDX: 00007f0f5b434bb0 RSI: 00007ffcec9e1270 RDI: 00007ffcec9e1228 [ 2610.213093][ T1241] RBP: 0000000000000000 R08: 00007f0f5b5abf8c R09: 00007f0f5b5abf8c [ 2610.221092][ T1241] R10: 00007f0f5b000060 R11: 0000000000000246 R12: 00007f0f5b5abf80 [ 2610.229085][ T1241] R13: 0000000000000064 R14: 00007f0f5b5abf80 R15: 00007f0f5b434bb0 [ 2610.237088][ T1241] [ 2610.310950][ T1241] memory: usage 307188kB, limit 307200kB, failcnt 125124 [ 2610.323972][ T1241] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2610.343828][ T1241] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 2610.353330][ T1241] Memory cgroup stats for /syz0: [ 2610.353494][ T1241] cache 0 [ 2610.368236][ T1241] rss 12288 [ 2610.371414][ T1241] rss_huge 0 [ 2610.378326][ T1241] shmem 0 [ 2610.381335][ T1241] mapped_file 0 [ 2610.390131][ T1241] dirty 0 [ 2610.393138][ T1241] writeback 0 [ 2610.405800][ T1241] workingset_refault_anon 38293 [ 2610.410744][ T1241] workingset_refault_file 2 [ 2610.424690][ T1241] swap 241664 [ 2610.428064][ T1241] swapcached 8192 [ 2610.431739][ T1241] pgpgin 223427 [ 2610.441338][ T1241] pgpgout 223424 [ 2610.445959][ T1241] pgfault 502348 [ 2610.449568][ T1241] pgmajfault 37451 [ 2610.453322][ T1241] inactive_anon 0 [ 2610.458402][ T1241] active_anon 12288 [ 2610.474546][ T1241] inactive_file 0 [ 2610.478426][ T1241] active_file 0 [ 2610.482361][ T1241] unevictable 0 [ 2610.488071][ T1241] hierarchical_memory_limit 314572800 [ 2610.497302][ T1241] hierarchical_memsw_limit 9223372036854771712 [ 2610.503652][ T1241] total_cache 0 [ 2610.514559][ T1241] total_rss 12288 [ 2610.520090][ T1241] total_rss_huge 0 [ 2610.537109][ T1241] total_shmem 0 [ 2610.542606][ T1241] total_mapped_file 0 [ 2610.547569][ T1241] total_dirty 0 [ 2610.553042][ T1241] total_writeback 0 [ 2610.560532][ T1241] total_workingset_refault_anon 38293 [ 2610.574578][ T1241] total_workingset_refault_file 2 [ 2610.582289][ T1241] total_swap 241664 [ 2610.587345][ T1241] total_swapcached 8192 [ 2610.591736][ T1241] total_pgpgin 223427 [ 2610.603366][ T1241] total_pgpgout 223424 [ 2610.608636][ T1241] total_pgfault 502348 [ 2610.614269][ T1241] total_pgmajfault 37451 [ 2610.620406][ T1241] total_inactive_anon 0 [ 2610.625621][ T1241] total_active_anon 12288 [ 2610.642124][ T1241] total_inactive_file 0 [ 2610.646903][ T1241] total_active_file 0 [ 2610.651990][ T1241] total_unevictable 0 [ 2610.657081][ T1241] anon_cost 0 [ 2610.660598][ T1241] file_cost 0 12:18:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2610.664115][ T1241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1241,uid=0 [ 2610.682702][ T1241] Memory cgroup out of memory: Killed process 1241 (syz-executor.0) total-vm:54376kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 12:18:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2611.235673][ T1242] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2611.260362][ T1242] CPU: 1 PID: 1242 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2611.270864][ T1242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2611.280973][ T1242] Call Trace: [ 2611.284283][ T1242] [ 2611.287237][ T1242] dump_stack_lvl+0x1e7/0x2e0 [ 2611.292041][ T1242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2611.297247][ T1242] ? __pfx__printk+0x10/0x10 [ 2611.301838][ T1242] ? ___ratelimit+0x4c4/0x670 [ 2611.306527][ T1242] ? __pfx____ratelimit+0x10/0x10 [ 2611.311571][ T1242] dump_header+0xda/0x6a0 [ 2611.315956][ T1242] oom_kill_process+0x3a7/0x930 [ 2611.320826][ T1242] out_of_memory+0xf67/0x1320 [ 2611.325527][ T1242] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2611.331168][ T1242] ? __pfx___mutex_lock+0x10/0x10 [ 2611.336202][ T1242] ? __pfx_out_of_memory+0x10/0x10 [ 2611.341327][ T1242] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2611.346912][ T1242] ? __pfx_lock_release+0x10/0x10 [ 2611.351960][ T1242] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2611.358059][ T1242] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2611.363280][ T1242] ? mem_cgroup_iter+0x422/0x560 [ 2611.368249][ T1242] try_charge_memcg+0xda2/0x18a0 [ 2611.373305][ T1242] ? __pfx_try_charge_memcg+0x10/0x10 [ 2611.378684][ T1242] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2611.384422][ T1242] ? __pfx_lock_release+0x10/0x10 [ 2611.389457][ T1242] ? memcg_account_kmem+0x1e7/0x210 [ 2611.394675][ T1242] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2611.400496][ T1242] __memcg_kmem_charge_page+0xe1/0x250 [ 2611.405968][ T1242] memcg_charge_kernel_stack+0x210/0x550 [ 2611.411611][ T1242] dup_task_struct+0x40d/0x7d0 [ 2611.416437][ T1242] copy_process+0x5d5/0x3fc0 [ 2611.421046][ T1242] ? __might_fault+0xa9/0x120 [ 2611.425740][ T1242] ? __pfx_lock_release+0x10/0x10 [ 2611.430799][ T1242] ? __pfx_copy_process+0x10/0x10 [ 2611.435847][ T1242] ? __might_fault+0xc5/0x120 [ 2611.440554][ T1242] ? __asan_memset+0x23/0x50 [ 2611.445168][ T1242] kernel_clone+0x21d/0x8d0 [ 2611.449692][ T1242] ? __pfx_kernel_clone+0x10/0x10 [ 2611.454743][ T1242] __se_sys_clone3+0x2cb/0x350 [ 2611.459514][ T1242] ? __pfx___se_sys_clone3+0x10/0x10 [ 2611.464829][ T1242] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2611.470871][ T1242] ? exc_page_fault+0x587/0x870 [ 2611.477712][ T1242] ? do_syscall_64+0xb4/0x240 [ 2611.482420][ T1242] do_syscall_64+0xf9/0x240 [ 2611.486947][ T1242] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2611.492857][ T1242] RIP: 0033:0x7f0f5b4a9b99 [ 2611.497280][ T1242] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2611.516912][ T1242] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2611.525365][ T1242] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2611.533349][ T1242] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2611.541414][ T1242] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2611.549397][ T1242] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2611.557378][ T1242] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2611.565570][ T1242] [ 2611.592101][ T1242] memory: usage 307200kB, limit 307200kB, failcnt 125580 [ 2611.600169][ T1242] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 2611.608886][ T1242] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2611.616910][ T1242] Memory cgroup stats for /syz0: [ 2611.617065][ T1242] cache 0 [ 2611.625897][ T1242] rss 4096 [ 2611.628977][ T1242] rss_huge 0 [ 2611.632209][ T1242] shmem 0 [ 2611.635501][ T1242] mapped_file 0 [ 2611.638992][ T1242] dirty 0 [ 2611.641964][ T1242] writeback 0 [ 2611.645491][ T1242] workingset_refault_anon 38474 [ 2611.650376][ T1242] workingset_refault_file 2 [ 2611.655697][ T1242] swap 249856 [ 2611.659009][ T1242] swapcached 0 [ 2611.662380][ T1242] pgpgin 223620 [ 2611.665988][ T1242] pgpgout 223619 [ 2611.669554][ T1242] pgfault 502630 [ 2611.673185][ T1242] pgmajfault 37622 [ 2611.677040][ T1242] inactive_anon 0 [ 2611.680690][ T1242] active_anon 4096 [ 2611.684804][ T1242] inactive_file 0 [ 2611.688474][ T1242] active_file 0 [ 2611.691982][ T1242] unevictable 0 [ 2611.696075][ T1242] hierarchical_memory_limit 314572800 [ 2611.701487][ T1242] hierarchical_memsw_limit 9223372036854771712 [ 2611.707939][ T1242] total_cache 0 [ 2611.711427][ T1242] total_rss 4096 [ 2611.715448][ T1242] total_rss_huge 0 [ 2611.719185][ T1242] total_shmem 0 [ 2611.722646][ T1242] total_mapped_file 0 [ 2611.727247][ T1242] total_dirty 0 [ 2611.730745][ T1242] total_writeback 0 [ 2611.734716][ T1242] total_workingset_refault_anon 38474 [ 2611.740135][ T1242] total_workingset_refault_file 2 [ 2611.745739][ T1242] total_swap 249856 [ 2611.749608][ T1242] total_swapcached 0 [ 2611.753539][ T1242] total_pgpgin 223620 [ 2611.758262][ T1242] total_pgpgout 223619 [ 2611.762785][ T1242] total_pgfault 502630 [ 2611.767103][ T1242] total_pgmajfault 37622 [ 2611.771388][ T1242] total_inactive_anon 0 [ 2611.776247][ T1242] total_active_anon 4096 [ 2611.780520][ T1242] total_inactive_file 0 [ 2611.784805][ T1242] total_active_file 0 [ 2611.788835][ T1242] total_unevictable 0 12:18:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2611.792844][ T1242] anon_cost 0 [ 2611.796264][ T1242] file_cost 0 [ 2611.799583][ T1242] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1242,uid=0 [ 2611.816034][ T1242] Memory cgroup out of memory: Killed process 1242 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2612.398394][ T1248] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2612.409808][ T1248] CPU: 0 PID: 1248 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2612.420369][ T1248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2612.430487][ T1248] Call Trace: [ 2612.433812][ T1248] [ 2612.436787][ T1248] dump_stack_lvl+0x1e7/0x2e0 [ 2612.441524][ T1248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2612.446778][ T1248] ? __pfx__printk+0x10/0x10 [ 2612.451421][ T1248] ? ___ratelimit+0x4c4/0x670 [ 2612.456180][ T1248] ? __pfx____ratelimit+0x10/0x10 [ 2612.461287][ T1248] dump_header+0xda/0x6a0 [ 2612.465688][ T1248] oom_kill_process+0x3a7/0x930 [ 2612.470605][ T1248] out_of_memory+0xf67/0x1320 [ 2612.475359][ T1248] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2612.481052][ T1248] ? __pfx___mutex_lock+0x10/0x10 [ 2612.486270][ T1248] ? __pfx_out_of_memory+0x10/0x10 [ 2612.491729][ T1248] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2612.497339][ T1248] ? __pfx_lock_release+0x10/0x10 [ 2612.502428][ T1248] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2612.508562][ T1248] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2612.513819][ T1248] ? mem_cgroup_iter+0x422/0x560 [ 2612.518814][ T1248] try_charge_memcg+0xda2/0x18a0 [ 2612.523800][ T1248] ? __pfx_try_charge_memcg+0x10/0x10 [ 2612.529192][ T1248] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2612.534931][ T1248] ? __pfx_lock_release+0x10/0x10 [ 2612.540001][ T1248] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2612.545864][ T1248] __memcg_kmem_charge_page+0xe1/0x250 [ 2612.551338][ T1248] memcg_charge_kernel_stack+0xa7/0x550 [ 2612.556905][ T1248] dup_task_struct+0x40d/0x7d0 [ 2612.561700][ T1248] copy_process+0x5d5/0x3fc0 [ 2612.566332][ T1248] ? __might_fault+0xa9/0x120 [ 2612.571048][ T1248] ? __pfx_lock_release+0x10/0x10 [ 2612.576099][ T1248] ? __pfx_copy_process+0x10/0x10 [ 2612.581134][ T1248] ? __might_fault+0xc5/0x120 [ 2612.585835][ T1248] ? __asan_memset+0x23/0x50 [ 2612.590543][ T1248] kernel_clone+0x21d/0x8d0 [ 2612.595069][ T1248] ? __pfx_kernel_clone+0x10/0x10 [ 2612.600127][ T1248] __se_sys_clone3+0x2cb/0x350 [ 2612.604911][ T1248] ? __pfx___se_sys_clone3+0x10/0x10 [ 2612.610222][ T1248] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2612.616234][ T1248] ? exc_page_fault+0x587/0x870 [ 2612.621186][ T1248] ? do_syscall_64+0xb4/0x240 [ 2612.625967][ T1248] do_syscall_64+0xf9/0x240 [ 2612.630529][ T1248] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2612.636438][ T1248] RIP: 0033:0x7f0f5b4a9b99 [ 2612.640866][ T1248] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2612.660483][ T1248] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2612.668908][ T1248] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2612.677066][ T1248] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2612.685137][ T1248] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2612.693117][ T1248] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2612.701097][ T1248] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2612.709097][ T1248] [ 2612.714520][ T1248] memory: usage 307200kB, limit 307200kB, failcnt 125987 [ 2612.721600][ T1248] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2612.761646][ T1248] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2612.769640][ T1248] Memory cgroup stats for /syz0: [ 2612.769803][ T1248] cache 0 [ 2612.782999][ T1248] rss 12288 [ 2612.786351][ T1248] rss_huge 0 [ 2612.789688][ T1248] shmem 0 [ 2612.792748][ T1248] mapped_file 0 [ 2612.802577][ T1248] dirty 0 [ 2612.805788][ T1248] writeback 0 [ 2612.809210][ T1248] workingset_refault_anon 38638 [ 2612.814286][ T1248] workingset_refault_file 2 [ 2612.824511][ T1248] swap 208896 [ 2612.827973][ T1248] swapcached 8192 [ 2612.831816][ T1248] pgpgin 223795 [ 2612.840513][ T1248] pgpgout 223792 [ 2612.844208][ T1248] pgfault 502902 [ 2612.849706][ T1248] pgmajfault 37782 [ 2612.853568][ T1248] inactive_anon 0 [ 2612.862336][ T1248] active_anon 12288 [ 2612.866796][ T1248] inactive_file 0 [ 2612.870572][ T1248] active_file 0 [ 2612.875666][ T1248] unevictable 0 [ 2612.879388][ T1248] hierarchical_memory_limit 314572800 [ 2612.888734][ T1248] hierarchical_memsw_limit 9223372036854771712 [ 2612.898534][ T1248] total_cache 0 [ 2612.902302][ T1248] total_rss 12288 [ 2612.908257][ T1248] total_rss_huge 0 [ 2612.912545][ T1248] total_shmem 0 [ 2612.920101][ T1248] total_mapped_file 0 [ 2612.926057][ T1248] total_dirty 0 [ 2612.929727][ T1248] total_writeback 0 [ 2612.933873][ T1248] total_workingset_refault_anon 38638 [ 2612.944552][ T1248] total_workingset_refault_file 2 [ 2612.956353][ T1248] total_swap 208896 [ 2612.960234][ T1248] total_swapcached 8192 [ 2612.965041][ T1248] total_pgpgin 223795 [ 2612.969089][ T1248] total_pgpgout 223792 [ 2612.973284][ T1248] total_pgfault 502902 [ 2612.993443][ T1248] total_pgmajfault 37782 [ 2613.004395][ T1248] total_inactive_anon 0 [ 2613.008628][ T1248] total_active_anon 12288 [ 2613.013002][ T1248] total_inactive_file 0 [ 2613.022542][ T1248] total_active_file 0 [ 2613.044112][ T1248] total_unevictable 0 [ 2613.048763][ T1248] anon_cost 0 [ 2613.052106][ T1248] file_cost 0 [ 2613.061873][ T1248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1248,uid=0 [ 2613.077883][ T1248] Memory cgroup out of memory: Killed process 1248 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2613.781718][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2613.827615][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2613.838039][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2613.848169][ T5099] Call Trace: [ 2613.851505][ T5099] [ 2613.854481][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2613.859232][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2613.864504][ T5099] ? __pfx__printk+0x10/0x10 [ 2613.869168][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2613.873920][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2613.879026][ T5099] dump_header+0xda/0x6a0 [ 2613.883443][ T5099] oom_kill_process+0x3a7/0x930 [ 2613.888372][ T5099] out_of_memory+0xf67/0x1320 [ 2613.893118][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2613.898808][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2613.904007][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2613.909198][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2613.914813][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2613.919905][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2613.926053][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2613.931415][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2613.936429][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2613.941451][ T5099] ? mark_lock+0x9a/0x350 [ 2613.945867][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2613.951348][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2613.957575][ T5099] charge_memcg+0xa2/0x160 [ 2613.962071][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2613.968228][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2613.973749][ T5099] ? mark_lock+0x9a/0x350 [ 2613.978239][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2613.984300][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2613.989847][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2613.995816][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2614.000917][ T5099] ? xas_descend+0x37e/0x470 [ 2614.005580][ T5099] swapin_readahead+0x1ea/0x1070 [ 2614.010578][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2614.015781][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2614.021228][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2614.026594][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2614.031946][ T5099] do_swap_page+0x791/0x3f40 [ 2614.037160][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2614.042004][ T5099] ? do_swap_page+0x154/0x3f40 [ 2614.046827][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2614.051918][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2614.057442][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2614.063321][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2614.068767][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2614.074028][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2614.079827][ T5099] ? mt_find+0x226/0x850 [ 2614.084133][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2614.089249][ T5099] ? mt_find+0x62d/0x850 [ 2614.093554][ T5099] ? mt_find+0x226/0x850 [ 2614.097886][ T5099] ? find_vma+0x142/0x1c0 [ 2614.102280][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2614.107027][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2614.113171][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2614.118104][ T5099] exc_page_fault+0x2ad/0x870 [ 2614.122855][ T5099] asm_exc_page_fault+0x26/0x30 [ 2614.127769][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2614.132944][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2614.152609][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2614.158747][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2614.166798][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2614.174841][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2614.182874][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2614.190914][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2614.199075][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2614.205060][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2614.211466][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2614.217256][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2614.222961][ T5099] do_syscall_64+0x108/0x240 [ 2614.227622][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2614.233577][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2614.238050][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2614.257714][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2614.266191][ T5099] RAX: 0000000000000000 RBX: 000000000000424f RCX: 00007f0f5b4a91b5 [ 2614.274223][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2614.282253][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2614.290292][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2614.298318][ T5099] R13: 000000000027dfc8 R14: 000000000027dfc8 R15: 0000000000000000 [ 2614.306386][ T5099] [ 2614.342801][ T5099] memory: usage 307180kB, limit 307200kB, failcnt 126601 [ 2614.365518][ T5099] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 2614.373507][ T5099] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2614.386777][ T5099] Memory cgroup stats for /syz0: [ 2614.386942][ T5099] cache 0 [ 2614.395760][ T5099] rss 0 [ 2614.398574][ T5099] rss_huge 0 [ 2614.401804][ T5099] shmem 0 [ 2614.405782][ T5099] mapped_file 0 [ 2614.409287][ T5099] dirty 0 [ 2614.412251][ T5099] writeback 0 [ 2614.416593][ T5099] workingset_refault_anon 38853 [ 2614.421494][ T5099] workingset_refault_file 2 [ 2614.427034][ T5099] swap 262144 [ 2614.430373][ T5099] swapcached 0 [ 2614.433781][ T5099] pgpgin 224026 [ 2614.438157][ T5099] pgpgout 224026 [ 2614.441754][ T5099] pgfault 503246 [ 2614.446229][ T5099] pgmajfault 37989 [ 2614.449995][ T5099] inactive_anon 0 [ 2614.453654][ T5099] active_anon 0 [ 2614.458055][ T5099] inactive_file 0 [ 2614.461732][ T5099] active_file 0 [ 2614.466154][ T5099] unevictable 0 [ 2614.469660][ T5099] hierarchical_memory_limit 314572800 [ 2614.475699][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2614.481942][ T5099] total_cache 0 [ 2614.486241][ T5099] total_rss 0 [ 2614.489569][ T5099] total_rss_huge 0 [ 2614.493318][ T5099] total_shmem 0 [ 2614.497792][ T5099] total_mapped_file 0 [ 2614.501824][ T5099] total_dirty 0 [ 2614.506344][ T5099] total_writeback 0 [ 2614.510211][ T5099] total_workingset_refault_anon 38853 [ 2614.516267][ T5099] total_workingset_refault_file 2 [ 2614.521346][ T5099] total_swap 262144 [ 2614.534994][ T5099] total_swapcached 0 [ 2614.538998][ T5099] total_pgpgin 224026 [ 2614.543011][ T5099] total_pgpgout 224026 [ 2614.550521][ T5099] total_pgfault 503246 [ 2614.554758][ T5099] total_pgmajfault 37989 [ 2614.559690][ T5099] total_inactive_anon 0 [ 2614.563916][ T5099] total_active_anon 0 [ 2614.579672][ T5099] total_inactive_file 0 [ 2614.583902][ T5099] total_active_file 0 [ 2614.588893][ T5099] total_unevictable 0 [ 2614.592932][ T5099] anon_cost 0 [ 2614.596932][ T5099] file_cost 0 [ 2614.600272][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1249,uid=0 [ 2614.616925][ T5099] Memory cgroup out of memory: Killed process 1249 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2615.211542][ T1250] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2615.222603][ T1250] CPU: 1 PID: 1250 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2615.233086][ T1250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2615.243277][ T1250] Call Trace: [ 2615.246609][ T1250] [ 2615.249583][ T1250] dump_stack_lvl+0x1e7/0x2e0 [ 2615.254318][ T1250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2615.259569][ T1250] ? __pfx__printk+0x10/0x10 [ 2615.264207][ T1250] ? ___ratelimit+0x4c4/0x670 [ 2615.268954][ T1250] ? __pfx____ratelimit+0x10/0x10 [ 2615.274085][ T1250] dump_header+0xda/0x6a0 [ 2615.278485][ T1250] oom_kill_process+0x3a7/0x930 [ 2615.283395][ T1250] out_of_memory+0xf67/0x1320 [ 2615.288104][ T1250] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2615.293762][ T1250] ? __pfx___mutex_lock+0x10/0x10 [ 2615.298805][ T1250] ? __pfx_out_of_memory+0x10/0x10 [ 2615.303943][ T1250] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2615.309504][ T1250] ? __pfx_lock_release+0x10/0x10 [ 2615.314544][ T1250] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2615.320637][ T1250] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2615.325963][ T1250] ? mem_cgroup_iter+0x422/0x560 [ 2615.330967][ T1250] try_charge_memcg+0xda2/0x18a0 [ 2615.335980][ T1250] ? __pfx_try_charge_memcg+0x10/0x10 [ 2615.341380][ T1250] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2615.347119][ T1250] ? __pfx_lock_release+0x10/0x10 [ 2615.352258][ T1250] ? memcg_account_kmem+0x1e7/0x210 [ 2615.357482][ T1250] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2615.363319][ T1250] __memcg_kmem_charge_page+0xe1/0x250 [ 2615.368792][ T1250] memcg_charge_kernel_stack+0x304/0x550 [ 2615.374450][ T1250] dup_task_struct+0x15d/0x7d0 [ 2615.379276][ T1250] copy_process+0x5d5/0x3fc0 [ 2615.383898][ T1250] ? __might_fault+0xa9/0x120 [ 2615.388611][ T1250] ? __pfx_lock_release+0x10/0x10 [ 2615.393659][ T1250] ? __pfx_copy_process+0x10/0x10 [ 2615.398692][ T1250] ? __might_fault+0xc5/0x120 [ 2615.403391][ T1250] ? __asan_memset+0x23/0x50 [ 2615.408002][ T1250] kernel_clone+0x21d/0x8d0 [ 2615.412520][ T1250] ? __pfx_kernel_clone+0x10/0x10 [ 2615.417569][ T1250] __se_sys_clone3+0x2cb/0x350 [ 2615.422347][ T1250] ? __pfx___se_sys_clone3+0x10/0x10 [ 2615.427683][ T1250] ? do_syscall_64+0x108/0x240 [ 2615.432473][ T1250] ? do_syscall_64+0xb4/0x240 [ 2615.437162][ T1250] do_syscall_64+0xf9/0x240 [ 2615.441777][ T1250] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2615.447686][ T1250] RIP: 0033:0x7f0f5b4a9b99 [ 2615.452114][ T1250] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2615.471749][ T1250] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2615.480200][ T1250] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2615.488185][ T1250] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2615.496167][ T1250] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2615.504149][ T1250] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2615.512140][ T1250] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2615.520146][ T1250] [ 2615.555922][ T1250] memory: usage 307200kB, limit 307200kB, failcnt 127030 [ 2615.571898][ T1250] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2615.583423][ T1250] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2615.597910][ T1250] Memory cgroup stats for /syz0: [ 2615.598077][ T1250] cache 0 [ 2615.608414][ T1250] rss 12288 [ 2615.612073][ T1250] rss_huge 0 [ 2615.620561][ T1250] shmem 0 [ 2615.623736][ T1250] mapped_file 0 [ 2615.631256][ T1250] dirty 0 [ 2615.634980][ T1250] writeback 0 [ 2615.641839][ T1250] workingset_refault_anon 39017 [ 2615.647441][ T1250] workingset_refault_file 2 [ 2615.652131][ T1250] swap 208896 [ 2615.658928][ T1250] swapcached 8192 [ 2615.662712][ T1250] pgpgin 224202 [ 2615.666756][ T1250] pgpgout 224199 [ 2615.670441][ T1250] pgfault 503511 [ 2615.674119][ T1250] pgmajfault 38147 [ 2615.678169][ T1250] inactive_anon 0 [ 2615.681937][ T1250] active_anon 12288 [ 2615.686047][ T1250] inactive_file 0 [ 2615.689819][ T1250] active_file 0 [ 2615.693402][ T1250] unevictable 0 [ 2615.697390][ T1250] hierarchical_memory_limit 314572800 [ 2615.702985][ T1250] hierarchical_memsw_limit 9223372036854771712 [ 2615.709816][ T1250] total_cache 0 [ 2615.713404][ T1250] total_rss 12288 [ 2615.718690][ T1250] total_rss_huge 0 [ 2615.727200][ T1250] total_shmem 0 [ 2615.730811][ T1250] total_mapped_file 0 [ 2615.739156][ T1250] total_dirty 0 [ 2615.742763][ T1250] total_writeback 0 [ 2615.746919][ T1250] total_workingset_refault_anon 39017 [ 2615.758712][ T1250] total_workingset_refault_file 2 [ 2615.763982][ T1250] total_swap 208896 [ 2615.769844][ T1250] total_swapcached 8192 [ 2615.774846][ T1250] total_pgpgin 224202 [ 2615.778998][ T1250] total_pgpgout 224199 [ 2615.783203][ T1250] total_pgfault 503511 [ 2615.794542][ T1250] total_pgmajfault 38147 [ 2615.798961][ T1250] total_inactive_anon 0 [ 2615.803266][ T1250] total_active_anon 12288 [ 2615.815098][ T1250] total_inactive_file 0 [ 2615.827536][ T1250] total_active_file 0 [ 2615.832259][ T1250] total_unevictable 0 [ 2615.841070][ T1250] anon_cost 0 [ 2615.846179][ T1250] file_cost 0 [ 2615.849530][ T1250] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1250,uid=0 [ 2615.872072][ T1250] Memory cgroup out of memory: Killed process 1250 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4ffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2616.721421][ T1254] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2616.731850][ T1254] CPU: 1 PID: 1254 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2616.742349][ T1254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2616.752460][ T1254] Call Trace: [ 2616.755786][ T1254] [ 2616.758764][ T1254] dump_stack_lvl+0x1e7/0x2e0 [ 2616.763499][ T1254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2616.768761][ T1254] ? __pfx__printk+0x10/0x10 [ 2616.773397][ T1254] ? ___ratelimit+0x4c4/0x670 [ 2616.778142][ T1254] ? __pfx____ratelimit+0x10/0x10 [ 2616.783236][ T1254] dump_header+0xda/0x6a0 [ 2616.787641][ T1254] oom_kill_process+0x3a7/0x930 [ 2616.792560][ T1254] out_of_memory+0xf67/0x1320 [ 2616.797313][ T1254] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2616.803022][ T1254] ? __pfx___mutex_lock+0x10/0x10 [ 2616.808110][ T1254] ? __pfx_out_of_memory+0x10/0x10 [ 2616.813300][ T1254] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2616.818915][ T1254] ? __pfx_lock_release+0x10/0x10 [ 2616.824006][ T1254] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2616.830235][ T1254] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2616.835507][ T1254] ? mem_cgroup_iter+0x422/0x560 [ 2616.840506][ T1254] try_charge_memcg+0xda2/0x18a0 [ 2616.845527][ T1254] ? __pfx_try_charge_memcg+0x10/0x10 [ 2616.850982][ T1254] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2616.856768][ T1254] ? __pfx_lock_release+0x10/0x10 [ 2616.861861][ T1254] ? memcg_account_kmem+0x1e7/0x210 [ 2616.867145][ T1254] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2616.873027][ T1254] __memcg_kmem_charge_page+0xe1/0x250 [ 2616.878553][ T1254] memcg_charge_kernel_stack+0x210/0x550 [ 2616.884254][ T1254] dup_task_struct+0x15d/0x7d0 [ 2616.889094][ T1254] copy_process+0x5d5/0x3fc0 [ 2616.893741][ T1254] ? __might_fault+0xa9/0x120 [ 2616.898463][ T1254] ? __pfx_lock_release+0x10/0x10 [ 2616.903550][ T1254] ? __pfx_copy_process+0x10/0x10 [ 2616.908728][ T1254] ? __might_fault+0xc5/0x120 [ 2616.913476][ T1254] ? __asan_memset+0x23/0x50 [ 2616.918146][ T1254] kernel_clone+0x21d/0x8d0 [ 2616.922722][ T1254] ? __pfx_kernel_clone+0x10/0x10 [ 2616.927852][ T1254] __se_sys_clone3+0x2cb/0x350 [ 2616.932699][ T1254] ? __pfx___se_sys_clone3+0x10/0x10 [ 2616.938091][ T1254] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2616.944185][ T1254] ? exc_page_fault+0x587/0x870 [ 2616.949185][ T1254] ? do_syscall_64+0xb4/0x240 [ 2616.953929][ T1254] do_syscall_64+0xf9/0x240 [ 2616.958508][ T1254] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2616.964469][ T1254] RIP: 0033:0x7f0f5b4a9b99 [ 2616.968946][ T1254] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2616.988635][ T1254] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2616.997111][ T1254] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2617.005139][ T1254] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2617.013171][ T1254] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2617.021203][ T1254] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2617.029235][ T1254] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2617.037291][ T1254] [ 2617.059278][ T1254] memory: usage 307200kB, limit 307200kB, failcnt 127679 [ 2617.066727][ T1254] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2617.075217][ T1254] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2617.082644][ T1254] Memory cgroup stats for /syz0: [ 2617.082781][ T1254] cache 0 [ 2617.091082][ T1254] rss 0 [ 2617.093879][ T1254] rss_huge 0 [ 2617.104101][ T1254] shmem 0 [ 2617.107262][ T1254] mapped_file 0 [ 2617.110759][ T1254] dirty 0 [ 2617.113719][ T1254] writeback 0 [ 2617.117455][ T1254] workingset_refault_anon 39275 [ 2617.122365][ T1254] workingset_refault_file 2 [ 2617.127075][ T1254] swap 221184 [ 2617.130396][ T1254] swapcached 0 [ 2617.133799][ T1254] pgpgin 224471 [ 2617.137680][ T1254] pgpgout 224471 [ 2617.141274][ T1254] pgfault 503909 [ 2617.160560][ T1254] pgmajfault 38388 [ 2617.175013][ T1254] inactive_anon 0 [ 2617.178720][ T1254] active_anon 0 [ 2617.182309][ T1254] inactive_file 0 [ 2617.186178][ T1254] active_file 0 [ 2617.189680][ T1254] unevictable 0 [ 2617.193175][ T1254] hierarchical_memory_limit 314572800 [ 2617.198932][ T1254] hierarchical_memsw_limit 9223372036854771712 [ 2617.205290][ T1254] total_cache 0 [ 2617.208803][ T1254] total_rss 0 [ 2617.212127][ T1254] total_rss_huge 0 [ 2617.227435][ T1254] total_shmem 0 [ 2617.230981][ T1254] total_mapped_file 0 [ 2617.235594][ T1254] total_dirty 0 [ 2617.239110][ T1254] total_writeback 0 [ 2617.242950][ T1254] total_workingset_refault_anon 39275 [ 2617.249122][ T1254] total_workingset_refault_file 2 [ 2617.254195][ T1254] total_swap 221184 [ 2617.259145][ T1254] total_swapcached 0 [ 2617.263261][ T1254] total_pgpgin 224471 [ 2617.270862][ T1254] total_pgpgout 224471 [ 2617.275872][ T1254] total_pgfault 503909 [ 2617.279988][ T1254] total_pgmajfault 38388 [ 2617.294738][ T1254] total_inactive_anon 0 [ 2617.299028][ T1254] total_active_anon 0 [ 2617.303046][ T1254] total_inactive_file 0 [ 2617.308155][ T1254] total_active_file 0 [ 2617.312192][ T1254] total_unevictable 0 [ 2617.316968][ T1254] anon_cost 0 [ 2617.320299][ T1254] file_cost 0 [ 2617.323712][ T1254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1254,uid=0 [ 2617.353895][ T1254] Memory cgroup out of memory: Killed process 1254 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8912kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x854]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2618.384127][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2618.424716][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2618.435141][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2618.445347][ T5099] Call Trace: [ 2618.448675][ T5099] [ 2618.451663][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2618.456400][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2618.461664][ T5099] ? __pfx__printk+0x10/0x10 [ 2618.466318][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2618.471065][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2618.476159][ T5099] dump_header+0xda/0x6a0 [ 2618.480558][ T5099] oom_kill_process+0x3a7/0x930 [ 2618.485479][ T5099] out_of_memory+0xf67/0x1320 [ 2618.490222][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2618.495898][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2618.500966][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2618.506120][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2618.511704][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2618.516754][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2618.522881][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2618.528115][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2618.533119][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2618.538117][ T5099] ? mark_lock+0x9a/0x350 [ 2618.542517][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2618.548038][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2618.554213][ T5099] charge_memcg+0xa2/0x160 [ 2618.558651][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2618.564744][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2618.570216][ T5099] ? mark_lock+0x9a/0x350 [ 2618.574568][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2618.580589][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2618.585993][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2618.591901][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2618.596949][ T5099] ? xas_descend+0x37e/0x470 [ 2618.601574][ T5099] swapin_readahead+0x1ea/0x1070 [ 2618.606523][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2618.611771][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2618.617166][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2618.622657][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2618.627961][ T5099] do_swap_page+0x791/0x3f40 [ 2618.632610][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2618.637517][ T5099] ? do_swap_page+0x154/0x3f40 [ 2618.642305][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2618.647346][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2618.652836][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2618.658666][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2618.663893][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2618.669054][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2618.674543][ T5099] ? mt_find+0x226/0x850 [ 2618.678804][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2618.683875][ T5099] ? mt_find+0x62d/0x850 [ 2618.688141][ T5099] ? mt_find+0x226/0x850 [ 2618.692418][ T5099] ? find_vma+0x142/0x1c0 [ 2618.696773][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2618.701469][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2618.707472][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2618.712262][ T5099] exc_page_fault+0x2ad/0x870 [ 2618.716961][ T5099] asm_exc_page_fault+0x26/0x30 [ 2618.721827][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2618.727451][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2618.747865][ T5099] RSP: 0000:ffffc9000478fd98 EFLAGS: 00050202 [ 2618.753954][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2618.762026][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2618.770010][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2618.778005][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2618.785994][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2618.794084][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2618.800010][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2618.806448][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2618.812203][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2618.817857][ T5099] do_syscall_64+0x108/0x240 [ 2618.822465][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2618.828375][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2618.832805][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2618.852523][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2618.860960][ T5099] RAX: 0000000000000000 RBX: 0000000000004253 RCX: 00007f0f5b4a91b5 [ 2618.868944][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2618.876937][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2618.884930][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2618.892916][ T5099] R13: 000000000027f316 R14: 000000000027f316 R15: 0000000000000000 [ 2618.901013][ T5099] [ 2619.148965][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 127912 [ 2619.178446][ T5099] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 2619.200460][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2619.208591][ T5099] Memory cgroup stats for /syz0: [ 2619.208745][ T5099] cache 0 [ 2619.222340][ T5099] rss 0 [ 2619.225487][ T5099] rss_huge 0 [ 2619.228733][ T5099] shmem 0 [ 2619.231696][ T5099] mapped_file 0 [ 2619.241411][ T5099] dirty 0 [ 2619.244872][ T5099] writeback 0 [ 2619.248207][ T5099] workingset_refault_anon 39327 [ 2619.253092][ T5099] workingset_refault_file 2 [ 2619.263905][ T5099] swap 262144 [ 2619.267638][ T5099] swapcached 0 [ 2619.271097][ T5099] pgpgin 224535 [ 2619.274968][ T5099] pgpgout 224535 [ 2619.278550][ T5099] pgfault 504010 [ 2619.282123][ T5099] pgmajfault 38438 [ 2619.292121][ T5099] inactive_anon 0 [ 2619.296000][ T5099] active_anon 0 12:18:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004811}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r3) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x91b38aa55c079322) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x30}}, 0x0) (async) sendto$inet(r0, &(0x7f0000000480)="474fcfc5642071a8ff6eec5ec34edec55536efa395ec284c7e6064d337db5559465f5affd09ae3eb5d0238", 0x2b, 0x880, &(0x7f00000004c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)="7883baf75a4ba2c33a52de7a4668d5b4b2a349728e38602b6371330f873bd8fa0fa09085019719a5d70abd3634613601213ef626a9f5a226c13ee0ed51e782921335c54aa2a16d2a1eef304906273edb8f0a2b73154ad21fe4aba57d5fd388f57d1b2357b68ce05c09d2095a4fc09c2659354d0c3862d76dc583ed50db6a3c7e2dbf0ee35dd7a68c0863bdd054df997e6da43a0f3a0dea0208b18bfe3e1375723e66c6e8a39b954c9a54d99822b5e8683613bf1ec09deb3006a68efe0fa9ce6f627201b315d10283a06b920ac1b8868fe7497dc8a418d57ede714b96bcb88a0836af3d0d0f56", 0xe6}, {&(0x7f0000000840)="88f4932ff0f53be883625f4de0aec5b91c6fe9c01b826ee7931c8b23b714d90dff9a8a868a28194a4820cf00550503417b4aae7bf1d42d89d81c34e440d72b55459b874ba86f3a6634673ea3b37b6caa3f32204b454c90b3cf", 0x59}], 0x2, &(0x7f0000000900)=[@ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x82, 0x12, "f7d6c27869856d59c5bd6bb05b501fe3"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xfd, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbf89}]}, @ra={0x94, 0x4}, @end]}}}], 0x68}}], 0x1, 0x400c410) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000700)="472d5a14c3336058bb90c9bf4abd2c8c", 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000811) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="2fcd50ba310b30a1a89dbdd2de369162f8e0c4fa18516c42db2a9cf3750860de16ae0e926d", 0x25}, {&(0x7f0000000500)="981ddb4e1002d5f12c017004dac109fb41a5dc03994a7d79909b7a72398666d80175abaa2262b2cdcefcd8fc399ec45f472a8641613abe7496566fcca7f6cf1aa8588c7abf56ddf596baf7b5a5ce52956ab8cdd139ea6c09812a596bea87b0c22938e9a0a64024a813fc6349a947273182302c29be8691cfa67eec49be4bdd47eef2d3e631647513d8c53df143eeb035843efb7c23cc31ad9ac517ca3f7c05fd6850", 0xa2}], 0x2}}], 0x1, 0x0) (async) r6 = socket(0x1e, 0x6, 0xffffffff) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400046f7b00000227bd7000fddbdf250008000100030000000800010001000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000012c0)="09278a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) [ 2619.299510][ T5099] inactive_file 0 [ 2619.303180][ T5099] active_file 0 [ 2619.312592][ T5099] unevictable 0 [ 2619.316381][ T5099] hierarchical_memory_limit 314572800 [ 2619.321817][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2619.339444][ T5099] total_cache 0 [ 2619.343086][ T5099] total_rss 0 [ 2619.356564][ T5099] total_rss_huge 0 [ 2619.360365][ T5099] total_shmem 0 [ 2619.363867][ T5099] total_mapped_file 0 [ 2619.384697][ T5099] total_dirty 0 [ 2619.388244][ T5099] total_writeback 0 [ 2619.392174][ T5099] total_workingset_refault_anon 39327 [ 2619.417560][ T5099] total_workingset_refault_file 2 [ 2619.435563][ T5099] total_swap 262144 [ 2619.439459][ T5099] total_swapcached 0 [ 2619.443403][ T5099] total_pgpgin 224535 [ 2619.484484][ T5099] total_pgpgout 224535 [ 2619.488665][ T5099] total_pgfault 504010 [ 2619.492779][ T5099] total_pgmajfault 38438 [ 2619.514635][ T5099] total_inactive_anon 0 [ 2619.525410][ T5099] total_active_anon 0 [ 2619.529479][ T5099] total_inactive_file 0 [ 2619.533686][ T5099] total_active_file 0 [ 2619.580413][ T5099] total_unevictable 0 [ 2619.610241][ T5099] anon_cost 0 [ 2619.613693][ T5099] file_cost 0 [ 2619.631909][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1255,uid=0 [ 2619.677307][ T5099] Memory cgroup out of memory: Killed process 1255 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2620.056110][ T1259] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2620.125574][ T1259] CPU: 0 PID: 1259 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2620.136013][ T1259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2620.146118][ T1259] Call Trace: [ 2620.149454][ T1259] [ 2620.152458][ T1259] dump_stack_lvl+0x1e7/0x2e0 [ 2620.157211][ T1259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2620.162479][ T1259] ? __pfx__printk+0x10/0x10 [ 2620.167124][ T1259] ? ___ratelimit+0x4c4/0x670 [ 2620.171874][ T1259] ? __pfx____ratelimit+0x10/0x10 [ 2620.176974][ T1259] dump_header+0xda/0x6a0 [ 2620.181383][ T1259] oom_kill_process+0x3a7/0x930 [ 2620.186309][ T1259] out_of_memory+0xf67/0x1320 [ 2620.191073][ T1259] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2620.196783][ T1259] ? __pfx___mutex_lock+0x10/0x10 [ 2620.201886][ T1259] ? __pfx_out_of_memory+0x10/0x10 [ 2620.207196][ T1259] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2620.212810][ T1259] ? __pfx_lock_release+0x10/0x10 [ 2620.217909][ T1259] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2620.224064][ T1259] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2620.229333][ T1259] ? mem_cgroup_iter+0x422/0x560 [ 2620.234350][ T1259] try_charge_memcg+0xda2/0x18a0 [ 2620.239390][ T1259] ? __pfx_try_charge_memcg+0x10/0x10 [ 2620.244829][ T1259] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2620.250624][ T1259] ? __pfx_lock_release+0x10/0x10 [ 2620.255723][ T1259] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2620.261781][ T1259] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2620.267580][ T1259] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2620.273465][ T1259] obj_cgroup_charge+0x389/0x630 [ 2620.278463][ T1259] ? obj_cgroup_charge+0x121/0x630 [ 2620.283635][ T1259] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2620.289155][ T1259] ? kmalloc_trace+0x4e/0x360 [ 2620.293898][ T1259] ? __pfx___might_resched+0x10/0x10 [ 2620.299260][ T1259] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2620.305137][ T1259] ? copy_semundo+0xb5/0x240 [ 2620.309792][ T1259] kmalloc_trace+0x216/0x360 [ 2620.314446][ T1259] ? __asan_memcpy+0x40/0x70 [ 2620.319145][ T1259] copy_semundo+0xb5/0x240 [ 2620.323637][ T1259] copy_process+0x1bc3/0x3fc0 [ 2620.328394][ T1259] ? copy_process+0x9c3/0x3fc0 [ 2620.333231][ T1259] ? __pfx_copy_process+0x10/0x10 [ 2620.338321][ T1259] ? __might_fault+0xc5/0x120 [ 2620.343071][ T1259] ? __asan_memset+0x23/0x50 [ 2620.347737][ T1259] kernel_clone+0x21d/0x8d0 [ 2620.352306][ T1259] ? __pfx_kernel_clone+0x10/0x10 [ 2620.357421][ T1259] __se_sys_clone3+0x2cb/0x350 [ 2620.362250][ T1259] ? __pfx___se_sys_clone3+0x10/0x10 [ 2620.367635][ T1259] ? do_syscall_64+0x108/0x240 [ 2620.372464][ T1259] ? do_syscall_64+0xb4/0x240 [ 2620.377211][ T1259] do_syscall_64+0xf9/0x240 [ 2620.381785][ T1259] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2620.387750][ T1259] RIP: 0033:0x7f0f5b4a9b99 [ 2620.392224][ T1259] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2620.411891][ T1259] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2620.420379][ T1259] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2620.428408][ T1259] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2620.436436][ T1259] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2620.444466][ T1259] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2620.452483][ T1259] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2620.460515][ T1259] [ 2620.488311][ T1259] memory: usage 307200kB, limit 307200kB, failcnt 128080 [ 2620.507488][ T1259] memory+swap: usage 307428kB, limit 9007199254740988kB, failcnt 0 [ 2620.520686][ T1259] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2620.531760][ T1259] Memory cgroup stats for /syz0: [ 2620.531911][ T1259] cache 0 [ 2620.549257][ T1259] rss 0 [ 2620.555553][ T1259] rss_huge 0 [ 2620.570798][ T1259] shmem 0 [ 2620.573805][ T1259] mapped_file 0 [ 2620.579933][ T1259] dirty 0 [ 2620.584753][ T1259] writeback 0 [ 2620.595388][ T1259] workingset_refault_anon 39374 [ 2620.601835][ T1259] workingset_refault_file 2 [ 2620.625297][ T1259] swap 233472 [ 2620.628645][ T1259] swapcached 0 [ 2620.632049][ T1259] pgpgin 224594 [ 2620.650323][ T1259] pgpgout 224594 [ 2620.653946][ T1259] pgfault 504108 [ 2620.685446][ T1259] pgmajfault 38482 [ 2620.700022][ T1259] inactive_anon 0 [ 2620.708604][ T1259] active_anon 0 [ 2620.722906][ T1259] inactive_file 0 [ 2620.734731][ T1259] active_file 0 [ 2620.738264][ T1259] unevictable 0 [ 2620.741761][ T1259] hierarchical_memory_limit 314572800 [ 2620.764430][ T1259] hierarchical_memsw_limit 9223372036854771712 [ 2620.778115][ T1259] total_cache 0 [ 2620.785933][ T1259] total_rss 0 [ 2620.792960][ T1259] total_rss_huge 0 [ 2620.802012][ T1259] total_shmem 0 [ 2620.810731][ T1259] total_mapped_file 0 [ 2620.819647][ T1259] total_dirty 0 [ 2620.827936][ T1259] total_writeback 0 [ 2620.832340][ T1259] total_workingset_refault_anon 39374 [ 2620.846044][ T1259] total_workingset_refault_file 2 [ 2620.851142][ T1259] total_swap 233472 [ 2620.865006][ T1259] total_swapcached 0 [ 2620.869017][ T1259] total_pgpgin 224594 [ 2620.873041][ T1259] total_pgpgout 224594 [ 2620.879676][ T1259] total_pgfault 504108 [ 2620.883809][ T1259] total_pgmajfault 38482 [ 2620.896741][ T1259] total_inactive_anon 0 [ 2620.901070][ T1259] total_active_anon 0 [ 2620.911729][ T1259] total_inactive_file 0 [ 2620.924428][ T1259] total_active_file 0 [ 2620.928482][ T1259] total_unevictable 0 [ 2620.932673][ T1259] anon_cost 0 [ 2620.948207][ T1259] file_cost 0 [ 2620.954792][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2620.955416][ T1259] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1259,uid=0 [ 2620.980838][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2620.981008][ T1259] Memory cgroup out of memory: Killed process 1259 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2621.006083][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2621.025277][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2621.033374][ T5111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2621.044893][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 12:18:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:49 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2621.851228][ T5101] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2621.861520][ T5101] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2621.871213][ T5101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2621.872115][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2621.895440][ T5101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2621.914089][ T5101] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2621.923370][ T5101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2621.932233][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2621.942734][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2621.952844][ T5099] Call Trace: [ 2621.956177][ T5099] [ 2621.959165][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2621.963909][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2621.969172][ T5099] ? __pfx__printk+0x10/0x10 [ 2621.973822][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2621.978598][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2621.983718][ T5099] dump_header+0xda/0x6a0 [ 2621.988153][ T5099] oom_kill_process+0x3a7/0x930 [ 2621.993088][ T5099] out_of_memory+0xf67/0x1320 [ 2621.997931][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2622.003635][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2622.008738][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2622.013935][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2622.019552][ T5099] ? __pfx_preempt_schedule+0x10/0x10 [ 2622.025083][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2622.031340][ T5099] ? preempt_schedule_thunk+0x1a/0x30 [ 2622.036787][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2622.041801][ T5099] ? mark_lock+0x9a/0x350 [ 2622.046234][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2622.051724][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2622.057953][ T5099] charge_memcg+0xa2/0x160 [ 2622.062438][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2622.068666][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2622.074271][ T5099] ? mark_lock+0x9a/0x350 [ 2622.078718][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2622.084776][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2622.090225][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2622.096190][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2622.101321][ T5099] ? xas_descend+0x37e/0x470 [ 2622.105982][ T5099] swapin_readahead+0x1ea/0x1070 [ 2622.110975][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2622.116171][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2622.121623][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2622.126994][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2622.132355][ T5099] do_swap_page+0x791/0x3f40 [ 2622.137016][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2622.141865][ T5099] ? do_swap_page+0x154/0x3f40 [ 2622.146715][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2622.151804][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2622.157342][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2622.163220][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2622.168691][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2622.173927][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2622.179551][ T5099] ? mt_find+0x226/0x850 [ 2622.183831][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2622.188902][ T5099] ? mt_find+0x62d/0x850 [ 2622.193173][ T5099] ? mt_find+0x226/0x850 [ 2622.197458][ T5099] ? find_vma+0x142/0x1c0 [ 2622.201897][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2622.206588][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2622.212595][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2622.217406][ T5099] exc_page_fault+0x2ad/0x870 [ 2622.222101][ T5099] asm_exc_page_fault+0x26/0x30 [ 2622.226994][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2622.232130][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2622.251751][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2622.257838][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2622.265823][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2622.273804][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2622.281795][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2622.289783][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2622.297791][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2622.303716][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2622.310064][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2622.315803][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2622.321463][ T5099] do_syscall_64+0x108/0x240 [ 2622.326079][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2622.331998][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2622.336442][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2622.356061][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2622.364494][ T5099] RAX: 0000000000000000 RBX: 0000000000004256 RCX: 00007f0f5b4a91b5 [ 2622.372476][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2622.380552][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2622.388539][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2622.396525][ T5099] R13: 000000000027fec1 R14: 000000000027fec1 R15: 0000000000000000 [ 2622.404620][ T5099] [ 2622.445324][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 128577 [ 2622.464594][ T5099] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 2622.482385][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2622.493950][ T5099] Memory cgroup stats for /syz0: [ 2622.494219][ T5099] cache 0 [ 2622.503001][ T5099] rss 36864 [ 2622.506537][ T5099] rss_huge 0 [ 2622.509785][ T5099] shmem 0 [ 2622.512764][ T5099] mapped_file 0 [ 2622.532058][ T5099] dirty 0 [ 2622.543932][ T5099] writeback 0 [ 2622.547496][ T5099] workingset_refault_anon 39549 [ 2622.552628][ T5099] workingset_refault_file 2 [ 2622.557955][ T5099] swap 225280 [ 2622.565094][ T5099] swapcached 24576 [ 2622.582724][ T5099] pgpgin 224780 [ 2622.590994][ T5099] pgpgout 224771 [ 2622.600363][ T5099] pgfault 504394 [ 2622.604086][ T5099] pgmajfault 38651 [ 2622.609451][ T5099] inactive_anon 0 [ 2622.613247][ T5099] active_anon 36864 [ 2622.622419][ T5099] inactive_file 0 [ 2622.637174][ T5099] active_file 0 [ 2622.647591][ T5099] unevictable 0 [ 2622.652656][ T5099] hierarchical_memory_limit 314572800 [ 2622.662157][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2622.671734][ T5099] total_cache 0 [ 2622.679555][ T5099] total_rss 36864 [ 2622.683355][ T5099] total_rss_huge 0 [ 2622.700998][ T5099] total_shmem 0 [ 2622.709355][ T5099] total_mapped_file 0 [ 2622.717293][ T5099] total_dirty 0 [ 2622.721242][ T5099] total_writeback 0 [ 2622.725539][ T5099] total_workingset_refault_anon 39549 [ 2622.731095][ T5099] total_workingset_refault_file 2 [ 2622.736623][ T5099] total_swap 225280 [ 2622.740591][ T5099] total_swapcached 24576 [ 2622.746115][ T5099] total_pgpgin 224780 [ 2622.760784][ T5099] total_pgpgout 224771 [ 2622.765040][ T5099] total_pgfault 504394 [ 2622.769150][ T5099] total_pgmajfault 38651 [ 2622.773440][ T5099] total_inactive_anon 0 [ 2622.777938][ T5099] total_active_anon 36864 [ 2622.782310][ T5099] total_inactive_file 0 [ 2622.786702][ T5099] total_active_file 0 [ 2622.790729][ T5099] total_unevictable 0 [ 2622.795167][ T5099] anon_cost 0 [ 2622.798500][ T5099] file_cost 0 [ 2622.801812][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1265,uid=0 [ 2622.817763][ T5099] Memory cgroup out of memory: Killed process 1265 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2623.085396][ T5101] Bluetooth: hci5: command 0x0409 tx timeout [ 2623.292938][ T1272] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2623.320884][ T1272] CPU: 1 PID: 1272 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2623.331665][ T1272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2623.341783][ T1272] Call Trace: [ 2623.345120][ T1272] [ 2623.348105][ T1272] dump_stack_lvl+0x1e7/0x2e0 [ 2623.352881][ T1272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2623.358409][ T1272] ? __pfx__printk+0x10/0x10 [ 2623.363065][ T1272] ? ___ratelimit+0x4c4/0x670 [ 2623.368023][ T1272] ? __pfx____ratelimit+0x10/0x10 [ 2623.373396][ T1272] dump_header+0xda/0x6a0 [ 2623.377809][ T1272] oom_kill_process+0x3a7/0x930 [ 2623.383064][ T1272] out_of_memory+0xf67/0x1320 [ 2623.387807][ T1272] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2623.393488][ T1272] ? __pfx___mutex_lock+0x10/0x10 [ 2623.398803][ T1272] ? __pfx_out_of_memory+0x10/0x10 [ 2623.404036][ T1272] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2623.409653][ T1272] ? __pfx_lock_release+0x10/0x10 [ 2623.414798][ T1272] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2623.420983][ T1272] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2623.426560][ T1272] ? mem_cgroup_iter+0x422/0x560 [ 2623.431532][ T1272] try_charge_memcg+0xda2/0x18a0 [ 2623.436515][ T1272] ? __pfx_try_charge_memcg+0x10/0x10 [ 2623.441998][ T1272] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2623.447737][ T1272] ? __pfx_lock_release+0x10/0x10 [ 2623.452788][ T1272] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2623.458795][ T1272] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2623.464533][ T1272] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2623.470359][ T1272] obj_cgroup_charge+0x389/0x630 [ 2623.475347][ T1272] ? obj_cgroup_charge+0x121/0x630 [ 2623.480492][ T1272] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2623.485983][ T1272] ? kmalloc_trace+0x4e/0x360 [ 2623.490679][ T1272] ? __pfx___might_resched+0x10/0x10 [ 2623.495994][ T1272] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2623.501823][ T1272] ? copy_semundo+0xb5/0x240 [ 2623.506426][ T1272] kmalloc_trace+0x216/0x360 [ 2623.511045][ T1272] ? __asan_memcpy+0x40/0x70 [ 2623.515662][ T1272] copy_semundo+0xb5/0x240 [ 2623.520186][ T1272] copy_process+0x1bc3/0x3fc0 [ 2623.524924][ T1272] ? copy_process+0x9c3/0x3fc0 [ 2623.529760][ T1272] ? __pfx_copy_process+0x10/0x10 [ 2623.534834][ T1272] ? __might_fault+0xc5/0x120 [ 2623.539648][ T1272] ? __asan_memset+0x23/0x50 [ 2623.544321][ T1272] kernel_clone+0x21d/0x8d0 [ 2623.548898][ T1272] ? __pfx_kernel_clone+0x10/0x10 [ 2623.553971][ T1272] __se_sys_clone3+0x2cb/0x350 [ 2623.558766][ T1272] ? __pfx___se_sys_clone3+0x10/0x10 [ 2623.564084][ T1272] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2623.570132][ T1272] ? exc_page_fault+0x587/0x870 [ 2623.575045][ T1272] ? do_syscall_64+0xb4/0x240 [ 2623.579912][ T1272] do_syscall_64+0xf9/0x240 [ 2623.584471][ T1272] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2623.590514][ T1272] RIP: 0033:0x7f0f5b4a9b99 [ 2623.594962][ T1272] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2623.614613][ T1272] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2623.623187][ T1272] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2623.631229][ T1272] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2623.639241][ T1272] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2623.647266][ T1272] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2623.655710][ T1272] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2623.663749][ T1272] [ 2623.732762][ T1272] memory: usage 307200kB, limit 307200kB, failcnt 128954 [ 2623.746272][ T1272] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2623.754275][ T1272] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2623.780588][ T1272] Memory cgroup stats for /syz0: [ 2623.780760][ T1272] cache 0 [ 2623.793604][ T1272] rss 28672 [ 2623.797269][ T1272] rss_huge 0 [ 2623.800528][ T1272] shmem 0 [ 2623.803512][ T1272] mapped_file 0 [ 2623.813750][ T1272] dirty 0 [ 2623.817137][ T1272] writeback 0 [ 2623.820480][ T1272] workingset_refault_anon 39610 [ 2623.840351][ T1272] workingset_refault_file 2 [ 2623.847155][ T1272] swap 274432 [ 2623.850599][ T1272] swapcached 16384 [ 2623.855227][ T1272] pgpgin 224852 [ 2623.858743][ T1272] pgpgout 224845 [ 2623.862336][ T1272] pgfault 504514 [ 2623.877627][ T1272] pgmajfault 38708 [ 2623.881444][ T1272] inactive_anon 16384 [ 2623.897360][ T1272] active_anon 12288 [ 2623.901243][ T1272] inactive_file 0 [ 2623.905312][ T1272] active_file 0 [ 2623.908821][ T1272] unevictable 0 [ 2623.912333][ T1272] hierarchical_memory_limit 314572800 [ 2623.918495][ T1272] hierarchical_memsw_limit 9223372036854771712 [ 2623.925175][ T1272] total_cache 0 [ 2623.928697][ T1272] total_rss 28672 [ 2623.932458][ T1272] total_rss_huge 0 [ 2623.953334][ T1272] total_shmem 0 [ 2623.959586][ T1272] total_mapped_file 0 [ 2623.963986][ T1272] total_dirty 0 [ 2623.971536][ T1272] total_writeback 0 [ 2623.978141][ T1272] total_workingset_refault_anon 39610 [ 2623.983584][ T1272] total_workingset_refault_file 2 [ 2624.004431][ T1272] total_swap 274432 [ 2624.008330][ T1272] total_swapcached 16384 [ 2624.012613][ T1272] total_pgpgin 224852 [ 2624.024503][ T1272] total_pgpgout 224845 [ 2624.028674][ T1272] total_pgfault 504514 [ 2624.032877][ T1272] total_pgmajfault 38708 [ 2624.042750][ T1272] total_inactive_anon 16384 [ 2624.058265][ T1272] total_active_anon 12288 [ 2624.062665][ T1272] total_inactive_file 0 [ 2624.066991][ T1272] total_active_file 0 [ 2624.071008][ T1272] total_unevictable 0 [ 2624.075386][ T1272] anon_cost 0 [ 2624.078717][ T1272] file_cost 0 [ 2624.082035][ T1272] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1272,uid=0 [ 2624.098024][ T1272] Memory cgroup out of memory: Killed process 1272 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2020000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:18:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2624.524637][ T5101] Bluetooth: hci6: command 0x0409 tx timeout [ 2624.648270][ T1273] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2624.669867][ T1273] CPU: 1 PID: 1273 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2624.680293][ T1273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2624.690405][ T1273] Call Trace: [ 2624.693745][ T1273] [ 2624.696722][ T1273] dump_stack_lvl+0x1e7/0x2e0 [ 2624.701469][ T1273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2624.706729][ T1273] ? __pfx__printk+0x10/0x10 [ 2624.711374][ T1273] ? ___ratelimit+0x4c4/0x670 [ 2624.716122][ T1273] ? __pfx____ratelimit+0x10/0x10 [ 2624.721227][ T1273] dump_header+0xda/0x6a0 [ 2624.725714][ T1273] oom_kill_process+0x3a7/0x930 [ 2624.730621][ T1273] out_of_memory+0xf67/0x1320 [ 2624.735335][ T1273] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2624.740988][ T1273] ? __pfx___mutex_lock+0x10/0x10 [ 2624.746034][ T1273] ? __pfx_out_of_memory+0x10/0x10 [ 2624.751175][ T1273] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2624.756737][ T1273] ? __pfx_lock_release+0x10/0x10 [ 2624.761780][ T1273] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2624.769176][ T1273] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2624.774395][ T1273] ? mem_cgroup_iter+0x422/0x560 [ 2624.779369][ T1273] try_charge_memcg+0xda2/0x18a0 [ 2624.784354][ T1273] ? __pfx_try_charge_memcg+0x10/0x10 [ 2624.789762][ T1273] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2624.795930][ T1273] ? __pfx_lock_release+0x10/0x10 [ 2624.800989][ T1273] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2624.806811][ T1273] __memcg_kmem_charge_page+0xe1/0x250 [ 2624.812282][ T1273] memcg_charge_kernel_stack+0xa7/0x550 [ 2624.817851][ T1273] dup_task_struct+0x15d/0x7d0 [ 2624.822638][ T1273] copy_process+0x5d5/0x3fc0 [ 2624.827358][ T1273] ? __might_fault+0xa9/0x120 [ 2624.832059][ T1273] ? __pfx_lock_release+0x10/0x10 [ 2624.837108][ T1273] ? __pfx_copy_process+0x10/0x10 [ 2624.842151][ T1273] ? __might_fault+0xc5/0x120 [ 2624.846848][ T1273] ? __asan_memset+0x23/0x50 [ 2624.851460][ T1273] kernel_clone+0x21d/0x8d0 [ 2624.855977][ T1273] ? __pfx_kernel_clone+0x10/0x10 [ 2624.861029][ T1273] __se_sys_clone3+0x2cb/0x350 [ 2624.865816][ T1273] ? __pfx___se_sys_clone3+0x10/0x10 [ 2624.871138][ T1273] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2624.877492][ T1273] ? do_syscall_64+0xb4/0x240 [ 2624.882206][ T1273] do_syscall_64+0xf9/0x240 [ 2624.886730][ T1273] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2624.892739][ T1273] RIP: 0033:0x7f0f5b4a9b99 [ 2624.897184][ T1273] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2624.917016][ T1273] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2624.925887][ T1273] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2624.933876][ T1273] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2624.941911][ T1273] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2624.949964][ T1273] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2624.957952][ T1273] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2624.966036][ T1273] [ 2624.988479][ T1273] memory: usage 307200kB, limit 307200kB, failcnt 129345 [ 2625.023195][ T1273] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 2625.031712][ T1273] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2625.044480][ T1273] Memory cgroup stats for /syz0: [ 2625.044677][ T1273] cache 0 [ 2625.053754][ T1273] rss 12288 [ 2625.057638][ T1273] rss_huge 0 [ 2625.064494][ T1273] shmem 0 [ 2625.067823][ T1273] mapped_file 0 [ 2625.072486][ T1273] dirty 0 [ 2625.080316][ T1273] writeback 0 [ 2625.083762][ T1273] workingset_refault_anon 39773 [ 2625.089506][ T1273] workingset_refault_file 2 [ 2625.094531][ T1273] swap 208896 [ 2625.098160][ T1273] swapcached 8192 [ 2625.101831][ T1273] pgpgin 225026 [ 2625.111143][ T1273] pgpgout 225023 [ 2625.115423][ T1273] pgfault 504771 [ 2625.119330][ T1273] pgmajfault 38861 [ 2625.123198][ T1273] inactive_anon 0 [ 2625.133265][ T1273] active_anon 12288 [ 2625.137648][ T1273] inactive_file 0 [ 2625.141494][ T1273] active_file 0 [ 2625.145367][ T1273] unevictable 0 [ 2625.154444][ T1273] hierarchical_memory_limit 314572800 [ 2625.159974][ T1273] hierarchical_memsw_limit 9223372036854771712 [ 2625.164810][ T5101] Bluetooth: hci5: command 0x041b tx timeout [ 2625.176554][ T1273] total_cache 0 [ 2625.180139][ T1273] total_rss 12288 [ 2625.183816][ T1273] total_rss_huge 0 [ 2625.194946][ T1273] total_shmem 0 [ 2625.200140][ T1273] total_mapped_file 0 [ 2625.205004][ T1273] total_dirty 0 [ 2625.208613][ T1273] total_writeback 0 [ 2625.212948][ T1273] total_workingset_refault_anon 39773 [ 2625.218674][ T1273] total_workingset_refault_file 2 [ 2625.223917][ T1273] total_swap 208896 [ 2625.228231][ T1273] total_swapcached 8192 [ 2625.232540][ T1273] total_pgpgin 225026 [ 2625.236789][ T1273] total_pgpgout 225023 [ 2625.241142][ T1273] total_pgfault 504771 [ 2625.258134][ T1273] total_pgmajfault 38861 [ 2625.262897][ T1273] total_inactive_anon 0 [ 2625.268070][ T1273] total_active_anon 12288 [ 2625.272562][ T1273] total_inactive_file 0 [ 2625.276958][ T1273] total_active_file 0 [ 2625.281316][ T1273] total_unevictable 0 [ 2625.297023][ T1273] anon_cost 0 [ 2625.300383][ T1273] file_cost 0 [ 2625.303703][ T1273] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1273,uid=0 [ 2625.319533][ T1273] Memory cgroup out of memory: Killed process 1273 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ff0000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2625.927589][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2625.956823][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2625.967251][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2625.977361][ T5099] Call Trace: [ 2625.980687][ T5099] [ 2625.983658][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2625.988406][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2625.993665][ T5099] ? __pfx__printk+0x10/0x10 [ 2625.998307][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2626.003059][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2626.008155][ T5099] dump_header+0xda/0x6a0 [ 2626.012552][ T5099] oom_kill_process+0x3a7/0x930 [ 2626.017470][ T5099] out_of_memory+0xf67/0x1320 [ 2626.022205][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2626.027881][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2626.033046][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2626.038238][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2626.043865][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2626.048953][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2626.055090][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2626.060352][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2626.065362][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2626.070359][ T5099] ? mark_lock+0x9a/0x350 [ 2626.074762][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2626.080282][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2626.086450][ T5099] charge_memcg+0xa2/0x160 [ 2626.090884][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2626.096966][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2626.102429][ T5099] ? mark_lock+0x9a/0x350 [ 2626.106776][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2626.112779][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2626.118174][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2626.124086][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2626.129129][ T5099] ? xas_descend+0x37e/0x470 [ 2626.133737][ T5099] swapin_readahead+0x1ea/0x1070 [ 2626.138853][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2626.143997][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2626.149384][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2626.154695][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2626.159992][ T5099] do_swap_page+0x791/0x3f40 [ 2626.164614][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2626.169426][ T5099] ? do_swap_page+0x154/0x3f40 [ 2626.174203][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2626.179241][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2626.184722][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2626.190650][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2626.195819][ T5099] ? reacquire_held_locks+0x3eb/0x690 [ 2626.201199][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2626.206706][ T5099] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2626.212481][ T5099] ? mtree_range_walk+0x6fd/0x8e0 [ 2626.217549][ T5099] ? lock_vma_under_rcu+0x18a/0x730 [ 2626.222778][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2626.227833][ T5099] ? lock_vma_under_rcu+0x2f9/0x730 [ 2626.233109][ T5099] ? lock_vma_under_rcu+0x18a/0x730 [ 2626.238331][ T5099] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2626.243897][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2626.248687][ T5099] exc_page_fault+0x456/0x870 [ 2626.253380][ T5099] asm_exc_page_fault+0x26/0x30 [ 2626.258244][ T5099] RIP: 0033:0x7f0f5b47a7a4 [ 2626.262690][ T5099] Code: 84 00 00 00 00 00 80 3d 71 57 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 48 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 <89> 54 24 14 48 89 74 24 08 89 7c 24 10 48 89 4c 24 18 e8 d5 a3 02 [ 2626.282410][ T5099] RSP: 002b:00007ffcec9e1310 EFLAGS: 00010202 [ 2626.288498][ T5099] RAX: 00000000000001a9 RBX: 000000000000425a RCX: 0000000000000000 [ 2626.296479][ T5099] RDX: 0000000040000001 RSI: 00007ffcec9e139c RDI: 00000000ffffffff [ 2626.304456][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000010 R09: 00007ffcec9e60b0 [ 2626.312434][ T5099] R10: 0000000000000000 R11: 000000000007aaac R12: 0000000000000032 [ 2626.320433][ T5099] R13: 0000000000280f8b R14: 0000000000280f8b R15: 0000000000000000 [ 2626.328433][ T5099] [ 2626.344828][ T5099] memory: usage 307180kB, limit 307200kB, failcnt 129804 [ 2626.361918][ T5099] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 2626.371370][ T5099] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2626.388346][ T5099] Memory cgroup stats for /syz0: [ 2626.388524][ T5099] cache 0 [ 2626.400463][ T5099] rss 8192 [ 2626.403634][ T5099] rss_huge 0 [ 2626.411822][ T5099] shmem 0 [ 2626.415560][ T5099] mapped_file 0 [ 2626.419169][ T5099] dirty 0 [ 2626.422248][ T5099] writeback 0 [ 2626.426825][ T5099] workingset_refault_anon 39929 [ 2626.431838][ T5099] workingset_refault_file 2 [ 2626.446775][ T5099] swap 212992 [ 2626.450135][ T5099] swapcached 8192 [ 2626.453794][ T5099] pgpgin 225195 [ 2626.458226][ T5099] pgpgout 225193 [ 2626.461842][ T5099] pgfault 505030 [ 2626.466340][ T5099] pgmajfault 39016 [ 2626.470223][ T5099] inactive_anon 4096 [ 2626.474789][ T5099] active_anon 4096 [ 2626.479300][ T5099] inactive_file 0 [ 2626.483084][ T5099] active_file 0 [ 2626.487315][ T5099] unevictable 0 [ 2626.490916][ T5099] hierarchical_memory_limit 314572800 [ 2626.499693][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2626.506066][ T5099] total_cache 0 [ 2626.509846][ T5099] total_rss 8192 [ 2626.513527][ T5099] total_rss_huge 0 [ 2626.519161][ T5099] total_shmem 0 [ 2626.522751][ T5099] total_mapped_file 0 [ 2626.527505][ T5099] total_dirty 0 [ 2626.532790][ T5099] total_writeback 0 [ 2626.536848][ T5099] total_workingset_refault_anon 39929 [ 2626.542370][ T5099] total_workingset_refault_file 2 [ 2626.548789][ T5099] total_swap 212992 [ 2626.553101][ T5099] total_swapcached 8192 [ 2626.563595][ T5099] total_pgpgin 225195 [ 2626.572412][ T5099] total_pgpgout 225193 [ 2626.577697][ T5099] total_pgfault 505030 [ 2626.582011][ T5099] total_pgmajfault 39016 [ 2626.586758][ T5099] total_inactive_anon 4096 [ 2626.591315][ T5099] total_active_anon 4096 [ 2626.596020][ T5099] total_inactive_file 0 [ 2626.600307][ T5099] total_active_file 0 [ 2626.604733][ T5099] total_unevictable 0 [ 2626.605043][ T5101] Bluetooth: hci6: command 0x041b tx timeout [ 2626.608717][ T5099] anon_cost 0 [ 2626.626103][ T5099] file_cost 0 [ 2626.629463][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1276,uid=0 [ 2626.648229][ T5099] Memory cgroup out of memory: Killed process 1276 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5020000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2627.244817][ T5101] Bluetooth: hci5: command 0x040f tx timeout 12:18:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2627.446017][ T1278] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2627.463977][ T1278] CPU: 1 PID: 1278 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2627.474404][ T1278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2627.484515][ T1278] Call Trace: [ 2627.487848][ T1278] [ 2627.490820][ T1278] dump_stack_lvl+0x1e7/0x2e0 [ 2627.495562][ T1278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2627.500843][ T1278] ? __pfx__printk+0x10/0x10 [ 2627.505496][ T1278] ? ___ratelimit+0x4c4/0x670 [ 2627.510251][ T1278] ? __pfx____ratelimit+0x10/0x10 [ 2627.515362][ T1278] dump_header+0xda/0x6a0 [ 2627.519771][ T1278] oom_kill_process+0x3a7/0x930 [ 2627.524716][ T1278] out_of_memory+0xf67/0x1320 [ 2627.529491][ T1278] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2627.535221][ T1278] ? __pfx___mutex_lock+0x10/0x10 [ 2627.540411][ T1278] ? __pfx_out_of_memory+0x10/0x10 [ 2627.545625][ T1278] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2627.551254][ T1278] ? __pfx_lock_release+0x10/0x10 [ 2627.556355][ T1278] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2627.562508][ T1278] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2627.567774][ T1278] ? mem_cgroup_iter+0x422/0x560 [ 2627.572750][ T1278] try_charge_memcg+0xda2/0x18a0 [ 2627.577730][ T1278] ? __pfx_try_charge_memcg+0x10/0x10 [ 2627.583118][ T1278] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2627.588855][ T1278] ? __pfx_lock_release+0x10/0x10 [ 2627.593901][ T1278] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2627.599931][ T1278] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2627.605751][ T1278] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2627.611675][ T1278] obj_cgroup_charge+0x389/0x630 [ 2627.616736][ T1278] ? obj_cgroup_charge+0x121/0x630 [ 2627.621861][ T1278] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2627.627330][ T1278] ? kmalloc_trace+0x4e/0x360 [ 2627.632027][ T1278] ? __pfx___might_resched+0x10/0x10 [ 2627.637330][ T1278] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2627.643158][ T1278] ? copy_semundo+0xb5/0x240 [ 2627.647759][ T1278] kmalloc_trace+0x216/0x360 [ 2627.652364][ T1278] ? __asan_memcpy+0x40/0x70 [ 2627.656981][ T1278] copy_semundo+0xb5/0x240 [ 2627.661422][ T1278] copy_process+0x1bc3/0x3fc0 [ 2627.666136][ T1278] ? copy_process+0x9c3/0x3fc0 [ 2627.670938][ T1278] ? __pfx_copy_process+0x10/0x10 [ 2627.675978][ T1278] ? __might_fault+0xc5/0x120 [ 2627.680687][ T1278] ? __asan_memset+0x23/0x50 [ 2627.685301][ T1278] kernel_clone+0x21d/0x8d0 [ 2627.689822][ T1278] ? __pfx_kernel_clone+0x10/0x10 [ 2627.694868][ T1278] ? __pfx_lock_release+0x10/0x10 [ 2627.700004][ T1278] __se_sys_clone3+0x2cb/0x350 [ 2627.704788][ T1278] ? __might_fault+0xa9/0x120 [ 2627.709487][ T1278] ? __pfx___se_sys_clone3+0x10/0x10 [ 2627.714789][ T1278] ? rcu_is_watching+0x15/0xb0 [ 2627.719586][ T1278] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2627.725596][ T1278] ? exc_page_fault+0x587/0x870 [ 2627.730459][ T1278] ? do_syscall_64+0xb4/0x240 [ 2627.735238][ T1278] do_syscall_64+0xf9/0x240 [ 2627.739761][ T1278] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2627.745669][ T1278] RIP: 0033:0x7f0f5b4a9b99 [ 2627.750096][ T1278] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2627.769823][ T1278] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2627.778261][ T1278] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2627.786248][ T1278] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2627.794228][ T1278] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2627.802211][ T1278] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2627.810191][ T1278] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2627.818203][ T1278] [ 2627.834490][ T1278] memory: usage 307200kB, limit 307200kB, failcnt 130468 [ 2627.841699][ T1278] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2627.865284][ T1278] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2627.872676][ T1278] Memory cgroup stats for /syz0: [ 2627.872835][ T1278] cache 0 [ 2627.894534][ T1278] rss 8192 [ 2627.897698][ T1278] rss_huge 0 [ 2627.900968][ T1278] shmem 0 [ 2627.903952][ T1278] mapped_file 0 [ 2627.915135][ T1278] dirty 0 [ 2627.918152][ T1278] writeback 0 [ 2627.921485][ T1278] workingset_refault_anon 40173 [ 2627.931270][ T1278] workingset_refault_file 2 [ 2627.936606][ T1278] swap 208896 [ 2627.939973][ T1278] swapcached 12288 [ 2627.943739][ T1278] pgpgin 225451 [ 2627.952760][ T1278] pgpgout 225448 [ 2627.956587][ T1278] pgfault 505412 [ 2627.960182][ T1278] pgmajfault 39251 [ 2627.964036][ T1278] inactive_anon 0 [ 2627.974291][ T1278] active_anon 12288 [ 2627.978600][ T1278] inactive_file 0 [ 2627.982287][ T1278] active_file 0 [ 2627.992385][ T1278] unevictable 0 [ 2627.996233][ T1278] hierarchical_memory_limit 314572800 [ 2628.001747][ T1278] hierarchical_memsw_limit 9223372036854771712 [ 2628.013467][ T1278] total_cache 0 [ 2628.017218][ T1278] total_rss 8192 [ 2628.020809][ T1278] total_rss_huge 0 [ 2628.030759][ T1278] total_shmem 0 [ 2628.034398][ T1278] total_mapped_file 0 [ 2628.038442][ T1278] total_dirty 0 [ 2628.041957][ T1278] total_writeback 0 [ 2628.047027][ T1278] total_workingset_refault_anon 40173 [ 2628.052475][ T1278] total_workingset_refault_file 2 [ 2628.063644][ T1278] total_swap 208896 [ 2628.068212][ T1278] total_swapcached 12288 [ 2628.073038][ T1278] total_pgpgin 225451 [ 2628.083864][ T1278] total_pgpgout 225448 [ 2628.088301][ T1278] total_pgfault 505412 [ 2628.092428][ T1278] total_pgmajfault 39251 [ 2628.102686][ T1278] total_inactive_anon 0 [ 2628.107381][ T1278] total_active_anon 12288 [ 2628.111763][ T1278] total_inactive_file 0 [ 2628.120958][ T1278] total_active_file 0 [ 2628.133239][ T1278] total_unevictable 0 [ 2628.143696][ T1278] anon_cost 0 [ 2628.147205][ T1278] file_cost 0 12:18:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc010000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2628.150545][ T1278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1278,uid=0 [ 2628.167060][ T1278] Memory cgroup out of memory: Killed process 1278 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2628.684684][ T5101] Bluetooth: hci6: command 0x040f tx timeout [ 2628.803447][ T1281] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2628.814753][ T1281] CPU: 0 PID: 1281 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2628.825426][ T1281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2628.835626][ T1281] Call Trace: [ 2628.839135][ T1281] [ 2628.842118][ T1281] dump_stack_lvl+0x1e7/0x2e0 [ 2628.846870][ T1281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2628.852138][ T1281] ? __pfx__printk+0x10/0x10 [ 2628.856795][ T1281] ? ___ratelimit+0x4c4/0x670 [ 2628.861557][ T1281] ? __pfx____ratelimit+0x10/0x10 [ 2628.866668][ T1281] dump_header+0xda/0x6a0 [ 2628.871079][ T1281] oom_kill_process+0x3a7/0x930 [ 2628.876010][ T1281] out_of_memory+0xf67/0x1320 [ 2628.881379][ T1281] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2628.887181][ T1281] ? __pfx___mutex_lock+0x10/0x10 [ 2628.892294][ T1281] ? __pfx_out_of_memory+0x10/0x10 [ 2628.897500][ T1281] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2628.903125][ T1281] ? __pfx_lock_release+0x10/0x10 [ 2628.908316][ T1281] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2628.914466][ T1281] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2628.919849][ T1281] ? mem_cgroup_iter+0x422/0x560 [ 2628.924969][ T1281] try_charge_memcg+0xda2/0x18a0 [ 2628.930011][ T1281] ? __pfx_try_charge_memcg+0x10/0x10 [ 2628.935477][ T1281] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2628.941276][ T1281] ? __pfx_lock_release+0x10/0x10 [ 2628.946478][ T1281] ? memcg_account_kmem+0x1e7/0x210 [ 2628.951875][ T1281] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2628.957943][ T1281] __memcg_kmem_charge_page+0xe1/0x250 [ 2628.963488][ T1281] memcg_charge_kernel_stack+0x304/0x550 [ 2628.969469][ T1281] dup_task_struct+0x15d/0x7d0 [ 2628.974322][ T1281] copy_process+0x5d5/0x3fc0 [ 2628.979090][ T1281] ? __might_fault+0xa9/0x120 [ 2628.983986][ T1281] ? __pfx_lock_release+0x10/0x10 [ 2628.989107][ T1281] ? __pfx_copy_process+0x10/0x10 [ 2628.994211][ T1281] ? __might_fault+0xc5/0x120 [ 2628.998974][ T1281] ? __asan_memset+0x23/0x50 [ 2629.003649][ T1281] kernel_clone+0x21d/0x8d0 [ 2629.008231][ T1281] ? __pfx_kernel_clone+0x10/0x10 [ 2629.013420][ T1281] __se_sys_clone3+0x2cb/0x350 [ 2629.018258][ T1281] ? __pfx___se_sys_clone3+0x10/0x10 [ 2629.023743][ T1281] ? do_syscall_64+0x108/0x240 [ 2629.028583][ T1281] ? do_syscall_64+0xb4/0x240 [ 2629.033330][ T1281] do_syscall_64+0xf9/0x240 [ 2629.037904][ T1281] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2629.044052][ T1281] RIP: 0033:0x7f0f5b4a9b99 [ 2629.048532][ T1281] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2629.068372][ T1281] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2629.076871][ T1281] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2629.084904][ T1281] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2629.092937][ T1281] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2629.100963][ T1281] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2629.108992][ T1281] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2629.117043][ T1281] [ 2629.141922][ T1281] memory: usage 307200kB, limit 307200kB, failcnt 130917 [ 2629.149578][ T1281] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 2629.163325][ T1281] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2629.184536][ T1281] Memory cgroup stats for /syz0: [ 2629.184723][ T1281] cache 0 [ 2629.192802][ T1281] rss 12288 [ 2629.201965][ T1281] rss_huge 0 [ 2629.205806][ T1281] shmem 0 [ 2629.208902][ T1281] mapped_file 0 [ 2629.212588][ T1281] dirty 0 [ 2629.222181][ T1281] writeback 0 [ 2629.226009][ T1281] workingset_refault_anon 40342 [ 2629.231318][ T1281] workingset_refault_file 2 [ 2629.242300][ T1281] swap 212992 [ 2629.246382][ T1281] swapcached 8192 [ 2629.250170][ T1281] pgpgin 225632 [ 2629.253910][ T1281] pgpgout 225629 [ 2629.262853][ T1281] pgfault 505690 [ 2629.267058][ T1281] pgmajfault 39418 [ 2629.270948][ T1281] inactive_anon 12288 [ 2629.281163][ T1281] active_anon 0 [ 2629.284906][ T1281] inactive_file 0 [ 2629.288803][ T1281] active_file 0 [ 2629.292515][ T1281] unevictable 0 [ 2629.301814][ T1281] hierarchical_memory_limit 314572800 [ 2629.307454][ T1281] hierarchical_memsw_limit 9223372036854771712 [ 2629.313793][ T1281] total_cache 0 [ 2629.323537][ T1281] total_rss 12288 [ 2629.324826][ T5101] Bluetooth: hci5: command 0x0419 tx timeout [ 2629.327810][ T1281] total_rss_huge 0 [ 2629.343724][ T1281] total_shmem 0 [ 2629.347416][ T1281] total_mapped_file 0 [ 2629.351661][ T1281] total_dirty 0 [ 2629.369130][ T1281] total_writeback 0 [ 2629.373176][ T1281] total_workingset_refault_anon 40342 [ 2629.384437][ T1281] total_workingset_refault_file 2 [ 2629.389665][ T1281] total_swap 212992 [ 2629.393626][ T1281] total_swapcached 8192 [ 2629.409914][ T1281] total_pgpgin 225632 [ 2629.419508][ T1281] total_pgpgout 225629 [ 2629.423777][ T1281] total_pgfault 505690 [ 2629.434983][ T1281] total_pgmajfault 39418 [ 2629.439441][ T1281] total_inactive_anon 12288 [ 2629.444112][ T1281] total_active_anon 0 [ 2629.453757][ T1281] total_inactive_file 0 [ 2629.460387][ T1281] total_active_file 0 [ 2629.480597][ T1281] total_unevictable 0 [ 2629.494683][ T1281] anon_cost 0 [ 2629.499913][ T1281] file_cost 0 [ 2629.521405][ T1281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1281,uid=0 [ 2629.556960][ T1281] Memory cgroup out of memory: Killed process 1281 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:18:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc020000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2630.255833][ T1282] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2630.275944][ T1282] CPU: 1 PID: 1282 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2630.286453][ T1282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2630.296568][ T1282] Call Trace: [ 2630.299902][ T1282] [ 2630.302881][ T1282] dump_stack_lvl+0x1e7/0x2e0 [ 2630.307621][ T1282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2630.312881][ T1282] ? __pfx__printk+0x10/0x10 [ 2630.317534][ T1282] ? ___ratelimit+0x4c4/0x670 [ 2630.322306][ T1282] ? __pfx____ratelimit+0x10/0x10 [ 2630.327412][ T1282] dump_header+0xda/0x6a0 [ 2630.331828][ T1282] oom_kill_process+0x3a7/0x930 [ 2630.336766][ T1282] out_of_memory+0xf67/0x1320 [ 2630.341536][ T1282] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2630.347247][ T1282] ? __pfx___mutex_lock+0x10/0x10 [ 2630.352348][ T1282] ? __pfx_out_of_memory+0x10/0x10 [ 2630.357557][ T1282] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2630.363178][ T1282] ? __pfx_lock_release+0x10/0x10 [ 2630.368280][ T1282] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2630.374426][ T1282] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2630.379711][ T1282] ? mem_cgroup_iter+0x422/0x560 [ 2630.384732][ T1282] try_charge_memcg+0xda2/0x18a0 [ 2630.389766][ T1282] ? __pfx_try_charge_memcg+0x10/0x10 [ 2630.395203][ T1282] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2630.400985][ T1282] ? __pfx_lock_release+0x10/0x10 [ 2630.406084][ T1282] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2630.412200][ T1282] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2630.417990][ T1282] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2630.423873][ T1282] obj_cgroup_charge+0x389/0x630 [ 2630.428968][ T1282] ? obj_cgroup_charge+0x121/0x630 [ 2630.434145][ T1282] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2630.439676][ T1282] ? kmalloc_trace+0x4e/0x360 [ 2630.444427][ T1282] ? __pfx___might_resched+0x10/0x10 [ 2630.449792][ T1282] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2630.455672][ T1282] ? copy_semundo+0xb5/0x240 [ 2630.460340][ T1282] kmalloc_trace+0x216/0x360 [ 2630.465003][ T1282] ? __asan_memcpy+0x40/0x70 [ 2630.469688][ T1282] copy_semundo+0xb5/0x240 [ 2630.474172][ T1282] copy_process+0x1bc3/0x3fc0 [ 2630.478928][ T1282] ? copy_process+0x9c3/0x3fc0 [ 2630.483765][ T1282] ? __pfx_copy_process+0x10/0x10 [ 2630.488849][ T1282] ? __might_fault+0xc5/0x120 [ 2630.493621][ T1282] ? __asan_memset+0x23/0x50 [ 2630.498291][ T1282] kernel_clone+0x21d/0x8d0 [ 2630.502862][ T1282] ? __pfx_kernel_clone+0x10/0x10 [ 2630.507969][ T1282] __se_sys_clone3+0x2cb/0x350 [ 2630.512798][ T1282] ? __pfx___se_sys_clone3+0x10/0x10 [ 2630.518164][ T1282] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2630.524496][ T1282] ? exc_page_fault+0x587/0x870 [ 2630.529516][ T1282] ? do_syscall_64+0xb4/0x240 [ 2630.534262][ T1282] do_syscall_64+0xf9/0x240 [ 2630.538928][ T1282] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2630.544896][ T1282] RIP: 0033:0x7f0f5b4a9b99 [ 2630.549373][ T1282] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2630.569038][ T1282] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2630.577527][ T1282] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2630.585557][ T1282] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2630.593612][ T1282] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2630.601642][ T1282] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2630.609670][ T1282] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2630.617807][ T1282] [ 2630.645850][ T1282] memory: usage 307200kB, limit 307200kB, failcnt 131504 12:18:59 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2630.653218][ T1282] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2630.662722][ T1282] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2630.673947][ T1282] Memory cgroup stats for /syz0: [ 2630.674127][ T1282] cache 0 [ 2630.683405][ T1282] rss 0 [ 2630.697599][ T1282] rss_huge 0 [ 2630.700864][ T1282] shmem 0 [ 2630.703802][ T1282] mapped_file 0 [ 2630.708178][ T1282] dirty 0 [ 2630.711160][ T1282] writeback 0 [ 2630.715330][ T1282] workingset_refault_anon 40535 [ 2630.720217][ T1282] workingset_refault_file 2 [ 2630.724881][ T1282] swap 266240 [ 2630.728208][ T1282] swapcached 0 [ 2630.731615][ T1282] pgpgin 225836 [ 2630.738794][ T1282] pgpgout 225836 [ 2630.742404][ T1282] pgfault 506012 [ 2630.748669][ T1282] pgmajfault 39611 [ 2630.752454][ T1282] inactive_anon 0 [ 2630.761868][ T1282] active_anon 0 [ 2630.765707][ T5101] Bluetooth: hci6: command 0x0419 tx timeout [ 2630.773434][ T1282] inactive_file 0 [ 2630.783028][ T1282] active_file 0 [ 2630.787131][ T1282] unevictable 0 [ 2630.790648][ T1282] hierarchical_memory_limit 314572800 [ 2630.801720][ T1282] hierarchical_memsw_limit 9223372036854771712 [ 2630.808495][ T1282] total_cache 0 [ 2630.812012][ T1282] total_rss 0 [ 2630.822038][ T1282] total_rss_huge 0 [ 2630.826332][ T1282] total_shmem 0 [ 2630.829853][ T1282] total_mapped_file 0 [ 2630.833877][ T1282] total_dirty 0 [ 2630.844586][ T1282] total_writeback 0 [ 2630.848482][ T1282] total_workingset_refault_anon 40535 [ 2630.853904][ T1282] total_workingset_refault_file 2 [ 2630.859815][ T1282] total_swap 266240 [ 2630.863687][ T1282] total_swapcached 0 [ 2630.870118][ T1282] total_pgpgin 225836 [ 2630.874177][ T1282] total_pgpgout 225836 [ 2630.879323][ T1282] total_pgfault 506012 [ 2630.883653][ T1282] total_pgmajfault 39611 [ 2630.888716][ T1282] total_inactive_anon 0 [ 2630.892938][ T1282] total_active_anon 0 [ 2630.897904][ T1282] total_inactive_file 0 [ 2630.902120][ T1282] total_active_file 0 [ 2630.906740][ T1282] total_unevictable 0 12:18:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff030000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2630.910758][ T1282] anon_cost 0 [ 2630.914076][ T1282] file_cost 0 [ 2630.918534][ T1282] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1282,uid=0 [ 2630.934895][ T1282] Memory cgroup out of memory: Killed process 1282 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2631.712818][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2631.739777][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2631.750210][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2631.760332][ T5099] Call Trace: [ 2631.764029][ T5099] [ 2631.767198][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2631.771965][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2631.777243][ T5099] ? __pfx__printk+0x10/0x10 [ 2631.781907][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2631.786762][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2631.791882][ T5099] dump_header+0xda/0x6a0 [ 2631.796292][ T5099] oom_kill_process+0x3a7/0x930 [ 2631.801228][ T5099] out_of_memory+0xf67/0x1320 [ 2631.805988][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2631.811705][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2631.816910][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2631.822295][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2631.828009][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2631.833128][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2631.839285][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2631.844589][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2631.849612][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2631.854630][ T5099] ? mark_lock+0x9a/0x350 [ 2631.859063][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2631.864550][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2631.870781][ T5099] charge_memcg+0xa2/0x160 [ 2631.875280][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2631.881424][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2631.886948][ T5099] ? mark_lock+0x9a/0x350 [ 2631.891365][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2631.897519][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2631.902982][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2631.908957][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2631.914068][ T5099] ? xas_descend+0x37e/0x470 [ 2631.918741][ T5099] swapin_readahead+0x1ea/0x1070 [ 2631.923745][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2631.928970][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2631.934434][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2631.939812][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2631.945171][ T5099] do_swap_page+0x791/0x3f40 [ 2631.949836][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2631.954693][ T5099] ? do_swap_page+0x154/0x3f40 [ 2631.959532][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2631.964650][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2631.970198][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2631.976100][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2631.981329][ T5099] ? reacquire_held_locks+0x3eb/0x690 [ 2631.986781][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2631.992330][ T5099] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2631.998134][ T5099] ? mtree_range_walk+0x6fd/0x8e0 [ 2632.003192][ T5099] ? lock_vma_under_rcu+0x18a/0x730 [ 2632.008564][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2632.013608][ T5099] ? lock_vma_under_rcu+0x2f9/0x730 [ 2632.018845][ T5099] ? lock_vma_under_rcu+0x18a/0x730 [ 2632.024068][ T5099] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2632.029897][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2632.034690][ T5099] exc_page_fault+0x456/0x870 [ 2632.039389][ T5099] asm_exc_page_fault+0x26/0x30 [ 2632.044256][ T5099] RIP: 0033:0x7f0f5b4a91b8 [ 2632.048690][ T5099] Code: 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 2632.068342][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00010293 [ 2632.074429][ T5099] RAX: 0000000000000000 RBX: 000000000000425e RCX: 00007f0f5b4a91b5 [ 2632.082415][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2632.090394][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2632.098405][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2632.106497][ T5099] R13: 0000000000282551 R14: 0000000000282551 R15: 0000000000000000 [ 2632.114510][ T5099] [ 2632.126942][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 132080 [ 2632.138537][ T5099] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 2632.155139][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2632.170713][ T5099] Memory cgroup stats for /syz0: [ 2632.170877][ T5099] cache 0 [ 2632.180535][ T5099] rss 0 [ 2632.183882][ T5099] rss_huge 0 [ 2632.188122][ T5099] shmem 0 [ 2632.191594][ T5099] mapped_file 0 [ 2632.196055][ T5099] dirty 0 [ 2632.199653][ T5099] writeback 0 [ 2632.203467][ T5099] workingset_refault_anon 40749 [ 2632.209630][ T5099] workingset_refault_file 2 [ 2632.215617][ T5099] swap 258048 [ 2632.219100][ T5099] swapcached 4096 [ 2632.223288][ T5099] pgpgin 226061 [ 2632.228021][ T5099] pgpgout 226060 [ 2632.231747][ T5099] pgfault 506355 [ 2632.257383][ T5099] pgmajfault 39823 [ 2632.261377][ T5099] inactive_anon 0 [ 2632.270166][ T5099] active_anon 4096 [ 2632.274058][ T5099] inactive_file 0 [ 2632.281706][ T5099] active_file 0 [ 2632.305132][ T5099] unevictable 0 [ 2632.308864][ T5099] hierarchical_memory_limit 314572800 [ 2632.314294][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2632.327882][ T5099] total_cache 0 [ 2632.331434][ T5099] total_rss 0 [ 2632.338254][ T5099] total_rss_huge 0 [ 2632.342143][ T5099] total_shmem 0 [ 2632.361399][ T5099] total_mapped_file 0 [ 2632.366019][ T5099] total_dirty 0 [ 2632.369566][ T5099] total_writeback 0 [ 2632.373446][ T5099] total_workingset_refault_anon 40749 [ 2632.401560][ T5099] total_workingset_refault_file 2 [ 2632.411975][ T5099] total_swap 258048 [ 2632.416686][ T5099] total_swapcached 4096 [ 2632.421205][ T5099] total_pgpgin 226061 [ 2632.425562][ T5099] total_pgpgout 226060 [ 2632.429689][ T5099] total_pgfault 506355 [ 2632.433806][ T5099] total_pgmajfault 39823 [ 2632.440094][ T5099] total_inactive_anon 0 [ 2632.454657][ T5099] total_active_anon 4096 [ 2632.458995][ T5099] total_inactive_file 0 [ 2632.463202][ T5099] total_active_file 0 [ 2632.470032][ T5099] total_unevictable 0 [ 2632.474089][ T5099] anon_cost 0 [ 2632.478460][ T5099] file_cost 0 [ 2632.481807][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1285,uid=0 [ 2632.509548][ T5099] Memory cgroup out of memory: Killed process 1285 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2633.072146][ T1286] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2633.098372][ T1286] CPU: 0 PID: 1286 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2633.108792][ T1286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2633.118894][ T1286] Call Trace: [ 2633.122215][ T1286] [ 2633.125200][ T1286] dump_stack_lvl+0x1e7/0x2e0 [ 2633.129940][ T1286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2633.135525][ T1286] ? __pfx__printk+0x10/0x10 [ 2633.140148][ T1286] ? ___ratelimit+0x4c4/0x670 [ 2633.144876][ T1286] ? __pfx____ratelimit+0x10/0x10 [ 2633.149972][ T1286] dump_header+0xda/0x6a0 [ 2633.154372][ T1286] oom_kill_process+0x3a7/0x930 [ 2633.159287][ T1286] out_of_memory+0xf67/0x1320 [ 2633.164020][ T1286] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2633.169712][ T1286] ? __pfx___mutex_lock+0x10/0x10 [ 2633.174807][ T1286] ? __pfx_out_of_memory+0x10/0x10 [ 2633.180016][ T1286] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2633.185634][ T1286] ? __pfx_lock_release+0x10/0x10 [ 2633.190731][ T1286] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2633.196879][ T1286] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2633.202132][ T1286] ? mem_cgroup_iter+0x422/0x560 [ 2633.207131][ T1286] try_charge_memcg+0xda2/0x18a0 [ 2633.212172][ T1286] ? __pfx_try_charge_memcg+0x10/0x10 [ 2633.217608][ T1286] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2633.223384][ T1286] ? __pfx_lock_release+0x10/0x10 [ 2633.228458][ T1286] ? memcg_account_kmem+0x1e7/0x210 [ 2633.233797][ T1286] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2633.239662][ T1286] __memcg_kmem_charge_page+0xe1/0x250 [ 2633.245195][ T1286] memcg_charge_kernel_stack+0x304/0x550 [ 2633.250902][ T1286] dup_task_struct+0x15d/0x7d0 [ 2633.255736][ T1286] copy_process+0x5d5/0x3fc0 [ 2633.260390][ T1286] ? __might_fault+0xa9/0x120 [ 2633.265139][ T1286] ? __pfx_lock_release+0x10/0x10 [ 2633.270244][ T1286] ? __pfx_copy_process+0x10/0x10 [ 2633.275425][ T1286] ? __might_fault+0xc5/0x120 [ 2633.280164][ T1286] ? __asan_memset+0x23/0x50 [ 2633.284812][ T1286] kernel_clone+0x21d/0x8d0 [ 2633.289356][ T1286] ? __pfx_kernel_clone+0x10/0x10 [ 2633.294434][ T1286] __se_sys_clone3+0x2cb/0x350 [ 2633.299255][ T1286] ? __pfx___se_sys_clone3+0x10/0x10 [ 2633.304652][ T1286] ? do_syscall_64+0x108/0x240 [ 2633.309490][ T1286] ? do_syscall_64+0xb4/0x240 [ 2633.314228][ T1286] do_syscall_64+0xf9/0x240 [ 2633.318790][ T1286] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2633.324767][ T1286] RIP: 0033:0x7f0f5b4a9b99 [ 2633.329305][ T1286] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2633.348964][ T1286] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2633.357985][ T1286] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2633.366097][ T1286] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2633.374104][ T1286] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2633.382123][ T1286] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2633.390147][ T1286] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2633.398176][ T1286] [ 2633.418681][ T1286] memory: usage 307200kB, limit 307200kB, failcnt 132512 [ 2633.427035][ T1286] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 2633.435399][ T1286] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2633.442969][ T1286] Memory cgroup stats for /syz0: [ 2633.443129][ T1286] cache 0 [ 2633.466853][ T1286] rss 12288 [ 2633.470204][ T1286] rss_huge 0 [ 2633.473576][ T1286] shmem 0 [ 2633.476860][ T1286] mapped_file 0 [ 2633.480537][ T1286] dirty 0 [ 2633.483634][ T1286] writeback 0 [ 2633.487629][ T1286] workingset_refault_anon 40897 [ 2633.492917][ T1286] workingset_refault_file 2 [ 2633.498336][ T1286] swap 212992 [ 2633.501762][ T1286] swapcached 8192 [ 2633.506359][ T1286] pgpgin 226224 [ 2633.510304][ T1286] pgpgout 226221 [ 2633.516045][ T1286] pgfault 506598 [ 2633.519902][ T1286] pgmajfault 39964 [ 2633.523793][ T1286] inactive_anon 12288 [ 2633.541541][ T1286] active_anon 0 [ 2633.545656][ T1286] inactive_file 0 [ 2633.549495][ T1286] active_file 0 [ 2633.553110][ T1286] unevictable 0 [ 2633.563828][ T1286] hierarchical_memory_limit 314572800 [ 2633.573450][ T1286] hierarchical_memsw_limit 9223372036854771712 [ 2633.586242][ T1286] total_cache 0 [ 2633.591499][ T1286] total_rss 12288 [ 2633.610372][ T1286] total_rss_huge 0 [ 2633.623887][ T1286] total_shmem 0 [ 2633.628419][ T1286] total_mapped_file 0 [ 2633.634013][ T1286] total_dirty 0 [ 2633.638764][ T1286] total_writeback 0 [ 2633.642795][ T1286] total_workingset_refault_anon 40897 [ 2633.648856][ T1286] total_workingset_refault_file 2 [ 2633.657063][ T1286] total_swap 212992 [ 2633.661039][ T1286] total_swapcached 8192 [ 2633.678344][ T1286] total_pgpgin 226224 [ 2633.682526][ T1286] total_pgpgout 226221 [ 2633.687126][ T1286] total_pgfault 506598 [ 2633.691383][ T1286] total_pgmajfault 39964 [ 2633.696517][ T1286] total_inactive_anon 12288 [ 2633.701249][ T1286] total_active_anon 0 [ 2633.706718][ T1286] total_inactive_file 0 [ 2633.723212][ T1286] total_active_file 0 [ 2633.743032][ T1286] total_unevictable 0 [ 2633.752765][ T1286] anon_cost 0 [ 2633.762379][ T1286] file_cost 0 [ 2633.771467][ T1286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1286,uid=0 12:19:02 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2633.791007][ T1286] Memory cgroup out of memory: Killed process 1286 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2634.392107][ T1289] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2634.403524][ T1289] CPU: 1 PID: 1289 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2634.414095][ T1289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2634.424204][ T1289] Call Trace: [ 2634.427535][ T1289] [ 2634.430519][ T1289] dump_stack_lvl+0x1e7/0x2e0 [ 2634.435263][ T1289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2634.440530][ T1289] ? __pfx__printk+0x10/0x10 [ 2634.445185][ T1289] ? ___ratelimit+0x4c4/0x670 [ 2634.449949][ T1289] ? __pfx____ratelimit+0x10/0x10 [ 2634.455075][ T1289] dump_header+0xda/0x6a0 [ 2634.459478][ T1289] oom_kill_process+0x3a7/0x930 [ 2634.464475][ T1289] out_of_memory+0xf67/0x1320 [ 2634.469227][ T1289] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2634.474900][ T1289] ? __pfx___mutex_lock+0x10/0x10 [ 2634.479953][ T1289] ? __pfx_out_of_memory+0x10/0x10 [ 2634.485115][ T1289] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2634.490724][ T1289] ? __pfx_lock_release+0x10/0x10 [ 2634.495792][ T1289] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2634.501885][ T1289] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2634.507105][ T1289] ? mem_cgroup_iter+0x422/0x560 [ 2634.512101][ T1289] try_charge_memcg+0xda2/0x18a0 [ 2634.517108][ T1289] ? __pfx_try_charge_memcg+0x10/0x10 [ 2634.522534][ T1289] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2634.528372][ T1289] ? __pfx_lock_release+0x10/0x10 [ 2634.533437][ T1289] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2634.539288][ T1289] __memcg_kmem_charge_page+0xe1/0x250 [ 2634.544761][ T1289] memcg_charge_kernel_stack+0xa7/0x550 [ 2634.550348][ T1289] dup_task_struct+0x15d/0x7d0 [ 2634.555131][ T1289] copy_process+0x5d5/0x3fc0 [ 2634.559778][ T1289] ? __might_fault+0xa9/0x120 [ 2634.564473][ T1289] ? __pfx_lock_release+0x10/0x10 [ 2634.569553][ T1289] ? __lock_acquire+0x1345/0x1fd0 [ 2634.574598][ T1289] ? __pfx_copy_process+0x10/0x10 [ 2634.579636][ T1289] ? __might_fault+0xc5/0x120 [ 2634.584339][ T1289] ? __asan_memset+0x23/0x50 [ 2634.588955][ T1289] kernel_clone+0x21d/0x8d0 [ 2634.593478][ T1289] ? __pfx_kernel_clone+0x10/0x10 [ 2634.598613][ T1289] ? __pfx_lock_release+0x10/0x10 [ 2634.603672][ T1289] __se_sys_clone3+0x2cb/0x350 [ 2634.608457][ T1289] ? __might_fault+0xa9/0x120 [ 2634.613154][ T1289] ? __pfx___se_sys_clone3+0x10/0x10 [ 2634.618535][ T1289] ? rcu_is_watching+0x15/0xb0 [ 2634.623324][ T1289] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2634.629335][ T1289] ? exc_page_fault+0x587/0x870 [ 2634.634375][ T1289] ? do_syscall_64+0xb4/0x240 [ 2634.639065][ T1289] do_syscall_64+0xf9/0x240 [ 2634.643595][ T1289] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2634.649507][ T1289] RIP: 0033:0x7f0f5b4a9b99 [ 2634.653938][ T1289] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2634.673562][ T1289] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2634.681993][ T1289] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2634.689974][ T1289] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2634.697954][ T1289] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2634.705943][ T1289] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2634.713923][ T1289] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2634.721923][ T1289] [ 2634.738613][ T1289] memory: usage 307200kB, limit 307200kB, failcnt 132959 [ 2634.750420][ T1289] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2634.761300][ T1289] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2634.769669][ T1289] Memory cgroup stats for /syz0: [ 2634.769836][ T1289] cache 0 [ 2634.778972][ T1289] rss 12288 [ 2634.782414][ T1289] rss_huge 0 [ 2634.786892][ T1289] shmem 0 [ 2634.790396][ T1289] mapped_file 0 [ 2634.795315][ T1289] dirty 0 [ 2634.799298][ T1289] writeback 0 [ 2634.818081][ T1289] workingset_refault_anon 41049 [ 2634.827933][ T1289] workingset_refault_file 2 [ 2634.836471][ T1289] swap 208896 [ 2634.840030][ T1289] swapcached 12288 [ 2634.843985][ T1289] pgpgin 226388 [ 2634.848983][ T1289] pgpgout 226385 [ 2634.853914][ T1289] pgfault 506834 [ 2634.863907][ T1289] pgmajfault 40106 [ 2634.867816][ T1289] inactive_anon 0 [ 2634.871490][ T1289] active_anon 12288 [ 2634.875869][ T1289] inactive_file 0 [ 2634.879557][ T1289] active_file 0 [ 2634.888557][ T1289] unevictable 0 [ 2634.892090][ T1289] hierarchical_memory_limit 314572800 [ 2634.897836][ T1289] hierarchical_memsw_limit 9223372036854771712 [ 2634.904035][ T1289] total_cache 0 [ 2634.913726][ T1289] total_rss 12288 [ 2634.918062][ T1289] total_rss_huge 0 [ 2634.921916][ T1289] total_shmem 0 [ 2634.931699][ T1289] total_mapped_file 0 [ 2634.936866][ T1289] total_dirty 0 [ 2634.940387][ T1289] total_writeback 0 [ 2634.944236][ T1289] total_workingset_refault_anon 41049 [ 2634.957512][ T1289] total_workingset_refault_file 2 [ 2634.962636][ T1289] total_swap 208896 [ 2634.969443][ T1289] total_swapcached 12288 [ 2634.973771][ T1289] total_pgpgin 226388 [ 2634.981819][ T1289] total_pgpgout 226385 [ 2634.988373][ T1289] total_pgfault 506834 [ 2634.992509][ T1289] total_pgmajfault 40106 [ 2635.001013][ T1289] total_inactive_anon 0 [ 2635.007979][ T1289] total_active_anon 12288 [ 2635.012394][ T1289] total_inactive_file 0 [ 2635.017374][ T1289] total_active_file 0 [ 2635.021409][ T1289] total_unevictable 0 [ 2635.031618][ T1289] anon_cost 0 [ 2635.035706][ T1289] file_cost 0 [ 2635.039054][ T1289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1289,uid=0 [ 2635.062105][ T1289] Memory cgroup out of memory: Killed process 1289 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:03 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2635.686055][ T1290] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2635.713263][ T1290] CPU: 1 PID: 1290 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2635.723712][ T1290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2635.733829][ T1290] Call Trace: [ 2635.737155][ T1290] [ 2635.740127][ T1290] dump_stack_lvl+0x1e7/0x2e0 [ 2635.744875][ T1290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2635.750147][ T1290] ? __pfx__printk+0x10/0x10 [ 2635.754794][ T1290] ? ___ratelimit+0x4c4/0x670 [ 2635.759550][ T1290] ? __pfx____ratelimit+0x10/0x10 [ 2635.764653][ T1290] dump_header+0xda/0x6a0 [ 2635.769063][ T1290] oom_kill_process+0x3a7/0x930 [ 2635.774001][ T1290] out_of_memory+0xf67/0x1320 [ 2635.778767][ T1290] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2635.784488][ T1290] ? __pfx___mutex_lock+0x10/0x10 [ 2635.789593][ T1290] ? __pfx_out_of_memory+0x10/0x10 [ 2635.794790][ T1290] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2635.800410][ T1290] ? __pfx_lock_release+0x10/0x10 [ 2635.805507][ T1290] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2635.811652][ T1290] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2635.816926][ T1290] ? mem_cgroup_iter+0x422/0x560 [ 2635.821925][ T1290] try_charge_memcg+0xda2/0x18a0 [ 2635.826968][ T1290] ? __pfx_try_charge_memcg+0x10/0x10 [ 2635.832410][ T1290] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2635.838196][ T1290] ? __pfx_lock_release+0x10/0x10 [ 2635.843575][ T1290] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2635.849458][ T1290] __memcg_kmem_charge_page+0xe1/0x250 [ 2635.854989][ T1290] memcg_charge_kernel_stack+0xa7/0x550 [ 2635.861049][ T1290] dup_task_struct+0x15d/0x7d0 [ 2635.865883][ T1290] copy_process+0x5d5/0x3fc0 [ 2635.870563][ T1290] ? __might_fault+0xa9/0x120 [ 2635.875312][ T1290] ? __pfx_lock_release+0x10/0x10 [ 2635.880418][ T1290] ? __pfx_copy_process+0x10/0x10 [ 2635.885520][ T1290] ? __might_fault+0xc5/0x120 [ 2635.890459][ T1290] ? __asan_memset+0x23/0x50 [ 2635.895466][ T1290] kernel_clone+0x21d/0x8d0 [ 2635.900397][ T1290] ? __pfx_kernel_clone+0x10/0x10 [ 2635.905804][ T1290] __se_sys_clone3+0x2cb/0x350 [ 2635.910676][ T1290] ? __pfx___se_sys_clone3+0x10/0x10 [ 2635.916094][ T1290] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2635.922281][ T1290] ? exc_page_fault+0x587/0x870 [ 2635.927500][ T1290] ? do_syscall_64+0xb4/0x240 [ 2635.932324][ T1290] do_syscall_64+0xf9/0x240 [ 2635.936931][ T1290] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2635.942881][ T1290] RIP: 0033:0x7f0f5b4a9b99 [ 2635.947409][ T1290] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2635.967381][ T1290] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2635.975977][ T1290] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2635.983982][ T1290] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2635.992063][ T1290] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2636.000061][ T1290] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2636.008062][ T1290] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2636.016084][ T1290] [ 2636.034914][ T1290] memory: usage 307180kB, limit 307200kB, failcnt 133435 [ 2636.042057][ T1290] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 2636.051079][ T1290] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2636.059075][ T1290] Memory cgroup stats for /syz0: [ 2636.059339][ T1290] cache 0 [ 2636.068461][ T1290] rss 12288 [ 2636.085041][ T1290] rss_huge 0 [ 2636.088452][ T1290] shmem 0 [ 2636.091510][ T1290] mapped_file 0 [ 2636.101412][ T1290] dirty 0 [ 2636.104817][ T1290] writeback 0 [ 2636.108230][ T1290] workingset_refault_anon 41215 [ 2636.113220][ T1290] workingset_refault_file 2 [ 2636.118739][ T1290] swap 208896 [ 2636.122117][ T1290] swapcached 8192 [ 2636.127157][ T1290] pgpgin 226566 [ 2636.130751][ T1290] pgpgout 226563 [ 2636.134867][ T1290] pgfault 507096 [ 2636.138570][ T1290] pgmajfault 40266 [ 2636.142448][ T1290] inactive_anon 0 [ 2636.154709][ T1290] active_anon 12288 [ 2636.158646][ T1290] inactive_file 0 [ 2636.162365][ T1290] active_file 0 [ 2636.166851][ T1290] unevictable 0 [ 2636.170537][ T1290] hierarchical_memory_limit 314572800 [ 2636.176472][ T1290] hierarchical_memsw_limit 9223372036854771712 [ 2636.182710][ T1290] total_cache 0 [ 2636.187045][ T1290] total_rss 12288 [ 2636.190816][ T1290] total_rss_huge 0 [ 2636.195078][ T1290] total_shmem 0 [ 2636.198664][ T1290] total_mapped_file 0 [ 2636.202818][ T1290] total_dirty 0 [ 2636.207552][ T1290] total_writeback 0 [ 2636.211558][ T1290] total_workingset_refault_anon 41215 [ 2636.217946][ T1290] total_workingset_refault_file 2 [ 2636.223026][ T1290] total_swap 208896 [ 2636.227533][ T1290] total_swapcached 8192 [ 2636.231932][ T1290] total_pgpgin 226566 [ 2636.237190][ T1290] total_pgpgout 226563 [ 2636.241378][ T1290] total_pgfault 507096 [ 2636.246757][ T1290] total_pgmajfault 40266 [ 2636.251201][ T1290] total_inactive_anon 0 [ 2636.256648][ T1290] total_active_anon 12288 [ 2636.261117][ T1290] total_inactive_file 0 [ 2636.266536][ T1290] total_active_file 0 [ 2636.270606][ T1290] total_unevictable 0 [ 2636.275291][ T1290] anon_cost 0 [ 2636.278664][ T1290] file_cost 0 [ 2636.282004][ T1290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1290,uid=0 [ 2636.299506][ T1290] Memory cgroup out of memory: Killed process 1290 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2637.231718][ T1291] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2637.261158][ T1291] CPU: 0 PID: 1291 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2637.271593][ T1291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2637.281795][ T1291] Call Trace: [ 2637.285129][ T1291] [ 2637.288105][ T1291] dump_stack_lvl+0x1e7/0x2e0 [ 2637.292847][ T1291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2637.298110][ T1291] ? __pfx__printk+0x10/0x10 [ 2637.302841][ T1291] ? ___ratelimit+0x4c4/0x670 [ 2637.307594][ T1291] ? __pfx____ratelimit+0x10/0x10 [ 2637.312785][ T1291] dump_header+0xda/0x6a0 [ 2637.317190][ T1291] oom_kill_process+0x3a7/0x930 [ 2637.322124][ T1291] out_of_memory+0xf67/0x1320 [ 2637.326912][ T1291] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2637.332626][ T1291] ? __pfx___mutex_lock+0x10/0x10 [ 2637.337716][ T1291] ? __pfx_out_of_memory+0x10/0x10 [ 2637.342926][ T1291] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2637.348542][ T1291] ? __pfx_lock_release+0x10/0x10 [ 2637.353658][ T1291] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2637.359801][ T1291] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2637.365063][ T1291] ? mem_cgroup_iter+0x422/0x560 [ 2637.370077][ T1291] try_charge_memcg+0xda2/0x18a0 [ 2637.375192][ T1291] ? __pfx_try_charge_memcg+0x10/0x10 [ 2637.380636][ T1291] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2637.386524][ T1291] ? __pfx_lock_release+0x10/0x10 [ 2637.391610][ T1291] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2637.397633][ T1291] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2637.403379][ T1291] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2637.409200][ T1291] obj_cgroup_charge+0x389/0x630 [ 2637.414152][ T1291] ? obj_cgroup_charge+0x121/0x630 [ 2637.419278][ T1291] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2637.424755][ T1291] ? kmalloc_trace+0x4e/0x360 [ 2637.429450][ T1291] ? __pfx___might_resched+0x10/0x10 [ 2637.434926][ T1291] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2637.440755][ T1291] ? copy_semundo+0xb5/0x240 [ 2637.445359][ T1291] kmalloc_trace+0x216/0x360 [ 2637.449965][ T1291] ? __asan_memcpy+0x40/0x70 [ 2637.454581][ T1291] copy_semundo+0xb5/0x240 [ 2637.459011][ T1291] copy_process+0x1bc3/0x3fc0 [ 2637.463710][ T1291] ? copy_process+0x9c3/0x3fc0 [ 2637.468494][ T1291] ? __pfx_copy_process+0x10/0x10 [ 2637.473534][ T1291] ? __might_fault+0xc5/0x120 [ 2637.478254][ T1291] ? __asan_memset+0x23/0x50 [ 2637.482870][ T1291] kernel_clone+0x21d/0x8d0 [ 2637.487392][ T1291] ? __pfx_kernel_clone+0x10/0x10 [ 2637.492459][ T1291] __se_sys_clone3+0x2cb/0x350 [ 2637.497332][ T1291] ? __pfx___se_sys_clone3+0x10/0x10 [ 2637.502646][ T1291] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2637.508843][ T1291] ? exc_page_fault+0x587/0x870 [ 2637.513714][ T1291] ? do_syscall_64+0xb4/0x240 [ 2637.518414][ T1291] do_syscall_64+0xf9/0x240 [ 2637.522940][ T1291] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2637.528958][ T1291] RIP: 0033:0x7f0f5b4a9b99 [ 2637.533391][ T1291] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2637.553107][ T1291] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2637.561718][ T1291] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2637.569704][ T1291] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2637.578124][ T1291] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2637.586111][ T1291] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2637.594185][ T1291] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2637.602187][ T1291] [ 2637.630728][ T1291] memory: usage 307200kB, limit 307200kB, failcnt 134159 [ 2637.639184][ T1291] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2637.672464][ T1291] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2637.692177][ T1291] Memory cgroup stats for /syz0: [ 2637.692347][ T1291] cache 0 [ 2637.720267][ T1291] rss 0 [ 2637.723115][ T1291] rss_huge 0 [ 2637.732583][ T1291] shmem 0 [ 2637.737291][ T1291] mapped_file 0 [ 2637.740895][ T1291] dirty 0 [ 2637.743881][ T1291] writeback 0 [ 2637.752984][ T1291] workingset_refault_anon 41476 [ 2637.763045][ T1291] workingset_refault_file 2 [ 2637.773226][ T1291] swap 221184 [ 2637.777254][ T1291] swapcached 0 [ 2637.785340][ T1291] pgpgin 226842 [ 2637.788866][ T1291] pgpgout 226842 [ 2637.792449][ T1291] pgfault 507518 [ 2637.809436][ T1291] pgmajfault 40519 [ 2637.813245][ T1291] inactive_anon 0 [ 2637.818297][ T1291] active_anon 0 [ 2637.821820][ T1291] inactive_file 0 [ 2637.826293][ T1291] active_file 0 [ 2637.829817][ T1291] unevictable 0 [ 2637.833318][ T1291] hierarchical_memory_limit 314572800 [ 2637.840249][ T1291] hierarchical_memsw_limit 9223372036854771712 [ 2637.847270][ T1291] total_cache 0 [ 2637.850784][ T1291] total_rss 0 [ 2637.854112][ T1291] total_rss_huge 0 [ 2637.864497][ T1291] total_shmem 0 [ 2637.868030][ T1291] total_mapped_file 0 [ 2637.872060][ T1291] total_dirty 0 [ 2637.881840][ T1291] total_writeback 0 [ 2637.894883][ T1291] total_workingset_refault_anon 41476 [ 2637.900314][ T1291] total_workingset_refault_file 2 [ 2637.907436][ T1291] total_swap 221184 [ 2637.911293][ T1291] total_swapcached 0 [ 2637.916379][ T1291] total_pgpgin 226842 [ 2637.928703][ T1291] total_pgpgout 226842 [ 2637.932804][ T1291] total_pgfault 507518 [ 2637.940535][ T1291] total_pgmajfault 40519 [ 2637.945787][ T1291] total_inactive_anon 0 [ 2637.949997][ T1291] total_active_anon 0 [ 2637.954026][ T1291] total_inactive_file 0 [ 2637.970341][ T1291] total_active_file 0 [ 2637.974967][ T1291] total_unevictable 0 [ 2637.979015][ T1291] anon_cost 0 [ 2637.982345][ T1291] file_cost 0 [ 2637.986538][ T1291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1291,uid=0 [ 2638.003178][ T1291] Memory cgroup out of memory: Killed process 1291 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2638.415007][ T1294] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2638.434539][ T1294] CPU: 0 PID: 1294 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2638.444968][ T1294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2638.455080][ T1294] Call Trace: [ 2638.458408][ T1294] [ 2638.461379][ T1294] dump_stack_lvl+0x1e7/0x2e0 [ 2638.466122][ T1294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2638.471809][ T1294] ? __pfx__printk+0x10/0x10 [ 2638.476452][ T1294] ? ___ratelimit+0x4c4/0x670 [ 2638.481193][ T1294] ? __pfx____ratelimit+0x10/0x10 [ 2638.486286][ T1294] dump_header+0xda/0x6a0 [ 2638.490694][ T1294] oom_kill_process+0x3a7/0x930 [ 2638.495616][ T1294] out_of_memory+0xf67/0x1320 [ 2638.500362][ T1294] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2638.506665][ T1294] ? __pfx___mutex_lock+0x10/0x10 [ 2638.511753][ T1294] ? __pfx_out_of_memory+0x10/0x10 [ 2638.516951][ T1294] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2638.522560][ T1294] ? __pfx_lock_release+0x10/0x10 [ 2638.527650][ T1294] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2638.533795][ T1294] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2638.539063][ T1294] ? mem_cgroup_iter+0x422/0x560 [ 2638.544072][ T1294] try_charge_memcg+0xda2/0x18a0 [ 2638.549192][ T1294] ? __pfx_try_charge_memcg+0x10/0x10 [ 2638.554623][ T1294] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2638.560405][ T1294] ? __pfx_lock_release+0x10/0x10 [ 2638.565502][ T1294] ? memcg_account_kmem+0x1e7/0x210 [ 2638.570778][ T1294] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2638.576654][ T1294] __memcg_kmem_charge_page+0xe1/0x250 [ 2638.582270][ T1294] memcg_charge_kernel_stack+0x304/0x550 [ 2638.587981][ T1294] dup_task_struct+0x15d/0x7d0 [ 2638.592808][ T1294] copy_process+0x5d5/0x3fc0 [ 2638.597496][ T1294] ? __might_fault+0xa9/0x120 [ 2638.602229][ T1294] ? __pfx_lock_release+0x10/0x10 [ 2638.607334][ T1294] ? __pfx_copy_process+0x10/0x10 [ 2638.612414][ T1294] ? __might_fault+0xc5/0x120 [ 2638.617155][ T1294] ? __asan_memset+0x23/0x50 [ 2638.621821][ T1294] kernel_clone+0x21d/0x8d0 [ 2638.626385][ T1294] ? __pfx_kernel_clone+0x10/0x10 [ 2638.631482][ T1294] __se_sys_clone3+0x2cb/0x350 [ 2638.636329][ T1294] ? __pfx___se_sys_clone3+0x10/0x10 [ 2638.641669][ T1294] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2638.647712][ T1294] ? exc_page_fault+0x587/0x870 [ 2638.652622][ T1294] ? do_syscall_64+0xb4/0x240 [ 2638.657359][ T1294] do_syscall_64+0xf9/0x240 [ 2638.661909][ T1294] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2638.667843][ T1294] RIP: 0033:0x7f0f5b4a9b99 [ 2638.672396][ T1294] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2638.692070][ T1294] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2638.700549][ T1294] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2638.708614][ T1294] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2638.716642][ T1294] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2638.724841][ T1294] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2638.732888][ T1294] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2638.740953][ T1294] [ 2638.773047][ T1294] memory: usage 307200kB, limit 307200kB, failcnt 134488 [ 2638.780700][ T1294] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 2638.789599][ T1294] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2638.797511][ T1294] Memory cgroup stats for /syz0: [ 2638.797674][ T1294] cache 0 [ 2638.817886][ T1294] rss 12288 [ 2638.821174][ T1294] rss_huge 0 [ 2638.825123][ T1294] shmem 0 [ 2638.828220][ T1294] mapped_file 0 [ 2638.831846][ T1294] dirty 0 [ 2638.836110][ T1294] writeback 0 [ 2638.839589][ T1294] workingset_refault_anon 41596 [ 2638.845713][ T1294] workingset_refault_file 2 [ 2638.850382][ T1294] swap 212992 [ 2638.853811][ T1294] swapcached 8192 [ 2638.858833][ T1294] pgpgin 226973 [ 2638.862981][ T1294] pgpgout 226970 [ 2638.875038][ T1294] pgfault 507720 [ 2638.881896][ T1294] pgmajfault 40635 [ 2638.886341][ T1294] inactive_anon 0 [ 2638.890482][ T1294] active_anon 12288 [ 2638.895166][ T1294] inactive_file 0 [ 2638.898956][ T1294] active_file 0 [ 2638.902555][ T1294] unevictable 0 [ 2638.907406][ T1294] hierarchical_memory_limit 314572800 [ 2638.912969][ T1294] hierarchical_memsw_limit 9223372036854771712 [ 2638.920114][ T1294] total_cache 0 [ 2638.923747][ T1294] total_rss 12288 [ 2638.944972][ T1294] total_rss_huge 0 [ 2638.953409][ T1294] total_shmem 0 [ 2638.958329][ T1294] total_mapped_file 0 [ 2638.962480][ T1294] total_dirty 0 [ 2638.967141][ T1294] total_writeback 0 [ 2638.971508][ T1294] total_workingset_refault_anon 41596 [ 2638.984872][ T1294] total_workingset_refault_file 2 [ 2638.990119][ T1294] total_swap 212992 [ 2638.999108][ T1294] total_swapcached 8192 [ 2639.003439][ T1294] total_pgpgin 226973 [ 2639.008451][ T1294] total_pgpgout 226970 [ 2639.012687][ T1294] total_pgfault 507720 [ 2639.018108][ T1294] total_pgmajfault 40635 [ 2639.022508][ T1294] total_inactive_anon 0 [ 2639.027672][ T1294] total_active_anon 12288 [ 2639.032159][ T1294] total_inactive_file 0 [ 2639.037570][ T1294] total_active_file 0 [ 2639.045193][ T1294] total_unevictable 0 [ 2639.054862][ T1294] anon_cost 0 [ 2639.061028][ T1294] file_cost 0 [ 2639.065114][ T1294] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1294,uid=0 [ 2639.081965][ T1294] Memory cgroup out of memory: Killed process 1294 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:07 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:08 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5408]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2639.938190][ T1295] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2639.973229][ T1295] CPU: 0 PID: 1295 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2639.983852][ T1295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2639.993947][ T1295] Call Trace: [ 2639.997243][ T1295] [ 2640.000185][ T1295] dump_stack_lvl+0x1e7/0x2e0 [ 2640.004915][ T1295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2640.010130][ T1295] ? __pfx__printk+0x10/0x10 [ 2640.014731][ T1295] ? ___ratelimit+0x4c4/0x670 [ 2640.019441][ T1295] ? __pfx____ratelimit+0x10/0x10 [ 2640.024495][ T1295] dump_header+0xda/0x6a0 [ 2640.028901][ T1295] oom_kill_process+0x3a7/0x930 [ 2640.033804][ T1295] out_of_memory+0xf67/0x1320 [ 2640.038533][ T1295] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2640.044196][ T1295] ? __pfx___mutex_lock+0x10/0x10 [ 2640.049248][ T1295] ? __pfx_out_of_memory+0x10/0x10 [ 2640.054480][ T1295] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2640.060042][ T1295] ? __pfx_lock_release+0x10/0x10 [ 2640.065086][ T1295] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2640.071174][ T1295] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2640.076390][ T1295] ? mem_cgroup_iter+0x422/0x560 [ 2640.081347][ T1295] try_charge_memcg+0xda2/0x18a0 [ 2640.086325][ T1295] ? __pfx_try_charge_memcg+0x10/0x10 [ 2640.091710][ T1295] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2640.097447][ T1295] ? __pfx_lock_release+0x10/0x10 [ 2640.102488][ T1295] ? memcg_account_kmem+0x1e7/0x210 [ 2640.107724][ T1295] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2640.113547][ T1295] __memcg_kmem_charge_page+0xe1/0x250 [ 2640.119017][ T1295] memcg_charge_kernel_stack+0x210/0x550 [ 2640.124754][ T1295] dup_task_struct+0x15d/0x7d0 [ 2640.129534][ T1295] copy_process+0x5d5/0x3fc0 [ 2640.134149][ T1295] ? __might_fault+0xa9/0x120 [ 2640.138848][ T1295] ? __pfx_lock_release+0x10/0x10 [ 2640.143895][ T1295] ? __pfx_copy_process+0x10/0x10 [ 2640.148932][ T1295] ? __might_fault+0xc5/0x120 [ 2640.153696][ T1295] ? __asan_memset+0x23/0x50 [ 2640.158384][ T1295] kernel_clone+0x21d/0x8d0 [ 2640.162948][ T1295] ? __pfx_kernel_clone+0x10/0x10 [ 2640.168011][ T1295] __se_sys_clone3+0x2cb/0x350 [ 2640.173179][ T1295] ? __pfx___se_sys_clone3+0x10/0x10 [ 2640.178531][ T1295] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2640.184574][ T1295] ? exc_page_fault+0x587/0x870 [ 2640.189443][ T1295] ? do_syscall_64+0xb4/0x240 [ 2640.194135][ T1295] do_syscall_64+0xf9/0x240 [ 2640.198656][ T1295] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2640.204576][ T1295] RIP: 0033:0x7f0f5b4a9b99 [ 2640.209194][ T1295] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2640.229008][ T1295] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2640.237443][ T1295] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2640.245427][ T1295] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2640.253410][ T1295] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2640.261651][ T1295] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2640.269647][ T1295] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2640.277660][ T1295] [ 2640.321610][ T1295] memory: usage 307180kB, limit 307200kB, failcnt 135084 [ 2640.329202][ T1295] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 2640.337881][ T1295] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2640.346158][ T1295] Memory cgroup stats for /syz0: [ 2640.346312][ T1295] cache 0 [ 2640.354229][ T1295] rss 16384 [ 2640.357668][ T1295] rss_huge 0 [ 2640.360908][ T1295] shmem 0 [ 2640.363887][ T1295] mapped_file 0 [ 2640.367730][ T1295] dirty 0 [ 2640.370702][ T1295] writeback 0 [ 2640.374021][ T1295] workingset_refault_anon 41828 [ 2640.379114][ T1295] workingset_refault_file 2 [ 2640.383686][ T1295] swap 204800 [ 2640.387344][ T1295] swapcached 8192 [ 2640.391008][ T1295] pgpgin 227217 [ 2640.394827][ T1295] pgpgout 227213 [ 2640.398465][ T1295] pgfault 508086 [ 2640.402071][ T1295] pgmajfault 40860 [ 2640.406167][ T1295] inactive_anon 0 [ 2640.409840][ T1295] active_anon 16384 [ 2640.413693][ T1295] inactive_file 0 [ 2640.417649][ T1295] active_file 0 [ 2640.421252][ T1295] unevictable 0 [ 2640.425147][ T1295] hierarchical_memory_limit 314572800 [ 2640.430668][ T1295] hierarchical_memsw_limit 9223372036854771712 [ 2640.437148][ T1295] total_cache 0 [ 2640.440764][ T1295] total_rss 16384 [ 2640.450997][ T1295] total_rss_huge 0 [ 2640.455088][ T1295] total_shmem 0 [ 2640.458757][ T1295] total_mapped_file 0 [ 2640.462784][ T1295] total_dirty 0 [ 2640.472411][ T1295] total_writeback 0 [ 2640.480564][ T1295] total_workingset_refault_anon 41828 [ 2640.492835][ T1295] total_workingset_refault_file 2 [ 2640.498254][ T1295] total_swap 204800 [ 2640.502233][ T1295] total_swapcached 8192 [ 2640.513656][ T1295] total_pgpgin 227217 [ 2640.517976][ T1295] total_pgpgout 227213 [ 2640.522589][ T1295] total_pgfault 508086 [ 2640.534218][ T1295] total_pgmajfault 40860 [ 2640.538788][ T1295] total_inactive_anon 0 [ 2640.543131][ T1295] total_active_anon 16384 [ 2640.553134][ T1295] total_inactive_file 0 [ 2640.558976][ T1295] total_active_file 0 [ 2640.563127][ T1295] total_unevictable 0 [ 2640.567926][ T1295] anon_cost 0 [ 2640.571248][ T1295] file_cost 0 [ 2640.575453][ T1295] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1295,uid=0 [ 2640.591537][ T1295] Memory cgroup out of memory: Killed process 1295 (syz-executor.0) total-vm:54508kB, anon-rss:332kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2641.200025][ T1298] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2641.224005][ T1298] CPU: 1 PID: 1298 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2641.234939][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2641.245013][ T1298] Call Trace: [ 2641.248316][ T1298] [ 2641.251264][ T1298] dump_stack_lvl+0x1e7/0x2e0 [ 2641.255973][ T1298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2641.261185][ T1298] ? __pfx__printk+0x10/0x10 [ 2641.265792][ T1298] ? ___ratelimit+0x4c4/0x670 [ 2641.270527][ T1298] ? __pfx____ratelimit+0x10/0x10 [ 2641.275597][ T1298] dump_header+0xda/0x6a0 [ 2641.280058][ T1298] oom_kill_process+0x3a7/0x930 [ 2641.285028][ T1298] out_of_memory+0xf67/0x1320 [ 2641.289739][ T1298] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2641.295406][ T1298] ? __pfx___mutex_lock+0x10/0x10 [ 2641.300495][ T1298] ? __pfx_out_of_memory+0x10/0x10 [ 2641.305731][ T1298] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2641.312013][ T1298] ? __pfx_lock_release+0x10/0x10 [ 2641.317071][ T1298] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2641.323181][ T1298] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2641.328409][ T1298] ? mem_cgroup_iter+0x422/0x560 [ 2641.333371][ T1298] try_charge_memcg+0xda2/0x18a0 [ 2641.338345][ T1298] ? __pfx_try_charge_memcg+0x10/0x10 [ 2641.343735][ T1298] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2641.349468][ T1298] ? __pfx_lock_release+0x10/0x10 [ 2641.354515][ T1298] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2641.360526][ T1298] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2641.366265][ T1298] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2641.372088][ T1298] obj_cgroup_charge+0x389/0x630 [ 2641.377049][ T1298] ? obj_cgroup_charge+0x121/0x630 [ 2641.382173][ T1298] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2641.387639][ T1298] ? kmalloc_trace+0x4e/0x360 [ 2641.392329][ T1298] ? __pfx___might_resched+0x10/0x10 [ 2641.397647][ T1298] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2641.403511][ T1298] ? copy_semundo+0xb5/0x240 [ 2641.408197][ T1298] kmalloc_trace+0x216/0x360 [ 2641.412891][ T1298] ? __asan_memcpy+0x40/0x70 [ 2641.417537][ T1298] copy_semundo+0xb5/0x240 [ 2641.421975][ T1298] copy_process+0x1bc3/0x3fc0 [ 2641.426692][ T1298] ? copy_process+0x9c3/0x3fc0 [ 2641.431560][ T1298] ? __pfx_copy_process+0x10/0x10 [ 2641.436598][ T1298] ? __might_fault+0xc5/0x120 [ 2641.441292][ T1298] ? __asan_memset+0x23/0x50 [ 2641.445921][ T1298] kernel_clone+0x21d/0x8d0 [ 2641.450439][ T1298] ? __pfx_kernel_clone+0x10/0x10 [ 2641.455483][ T1298] __se_sys_clone3+0x2cb/0x350 [ 2641.460347][ T1298] ? __pfx___se_sys_clone3+0x10/0x10 [ 2641.465659][ T1298] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2641.471683][ T1298] ? exc_page_fault+0x587/0x870 [ 2641.476553][ T1298] ? do_syscall_64+0xb4/0x240 [ 2641.481350][ T1298] do_syscall_64+0xf9/0x240 [ 2641.485875][ T1298] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2641.491809][ T1298] RIP: 0033:0x7f0f5b4a9b99 [ 2641.496236][ T1298] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2641.515868][ T1298] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2641.524358][ T1298] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2641.532366][ T1298] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2641.540354][ T1298] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2641.548341][ T1298] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2641.556424][ T1298] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2641.564454][ T1298] [ 2641.580651][ T1298] memory: usage 307200kB, limit 307200kB, failcnt 135506 [ 2641.588927][ T1298] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 2641.608050][ T1298] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2641.618133][ T1298] Memory cgroup stats for /syz0: [ 2641.618297][ T1298] cache 0 [ 2641.627543][ T1298] rss 12288 [ 2641.630835][ T1298] rss_huge 0 [ 2641.634162][ T1298] shmem 0 [ 2641.638566][ T1298] mapped_file 0 [ 2641.642193][ T1298] dirty 0 [ 2641.646233][ T1298] writeback 0 [ 2641.649675][ T1298] workingset_refault_anon 41968 [ 2641.659815][ T1298] workingset_refault_file 2 [ 2641.673630][ T1298] swap 237568 [ 2641.677897][ T1298] swapcached 8192 [ 2641.683043][ T1298] pgpgin 227368 [ 2641.687359][ T1298] pgpgout 227365 [ 2641.690953][ T1298] pgfault 508315 [ 2641.697969][ T1298] pgmajfault 40996 [ 2641.701780][ T1298] inactive_anon 0 [ 2641.709507][ T1298] active_anon 12288 [ 2641.713372][ T1298] inactive_file 0 [ 2641.730342][ T1298] active_file 0 [ 2641.733892][ T1298] unevictable 0 [ 2641.742756][ T1298] hierarchical_memory_limit 314572800 [ 2641.748642][ T1298] hierarchical_memsw_limit 9223372036854771712 [ 2641.755409][ T1298] total_cache 0 [ 2641.758913][ T1298] total_rss 12288 [ 2641.762667][ T1298] total_rss_huge 0 [ 2641.774414][ T1298] total_shmem 0 [ 2641.777950][ T1298] total_mapped_file 0 [ 2641.781978][ T1298] total_dirty 0 [ 2641.792139][ T1298] total_writeback 0 [ 2641.799696][ T1298] total_workingset_refault_anon 41968 [ 2641.806208][ T1298] total_workingset_refault_file 2 [ 2641.811306][ T1298] total_swap 237568 [ 2641.817244][ T1298] total_swapcached 8192 [ 2641.824803][ T1298] total_pgpgin 227368 [ 2641.830918][ T1298] total_pgpgout 227365 [ 2641.835585][ T1298] total_pgfault 508315 [ 2641.839697][ T1298] total_pgmajfault 40996 [ 2641.843980][ T1298] total_inactive_anon 0 [ 2641.849200][ T1298] total_active_anon 12288 [ 2641.853580][ T1298] total_inactive_file 0 [ 2641.858172][ T1298] total_active_file 0 [ 2641.862206][ T1298] total_unevictable 0 [ 2641.866902][ T1298] anon_cost 0 [ 2641.870334][ T1298] file_cost 0 [ 2641.874104][ T1298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1298,uid=0 [ 2641.890453][ T1298] Memory cgroup out of memory: Killed process 1298 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2642.544160][ T1299] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2642.560843][ T1299] CPU: 1 PID: 1299 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2642.571276][ T1299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2642.581390][ T1299] Call Trace: [ 2642.584722][ T1299] [ 2642.587705][ T1299] dump_stack_lvl+0x1e7/0x2e0 [ 2642.592638][ T1299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2642.597898][ T1299] ? __pfx__printk+0x10/0x10 [ 2642.602549][ T1299] ? ___ratelimit+0x4c4/0x670 [ 2642.607310][ T1299] ? __pfx____ratelimit+0x10/0x10 [ 2642.612417][ T1299] dump_header+0xda/0x6a0 [ 2642.616846][ T1299] oom_kill_process+0x3a7/0x930 [ 2642.621773][ T1299] out_of_memory+0xf67/0x1320 [ 2642.626526][ T1299] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2642.632225][ T1299] ? __pfx___mutex_lock+0x10/0x10 [ 2642.637321][ T1299] ? __pfx_out_of_memory+0x10/0x10 [ 2642.642521][ T1299] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2642.648149][ T1299] ? __pfx_lock_release+0x10/0x10 [ 2642.653250][ T1299] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2642.659394][ T1299] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2642.664667][ T1299] ? mem_cgroup_iter+0x422/0x560 [ 2642.669690][ T1299] try_charge_memcg+0xda2/0x18a0 [ 2642.674725][ T1299] ? __pfx_try_charge_memcg+0x10/0x10 [ 2642.680165][ T1299] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2642.685949][ T1299] ? __pfx_lock_release+0x10/0x10 [ 2642.691066][ T1299] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2642.697145][ T1299] __memcg_kmem_charge_page+0xe1/0x250 [ 2642.702675][ T1299] memcg_charge_kernel_stack+0xa7/0x550 [ 2642.708387][ T1299] dup_task_struct+0x15d/0x7d0 [ 2642.713234][ T1299] copy_process+0x5d5/0x3fc0 [ 2642.717908][ T1299] ? __might_fault+0xa9/0x120 [ 2642.722755][ T1299] ? __pfx_lock_release+0x10/0x10 [ 2642.727871][ T1299] ? __pfx_copy_process+0x10/0x10 [ 2642.732965][ T1299] ? __might_fault+0xc5/0x120 [ 2642.737903][ T1299] ? __asan_memset+0x23/0x50 [ 2642.742572][ T1299] kernel_clone+0x21d/0x8d0 [ 2642.747148][ T1299] ? __pfx_kernel_clone+0x10/0x10 [ 2642.752266][ T1299] __se_sys_clone3+0x2cb/0x350 [ 2642.757190][ T1299] ? __pfx___se_sys_clone3+0x10/0x10 [ 2642.762715][ T1299] ? rcu_is_watching+0x15/0xb0 [ 2642.767569][ T1299] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2642.773640][ T1299] ? exc_page_fault+0x587/0x870 [ 2642.778574][ T1299] ? do_syscall_64+0xb4/0x240 [ 2642.783319][ T1299] do_syscall_64+0xf9/0x240 [ 2642.787981][ T1299] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2642.793938][ T1299] RIP: 0033:0x7f0f5b4a9b99 [ 2642.798417][ T1299] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2642.818179][ T1299] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2642.826682][ T1299] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2642.834720][ T1299] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2642.843474][ T1299] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2642.851598][ T1299] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2642.859635][ T1299] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2642.867773][ T1299] [ 2642.894760][ T1299] memory: usage 307200kB, limit 307200kB, failcnt 135947 [ 2642.914506][ T1299] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2642.922746][ T1299] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2642.944697][ T1299] Memory cgroup stats for /syz0: [ 2642.944868][ T1299] cache 0 [ 2642.964679][ T1299] rss 12288 [ 2642.967877][ T1299] rss_huge 0 [ 2642.971119][ T1299] shmem 0 [ 2642.974103][ T1299] mapped_file 0 [ 2642.984069][ T1299] dirty 0 [ 2642.988615][ T1299] writeback 0 12:19:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2642.992081][ T1299] workingset_refault_anon 42151 [ 2643.002631][ T1299] workingset_refault_file 2 [ 2643.008172][ T1299] swap 208896 [ 2643.011620][ T1299] swapcached 12288 [ 2643.021922][ T1299] pgpgin 227562 [ 2643.026301][ T1299] pgpgout 227559 [ 2643.030044][ T1299] pgfault 508606 [ 2643.033739][ T1299] pgmajfault 41173 [ 2643.038707][ T1299] inactive_anon 0 [ 2643.043283][ T1299] active_anon 12288 [ 2643.052659][ T1299] inactive_file 0 [ 2643.056981][ T1299] active_file 0 [ 2643.060595][ T1299] unevictable 0 [ 2643.064196][ T1299] hierarchical_memory_limit 314572800 [ 2643.078122][ T1299] hierarchical_memsw_limit 9223372036854771712 [ 2643.091095][ T1299] total_cache 0 [ 2643.095485][ T1299] total_rss 12288 [ 2643.099277][ T1299] total_rss_huge 0 [ 2643.103110][ T1299] total_shmem 0 [ 2643.108100][ T1299] total_mapped_file 0 [ 2643.112287][ T1299] total_dirty 0 [ 2643.116641][ T1299] total_writeback 0 [ 2643.120783][ T1299] total_workingset_refault_anon 42151 [ 2643.127523][ T1299] total_workingset_refault_file 2 [ 2643.132723][ T1299] total_swap 208896 [ 2643.139134][ T1299] total_swapcached 12288 [ 2643.145748][ T1299] total_pgpgin 227562 [ 2643.150467][ T1299] total_pgpgout 227559 [ 2643.155365][ T1299] total_pgfault 508606 [ 2643.160005][ T1299] total_pgmajfault 41173 [ 2643.165969][ T1299] total_inactive_anon 0 [ 2643.170355][ T1299] total_active_anon 12288 [ 2643.175712][ T1299] total_inactive_file 0 [ 2643.181063][ T1299] total_active_file 0 [ 2643.186017][ T1299] total_unevictable 0 [ 2643.190145][ T1299] anon_cost 0 [ 2643.193572][ T1299] file_cost 0 [ 2643.204149][ T1299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1299,uid=0 [ 2643.227638][ T1299] Memory cgroup out of memory: Killed process 1299 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2643.922356][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2643.956321][ T5099] CPU: 0 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2643.966750][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2643.976865][ T5099] Call Trace: [ 2643.980196][ T5099] [ 2643.983177][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2643.987920][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2643.993173][ T5099] ? __pfx__printk+0x10/0x10 [ 2643.997826][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2644.002577][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2644.007680][ T5099] dump_header+0xda/0x6a0 [ 2644.012084][ T5099] oom_kill_process+0x3a7/0x930 [ 2644.017015][ T5099] out_of_memory+0xf67/0x1320 [ 2644.021776][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2644.027492][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2644.032587][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2644.037789][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2644.043406][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2644.048495][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2644.054610][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2644.059847][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2644.064822][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2644.069778][ T5099] ? mark_lock+0x9a/0x350 [ 2644.074143][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2644.079748][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2644.085919][ T5099] charge_memcg+0xa2/0x160 [ 2644.090351][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2644.096448][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2644.101917][ T5099] ? mark_lock+0x9a/0x350 [ 2644.106275][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2644.112278][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2644.117857][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2644.123769][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2644.128819][ T5099] ? xas_descend+0x37e/0x470 [ 2644.133442][ T5099] swapin_readahead+0x1ea/0x1070 [ 2644.138397][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2644.143548][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2644.148952][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2644.154263][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2644.159572][ T5099] do_swap_page+0x791/0x3f40 [ 2644.164271][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2644.169067][ T5099] ? do_swap_page+0x154/0x3f40 [ 2644.173849][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2644.178978][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2644.184474][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2644.190348][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2644.195594][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2644.201038][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2644.206535][ T5099] ? mt_find+0x226/0x850 [ 2644.210794][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2644.215866][ T5099] ? mt_find+0x62d/0x850 [ 2644.220122][ T5099] ? mt_find+0x226/0x850 [ 2644.224405][ T5099] ? find_vma+0x142/0x1c0 [ 2644.228751][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2644.233443][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2644.239632][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2644.244431][ T5099] exc_page_fault+0x2ad/0x870 [ 2644.249654][ T5099] asm_exc_page_fault+0x26/0x30 [ 2644.254530][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2644.259669][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2644.279393][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2644.285484][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2644.293474][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2644.301460][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2644.309487][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2644.317510][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2644.325539][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2644.331477][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2644.337951][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2644.343755][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2644.349434][ T5099] do_syscall_64+0x108/0x240 [ 2644.354046][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2644.359970][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2644.364412][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2644.384069][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2644.392515][ T5099] RAX: 0000000000000000 RBX: 0000000000004267 RCX: 00007f0f5b4a91b5 [ 2644.400514][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2644.408501][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2644.416493][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2644.424498][ T5099] R13: 000000000028557a R14: 000000000028557a R15: 0000000000000000 [ 2644.432590][ T5099] [ 2644.479574][ T5099] memory: usage 307192kB, limit 307200kB, failcnt 136487 [ 2644.490120][ T5099] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 2644.505344][ T5099] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2644.512718][ T5099] Memory cgroup stats for /syz0: [ 2644.512888][ T5099] cache 0 [ 2644.521010][ T5099] rss 0 [ 2644.523823][ T5099] rss_huge 0 [ 2644.527396][ T5099] shmem 0 [ 2644.530381][ T5099] mapped_file 0 [ 2644.533873][ T5099] dirty 0 [ 2644.537031][ T5099] writeback 0 [ 2644.540361][ T5099] workingset_refault_anon 42347 [ 2644.546599][ T5099] workingset_refault_file 2 [ 2644.554433][ T5099] swap 262144 [ 2644.557791][ T5099] swapcached 0 [ 2644.561198][ T5099] pgpgin 227771 [ 2644.572074][ T5099] pgpgout 227771 [ 2644.575885][ T5099] pgfault 508915 [ 2644.579472][ T5099] pgmajfault 41361 [ 2644.583230][ T5099] inactive_anon 0 [ 2644.587415][ T5099] active_anon 0 [ 2644.590928][ T5099] inactive_file 0 [ 2644.594702][ T5099] active_file 0 [ 2644.598220][ T5099] unevictable 0 [ 2644.601700][ T5099] hierarchical_memory_limit 314572800 [ 2644.608054][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2644.624604][ T5099] total_cache 0 [ 2644.628160][ T5099] total_rss 0 [ 2644.631490][ T5099] total_rss_huge 0 [ 2644.635423][ T5099] total_shmem 0 [ 2644.638932][ T5099] total_mapped_file 0 [ 2644.642949][ T5099] total_dirty 0 [ 2644.646861][ T5099] total_writeback 0 [ 2644.650719][ T5099] total_workingset_refault_anon 42347 [ 2644.657094][ T5099] total_workingset_refault_file 2 [ 2644.667083][ T5099] total_swap 262144 [ 2644.670949][ T5099] total_swapcached 0 [ 2644.680798][ T5099] total_pgpgin 227771 [ 2644.688237][ T5099] total_pgpgout 227771 [ 2644.693029][ T5099] total_pgfault 508915 [ 2644.703694][ T5099] total_pgmajfault 41361 [ 2644.712433][ T5099] total_inactive_anon 0 [ 2644.721111][ T5099] total_active_anon 0 [ 2644.728876][ T5099] total_inactive_file 0 [ 2644.733189][ T5099] total_active_file 0 [ 2644.742017][ T5099] total_unevictable 0 [ 2644.751388][ T5099] anon_cost 0 [ 2644.760145][ T5099] file_cost 0 [ 2644.763583][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1302,uid=0 [ 2644.785540][ T5099] Memory cgroup out of memory: Killed process 1302 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2645.288564][ T1303] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2645.310756][ T1303] CPU: 1 PID: 1303 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2645.321181][ T1303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2645.331296][ T1303] Call Trace: [ 2645.334627][ T1303] [ 2645.337597][ T1303] dump_stack_lvl+0x1e7/0x2e0 [ 2645.342348][ T1303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2645.347616][ T1303] ? __pfx__printk+0x10/0x10 [ 2645.352284][ T1303] ? ___ratelimit+0x4c4/0x670 [ 2645.357035][ T1303] ? __pfx____ratelimit+0x10/0x10 [ 2645.362127][ T1303] dump_header+0xda/0x6a0 [ 2645.366524][ T1303] oom_kill_process+0x3a7/0x930 [ 2645.371436][ T1303] out_of_memory+0xf67/0x1320 [ 2645.376171][ T1303] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2645.381860][ T1303] ? __pfx___mutex_lock+0x10/0x10 [ 2645.386948][ T1303] ? __pfx_out_of_memory+0x10/0x10 [ 2645.392146][ T1303] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2645.397848][ T1303] ? __pfx_lock_release+0x10/0x10 [ 2645.402947][ T1303] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2645.409084][ T1303] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2645.414356][ T1303] ? mem_cgroup_iter+0x422/0x560 [ 2645.419363][ T1303] try_charge_memcg+0xda2/0x18a0 [ 2645.424425][ T1303] ? __pfx_try_charge_memcg+0x10/0x10 [ 2645.429911][ T1303] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2645.435655][ T1303] ? __pfx_lock_release+0x10/0x10 [ 2645.440703][ T1303] ? memcg_account_kmem+0x1e7/0x210 [ 2645.445928][ T1303] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2645.451750][ T1303] __memcg_kmem_charge_page+0xe1/0x250 [ 2645.457224][ T1303] memcg_charge_kernel_stack+0x210/0x550 [ 2645.462873][ T1303] dup_task_struct+0x15d/0x7d0 [ 2645.467671][ T1303] copy_process+0x5d5/0x3fc0 [ 2645.472309][ T1303] ? __might_fault+0xa9/0x120 [ 2645.477006][ T1303] ? __pfx_lock_release+0x10/0x10 [ 2645.482051][ T1303] ? __lock_acquire+0x1345/0x1fd0 [ 2645.487096][ T1303] ? __pfx_copy_process+0x10/0x10 [ 2645.492136][ T1303] ? __might_fault+0xc5/0x120 [ 2645.496838][ T1303] ? __asan_memset+0x23/0x50 [ 2645.501451][ T1303] kernel_clone+0x21d/0x8d0 [ 2645.505976][ T1303] ? __pfx_kernel_clone+0x10/0x10 [ 2645.511031][ T1303] ? __pfx_lock_release+0x10/0x10 [ 2645.516099][ T1303] __se_sys_clone3+0x2cb/0x350 [ 2645.520887][ T1303] ? __might_fault+0xa9/0x120 [ 2645.525584][ T1303] ? __pfx___se_sys_clone3+0x10/0x10 [ 2645.530885][ T1303] ? rcu_is_watching+0x15/0xb0 [ 2645.535679][ T1303] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2645.541691][ T1303] ? exc_page_fault+0x587/0x870 [ 2645.546556][ T1303] ? do_syscall_64+0xb4/0x240 [ 2645.551249][ T1303] do_syscall_64+0xf9/0x240 [ 2645.555772][ T1303] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2645.561681][ T1303] RIP: 0033:0x7f0f5b4a9b99 [ 2645.566213][ T1303] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2645.586007][ T1303] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2645.594438][ T1303] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2645.602419][ T1303] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2645.610400][ T1303] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2645.618385][ T1303] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2645.626369][ T1303] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2645.634371][ T1303] [ 2645.651629][ T1303] memory: usage 307192kB, limit 307200kB, failcnt 136926 [ 2645.679204][ T1303] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 2645.693413][ T1303] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2645.701314][ T1303] Memory cgroup stats for /syz0: [ 2645.701483][ T1303] cache 0 [ 2645.714475][ T1303] rss 0 [ 2645.717315][ T1303] rss_huge 0 [ 2645.720546][ T1303] shmem 0 [ 2645.723521][ T1303] mapped_file 0 [ 2645.733836][ T1303] dirty 0 [ 2645.738193][ T1303] writeback 0 [ 2645.741534][ T1303] workingset_refault_anon 42500 [ 2645.754684][ T1303] workingset_refault_file 2 [ 2645.759306][ T1303] swap 221184 [ 2645.762713][ T1303] swapcached 0 [ 2645.766541][ T1303] pgpgin 227935 [ 2645.770667][ T1303] pgpgout 227935 [ 2645.775270][ T1303] pgfault 509155 [ 2645.778970][ T1303] pgmajfault 41509 [ 2645.782848][ T1303] inactive_anon 0 [ 2645.787721][ T1303] active_anon 0 [ 2645.791353][ T1303] inactive_file 0 [ 2645.795939][ T1303] active_file 0 [ 2645.799775][ T1303] unevictable 0 [ 2645.803861][ T1303] hierarchical_memory_limit 314572800 [ 2645.810061][ T1303] hierarchical_memsw_limit 9223372036854771712 [ 2645.816938][ T1303] total_cache 0 [ 2645.820554][ T1303] total_rss 0 [ 2645.824055][ T1303] total_rss_huge 0 [ 2645.828371][ T1303] total_shmem 0 [ 2645.831995][ T1303] total_mapped_file 0 [ 2645.842155][ T1303] total_dirty 0 [ 2645.847690][ T1303] total_writeback 0 [ 2645.852155][ T1303] total_workingset_refault_anon 42500 [ 2645.865696][ T1303] total_workingset_refault_file 2 [ 2645.871126][ T1303] total_swap 221184 [ 2645.876352][ T1303] total_swapcached 0 [ 2645.880418][ T1303] total_pgpgin 227935 [ 2645.885460][ T1303] total_pgpgout 227935 [ 2645.889701][ T1303] total_pgfault 509155 [ 2645.894073][ T1303] total_pgmajfault 41509 [ 2645.899036][ T1303] total_inactive_anon 0 [ 2645.903230][ T1303] total_active_anon 0 [ 2645.913493][ T1303] total_inactive_file 0 [ 2645.918451][ T1303] total_active_file 0 [ 2645.922582][ T1303] total_unevictable 0 [ 2645.929609][ T1303] anon_cost 0 [ 2645.933056][ T1303] file_cost 0 [ 2645.941897][ T1303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1303,uid=0 [ 2645.967474][ T1303] Memory cgroup out of memory: Killed process 1303 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2646.791199][ T1305] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2646.804660][ T1305] CPU: 1 PID: 1305 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2646.815062][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2646.825170][ T1305] Call Trace: [ 2646.828497][ T1305] [ 2646.831477][ T1305] dump_stack_lvl+0x1e7/0x2e0 [ 2646.836209][ T1305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2646.841642][ T1305] ? __pfx__printk+0x10/0x10 [ 2646.846293][ T1305] ? ___ratelimit+0x4c4/0x670 [ 2646.851129][ T1305] ? __pfx____ratelimit+0x10/0x10 [ 2646.856227][ T1305] dump_header+0xda/0x6a0 [ 2646.860715][ T1305] oom_kill_process+0x3a7/0x930 [ 2646.865632][ T1305] out_of_memory+0xf67/0x1320 [ 2646.870343][ T1305] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2646.875997][ T1305] ? __pfx___mutex_lock+0x10/0x10 [ 2646.881044][ T1305] ? __pfx_out_of_memory+0x10/0x10 [ 2646.886182][ T1305] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2646.891743][ T1305] ? __pfx_lock_release+0x10/0x10 [ 2646.896785][ T1305] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2646.902875][ T1305] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2646.908092][ T1305] ? mem_cgroup_iter+0x422/0x560 [ 2646.913052][ T1305] try_charge_memcg+0xda2/0x18a0 [ 2646.918034][ T1305] ? __pfx_try_charge_memcg+0x10/0x10 [ 2646.923432][ T1305] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2646.929169][ T1305] ? __pfx_lock_release+0x10/0x10 [ 2646.934214][ T1305] ? memcg_account_kmem+0x1e7/0x210 [ 2646.939441][ T1305] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2646.945263][ T1305] __memcg_kmem_charge_page+0xe1/0x250 [ 2646.950736][ T1305] memcg_charge_kernel_stack+0x210/0x550 [ 2646.956389][ T1305] dup_task_struct+0x40d/0x7d0 [ 2646.961171][ T1305] copy_process+0x5d5/0x3fc0 [ 2646.965790][ T1305] ? __might_fault+0xa9/0x120 [ 2646.970487][ T1305] ? __pfx_lock_release+0x10/0x10 [ 2646.975548][ T1305] ? __pfx_copy_process+0x10/0x10 [ 2646.980593][ T1305] ? __might_fault+0xc5/0x120 [ 2646.985289][ T1305] ? __asan_memset+0x23/0x50 [ 2646.989916][ T1305] kernel_clone+0x21d/0x8d0 [ 2646.994447][ T1305] ? __pfx_kernel_clone+0x10/0x10 [ 2646.999501][ T1305] __se_sys_clone3+0x2cb/0x350 [ 2647.004303][ T1305] ? __pfx___se_sys_clone3+0x10/0x10 [ 2647.009644][ T1305] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2647.015675][ T1305] ? exc_page_fault+0x587/0x870 [ 2647.020552][ T1305] ? do_syscall_64+0xb4/0x240 [ 2647.025249][ T1305] do_syscall_64+0xf9/0x240 [ 2647.029777][ T1305] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2647.035705][ T1305] RIP: 0033:0x7f0f5b4a9b99 [ 2647.040164][ T1305] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2647.059888][ T1305] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2647.068332][ T1305] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2647.076577][ T1305] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2647.084559][ T1305] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2647.092712][ T1305] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2647.100700][ T1305] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2647.108701][ T1305] [ 2647.128275][ T1305] memory: usage 307200kB, limit 307200kB, failcnt 137547 [ 2647.146003][ T1305] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 2647.159579][ T1305] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2647.193962][ T1305] Memory cgroup stats for /syz0: [ 2647.194129][ T1305] cache 0 [ 2647.202711][ T1305] rss 8192 [ 2647.206574][ T1305] rss_huge 0 [ 2647.209935][ T1305] shmem 0 [ 2647.213008][ T1305] mapped_file 0 [ 2647.217223][ T1305] dirty 0 [ 2647.220409][ T1305] writeback 0 [ 2647.224212][ T1305] workingset_refault_anon 42728 [ 2647.231605][ T1305] workingset_refault_file 2 [ 2647.236698][ T1305] swap 208896 [ 2647.240124][ T1305] swapcached 8192 [ 2647.243967][ T1305] pgpgin 228174 [ 2647.248336][ T1305] pgpgout 228171 [ 2647.252029][ T1305] pgfault 509516 [ 2647.263966][ T1305] pgmajfault 41731 [ 2647.268892][ T1305] inactive_anon 0 [ 2647.274201][ T1305] active_anon 8192 [ 2647.285144][ T1305] inactive_file 0 [ 2647.288954][ T1305] active_file 0 [ 2647.292635][ T1305] unevictable 0 [ 2647.313364][ T1305] hierarchical_memory_limit 314572800 [ 2647.324084][ T1305] hierarchical_memsw_limit 9223372036854771712 [ 2647.332945][ T1305] total_cache 0 [ 2647.343287][ T1305] total_rss 8192 [ 2647.348845][ T1305] total_rss_huge 0 [ 2647.352714][ T1305] total_shmem 0 [ 2647.363434][ T1305] total_mapped_file 0 [ 2647.369857][ T1305] total_dirty 0 [ 2647.373564][ T1305] total_writeback 0 [ 2647.381942][ T1305] total_workingset_refault_anon 42728 [ 2647.392556][ T1305] total_workingset_refault_file 2 [ 2647.404770][ T1305] total_swap 208896 [ 2647.408651][ T1305] total_swapcached 8192 [ 2647.412844][ T1305] total_pgpgin 228174 [ 2647.422881][ T1305] total_pgpgout 228171 [ 2647.427595][ T1305] total_pgfault 509516 [ 2647.431708][ T1305] total_pgmajfault 41731 [ 2647.442279][ T1305] total_inactive_anon 0 [ 2647.447040][ T1305] total_active_anon 8192 [ 2647.451325][ T1305] total_inactive_file 0 [ 2647.456239][ T1305] total_active_file 0 [ 2647.460376][ T1305] total_unevictable 0 [ 2647.474439][ T1305] anon_cost 0 [ 2647.477800][ T1305] file_cost 0 [ 2647.481122][ T1305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1305,uid=0 [ 2647.498367][ T1305] Memory cgroup out of memory: Killed process 1305 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2648.077109][ T1307] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2648.087911][ T1307] CPU: 0 PID: 1307 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2648.098388][ T1307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2648.108501][ T1307] Call Trace: [ 2648.111807][ T1307] [ 2648.114758][ T1307] dump_stack_lvl+0x1e7/0x2e0 [ 2648.119495][ T1307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2648.124716][ T1307] ? __pfx__printk+0x10/0x10 [ 2648.129325][ T1307] ? ___ratelimit+0x4c4/0x670 [ 2648.134030][ T1307] ? __pfx____ratelimit+0x10/0x10 [ 2648.139080][ T1307] dump_header+0xda/0x6a0 [ 2648.143435][ T1307] oom_kill_process+0x3a7/0x930 [ 2648.148310][ T1307] out_of_memory+0xf67/0x1320 [ 2648.153050][ T1307] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2648.158757][ T1307] ? __pfx___mutex_lock+0x10/0x10 [ 2648.163821][ T1307] ? __pfx_out_of_memory+0x10/0x10 [ 2648.169057][ T1307] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2648.174629][ T1307] ? __pfx_lock_release+0x10/0x10 [ 2648.179677][ T1307] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2648.185773][ T1307] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2648.190984][ T1307] ? mem_cgroup_iter+0x422/0x560 [ 2648.196378][ T1307] try_charge_memcg+0xda2/0x18a0 [ 2648.201382][ T1307] ? __pfx_try_charge_memcg+0x10/0x10 [ 2648.206772][ T1307] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2648.212508][ T1307] ? __pfx_lock_release+0x10/0x10 [ 2648.217582][ T1307] ? memcg_account_kmem+0x1e7/0x210 [ 2648.222811][ T1307] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2648.228649][ T1307] __memcg_kmem_charge_page+0xe1/0x250 [ 2648.234124][ T1307] memcg_charge_kernel_stack+0x304/0x550 [ 2648.239864][ T1307] dup_task_struct+0x15d/0x7d0 [ 2648.244643][ T1307] copy_process+0x5d5/0x3fc0 [ 2648.249262][ T1307] ? __might_fault+0xa9/0x120 [ 2648.253952][ T1307] ? __pfx_lock_release+0x10/0x10 [ 2648.259004][ T1307] ? __pfx_copy_process+0x10/0x10 [ 2648.264110][ T1307] ? __might_fault+0xc5/0x120 [ 2648.268809][ T1307] ? __asan_memset+0x23/0x50 [ 2648.273426][ T1307] kernel_clone+0x21d/0x8d0 [ 2648.277950][ T1307] ? __pfx_kernel_clone+0x10/0x10 [ 2648.283010][ T1307] __se_sys_clone3+0x2cb/0x350 [ 2648.287791][ T1307] ? __pfx___se_sys_clone3+0x10/0x10 [ 2648.293120][ T1307] ? do_syscall_64+0x108/0x240 [ 2648.297913][ T1307] ? do_syscall_64+0xb4/0x240 [ 2648.302605][ T1307] do_syscall_64+0xf9/0x240 [ 2648.307127][ T1307] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2648.313035][ T1307] RIP: 0033:0x7f0f5b4a9b99 [ 2648.317464][ T1307] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2648.337086][ T1307] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2648.345603][ T1307] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2648.353676][ T1307] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2648.361665][ T1307] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2648.369647][ T1307] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2648.377718][ T1307] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2648.385715][ T1307] [ 2648.413720][ T1307] memory: usage 307200kB, limit 307200kB, failcnt 137993 [ 2648.421530][ T1307] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 2648.430213][ T1307] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2648.438590][ T1307] Memory cgroup stats for /syz0: [ 2648.438729][ T1307] cache 0 [ 2648.458215][ T1307] rss 12288 [ 2648.461500][ T1307] rss_huge 0 [ 2648.465480][ T1307] shmem 0 [ 2648.468561][ T1307] mapped_file 0 [ 2648.472151][ T1307] dirty 0 [ 2648.476836][ T1307] writeback 0 [ 2648.480263][ T1307] workingset_refault_anon 42873 [ 2648.485832][ T1307] workingset_refault_file 2 [ 2648.490467][ T1307] swap 229376 [ 2648.493916][ T1307] swapcached 8192 [ 2648.507030][ T1307] pgpgin 228330 [ 2648.514044][ T1307] pgpgout 228327 [ 2648.518874][ T1307] pgfault 509746 [ 2648.522572][ T1307] pgmajfault 41869 [ 2648.527107][ T1307] inactive_anon 12288 [ 2648.531226][ T1307] active_anon 0 [ 2648.535623][ T1307] inactive_file 0 [ 2648.539399][ T1307] active_file 0 [ 2648.543011][ T1307] unevictable 0 [ 2648.547710][ T1307] hierarchical_memory_limit 314572800 [ 2648.553227][ T1307] hierarchical_memsw_limit 9223372036854771712 [ 2648.570972][ T1307] total_cache 0 [ 2648.575514][ T1307] total_rss 12288 [ 2648.579309][ T1307] total_rss_huge 0 [ 2648.583170][ T1307] total_shmem 0 [ 2648.587458][ T1307] total_mapped_file 0 [ 2648.591582][ T1307] total_dirty 0 [ 2648.595834][ T1307] total_writeback 0 [ 2648.599786][ T1307] total_workingset_refault_anon 42873 [ 2648.606730][ T1307] total_workingset_refault_file 2 [ 2648.611924][ T1307] total_swap 229376 [ 2648.617060][ T1307] total_swapcached 8192 [ 2648.621542][ T1307] total_pgpgin 228330 [ 2648.637726][ T1307] total_pgpgout 228327 [ 2648.641979][ T1307] total_pgfault 509746 [ 2648.647211][ T1307] total_pgmajfault 41869 [ 2648.651588][ T1307] total_inactive_anon 12288 [ 2648.664469][ T1307] total_active_anon 0 [ 2648.668624][ T1307] total_inactive_file 0 [ 2648.677382][ T1307] total_active_file 0 [ 2648.681537][ T1307] total_unevictable 0 [ 2648.686263][ T1307] anon_cost 0 [ 2648.689685][ T1307] file_cost 0 [ 2648.693113][ T1307] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1307,uid=0 [ 2648.710399][ T1307] Memory cgroup out of memory: Killed process 1307 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2649.431191][ T1308] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2649.443910][ T1308] CPU: 0 PID: 1308 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2649.454331][ T1308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2649.464960][ T1308] Call Trace: [ 2649.468392][ T1308] [ 2649.471382][ T1308] dump_stack_lvl+0x1e7/0x2e0 [ 2649.476128][ T1308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2649.481392][ T1308] ? __pfx__printk+0x10/0x10 [ 2649.486045][ T1308] ? ___ratelimit+0x4c4/0x670 [ 2649.490785][ T1308] ? __pfx____ratelimit+0x10/0x10 [ 2649.495873][ T1308] dump_header+0xda/0x6a0 [ 2649.500274][ T1308] oom_kill_process+0x3a7/0x930 [ 2649.505187][ T1308] out_of_memory+0xf67/0x1320 [ 2649.509931][ T1308] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2649.515634][ T1308] ? __pfx___mutex_lock+0x10/0x10 [ 2649.520728][ T1308] ? __pfx_out_of_memory+0x10/0x10 [ 2649.525899][ T1308] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2649.531529][ T1308] ? __pfx_lock_release+0x10/0x10 [ 2649.536614][ T1308] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2649.542750][ T1308] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2649.548012][ T1308] ? mem_cgroup_iter+0x422/0x560 [ 2649.553039][ T1308] try_charge_memcg+0xda2/0x18a0 [ 2649.558072][ T1308] ? __pfx_try_charge_memcg+0x10/0x10 [ 2649.563694][ T1308] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2649.569912][ T1308] ? __pfx_lock_release+0x10/0x10 [ 2649.575027][ T1308] ? memcg_account_kmem+0x1e7/0x210 [ 2649.580316][ T1308] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2649.586372][ T1308] __memcg_kmem_charge_page+0xe1/0x250 [ 2649.591997][ T1308] memcg_charge_kernel_stack+0x210/0x550 [ 2649.597701][ T1308] dup_task_struct+0x15d/0x7d0 [ 2649.602536][ T1308] copy_process+0x5d5/0x3fc0 [ 2649.607213][ T1308] ? __might_fault+0xa9/0x120 [ 2649.611959][ T1308] ? __pfx_lock_release+0x10/0x10 [ 2649.617061][ T1308] ? __lock_acquire+0x1345/0x1fd0 [ 2649.622165][ T1308] ? __pfx_copy_process+0x10/0x10 [ 2649.627247][ T1308] ? __might_fault+0xc5/0x120 [ 2649.632071][ T1308] ? __asan_memset+0x23/0x50 [ 2649.636738][ T1308] kernel_clone+0x21d/0x8d0 [ 2649.641306][ T1308] ? __pfx_kernel_clone+0x10/0x10 [ 2649.646399][ T1308] ? __pfx_lock_release+0x10/0x10 [ 2649.651494][ T1308] __se_sys_clone3+0x2cb/0x350 [ 2649.656320][ T1308] ? __might_fault+0xa9/0x120 [ 2649.661059][ T1308] ? __pfx___se_sys_clone3+0x10/0x10 [ 2649.666399][ T1308] ? rcu_is_watching+0x15/0xb0 [ 2649.671326][ T1308] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2649.677470][ T1308] ? exc_page_fault+0x587/0x870 [ 2649.682387][ T1308] ? do_syscall_64+0xb4/0x240 [ 2649.687138][ T1308] do_syscall_64+0xf9/0x240 [ 2649.691721][ T1308] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2649.697670][ T1308] RIP: 0033:0x7f0f5b4a9b99 [ 2649.702221][ T1308] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2649.721893][ T1308] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2649.730385][ T1308] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2649.738417][ T1308] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2649.746448][ T1308] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2649.754474][ T1308] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2649.762507][ T1308] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2649.770570][ T1308] [ 2649.801456][ T1308] memory: usage 307180kB, limit 307200kB, failcnt 138477 [ 2649.823918][ T1308] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 2649.842413][ T1308] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2649.850152][ T1308] Memory cgroup stats for /syz0: [ 2649.850302][ T1308] cache 0 [ 2649.858321][ T1308] rss 16384 [ 2649.861474][ T1308] rss_huge 0 [ 2649.870763][ T1308] shmem 0 [ 2649.873765][ T1308] mapped_file 0 [ 2649.877443][ T1308] dirty 0 [ 2649.880421][ T1308] writeback 0 [ 2649.883975][ T1308] workingset_refault_anon 43055 [ 2649.890095][ T1308] workingset_refault_file 2 [ 2649.904667][ T1308] swap 200704 [ 2649.908048][ T1308] swapcached 16384 [ 2649.911811][ T1308] pgpgin 228523 [ 2649.924880][ T1308] pgpgout 228518 [ 2649.928513][ T1308] pgfault 510041 [ 2649.932107][ T1308] pgmajfault 42049 [ 2649.941394][ T1308] inactive_anon 0 [ 2649.945681][ T1308] active_anon 20480 [ 2649.949814][ T1308] inactive_file 0 [ 2649.953576][ T1308] active_file 0 [ 2649.982785][ T1308] unevictable 0 [ 2649.986485][ T1308] hierarchical_memory_limit 314572800 [ 2649.992006][ T1308] hierarchical_memsw_limit 9223372036854771712 [ 2650.004949][ T1308] total_cache 0 [ 2650.008484][ T1308] total_rss 16384 [ 2650.012175][ T1308] total_rss_huge 0 [ 2650.038825][ T1308] total_shmem 0 [ 2650.047120][ T1308] total_mapped_file 0 [ 2650.051274][ T1308] total_dirty 0 [ 2650.057084][ T1308] total_writeback 0 [ 2650.060979][ T1308] total_workingset_refault_anon 43055 [ 2650.069659][ T1308] total_workingset_refault_file 2 [ 2650.075605][ T1308] total_swap 200704 [ 2650.079472][ T1308] total_swapcached 16384 [ 2650.083744][ T1308] total_pgpgin 228523 [ 2650.088608][ T1308] total_pgpgout 228518 [ 2650.092868][ T1308] total_pgfault 510041 [ 2650.098027][ T1308] total_pgmajfault 42049 [ 2650.102932][ T1308] total_inactive_anon 0 [ 2650.108352][ T1308] total_active_anon 20480 [ 2650.112850][ T1308] total_inactive_file 0 [ 2650.118394][ T1308] total_active_file 0 [ 2650.122560][ T1308] total_unevictable 0 [ 2650.127326][ T1308] anon_cost 0 [ 2650.136148][ T1308] file_cost 0 [ 2650.139643][ T1308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1308,uid=0 [ 2650.165328][ T1308] Memory cgroup out of memory: Killed process 1308 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2650.731731][ T1311] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2650.742786][ T1311] CPU: 0 PID: 1311 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2650.753185][ T1311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2650.763298][ T1311] Call Trace: [ 2650.766626][ T1311] [ 2650.769619][ T1311] dump_stack_lvl+0x1e7/0x2e0 [ 2650.774360][ T1311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2650.779625][ T1311] ? __pfx__printk+0x10/0x10 [ 2650.784260][ T1311] ? ___ratelimit+0x4c4/0x670 [ 2650.789006][ T1311] ? __pfx____ratelimit+0x10/0x10 [ 2650.794103][ T1311] dump_header+0xda/0x6a0 [ 2650.798500][ T1311] oom_kill_process+0x3a7/0x930 [ 2650.803428][ T1311] out_of_memory+0xf67/0x1320 [ 2650.808342][ T1311] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2650.814035][ T1311] ? __pfx___mutex_lock+0x10/0x10 [ 2650.819128][ T1311] ? __pfx_out_of_memory+0x10/0x10 [ 2650.824313][ T1311] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2650.829946][ T1311] ? __pfx_lock_release+0x10/0x10 [ 2650.835045][ T1311] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2650.841184][ T1311] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2650.846443][ T1311] ? mem_cgroup_iter+0x422/0x560 [ 2650.851448][ T1311] try_charge_memcg+0xda2/0x18a0 [ 2650.856479][ T1311] ? __pfx_try_charge_memcg+0x10/0x10 [ 2650.862264][ T1311] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2650.868148][ T1311] ? __pfx_lock_release+0x10/0x10 [ 2650.873244][ T1311] ? memcg_account_kmem+0x1e7/0x210 [ 2650.878523][ T1311] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2650.884413][ T1311] __memcg_kmem_charge_page+0xe1/0x250 [ 2650.889940][ T1311] memcg_charge_kernel_stack+0x210/0x550 [ 2650.895659][ T1311] dup_task_struct+0x15d/0x7d0 [ 2650.900584][ T1311] copy_process+0x5d5/0x3fc0 [ 2650.905251][ T1311] ? __might_fault+0xa9/0x120 [ 2650.909994][ T1311] ? __pfx_lock_release+0x10/0x10 [ 2650.915096][ T1311] ? __lock_acquire+0x1345/0x1fd0 [ 2650.920187][ T1311] ? __pfx_copy_process+0x10/0x10 [ 2650.925267][ T1311] ? __might_fault+0xc5/0x120 [ 2650.930022][ T1311] ? __asan_memset+0x23/0x50 [ 2650.934690][ T1311] kernel_clone+0x21d/0x8d0 [ 2650.939254][ T1311] ? __pfx_kernel_clone+0x10/0x10 [ 2650.944535][ T1311] ? __pfx_lock_release+0x10/0x10 [ 2650.949720][ T1311] __se_sys_clone3+0x2cb/0x350 [ 2650.954541][ T1311] ? __might_fault+0xa9/0x120 [ 2650.959370][ T1311] ? __pfx___se_sys_clone3+0x10/0x10 [ 2650.964716][ T1311] ? rcu_is_watching+0x15/0xb0 [ 2650.969821][ T1311] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2650.975881][ T1311] ? exc_page_fault+0x587/0x870 [ 2650.980794][ T1311] ? do_syscall_64+0xb4/0x240 [ 2650.985530][ T1311] do_syscall_64+0xf9/0x240 [ 2650.990094][ T1311] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2650.996220][ T1311] RIP: 0033:0x7f0f5b4a9b99 [ 2651.000681][ T1311] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2651.020349][ T1311] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2651.028834][ T1311] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2651.036877][ T1311] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2651.044905][ T1311] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2651.052937][ T1311] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2651.060972][ T1311] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2651.069040][ T1311] [ 2651.111903][ T1311] memory: usage 307200kB, limit 307200kB, failcnt 138969 [ 2651.121483][ T1311] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2651.133281][ T1311] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2651.143512][ T1311] Memory cgroup stats for /syz0: [ 2651.143678][ T1311] cache 0 [ 2651.155517][ T1311] rss 0 [ 2651.158386][ T1311] rss_huge 0 [ 2651.161914][ T1311] shmem 0 [ 2651.174449][ T1311] mapped_file 0 [ 2651.178011][ T1311] dirty 0 [ 2651.180995][ T1311] writeback 0 [ 2651.185137][ T1311] workingset_refault_anon 43226 [ 2651.190430][ T1311] workingset_refault_file 2 [ 2651.195350][ T1311] swap 221184 [ 2651.198672][ T1311] swapcached 0 [ 2651.207868][ T1311] pgpgin 228709 [ 2651.211482][ T1311] pgpgout 228709 [ 2651.215585][ T1311] pgfault 510316 [ 2651.219274][ T1311] pgmajfault 42218 [ 2651.223046][ T1311] inactive_anon 0 [ 2651.233959][ T1311] active_anon 0 [ 2651.237620][ T1311] inactive_file 0 [ 2651.241287][ T1311] active_file 0 [ 2651.250038][ T1311] unevictable 0 [ 2651.253800][ T1311] hierarchical_memory_limit 314572800 [ 2651.260070][ T1311] hierarchical_memsw_limit 9223372036854771712 [ 2651.272478][ T1311] total_cache 0 [ 2651.276380][ T1311] total_rss 0 [ 2651.279715][ T1311] total_rss_huge 0 [ 2651.283476][ T1311] total_shmem 0 [ 2651.293773][ T1311] total_mapped_file 0 [ 2651.298548][ T1311] total_dirty 0 [ 2651.302063][ T1311] total_writeback 0 [ 2651.311483][ T1311] total_workingset_refault_anon 43226 [ 2651.317602][ T1311] total_workingset_refault_file 2 [ 2651.322676][ T1311] total_swap 221184 [ 2651.333052][ T1311] total_swapcached 0 [ 2651.337698][ T1311] total_pgpgin 228709 [ 2651.342067][ T1311] total_pgpgout 228709 [ 2651.352799][ T1311] total_pgfault 510316 [ 2651.357177][ T1311] total_pgmajfault 42218 [ 2651.361461][ T1311] total_inactive_anon 0 [ 2651.369429][ T1311] total_active_anon 0 [ 2651.376191][ T1311] total_inactive_file 0 [ 2651.380504][ T1311] total_active_file 0 [ 2651.384792][ T1311] total_unevictable 0 [ 2651.393074][ T1311] anon_cost 0 [ 2651.396818][ T1311] file_cost 0 [ 2651.400147][ T1311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1311,uid=0 [ 2651.422305][ T1311] Memory cgroup out of memory: Killed process 1311 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2652.243098][ T1312] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2652.256070][ T1312] CPU: 0 PID: 1312 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2652.266453][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2652.276528][ T1312] Call Trace: [ 2652.279822][ T1312] [ 2652.282761][ T1312] dump_stack_lvl+0x1e7/0x2e0 [ 2652.287464][ T1312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2652.292681][ T1312] ? __pfx__printk+0x10/0x10 [ 2652.297280][ T1312] ? ___ratelimit+0x4c4/0x670 [ 2652.301982][ T1312] ? __pfx____ratelimit+0x10/0x10 [ 2652.307074][ T1312] dump_header+0xda/0x6a0 [ 2652.311430][ T1312] oom_kill_process+0x3a7/0x930 [ 2652.316419][ T1312] out_of_memory+0xf67/0x1320 [ 2652.321196][ T1312] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2652.326871][ T1312] ? __pfx___mutex_lock+0x10/0x10 [ 2652.331920][ T1312] ? __pfx_out_of_memory+0x10/0x10 [ 2652.337063][ T1312] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2652.342629][ T1312] ? __pfx_lock_release+0x10/0x10 [ 2652.347675][ T1312] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2652.353853][ T1312] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2652.359073][ T1312] ? mem_cgroup_iter+0x422/0x560 [ 2652.364035][ T1312] try_charge_memcg+0xda2/0x18a0 [ 2652.369021][ T1312] ? __pfx_try_charge_memcg+0x10/0x10 [ 2652.374422][ T1312] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2652.380159][ T1312] ? __pfx_lock_release+0x10/0x10 [ 2652.385216][ T1312] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2652.391225][ T1312] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2652.396960][ T1312] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2652.402785][ T1312] obj_cgroup_charge+0x389/0x630 [ 2652.407756][ T1312] ? obj_cgroup_charge+0x121/0x630 [ 2652.412880][ T1312] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2652.418356][ T1312] ? kmalloc_trace+0x4e/0x360 [ 2652.423054][ T1312] ? __pfx___might_resched+0x10/0x10 [ 2652.428378][ T1312] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2652.434209][ T1312] ? copy_semundo+0xb5/0x240 [ 2652.438815][ T1312] kmalloc_trace+0x216/0x360 [ 2652.443427][ T1312] ? __asan_memcpy+0x40/0x70 [ 2652.448048][ T1312] copy_semundo+0xb5/0x240 [ 2652.452490][ T1312] copy_process+0x1bc3/0x3fc0 [ 2652.457197][ T1312] ? copy_process+0x9c3/0x3fc0 [ 2652.461981][ T1312] ? __pfx_copy_process+0x10/0x10 [ 2652.467019][ T1312] ? __might_fault+0xc5/0x120 [ 2652.471727][ T1312] ? __asan_memset+0x23/0x50 [ 2652.476356][ T1312] kernel_clone+0x21d/0x8d0 [ 2652.480969][ T1312] ? __pfx_kernel_clone+0x10/0x10 [ 2652.486025][ T1312] __se_sys_clone3+0x2cb/0x350 [ 2652.490806][ T1312] ? __pfx___se_sys_clone3+0x10/0x10 [ 2652.496128][ T1312] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2652.502138][ T1312] ? exc_page_fault+0x587/0x870 [ 2652.507004][ T1312] ? do_syscall_64+0xb4/0x240 [ 2652.511730][ T1312] do_syscall_64+0xf9/0x240 [ 2652.516254][ T1312] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2652.522164][ T1312] RIP: 0033:0x7f0f5b4a9b99 [ 2652.526597][ T1312] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2652.546219][ T1312] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2652.554678][ T1312] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2652.562665][ T1312] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2652.570652][ T1312] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2652.578636][ T1312] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2652.586622][ T1312] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2652.594638][ T1312] [ 2652.605206][ T1312] memory: usage 307200kB, limit 307200kB, failcnt 139646 [ 2652.612683][ T1312] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2652.621894][ T1312] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2652.640429][ T1312] Memory cgroup stats for /syz0: [ 2652.640609][ T1312] cache 0 [ 2652.648795][ T1312] rss 12288 [ 2652.652034][ T1312] rss_huge 0 [ 2652.661958][ T1312] shmem 0 [ 2652.668287][ T1312] mapped_file 0 [ 2652.671838][ T1312] dirty 0 [ 2652.676002][ T1312] writeback 0 [ 2652.679336][ T1312] workingset_refault_anon 43447 [ 2652.684205][ T1312] workingset_refault_file 2 [ 2652.690121][ T1312] swap 208896 [ 2652.693455][ T1312] swapcached 12288 [ 2652.697865][ T1312] pgpgin 228942 [ 2652.701364][ T1312] pgpgout 228939 [ 2652.706549][ T1312] pgfault 510674 [ 2652.710131][ T1312] pgmajfault 42430 [ 2652.713862][ T1312] inactive_anon 0 [ 2652.722935][ T1312] active_anon 12288 [ 2652.727185][ T1312] inactive_file 0 [ 2652.730850][ T1312] active_file 0 [ 2652.734411][ T1312] unevictable 0 [ 2652.738224][ T1312] hierarchical_memory_limit 314572800 [ 2652.743743][ T1312] hierarchical_memsw_limit 9223372036854771712 [ 2652.750900][ T1312] total_cache 0 [ 2652.754776][ T1312] total_rss 12288 [ 2652.758439][ T1312] total_rss_huge 0 [ 2652.762162][ T1312] total_shmem 0 [ 2652.766178][ T1312] total_mapped_file 0 [ 2652.770190][ T1312] total_dirty 0 [ 2652.773673][ T1312] total_writeback 0 [ 2652.778163][ T1312] total_workingset_refault_anon 43447 [ 2652.783657][ T1312] total_workingset_refault_file 2 [ 2652.788912][ T1312] total_swap 208896 [ 2652.793067][ T1312] total_swapcached 12288 [ 2652.797509][ T1312] total_pgpgin 228942 [ 2652.801744][ T1312] total_pgpgout 228939 [ 2652.806287][ T1312] total_pgfault 510674 [ 2652.810775][ T1312] total_pgmajfault 42430 [ 2652.815768][ T1312] total_inactive_anon 0 [ 2652.819966][ T1312] total_active_anon 12288 [ 2652.824388][ T1312] total_inactive_file 0 [ 2652.829168][ T1312] total_active_file 0 [ 2652.833199][ T1312] total_unevictable 0 [ 2652.837865][ T1312] anon_cost 0 [ 2652.841315][ T1312] file_cost 0 12:19:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2652.853547][ T1312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1312,uid=0 [ 2652.869720][ T1312] Memory cgroup out of memory: Killed process 1312 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2653.247758][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2653.254244][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.521041][ T1315] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2653.534489][ T1315] CPU: 1 PID: 1315 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2653.544912][ T1315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2653.555023][ T1315] Call Trace: [ 2653.558358][ T1315] [ 2653.561349][ T1315] dump_stack_lvl+0x1e7/0x2e0 [ 2653.566093][ T1315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2653.571361][ T1315] ? __pfx__printk+0x10/0x10 [ 2653.576267][ T1315] ? ___ratelimit+0x4c4/0x670 [ 2653.581112][ T1315] ? __pfx____ratelimit+0x10/0x10 [ 2653.586224][ T1315] dump_header+0xda/0x6a0 [ 2653.590636][ T1315] oom_kill_process+0x3a7/0x930 [ 2653.595560][ T1315] out_of_memory+0xf67/0x1320 [ 2653.600306][ T1315] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2653.605996][ T1315] ? __pfx___mutex_lock+0x10/0x10 [ 2653.611084][ T1315] ? __pfx_out_of_memory+0x10/0x10 [ 2653.616536][ T1315] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2653.622153][ T1315] ? __pfx_lock_release+0x10/0x10 [ 2653.627245][ T1315] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2653.633398][ T1315] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2653.638660][ T1315] ? mem_cgroup_iter+0x422/0x560 [ 2653.643670][ T1315] try_charge_memcg+0xda2/0x18a0 [ 2653.648686][ T1315] ? __pfx_try_charge_memcg+0x10/0x10 [ 2653.654091][ T1315] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2653.659832][ T1315] ? __pfx_lock_release+0x10/0x10 [ 2653.664882][ T1315] ? memcg_account_kmem+0x1e7/0x210 [ 2653.670105][ T1315] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2653.675927][ T1315] __memcg_kmem_charge_page+0xe1/0x250 [ 2653.681401][ T1315] memcg_charge_kernel_stack+0x304/0x550 [ 2653.687053][ T1315] dup_task_struct+0x15d/0x7d0 [ 2653.691837][ T1315] copy_process+0x5d5/0x3fc0 [ 2653.696457][ T1315] ? __might_fault+0xa9/0x120 [ 2653.701174][ T1315] ? __pfx_lock_release+0x10/0x10 [ 2653.706247][ T1315] ? __pfx_copy_process+0x10/0x10 [ 2653.711719][ T1315] ? __might_fault+0xc5/0x120 [ 2653.716444][ T1315] ? __asan_memset+0x23/0x50 [ 2653.721156][ T1315] kernel_clone+0x21d/0x8d0 [ 2653.725679][ T1315] ? __pfx_kernel_clone+0x10/0x10 [ 2653.730734][ T1315] __se_sys_clone3+0x2cb/0x350 [ 2653.735517][ T1315] ? __pfx___se_sys_clone3+0x10/0x10 [ 2653.740843][ T1315] ? do_syscall_64+0x108/0x240 [ 2653.745631][ T1315] ? do_syscall_64+0xb4/0x240 [ 2653.750333][ T1315] do_syscall_64+0xf9/0x240 [ 2653.754859][ T1315] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2653.760771][ T1315] RIP: 0033:0x7f0f5b4a9b99 [ 2653.765199][ T1315] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2653.784903][ T1315] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2653.793338][ T1315] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2653.801412][ T1315] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2653.809397][ T1315] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2653.817379][ T1315] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2653.825362][ T1315] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2653.833360][ T1315] [ 2653.860614][ T1315] memory: usage 307200kB, limit 307200kB, failcnt 140118 [ 2653.871056][ T1315] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2653.879956][ T1315] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2653.889746][ T1315] Memory cgroup stats for /syz0: [ 2653.889913][ T1315] cache 0 [ 2653.901118][ T1315] rss 12288 [ 2653.905050][ T1315] rss_huge 0 [ 2653.908488][ T1315] shmem 0 [ 2653.911749][ T1315] mapped_file 0 [ 2653.916429][ T1315] dirty 0 [ 2653.921957][ T1315] writeback 0 [ 2653.926282][ T1315] workingset_refault_anon 43628 [ 2653.931380][ T1315] workingset_refault_file 2 [ 2653.938450][ T1315] swap 208896 [ 2653.942473][ T1315] swapcached 12288 [ 2653.947263][ T1315] pgpgin 229134 [ 2653.950909][ T1315] pgpgout 229131 [ 2653.955574][ T1315] pgfault 510955 [ 2653.959314][ T1315] pgmajfault 42594 [ 2653.963259][ T1315] inactive_anon 12288 [ 2653.968720][ T1315] active_anon 0 [ 2653.972422][ T1315] inactive_file 0 [ 2653.979302][ T1315] active_file 0 [ 2653.982983][ T1315] unevictable 0 [ 2653.993380][ T1315] hierarchical_memory_limit 314572800 [ 2654.000388][ T1315] hierarchical_memsw_limit 9223372036854771712 [ 2654.013776][ T1315] total_cache 0 [ 2654.018436][ T1315] total_rss 12288 [ 2654.025547][ T1315] total_rss_huge 0 [ 2654.039033][ T1315] total_shmem 0 [ 2654.042872][ T1315] total_mapped_file 0 [ 2654.059357][ T1315] total_dirty 0 [ 2654.063067][ T1315] total_writeback 0 [ 2654.070956][ T1315] total_workingset_refault_anon 43628 [ 2654.077455][ T1315] total_workingset_refault_file 2 [ 2654.082643][ T1315] total_swap 208896 [ 2654.087503][ T1315] total_swapcached 12288 [ 2654.091893][ T1315] total_pgpgin 229134 [ 2654.101991][ T1315] total_pgpgout 229131 [ 2654.106902][ T1315] total_pgfault 510955 [ 2654.112314][ T1315] total_pgmajfault 42594 [ 2654.120706][ T1315] total_inactive_anon 12288 [ 2654.127314][ T1315] total_active_anon 0 [ 2654.131654][ T1315] total_inactive_file 0 [ 2654.137302][ T1315] total_active_file 0 [ 2654.141455][ T1315] total_unevictable 0 [ 2654.146394][ T1315] anon_cost 0 [ 2654.149829][ T1315] file_cost 0 [ 2654.153256][ T1315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1315,uid=0 12:19:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2654.174192][ T1315] Memory cgroup out of memory: Killed process 1315 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2654.457848][ T1316] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2654.469980][ T1316] CPU: 1 PID: 1316 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2654.480375][ T1316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2654.490487][ T1316] Call Trace: [ 2654.493819][ T1316] [ 2654.496800][ T1316] dump_stack_lvl+0x1e7/0x2e0 [ 2654.501546][ T1316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2654.506809][ T1316] ? __pfx__printk+0x10/0x10 [ 2654.511626][ T1316] ? ___ratelimit+0x4c4/0x670 [ 2654.516379][ T1316] ? __pfx____ratelimit+0x10/0x10 [ 2654.521475][ T1316] dump_header+0xda/0x6a0 [ 2654.525876][ T1316] oom_kill_process+0x3a7/0x930 [ 2654.530789][ T1316] out_of_memory+0xf67/0x1320 [ 2654.535527][ T1316] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2654.541230][ T1316] ? __pfx___mutex_lock+0x10/0x10 [ 2654.546321][ T1316] ? __pfx_out_of_memory+0x10/0x10 [ 2654.551529][ T1316] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2654.557142][ T1316] ? __pfx_lock_release+0x10/0x10 [ 2654.562239][ T1316] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2654.568377][ T1316] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2654.573645][ T1316] ? mem_cgroup_iter+0x422/0x560 [ 2654.578648][ T1316] try_charge_memcg+0xda2/0x18a0 [ 2654.583615][ T1316] ? mark_lock+0x9a/0x350 [ 2654.587992][ T1316] ? __pfx_try_charge_memcg+0x10/0x10 [ 2654.593517][ T1316] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2654.599688][ T1316] charge_memcg+0xa2/0x160 [ 2654.604117][ T1316] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2654.610202][ T1316] __read_swap_cache_async+0x480/0x8b0 [ 2654.615671][ T1316] ? mark_lock+0x9a/0x350 [ 2654.620018][ T1316] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2654.626021][ T1316] swap_cluster_readahead+0x67c/0x810 [ 2654.631416][ T1316] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2654.637344][ T1316] ? __pfx_lock_release+0x10/0x10 [ 2654.642387][ T1316] ? xas_descend+0x37e/0x470 [ 2654.646993][ T1316] swapin_readahead+0x1ea/0x1070 [ 2654.651940][ T1316] ? filemap_get_entry+0x127/0x4e0 [ 2654.657106][ T1316] ? __pfx_swapin_readahead+0x10/0x10 [ 2654.662602][ T1316] ? __filemap_get_folio+0x935/0xbc0 [ 2654.667936][ T1316] ? swap_cache_get_folio+0x9f/0x570 [ 2654.673267][ T1316] do_swap_page+0x791/0x3f40 [ 2654.677892][ T1316] ? rcu_is_watching+0x15/0xb0 [ 2654.682690][ T1316] ? do_swap_page+0x154/0x3f40 [ 2654.687467][ T1316] ? __pfx_do_swap_page+0x10/0x10 [ 2654.692504][ T1316] ? pte_offset_map_nolock+0x137/0x1f0 [ 2654.697989][ T1316] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2654.703850][ T1316] __handle_mm_fault+0x15e8/0x72d0 [ 2654.709024][ T1316] ? reacquire_held_locks+0x3eb/0x690 [ 2654.714416][ T1316] ? __pfx___handle_mm_fault+0x10/0x10 [ 2654.720163][ T1316] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2654.725915][ T1316] ? mtree_range_walk+0x6fd/0x8e0 [ 2654.730962][ T1316] ? lock_vma_under_rcu+0x18a/0x730 [ 2654.736190][ T1316] ? __pfx_lock_release+0x10/0x10 [ 2654.741238][ T1316] ? lock_vma_under_rcu+0x2f9/0x730 [ 2654.746475][ T1316] ? lock_vma_under_rcu+0x18a/0x730 [ 2654.751698][ T1316] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2654.757289][ T1316] handle_mm_fault+0x3c1/0x8a0 [ 2654.762175][ T1316] exc_page_fault+0x456/0x870 [ 2654.766881][ T1316] asm_exc_page_fault+0x26/0x30 [ 2654.771748][ T1316] RIP: 0033:0x7f0f5b4373c5 [ 2654.776186][ T1316] Code: 40 42 0f 00 4c 89 ce ba 81 00 00 00 bf ca 00 00 00 41 c7 44 24 0c 01 00 00 00 4c 89 0c 24 e8 d2 69 04 00 80 3d ed e2 c9 00 00 <4c> 8b 0c 24 0f 84 71 ff ff ff 4c 8d ac 24 60 01 00 00 4c 89 4c 24 [ 2654.795980][ T1316] RSP: 002b:00007ffcec9e1110 EFLAGS: 00010202 [ 2654.802062][ T1316] RAX: 0000000000000000 RBX: 00007ffcec9e1270 RCX: 00007f0f5b47dda9 [ 2654.810043][ T1316] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f5b5abf8c [ 2654.818112][ T1316] RBP: 0000000000000000 R08: 00007f0f5b5abf8c R09: 00007f0f5b5abf8c [ 2654.826104][ T1316] R10: 00007f0f5b000060 R11: 0000000000000246 R12: 00007f0f5b5abf80 [ 2654.834086][ T1316] R13: 0000000000000f94 R14: 00007f0f5b5abf80 R15: 00007ffcec9e1218 [ 2654.842088][ T1316] [ 2654.872290][ T1316] memory: usage 307200kB, limit 307200kB, failcnt 140297 [ 2654.885781][ T1316] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 2654.898435][ T1316] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2654.915261][ T1316] Memory cgroup stats for /syz0: [ 2654.915428][ T1316] cache 0 [ 2654.923694][ T1316] rss 12288 [ 2654.935036][ T1316] rss_huge 0 [ 2654.938316][ T1316] shmem 0 [ 2654.941309][ T1316] mapped_file 0 [ 2654.955876][ T1316] dirty 0 [ 2654.964828][ T1316] writeback 0 [ 2654.974933][ T1316] workingset_refault_anon 43686 [ 2654.980085][ T1316] workingset_refault_file 2 [ 2654.991992][ T1316] swap 241664 [ 2654.995867][ T1316] swapcached 8192 [ 2654.999707][ T1316] pgpgin 229201 [ 2655.003325][ T1316] pgpgout 229198 [ 2655.008032][ T1316] pgfault 511054 [ 2655.014783][ T1316] pgmajfault 42646 [ 2655.021665][ T1316] inactive_anon 0 [ 2655.028858][ T1316] active_anon 12288 [ 2655.032850][ T1316] inactive_file 0 [ 2655.037571][ T1316] active_file 0 [ 2655.041181][ T1316] unevictable 0 [ 2655.047829][ T1316] hierarchical_memory_limit 314572800 [ 2655.053448][ T1316] hierarchical_memsw_limit 9223372036854771712 [ 2655.064534][ T1316] total_cache 0 [ 2655.068261][ T1316] total_rss 12288 [ 2655.072047][ T1316] total_rss_huge 0 [ 2655.083829][ T1316] total_shmem 0 [ 2655.088282][ T1316] total_mapped_file 0 [ 2655.092429][ T1316] total_dirty 0 [ 2655.102735][ T1316] total_writeback 0 [ 2655.107188][ T1316] total_workingset_refault_anon 43686 [ 2655.112804][ T1316] total_workingset_refault_file 2 [ 2655.124466][ T1316] total_swap 241664 [ 2655.128492][ T1316] total_swapcached 8192 [ 2655.133521][ T1316] total_pgpgin 229201 [ 2655.143234][ T1316] total_pgpgout 229198 [ 2655.148330][ T1316] total_pgfault 511054 [ 2655.153727][ T1316] total_pgmajfault 42646 [ 2655.162934][ T1316] total_inactive_anon 0 [ 2655.170272][ T1316] total_active_anon 12288 [ 2655.180461][ T1316] total_inactive_file 0 [ 2655.185721][ T1316] total_active_file 0 [ 2655.191332][ T1316] total_unevictable 0 [ 2655.201151][ T1316] anon_cost 0 [ 2655.206528][ T1316] file_cost 0 [ 2655.210010][ T1316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1316,uid=0 12:19:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2655.232372][ T1316] Memory cgroup out of memory: Killed process 1316 (syz-executor.0) total-vm:54376kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 12:19:24 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2655.914015][ T1317] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2655.937308][ T1317] CPU: 1 PID: 1317 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2655.947738][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2655.957948][ T1317] Call Trace: [ 2655.961284][ T1317] [ 2655.964275][ T1317] dump_stack_lvl+0x1e7/0x2e0 [ 2655.969029][ T1317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2655.974298][ T1317] ? __pfx__printk+0x10/0x10 [ 2655.978943][ T1317] ? ___ratelimit+0x4c4/0x670 [ 2655.983692][ T1317] ? __pfx____ratelimit+0x10/0x10 [ 2655.988802][ T1317] dump_header+0xda/0x6a0 [ 2655.993379][ T1317] oom_kill_process+0x3a7/0x930 [ 2655.998304][ T1317] out_of_memory+0xf67/0x1320 [ 2656.003044][ T1317] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2656.008729][ T1317] ? __pfx___mutex_lock+0x10/0x10 [ 2656.013802][ T1317] ? __pfx_out_of_memory+0x10/0x10 [ 2656.018986][ T1317] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2656.024675][ T1317] ? __pfx_lock_release+0x10/0x10 [ 2656.029802][ T1317] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2656.035931][ T1317] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2656.041197][ T1317] ? mem_cgroup_iter+0x422/0x560 [ 2656.046259][ T1317] try_charge_memcg+0xda2/0x18a0 [ 2656.051383][ T1317] ? __pfx_try_charge_memcg+0x10/0x10 [ 2656.056806][ T1317] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2656.062571][ T1317] ? __pfx_lock_release+0x10/0x10 [ 2656.067658][ T1317] ? memcg_account_kmem+0x1e7/0x210 [ 2656.072940][ T1317] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2656.078810][ T1317] __memcg_kmem_charge_page+0xe1/0x250 [ 2656.084323][ T1317] memcg_charge_kernel_stack+0x210/0x550 [ 2656.090105][ T1317] dup_task_struct+0x40d/0x7d0 [ 2656.095030][ T1317] copy_process+0x5d5/0x3fc0 [ 2656.099706][ T1317] ? __might_fault+0xa9/0x120 [ 2656.104450][ T1317] ? __pfx_lock_release+0x10/0x10 [ 2656.109542][ T1317] ? __pfx_copy_process+0x10/0x10 [ 2656.114628][ T1317] ? __might_fault+0xc5/0x120 [ 2656.119369][ T1317] ? __asan_memset+0x23/0x50 [ 2656.124025][ T1317] kernel_clone+0x21d/0x8d0 [ 2656.128592][ T1317] ? __pfx_kernel_clone+0x10/0x10 [ 2656.133690][ T1317] __se_sys_clone3+0x2cb/0x350 [ 2656.138521][ T1317] ? __pfx___se_sys_clone3+0x10/0x10 [ 2656.143951][ T1317] ? rcu_is_watching+0x15/0xb0 [ 2656.148883][ T1317] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2656.155039][ T1317] ? exc_page_fault+0x587/0x870 [ 2656.159958][ T1317] ? do_syscall_64+0xb4/0x240 [ 2656.164706][ T1317] do_syscall_64+0xf9/0x240 [ 2656.169289][ T1317] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2656.175248][ T1317] RIP: 0033:0x7f0f5b4a9b99 [ 2656.179719][ T1317] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2656.199647][ T1317] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2656.208131][ T1317] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2656.216772][ T1317] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2656.224800][ T1317] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2656.232829][ T1317] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2656.240853][ T1317] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2656.248897][ T1317] [ 2656.254959][ T1317] memory: usage 307180kB, limit 307200kB, failcnt 140815 [ 2656.273008][ T1317] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 2656.281507][ T1317] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2656.290489][ T1317] Memory cgroup stats for /syz0: [ 2656.290654][ T1317] cache 0 [ 2656.299398][ T1317] rss 0 [ 2656.302300][ T1317] rss_huge 0 [ 2656.307300][ T1317] shmem 0 [ 2656.310401][ T1317] mapped_file 0 [ 2656.315430][ T1317] dirty 0 [ 2656.318431][ T1317] writeback 0 [ 2656.321790][ T1317] workingset_refault_anon 43884 [ 2656.327638][ T1317] workingset_refault_file 2 [ 2656.332189][ T1317] swap 221184 [ 2656.336210][ T1317] swapcached 0 [ 2656.339644][ T1317] pgpgin 229411 [ 2656.343754][ T1317] pgpgout 229411 [ 2656.348038][ T1317] pgfault 511371 [ 2656.351633][ T1317] pgmajfault 42838 [ 2656.356582][ T1317] inactive_anon 0 [ 2656.360274][ T1317] active_anon 0 [ 2656.363765][ T1317] inactive_file 0 [ 2656.368434][ T1317] active_file 0 [ 2656.372066][ T1317] unevictable 0 [ 2656.377519][ T1317] hierarchical_memory_limit 314572800 [ 2656.384215][ T1317] hierarchical_memsw_limit 9223372036854771712 [ 2656.391532][ T1317] total_cache 0 [ 2656.395735][ T1317] total_rss 0 [ 2656.399165][ T1317] total_rss_huge 0 [ 2656.403015][ T1317] total_shmem 0 [ 2656.407960][ T1317] total_mapped_file 0 [ 2656.413538][ T1317] total_dirty 0 [ 2656.423653][ T1317] total_writeback 0 [ 2656.428097][ T1317] total_workingset_refault_anon 43884 [ 2656.433532][ T1317] total_workingset_refault_file 2 [ 2656.444560][ T1317] total_swap 221184 [ 2656.448439][ T1317] total_swapcached 0 [ 2656.452387][ T1317] total_pgpgin 229411 [ 2656.469940][ T1317] total_pgpgout 229411 [ 2656.474090][ T1317] total_pgfault 511371 [ 2656.484377][ T1317] total_pgmajfault 42838 [ 2656.488684][ T1317] total_inactive_anon 0 [ 2656.492869][ T1317] total_active_anon 0 [ 2656.502862][ T1317] total_inactive_file 0 [ 2656.514571][ T1317] total_active_file 0 [ 2656.518630][ T1317] total_unevictable 0 [ 2656.522816][ T1317] anon_cost 0 [ 2656.529255][ T1317] file_cost 0 [ 2656.532732][ T1317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1317,uid=0 [ 2656.550863][ T1317] Memory cgroup out of memory: Killed process 1317 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2657.389663][ T1320] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2657.402660][ T1320] CPU: 0 PID: 1320 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2657.413051][ T1320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2657.423165][ T1320] Call Trace: [ 2657.426491][ T1320] [ 2657.429455][ T1320] dump_stack_lvl+0x1e7/0x2e0 [ 2657.434190][ T1320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2657.439454][ T1320] ? __pfx__printk+0x10/0x10 [ 2657.444097][ T1320] ? ___ratelimit+0x4c4/0x670 [ 2657.448846][ T1320] ? __pfx____ratelimit+0x10/0x10 [ 2657.453947][ T1320] dump_header+0xda/0x6a0 [ 2657.458347][ T1320] oom_kill_process+0x3a7/0x930 [ 2657.463262][ T1320] out_of_memory+0xf67/0x1320 [ 2657.468009][ T1320] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2657.473701][ T1320] ? __pfx___mutex_lock+0x10/0x10 [ 2657.478794][ T1320] ? __pfx_out_of_memory+0x10/0x10 [ 2657.483963][ T1320] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2657.489625][ T1320] ? __pfx_lock_release+0x10/0x10 [ 2657.494679][ T1320] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2657.500789][ T1320] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2657.506003][ T1320] ? mem_cgroup_iter+0x422/0x560 [ 2657.510962][ T1320] try_charge_memcg+0xda2/0x18a0 [ 2657.515919][ T1320] ? mark_lock+0x9a/0x350 [ 2657.520290][ T1320] ? __pfx_try_charge_memcg+0x10/0x10 [ 2657.525799][ T1320] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2657.531968][ T1320] charge_memcg+0xa2/0x160 [ 2657.536406][ T1320] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2657.542491][ T1320] __read_swap_cache_async+0x480/0x8b0 [ 2657.548005][ T1320] ? mark_lock+0x9a/0x350 [ 2657.552355][ T1320] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2657.558358][ T1320] swap_cluster_readahead+0x67c/0x810 [ 2657.563747][ T1320] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2657.569658][ T1320] ? __pfx_lock_release+0x10/0x10 [ 2657.574707][ T1320] ? xas_descend+0x37e/0x470 [ 2657.579407][ T1320] swapin_readahead+0x1ea/0x1070 [ 2657.584359][ T1320] ? filemap_get_entry+0x127/0x4e0 [ 2657.589694][ T1320] ? __pfx_swapin_readahead+0x10/0x10 [ 2657.595092][ T1320] ? __filemap_get_folio+0x935/0xbc0 [ 2657.600407][ T1320] ? swap_cache_get_folio+0x9f/0x570 [ 2657.605707][ T1320] do_swap_page+0x791/0x3f40 [ 2657.610319][ T1320] ? rcu_is_watching+0x15/0xb0 [ 2657.615113][ T1320] ? do_swap_page+0x154/0x3f40 [ 2657.619894][ T1320] ? __pfx_do_swap_page+0x10/0x10 [ 2657.625030][ T1320] ? pte_offset_map_nolock+0x137/0x1f0 [ 2657.630509][ T1320] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2657.636332][ T1320] ? __pfx_validate_chain+0x10/0x10 [ 2657.641546][ T1320] __handle_mm_fault+0x15e8/0x72d0 [ 2657.646719][ T1320] ? __pfx___handle_mm_fault+0x10/0x10 [ 2657.652203][ T1320] ? mt_find+0x226/0x850 [ 2657.656472][ T1320] ? __pfx_lock_release+0x10/0x10 [ 2657.661532][ T1320] ? mt_find+0x62d/0x850 [ 2657.665789][ T1320] ? mt_find+0x226/0x850 [ 2657.670075][ T1320] ? find_vma+0x142/0x1c0 [ 2657.674425][ T1320] ? __pfx_find_vma+0x10/0x10 [ 2657.679216][ T1320] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2657.685241][ T1320] handle_mm_fault+0x3c1/0x8a0 [ 2657.690034][ T1320] exc_page_fault+0x2ad/0x870 [ 2657.694731][ T1320] asm_exc_page_fault+0x26/0x30 [ 2657.699603][ T1320] RIP: 0010:__put_user_4+0x11/0x20 [ 2657.704729][ T1320] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 2657.724356][ T1320] RSP: 0018:ffffc900031afbd8 EFLAGS: 00050206 [ 2657.730540][ T1320] RAX: 0000000000004272 RBX: 0000000000000000 RCX: 00007f0f5c2c8990 [ 2657.738531][ T1320] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2657.746512][ T1320] RBP: ffffc900031afd10 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2657.754494][ T1320] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc900031afd78 [ 2657.762476][ T1320] R13: 00000000003d0f00 R14: ffffc900031afc40 R15: dffffc0000000000 [ 2657.770479][ T1320] kernel_clone+0x363/0x8d0 [ 2657.775022][ T1320] ? __pfx_kernel_clone+0x10/0x10 [ 2657.780082][ T1320] __se_sys_clone3+0x2cb/0x350 [ 2657.784870][ T1320] ? __pfx___se_sys_clone3+0x10/0x10 [ 2657.790197][ T1320] ? do_syscall_64+0x108/0x240 [ 2657.794978][ T1320] ? do_syscall_64+0xb4/0x240 [ 2657.799670][ T1320] do_syscall_64+0xf9/0x240 [ 2657.804192][ T1320] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2657.810102][ T1320] RIP: 0033:0x7f0f5b4a9b99 [ 2657.814532][ T1320] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2657.834158][ T1320] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2657.842624][ T1320] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2657.850698][ T1320] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2657.858680][ T1320] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2657.866666][ T1320] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2657.874649][ T1320] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2657.882660][ T1320] [ 2657.914501][ T1320] memory: usage 307200kB, limit 307200kB, failcnt 141417 [ 2657.921610][ T1320] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2657.929960][ T1320] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2657.937633][ T1320] Memory cgroup stats for /syz0: [ 2657.937797][ T1320] cache 0 [ 2657.947087][ T1320] rss 12288 [ 2657.950256][ T1320] rss_huge 0 [ 2657.953500][ T1320] shmem 0 [ 2657.956729][ T1320] mapped_file 0 [ 2657.960298][ T1320] dirty 0 [ 2657.963272][ T1320] writeback 0 [ 2657.967280][ T1320] workingset_refault_anon 44094 [ 2657.972274][ T1320] workingset_refault_file 2 [ 2657.976956][ T1320] swap 249856 [ 2657.980282][ T1320] swapcached 8192 [ 2657.983945][ T1320] pgpgin 229632 [ 2657.987577][ T1320] pgpgout 229629 [ 2657.991187][ T1320] pgfault 511709 [ 2657.999865][ T1320] pgmajfault 43043 [ 2658.003655][ T1320] inactive_anon 0 [ 2658.007532][ T1320] active_anon 12288 [ 2658.011379][ T1320] inactive_file 0 [ 2658.015466][ T1320] active_file 0 [ 2658.019007][ T1320] unevictable 0 [ 2658.022492][ T1320] hierarchical_memory_limit 314572800 [ 2658.028742][ T1320] hierarchical_memsw_limit 9223372036854771712 [ 2658.035237][ T1320] total_cache 0 [ 2658.038744][ T1320] total_rss 12288 [ 2658.042425][ T1320] total_rss_huge 0 [ 2658.046844][ T1320] total_shmem 0 [ 2658.050903][ T1320] total_mapped_file 0 [ 2658.055165][ T1320] total_dirty 0 [ 2658.059874][ T1320] total_writeback 0 [ 2658.064004][ T1320] total_workingset_refault_anon 44094 [ 2658.070857][ T1320] total_workingset_refault_file 2 [ 2658.076104][ T1320] total_swap 249856 [ 2658.080308][ T1320] total_swapcached 8192 [ 2658.085224][ T1320] total_pgpgin 229632 [ 2658.089239][ T1320] total_pgpgout 229629 [ 2658.093332][ T1320] total_pgfault 511709 [ 2658.097904][ T1320] total_pgmajfault 43043 [ 2658.102632][ T1320] total_inactive_anon 0 [ 2658.107593][ T1320] total_active_anon 12288 [ 2658.112227][ T1320] total_inactive_file 0 [ 2658.116648][ T1320] total_active_file 0 [ 2658.121182][ T1320] total_unevictable 0 [ 2658.126395][ T1320] anon_cost 0 [ 2658.129878][ T1320] file_cost 0 [ 2658.133289][ T1320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1320,uid=0 [ 2658.149521][ T1320] Memory cgroup out of memory: Killed process 1320 (syz-executor.0) total-vm:54508kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2658.786694][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2658.809093][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2658.819505][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2658.829596][ T5099] Call Trace: [ 2658.832887][ T5099] [ 2658.835831][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2658.840529][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2658.845734][ T5099] ? __pfx__printk+0x10/0x10 [ 2658.850328][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2658.855045][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2658.860116][ T5099] dump_header+0xda/0x6a0 [ 2658.864480][ T5099] oom_kill_process+0x3a7/0x930 [ 2658.869440][ T5099] out_of_memory+0xf67/0x1320 [ 2658.874140][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2658.879795][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2658.884862][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2658.890023][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2658.895627][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2658.900700][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2658.906913][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2658.912150][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2658.917113][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2658.922066][ T5099] ? mark_lock+0x9a/0x350 [ 2658.926513][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2658.931924][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2658.938100][ T5099] charge_memcg+0xa2/0x160 [ 2658.942532][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2658.948618][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2658.954086][ T5099] ? mark_lock+0x9a/0x350 [ 2658.958445][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2658.964446][ T5099] ? blk_start_plug+0x6f/0x1b0 [ 2658.969241][ T5099] swap_cluster_readahead+0x398/0x810 [ 2658.974635][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2658.981063][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2658.986125][ T5099] ? xas_descend+0x37e/0x470 [ 2658.990735][ T5099] swapin_readahead+0x1ea/0x1070 [ 2658.995683][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2659.000828][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2659.006320][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2659.011633][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2659.016946][ T5099] do_swap_page+0x791/0x3f40 [ 2659.021644][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2659.026440][ T5099] ? do_swap_page+0x154/0x3f40 [ 2659.031218][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2659.036283][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2659.041793][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2659.047650][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2659.052865][ T5099] ? __pfx_rcu_barrier_callback+0x10/0x10 [ 2659.058629][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2659.063911][ T5099] ? reacquire_held_locks+0x3eb/0x690 [ 2659.069324][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2659.074822][ T5099] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2659.080659][ T5099] ? mtree_range_walk+0x6fd/0x8e0 [ 2659.085705][ T5099] ? lock_vma_under_rcu+0x18a/0x730 [ 2659.090922][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2659.095971][ T5099] ? lock_vma_under_rcu+0x2f9/0x730 [ 2659.101203][ T5099] ? lock_vma_under_rcu+0x18a/0x730 [ 2659.106421][ T5099] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2659.112001][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2659.116790][ T5099] exc_page_fault+0x456/0x870 [ 2659.121482][ T5099] asm_exc_page_fault+0x26/0x30 [ 2659.126347][ T5099] RIP: 0033:0x7f0f5b47a780 [ 2659.130775][ T5099] Code: ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 <80> 3d 71 57 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 48 3d 00 [ 2659.150480][ T5099] RSP: 002b:00007ffcec9e1338 EFLAGS: 00010246 [ 2659.156577][ T5099] RAX: 00000000000000e1 RBX: 0000000000004273 RCX: 0000000000000000 [ 2659.164682][ T5099] RDX: 0000000040000001 RSI: 00007ffcec9e139c RDI: 00000000ffffffff [ 2659.172682][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000010 R09: 00007ffcec9e60b0 [ 2659.180671][ T5099] R10: 00007ffcec9e6080 R11: 000000000007c160 R12: 0000000000000032 [ 2659.188650][ T5099] R13: 00000000002890bb R14: 00000000002890bb R15: 0000000000000000 [ 2659.196647][ T5099] [ 2659.208820][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 141828 [ 2659.216141][ T5099] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 2659.224077][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2659.234184][ T5099] Memory cgroup stats for /syz0: [ 2659.234795][ T5099] cache 0 [ 2659.262560][ T5099] rss 12288 [ 2659.267015][ T5099] rss_huge 0 [ 2659.270902][ T5099] shmem 0 [ 2659.273985][ T5099] mapped_file 0 [ 2659.278366][ T5099] dirty 0 [ 2659.281800][ T5099] writeback 0 [ 2659.286530][ T5099] workingset_refault_anon 44158 [ 2659.307584][ T5099] workingset_refault_file 2 [ 2659.312666][ T5099] swap 249856 [ 2659.317084][ T5099] swapcached 12288 [ 2659.321609][ T5099] pgpgin 229709 [ 2659.326021][ T5099] pgpgout 229706 [ 2659.329610][ T5099] pgfault 511838 [ 2659.333185][ T5099] pgmajfault 43102 [ 2659.339167][ T5099] inactive_anon 0 [ 2659.342855][ T5099] active_anon 12288 [ 2659.347278][ T5099] inactive_file 0 [ 2659.350948][ T5099] active_file 0 [ 2659.360179][ T5099] unevictable 0 [ 2659.363780][ T5099] hierarchical_memory_limit 314572800 [ 2659.369286][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2659.381666][ T5099] total_cache 0 [ 2659.385650][ T5099] total_rss 12288 [ 2659.389408][ T5099] total_rss_huge 0 [ 2659.393147][ T5099] total_shmem 0 [ 2659.396980][ T5099] total_mapped_file 0 [ 2659.400997][ T5099] total_dirty 0 [ 2659.413173][ T5099] total_writeback 0 [ 2659.417816][ T5099] total_workingset_refault_anon 44158 [ 2659.430916][ T5099] total_workingset_refault_file 2 [ 2659.436689][ T5099] total_swap 249856 [ 2659.440522][ T5099] total_swapcached 12288 [ 2659.449204][ T5099] total_pgpgin 229709 [ 2659.453219][ T5099] total_pgpgout 229706 [ 2659.458180][ T5099] total_pgfault 511838 [ 2659.462295][ T5099] total_pgmajfault 43102 [ 2659.471440][ T5099] total_inactive_anon 0 [ 2659.476027][ T5099] total_active_anon 12288 [ 2659.480381][ T5099] total_inactive_file 0 [ 2659.489345][ T5099] total_active_file 0 [ 2659.493360][ T5099] total_unevictable 0 [ 2659.497907][ T5099] anon_cost 0 [ 2659.501212][ T5099] file_cost 0 12:19:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2659.505298][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1322,uid=0 [ 2659.524801][ T5099] Memory cgroup out of memory: Killed process 1322 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2660.173733][ T1325] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2660.204942][ T1325] CPU: 1 PID: 1325 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2660.215346][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2660.225505][ T1325] Call Trace: [ 2660.228880][ T1325] [ 2660.231822][ T1325] dump_stack_lvl+0x1e7/0x2e0 [ 2660.236528][ T1325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2660.241738][ T1325] ? __pfx__printk+0x10/0x10 [ 2660.246335][ T1325] ? ___ratelimit+0x4c4/0x670 [ 2660.251039][ T1325] ? __pfx____ratelimit+0x10/0x10 [ 2660.256089][ T1325] dump_header+0xda/0x6a0 [ 2660.260441][ T1325] oom_kill_process+0x3a7/0x930 [ 2660.265329][ T1325] out_of_memory+0xf67/0x1320 [ 2660.270048][ T1325] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2660.275702][ T1325] ? __pfx___mutex_lock+0x10/0x10 [ 2660.280749][ T1325] ? __pfx_out_of_memory+0x10/0x10 [ 2660.285889][ T1325] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2660.291463][ T1325] ? __pfx_lock_release+0x10/0x10 [ 2660.296508][ T1325] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2660.302590][ T1325] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2660.307803][ T1325] ? mem_cgroup_iter+0x422/0x560 [ 2660.312766][ T1325] try_charge_memcg+0xda2/0x18a0 [ 2660.317752][ T1325] ? __pfx_try_charge_memcg+0x10/0x10 [ 2660.323228][ T1325] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2660.328976][ T1325] ? __pfx_lock_release+0x10/0x10 [ 2660.334033][ T1325] ? memcg_account_kmem+0x1e7/0x210 [ 2660.339263][ T1325] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2660.345171][ T1325] __memcg_kmem_charge_page+0xe1/0x250 [ 2660.350643][ T1325] memcg_charge_kernel_stack+0x210/0x550 [ 2660.356297][ T1325] dup_task_struct+0x40d/0x7d0 [ 2660.361074][ T1325] copy_process+0x5d5/0x3fc0 [ 2660.365704][ T1325] ? __might_fault+0xa9/0x120 [ 2660.370405][ T1325] ? __pfx_lock_release+0x10/0x10 [ 2660.375458][ T1325] ? __pfx_copy_process+0x10/0x10 [ 2660.380496][ T1325] ? __might_fault+0xc5/0x120 [ 2660.385196][ T1325] ? __asan_memset+0x23/0x50 [ 2660.389807][ T1325] kernel_clone+0x21d/0x8d0 [ 2660.394339][ T1325] ? __pfx_kernel_clone+0x10/0x10 [ 2660.399396][ T1325] __se_sys_clone3+0x2cb/0x350 [ 2660.404175][ T1325] ? __pfx___se_sys_clone3+0x10/0x10 [ 2660.409559][ T1325] ? rcu_is_watching+0x15/0xb0 [ 2660.414361][ T1325] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2660.420389][ T1325] ? exc_page_fault+0x587/0x870 [ 2660.425362][ T1325] ? do_syscall_64+0xb4/0x240 [ 2660.430059][ T1325] do_syscall_64+0xf9/0x240 [ 2660.434583][ T1325] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2660.440490][ T1325] RIP: 0033:0x7f0f5b4a9b99 [ 2660.444918][ T1325] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2660.464544][ T1325] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2660.472990][ T1325] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2660.480983][ T1325] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2660.488990][ T1325] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2660.496974][ T1325] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2660.504958][ T1325] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2660.513127][ T1325] [ 2660.526233][ T1325] memory: usage 307200kB, limit 307200kB, failcnt 142309 [ 2660.533443][ T1325] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2660.565448][ T1325] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2660.572935][ T1325] Memory cgroup stats for /syz0: [ 2660.573094][ T1325] cache 0 [ 2660.609290][ T1325] rss 0 [ 2660.612266][ T1325] rss_huge 0 [ 2660.616200][ T1325] shmem 0 [ 2660.619217][ T1325] mapped_file 0 [ 2660.622701][ T1325] dirty 0 [ 2660.626560][ T1325] writeback 0 [ 2660.629949][ T1325] workingset_refault_anon 44327 [ 2660.636423][ T1325] workingset_refault_file 2 [ 2660.649437][ T1325] swap 221184 [ 2660.652786][ T1325] swapcached 0 [ 2660.657439][ T1325] pgpgin 229890 [ 2660.661350][ T1325] pgpgout 229890 [ 2660.676924][ T1325] pgfault 512117 [ 2660.690615][ T1325] pgmajfault 43260 [ 2660.700690][ T1325] inactive_anon 0 [ 2660.712368][ T1325] active_anon 0 [ 2660.717042][ T1325] inactive_file 0 [ 2660.720726][ T1325] active_file 0 [ 2660.724210][ T1325] unevictable 0 [ 2660.734444][ T1325] hierarchical_memory_limit 314572800 [ 2660.740039][ T1325] hierarchical_memsw_limit 9223372036854771712 [ 2660.777065][ T1325] total_cache 0 [ 2660.780612][ T1325] total_rss 0 [ 2660.783935][ T1325] total_rss_huge 0 [ 2660.797041][ T5111] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2660.802769][ T1325] total_shmem 0 [ 2660.815576][ T5111] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2660.816839][ T1325] total_mapped_file 0 [ 2660.827286][ T1325] total_dirty 0 [ 2660.828077][ T5111] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2660.830958][ T1325] total_writeback 0 [ 2660.842851][ T1325] total_workingset_refault_anon 44327 [ 2660.849032][ T1325] total_workingset_refault_file 2 [ 2660.855120][ T5111] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2660.862242][ T1325] total_swap 221184 [ 2660.866981][ T1325] total_swapcached 0 [ 2660.871277][ T5111] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2660.874936][ T1325] total_pgpgin 229890 [ 2660.883943][ T5111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2660.884274][ T1325] total_pgpgout 229890 [ 2660.957786][ T1325] total_pgfault 512117 [ 2660.962061][ T1325] total_pgmajfault 43260 [ 2660.972535][ T1325] total_inactive_anon 0 [ 2660.977184][ T1325] total_active_anon 0 [ 2660.981358][ T1325] total_inactive_file 0 [ 2660.986812][ T1325] total_active_file 0 [ 2661.002025][ T1325] total_unevictable 0 [ 2661.007513][ T1325] anon_cost 0 [ 2661.010982][ T1325] file_cost 0 [ 2661.014452][ T1325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1325,uid=0 [ 2661.047457][ T1325] Memory cgroup out of memory: Killed process 1325 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2661.668663][ T1331] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2661.687961][ T1331] CPU: 0 PID: 1331 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2661.698411][ T1331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2661.708522][ T1331] Call Trace: [ 2661.711849][ T1331] [ 2661.714828][ T1331] dump_stack_lvl+0x1e7/0x2e0 [ 2661.719590][ T1331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2661.724841][ T1331] ? __pfx__printk+0x10/0x10 [ 2661.729481][ T1331] ? ___ratelimit+0x4c4/0x670 [ 2661.734229][ T1331] ? __pfx____ratelimit+0x10/0x10 [ 2661.739340][ T1331] dump_header+0xda/0x6a0 [ 2661.743749][ T1331] oom_kill_process+0x3a7/0x930 [ 2661.748672][ T1331] out_of_memory+0xf67/0x1320 [ 2661.753422][ T1331] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2661.759115][ T1331] ? __pfx___mutex_lock+0x10/0x10 [ 2661.764205][ T1331] ? __pfx_out_of_memory+0x10/0x10 [ 2661.769386][ T1331] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2661.775015][ T1331] ? __pfx_lock_release+0x10/0x10 [ 2661.780197][ T1331] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2661.786324][ T1331] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2661.791578][ T1331] ? mem_cgroup_iter+0x422/0x560 [ 2661.796579][ T1331] try_charge_memcg+0xda2/0x18a0 [ 2661.801673][ T1331] ? __pfx_try_charge_memcg+0x10/0x10 [ 2661.807076][ T1331] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2661.812818][ T1331] ? __pfx_lock_release+0x10/0x10 [ 2661.817898][ T1331] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2661.823917][ T1331] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2661.829664][ T1331] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2661.835492][ T1331] obj_cgroup_charge+0x389/0x630 [ 2661.840445][ T1331] ? obj_cgroup_charge+0x121/0x630 [ 2661.845570][ T1331] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2661.851038][ T1331] ? kmalloc_trace+0x4e/0x360 [ 2661.855740][ T1331] ? __pfx___might_resched+0x10/0x10 [ 2661.861045][ T1331] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2661.866877][ T1331] ? copy_semundo+0xb5/0x240 [ 2661.871479][ T1331] kmalloc_trace+0x216/0x360 [ 2661.876085][ T1331] ? __asan_memcpy+0x40/0x70 [ 2661.880704][ T1331] copy_semundo+0xb5/0x240 [ 2661.885144][ T1331] copy_process+0x1bc3/0x3fc0 [ 2661.889861][ T1331] ? copy_process+0x9c3/0x3fc0 [ 2661.894651][ T1331] ? __pfx_copy_process+0x10/0x10 [ 2661.899700][ T1331] ? __might_fault+0xc5/0x120 [ 2661.904837][ T1331] ? __asan_memset+0x23/0x50 [ 2661.909452][ T1331] kernel_clone+0x21d/0x8d0 [ 2661.913975][ T1331] ? __pfx_kernel_clone+0x10/0x10 [ 2661.919031][ T1331] __se_sys_clone3+0x2cb/0x350 [ 2661.923814][ T1331] ? __pfx___se_sys_clone3+0x10/0x10 [ 2661.929147][ T1331] ? do_syscall_64+0x108/0x240 [ 2661.933936][ T1331] ? do_syscall_64+0xb4/0x240 [ 2661.938632][ T1331] do_syscall_64+0xf9/0x240 [ 2661.943151][ T1331] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2661.949081][ T1331] RIP: 0033:0x7f0f5b4a9b99 [ 2661.953506][ T1331] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2661.973138][ T1331] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2661.981592][ T1331] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2661.989600][ T1331] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2661.997605][ T1331] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2662.005613][ T1331] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 12:19:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2662.013599][ T1331] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2662.021639][ T1331] [ 2662.026769][ T1331] memory: usage 307200kB, limit 307200kB, failcnt 142773 [ 2662.033865][ T1331] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2662.051036][ T1331] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2662.058700][ T1331] Memory cgroup stats for /syz0: [ 2662.058879][ T1331] cache 0 [ 2662.072885][ T1331] rss 8192 [ 2662.076160][ T1331] rss_huge 0 [ 2662.079396][ T1331] shmem 0 [ 2662.082358][ T1331] mapped_file 0 [ 2662.091958][ T1331] dirty 0 [ 2662.095119][ T1331] writeback 0 [ 2662.098444][ T1331] workingset_refault_anon 44487 [ 2662.103333][ T1331] workingset_refault_file 2 [ 2662.120424][ T1331] swap 212992 [ 2662.124061][ T1331] swapcached 4096 [ 2662.128919][ T1331] pgpgin 230062 [ 2662.132528][ T1331] pgpgout 230060 [ 2662.137785][ T1331] pgfault 512380 [ 2662.141452][ T1331] pgmajfault 43415 [ 2662.148553][ T1331] inactive_anon 0 [ 2662.152580][ T1331] active_anon 8192 [ 2662.156895][ T1331] inactive_file 0 [ 2662.160563][ T1331] active_file 0 [ 2662.164056][ T1331] unevictable 0 [ 2662.168387][ T1331] hierarchical_memory_limit 314572800 [ 2662.173886][ T1331] hierarchical_memsw_limit 9223372036854771712 [ 2662.181845][ T1331] total_cache 0 [ 2662.189590][ T1331] total_rss 8192 [ 2662.193312][ T1331] total_rss_huge 0 [ 2662.197827][ T1331] total_shmem 0 [ 2662.201464][ T1331] total_mapped_file 0 [ 2662.206795][ T1331] total_dirty 0 [ 2662.212875][ T1331] total_writeback 0 [ 2662.217447][ T1331] total_workingset_refault_anon 44487 [ 2662.223020][ T1331] total_workingset_refault_file 2 [ 2662.229203][ T1331] total_swap 212992 [ 2662.233156][ T1331] total_swapcached 4096 [ 2662.238219][ T1331] total_pgpgin 230062 [ 2662.242245][ T1331] total_pgpgout 230060 [ 2662.247890][ T1331] total_pgfault 512380 [ 2662.254824][ T1331] total_pgmajfault 43415 [ 2662.259118][ T1331] total_inactive_anon 0 [ 2662.263307][ T1331] total_active_anon 8192 [ 2662.275033][ T1331] total_inactive_file 0 [ 2662.279300][ T1331] total_active_file 0 [ 2662.283314][ T1331] total_unevictable 0 [ 2662.288454][ T1331] anon_cost 0 [ 2662.291786][ T1331] file_cost 0 [ 2662.297982][ T1331] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1331,uid=0 [ 2662.317588][ T1331] Memory cgroup out of memory: Killed process 1331 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2662.924922][ T5101] Bluetooth: hci7: command 0x0409 tx timeout [ 2662.976500][ T1334] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2662.987278][ T1334] CPU: 1 PID: 1334 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2662.997845][ T1334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2663.007976][ T1334] Call Trace: [ 2663.011312][ T1334] [ 2663.014286][ T1334] dump_stack_lvl+0x1e7/0x2e0 [ 2663.019021][ T1334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2663.024273][ T1334] ? __pfx__printk+0x10/0x10 [ 2663.028907][ T1334] ? ___ratelimit+0x4c4/0x670 [ 2663.033660][ T1334] ? __pfx____ratelimit+0x10/0x10 [ 2663.038770][ T1334] dump_header+0xda/0x6a0 [ 2663.043172][ T1334] oom_kill_process+0x3a7/0x930 [ 2663.048093][ T1334] out_of_memory+0xf67/0x1320 [ 2663.052843][ T1334] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2663.058545][ T1334] ? __pfx___mutex_lock+0x10/0x10 [ 2663.063641][ T1334] ? __pfx_out_of_memory+0x10/0x10 [ 2663.069284][ T1334] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2663.074902][ T1334] ? __pfx_lock_release+0x10/0x10 [ 2663.080102][ T1334] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2663.086247][ T1334] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2663.091516][ T1334] ? mem_cgroup_iter+0x422/0x560 [ 2663.096540][ T1334] try_charge_memcg+0xda2/0x18a0 [ 2663.101579][ T1334] ? __pfx_try_charge_memcg+0x10/0x10 [ 2663.107028][ T1334] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2663.112817][ T1334] ? __pfx_lock_release+0x10/0x10 [ 2663.118024][ T1334] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2663.123915][ T1334] __memcg_kmem_charge_page+0xe1/0x250 [ 2663.129453][ T1334] memcg_charge_kernel_stack+0xa7/0x550 [ 2663.135080][ T1334] dup_task_struct+0x15d/0x7d0 [ 2663.139922][ T1334] copy_process+0x5d5/0x3fc0 [ 2663.144695][ T1334] ? __might_fault+0xa9/0x120 [ 2663.149441][ T1334] ? __pfx_lock_release+0x10/0x10 [ 2663.154550][ T1334] ? __pfx_copy_process+0x10/0x10 [ 2663.159651][ T1334] ? __might_fault+0xc5/0x120 [ 2663.164390][ T1334] ? __asan_memset+0x23/0x50 [ 2663.169225][ T1334] kernel_clone+0x21d/0x8d0 [ 2663.173805][ T1334] ? __pfx_kernel_clone+0x10/0x10 [ 2663.178916][ T1334] __se_sys_clone3+0x2cb/0x350 [ 2663.183760][ T1334] ? __pfx___se_sys_clone3+0x10/0x10 [ 2663.189122][ T1334] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2663.195299][ T1334] ? exc_page_fault+0x587/0x870 [ 2663.200214][ T1334] ? do_syscall_64+0xb4/0x240 [ 2663.204956][ T1334] do_syscall_64+0xf9/0x240 [ 2663.209540][ T1334] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2663.215503][ T1334] RIP: 0033:0x7f0f5b4a9b99 [ 2663.219980][ T1334] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2663.239657][ T1334] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2663.248139][ T1334] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2663.256179][ T1334] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2663.264216][ T1334] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2663.272331][ T1334] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2663.280358][ T1334] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2663.288407][ T1334] [ 2663.323895][ T1334] memory: usage 307180kB, limit 307200kB, failcnt 143281 [ 2663.332377][ T1334] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 2663.345854][ T1334] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2663.353315][ T1334] Memory cgroup stats for /syz0: [ 2663.353481][ T1334] cache 0 [ 2663.367546][ T1334] rss 12288 [ 2663.370784][ T1334] rss_huge 0 [ 2663.374023][ T1334] shmem 0 [ 2663.377290][ T1334] mapped_file 0 [ 2663.380807][ T1334] dirty 0 [ 2663.383785][ T1334] writeback 0 [ 2663.393308][ T1334] workingset_refault_anon 44692 [ 2663.398348][ T1334] workingset_refault_file 2 [ 2663.402892][ T1334] swap 208896 [ 2663.412183][ T1334] swapcached 8192 [ 2663.416035][ T1334] pgpgin 230280 [ 2663.419539][ T1334] pgpgout 230277 [ 2663.423128][ T1334] pgfault 512702 [ 2663.433315][ T1334] pgmajfault 43607 [ 2663.437277][ T1334] inactive_anon 0 [ 2663.440955][ T1334] active_anon 12288 [ 2663.451045][ T1334] inactive_file 0 [ 2663.454893][ T1334] active_file 0 [ 2663.458433][ T1334] unevictable 0 [ 2663.461941][ T1334] hierarchical_memory_limit 314572800 [ 2663.473500][ T1334] hierarchical_memsw_limit 9223372036854771712 [ 2663.481962][ T1334] total_cache 0 [ 2663.491899][ T1334] total_rss 12288 [ 2663.497385][ T1334] total_rss_huge 0 [ 2663.501390][ T1334] total_shmem 0 [ 2663.512907][ T1334] total_mapped_file 0 [ 2663.517533][ T1334] total_dirty 0 [ 2663.521158][ T1334] total_writeback 0 [ 2663.531544][ T1334] total_workingset_refault_anon 44692 [ 2663.537684][ T1334] total_workingset_refault_file 2 [ 2663.543362][ T1334] total_swap 208896 [ 2663.556444][ T1334] total_swapcached 8192 [ 2663.560715][ T1334] total_pgpgin 230280 [ 2663.571697][ T1334] total_pgpgout 230277 [ 2663.578374][ T1334] total_pgfault 512702 [ 2663.582553][ T1334] total_pgmajfault 43607 [ 2663.587817][ T1334] total_inactive_anon 0 [ 2663.595641][ T1334] total_active_anon 12288 [ 2663.602732][ T1334] total_inactive_file 0 [ 2663.609426][ T1334] total_active_file 0 [ 2663.614072][ T1334] total_unevictable 0 [ 2663.623215][ T1334] anon_cost 0 [ 2663.627171][ T1334] file_cost 0 [ 2663.630519][ T1334] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1334,uid=0 [ 2663.659852][ T1334] Memory cgroup out of memory: Killed process 1334 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2664.343892][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2664.355793][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2664.366374][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2664.376486][ T5099] Call Trace: [ 2664.379805][ T5099] [ 2664.382775][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2664.387520][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2664.392784][ T5099] ? __pfx__printk+0x10/0x10 [ 2664.397514][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2664.402268][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2664.407371][ T5099] dump_header+0xda/0x6a0 [ 2664.411781][ T5099] oom_kill_process+0x3a7/0x930 [ 2664.416718][ T5099] out_of_memory+0xf67/0x1320 [ 2664.421447][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2664.427105][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2664.432148][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2664.437376][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2664.442947][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2664.447995][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2664.454083][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2664.459302][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2664.464262][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2664.469231][ T5099] ? mark_lock+0x9a/0x350 [ 2664.473605][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2664.479025][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2664.485193][ T5099] charge_memcg+0xa2/0x160 [ 2664.490063][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2664.496150][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2664.501709][ T5099] ? mark_lock+0x9a/0x350 [ 2664.506059][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2664.512060][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2664.517466][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2664.523377][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2664.528423][ T5099] ? xas_descend+0x37e/0x470 [ 2664.533035][ T5099] swapin_readahead+0x1ea/0x1070 [ 2664.538093][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2664.543239][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2664.548656][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2664.553969][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2664.559266][ T5099] do_swap_page+0x791/0x3f40 [ 2664.563879][ T5099] ? __lock_acquire+0x1345/0x1fd0 [ 2664.569027][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2664.573830][ T5099] ? do_swap_page+0x154/0x3f40 [ 2664.578627][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2664.583668][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2664.589147][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2664.594972][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2664.600188][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2664.605349][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2664.610836][ T5099] ? mt_find+0x226/0x850 [ 2664.615107][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2664.620170][ T5099] ? mt_find+0x62d/0x850 [ 2664.624429][ T5099] ? mt_find+0x226/0x850 [ 2664.628703][ T5099] ? find_vma+0x142/0x1c0 [ 2664.633049][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2664.637741][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2664.643745][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2664.648562][ T5099] exc_page_fault+0x2ad/0x870 [ 2664.653255][ T5099] asm_exc_page_fault+0x26/0x30 [ 2664.658133][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2664.663270][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2664.682927][ T5099] RSP: 0000:ffffc9000478fd78 EFLAGS: 00050202 [ 2664.689022][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2664.697033][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2664.705209][ T5099] RBP: ffffc9000478fec0 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2664.713200][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fd80 [ 2664.721204][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2664.729391][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2664.735321][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2664.741670][ T5099] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2664.747708][ T5099] irqentry_exit_to_user_mode+0xbb/0x270 [ 2664.753354][ T5099] exc_page_fault+0x587/0x870 [ 2664.758051][ T5099] asm_exc_page_fault+0x26/0x30 [ 2664.762919][ T5099] RIP: 0033:0x7f0f5b4a91b8 [ 2664.767357][ T5099] Code: 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 2664.786979][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00010293 [ 2664.793097][ T5099] RAX: 0000000000000000 RBX: 0000000000004277 RCX: 00007f0f5b4a91b5 [ 2664.801086][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2664.809066][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2664.817054][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2664.825066][ T5099] R13: 000000000028a5b7 R14: 000000000028a5b7 R15: 0000000000000000 [ 2664.833065][ T5099] [ 2664.862043][ T5099] memory: usage 307180kB, limit 307200kB, failcnt 143770 [ 2664.876367][ T5099] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 2664.902447][ T5099] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2664.919633][ T5099] Memory cgroup stats for /syz0: [ 2664.919808][ T5099] cache 0 [ 2664.947383][ T5099] rss 0 [ 2664.952304][ T5099] rss_huge 0 [ 2664.958805][ T5099] shmem 0 [ 2664.961932][ T5099] mapped_file 0 [ 2664.971244][ T5099] dirty 0 [ 2664.974834][ T5099] writeback 0 [ 2664.978322][ T5099] workingset_refault_anon 44844 [ 2664.983330][ T5099] workingset_refault_file 2 [ 2665.005670][ T5099] swap 221184 [ 2665.009783][ T5099] swapcached 0 [ 2665.013334][ T5099] pgpgin 230444 [ 2665.016951][ T5101] Bluetooth: hci7: command 0x041b tx timeout [ 2665.029961][ T5099] pgpgout 230444 [ 2665.033584][ T5099] pgfault 512949 [ 2665.054488][ T5099] pgmajfault 43759 [ 2665.059583][ T5099] inactive_anon 0 [ 2665.063615][ T5099] active_anon 0 [ 2665.073290][ T5099] inactive_file 0 [ 2665.079850][ T5099] active_file 0 [ 2665.083723][ T5099] unevictable 0 [ 2665.094939][ T5099] hierarchical_memory_limit 314572800 12:19:33 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2665.100684][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2665.107264][ T5099] total_cache 0 [ 2665.110759][ T5099] total_rss 0 [ 2665.114091][ T5099] total_rss_huge 0 [ 2665.117921][ T5099] total_shmem 0 [ 2665.121413][ T5099] total_mapped_file 0 [ 2665.125769][ T5099] total_dirty 0 [ 2665.129275][ T5099] total_writeback 0 [ 2665.133121][ T5099] total_workingset_refault_anon 44844 [ 2665.138668][ T5099] total_workingset_refault_file 2 [ 2665.146916][ T5099] total_swap 221184 [ 2665.150867][ T5099] total_swapcached 0 [ 2665.155343][ T5099] total_pgpgin 230444 [ 2665.159374][ T5099] total_pgpgout 230444 [ 2665.163475][ T5099] total_pgfault 512949 [ 2665.168108][ T5099] total_pgmajfault 43759 [ 2665.172392][ T5099] total_inactive_anon 0 [ 2665.176992][ T5099] total_active_anon 0 [ 2665.181018][ T5099] total_inactive_file 0 [ 2665.190982][ T5099] total_active_file 0 [ 2665.197944][ T5099] total_unevictable 0 [ 2665.202110][ T5099] anon_cost 0 [ 2665.214486][ T5099] file_cost 0 [ 2665.224498][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1335,uid=0 [ 2665.247421][ T5099] Memory cgroup out of memory: Killed process 1335 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2665.788472][ T1338] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2665.810918][ T1338] CPU: 0 PID: 1338 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2665.821335][ T1338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2665.831447][ T1338] Call Trace: [ 2665.834776][ T1338] [ 2665.837757][ T1338] dump_stack_lvl+0x1e7/0x2e0 [ 2665.842501][ T1338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2665.847760][ T1338] ? __pfx__printk+0x10/0x10 [ 2665.852405][ T1338] ? ___ratelimit+0x4c4/0x670 [ 2665.857151][ T1338] ? __pfx____ratelimit+0x10/0x10 [ 2665.862278][ T1338] dump_header+0xda/0x6a0 [ 2665.866674][ T1338] oom_kill_process+0x3a7/0x930 [ 2665.871603][ T1338] out_of_memory+0xf67/0x1320 [ 2665.876366][ T1338] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2665.882066][ T1338] ? __pfx___mutex_lock+0x10/0x10 [ 2665.887159][ T1338] ? __pfx_out_of_memory+0x10/0x10 [ 2665.892350][ T1338] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2665.898051][ T1338] ? __pfx_lock_release+0x10/0x10 [ 2665.903150][ T1338] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2665.909292][ T1338] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2665.914574][ T1338] ? mem_cgroup_iter+0x422/0x560 [ 2665.919594][ T1338] try_charge_memcg+0xda2/0x18a0 [ 2665.924727][ T1338] ? __pfx_try_charge_memcg+0x10/0x10 [ 2665.930166][ T1338] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2665.935952][ T1338] ? __pfx_lock_release+0x10/0x10 [ 2665.941059][ T1338] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2665.947121][ T1338] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2665.953063][ T1338] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2665.958941][ T1338] obj_cgroup_charge+0x389/0x630 [ 2665.963938][ T1338] ? obj_cgroup_charge+0x121/0x630 [ 2665.969106][ T1338] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2665.974646][ T1338] ? kmalloc_trace+0x4e/0x360 [ 2665.979395][ T1338] ? __pfx___might_resched+0x10/0x10 [ 2665.984755][ T1338] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2665.990637][ T1338] ? copy_semundo+0xb5/0x240 [ 2665.995291][ T1338] kmalloc_trace+0x216/0x360 [ 2665.999947][ T1338] ? __asan_memcpy+0x40/0x70 [ 2666.004621][ T1338] copy_semundo+0xb5/0x240 [ 2666.009108][ T1338] copy_process+0x1bc3/0x3fc0 [ 2666.013874][ T1338] ? copy_process+0x9c3/0x3fc0 [ 2666.018710][ T1338] ? __pfx_copy_process+0x10/0x10 [ 2666.023796][ T1338] ? __might_fault+0xc5/0x120 [ 2666.028568][ T1338] ? __asan_memset+0x23/0x50 [ 2666.033238][ T1338] kernel_clone+0x21d/0x8d0 [ 2666.037811][ T1338] ? __pfx_kernel_clone+0x10/0x10 [ 2666.042923][ T1338] __se_sys_clone3+0x2cb/0x350 [ 2666.047759][ T1338] ? __pfx___se_sys_clone3+0x10/0x10 [ 2666.053145][ T1338] ? do_syscall_64+0x108/0x240 [ 2666.057977][ T1338] ? do_syscall_64+0xb4/0x240 [ 2666.062725][ T1338] do_syscall_64+0xf9/0x240 [ 2666.067306][ T1338] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2666.073260][ T1338] RIP: 0033:0x7f0f5b4a9b99 [ 2666.077756][ T1338] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2666.097427][ T1338] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2666.105995][ T1338] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2666.114027][ T1338] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2666.122145][ T1338] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2666.130177][ T1338] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2666.138209][ T1338] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2666.146260][ T1338] [ 2666.183201][ T1338] memory: usage 307200kB, limit 307200kB, failcnt 144205 [ 2666.204400][ T1338] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2666.214753][ T1338] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2666.233643][ T1338] Memory cgroup stats for /syz0: [ 2666.233819][ T1338] cache 0 [ 2666.242231][ T1338] rss 8192 [ 2666.245944][ T1338] rss_huge 0 [ 2666.249206][ T1338] shmem 0 [ 2666.252178][ T1338] mapped_file 0 [ 2666.261473][ T1338] dirty 0 [ 2666.264617][ T1338] writeback 0 [ 2666.268224][ T1338] workingset_refault_anon 44996 [ 2666.273131][ T1338] workingset_refault_file 2 [ 2666.279013][ T1338] swap 212992 [ 2666.282346][ T1338] swapcached 8192 [ 2666.286776][ T1338] pgpgin 230607 [ 2666.290287][ T1338] pgpgout 230605 [ 2666.293872][ T1338] pgfault 513203 [ 2666.303035][ T1338] pgmajfault 43905 [ 2666.307505][ T1338] inactive_anon 0 [ 2666.311190][ T1338] active_anon 8192 [ 2666.321163][ T1338] inactive_file 0 [ 2666.324989][ T1338] active_file 0 [ 2666.328749][ T1338] unevictable 0 [ 2666.332251][ T1338] hierarchical_memory_limit 314572800 [ 2666.338576][ T1338] hierarchical_memsw_limit 9223372036854771712 [ 2666.350604][ T1338] total_cache 0 [ 2666.354116][ T1338] total_rss 8192 [ 2666.357825][ T1338] total_rss_huge 0 [ 2666.361886][ T1338] total_shmem 0 [ 2666.375014][ T1338] total_mapped_file 0 [ 2666.379075][ T1338] total_dirty 0 [ 2666.382575][ T1338] total_writeback 0 [ 2666.392456][ T1338] total_workingset_refault_anon 44996 [ 2666.398745][ T1338] total_workingset_refault_file 2 [ 2666.404160][ T1338] total_swap 212992 [ 2666.408370][ T1338] total_swapcached 8192 [ 2666.412885][ T1338] total_pgpgin 230607 [ 2666.416981][ T1338] total_pgpgout 230605 [ 2666.421351][ T1338] total_pgfault 513203 [ 2666.425856][ T1338] total_pgmajfault 43905 [ 2666.430139][ T1338] total_inactive_anon 0 [ 2666.435975][ T1338] total_active_anon 8192 [ 2666.440262][ T1338] total_inactive_file 0 [ 2666.445241][ T1338] total_active_file 0 [ 2666.449263][ T1338] total_unevictable 0 [ 2666.453270][ T1338] anon_cost 0 [ 2666.457760][ T1338] file_cost 0 [ 2666.461134][ T1338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1338,uid=0 [ 2666.483612][ T1338] Memory cgroup out of memory: Killed process 1338 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2667.084431][ T5101] Bluetooth: hci7: command 0x040f tx timeout [ 2667.363112][ T1339] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2667.379056][ T1339] CPU: 0 PID: 1339 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2667.389475][ T1339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2667.399582][ T1339] Call Trace: [ 2667.402883][ T1339] [ 2667.405831][ T1339] dump_stack_lvl+0x1e7/0x2e0 [ 2667.410533][ T1339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2667.415752][ T1339] ? __pfx__printk+0x10/0x10 [ 2667.420353][ T1339] ? ___ratelimit+0x4c4/0x670 [ 2667.425062][ T1339] ? __pfx____ratelimit+0x10/0x10 [ 2667.430115][ T1339] dump_header+0xda/0x6a0 [ 2667.434473][ T1339] oom_kill_process+0x3a7/0x930 [ 2667.439349][ T1339] out_of_memory+0xf67/0x1320 [ 2667.444052][ T1339] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2667.449704][ T1339] ? __pfx___mutex_lock+0x10/0x10 [ 2667.454750][ T1339] ? __pfx_out_of_memory+0x10/0x10 [ 2667.459891][ T1339] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2667.465458][ T1339] ? __pfx_lock_release+0x10/0x10 [ 2667.470504][ T1339] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2667.476596][ T1339] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2667.481848][ T1339] ? mem_cgroup_iter+0x422/0x560 [ 2667.486810][ T1339] try_charge_memcg+0xda2/0x18a0 [ 2667.491803][ T1339] ? __pfx_try_charge_memcg+0x10/0x10 [ 2667.497195][ T1339] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2667.502928][ T1339] ? __pfx_lock_release+0x10/0x10 [ 2667.507978][ T1339] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2667.513987][ T1339] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2667.519727][ T1339] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2667.525556][ T1339] obj_cgroup_charge+0x389/0x630 [ 2667.530511][ T1339] ? obj_cgroup_charge+0x121/0x630 [ 2667.535725][ T1339] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2667.541212][ T1339] ? kmalloc_trace+0x4e/0x360 [ 2667.545995][ T1339] ? __pfx___might_resched+0x10/0x10 [ 2667.551497][ T1339] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2667.557438][ T1339] ? copy_semundo+0xb5/0x240 [ 2667.562047][ T1339] kmalloc_trace+0x216/0x360 [ 2667.566661][ T1339] ? __asan_memcpy+0x40/0x70 [ 2667.571283][ T1339] copy_semundo+0xb5/0x240 [ 2667.575719][ T1339] copy_process+0x1bc3/0x3fc0 [ 2667.580424][ T1339] ? copy_process+0x9c3/0x3fc0 [ 2667.585207][ T1339] ? __pfx_copy_process+0x10/0x10 [ 2667.590242][ T1339] ? __might_fault+0xc5/0x120 [ 2667.594971][ T1339] ? __asan_memset+0x23/0x50 [ 2667.599681][ T1339] kernel_clone+0x21d/0x8d0 [ 2667.604205][ T1339] ? __pfx_kernel_clone+0x10/0x10 [ 2667.609263][ T1339] __se_sys_clone3+0x2cb/0x350 [ 2667.614895][ T1339] ? __pfx___se_sys_clone3+0x10/0x10 [ 2667.620419][ T1339] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2667.626443][ T1339] ? exc_page_fault+0x587/0x870 [ 2667.631661][ T1339] ? do_syscall_64+0xb4/0x240 [ 2667.636356][ T1339] do_syscall_64+0xf9/0x240 [ 2667.640883][ T1339] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2667.646821][ T1339] RIP: 0033:0x7f0f5b4a9b99 [ 2667.651267][ T1339] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2667.670891][ T1339] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2667.679324][ T1339] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2667.687306][ T1339] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2667.695374][ T1339] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2667.703355][ T1339] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2667.711346][ T1339] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2667.719368][ T1339] [ 2667.734921][ T1339] memory: usage 307200kB, limit 307200kB, failcnt 144869 [ 2667.742028][ T1339] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 2667.780831][ T1339] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2667.800238][ T1339] Memory cgroup stats for /syz0: [ 2667.800408][ T1339] cache 0 [ 2667.820843][ T1339] rss 12288 [ 2667.824052][ T1339] rss_huge 0 [ 2667.843164][ T1339] shmem 0 [ 2667.853455][ T1339] mapped_file 0 [ 2667.857531][ T1339] dirty 0 [ 2667.860524][ T1339] writeback 0 [ 2667.863848][ T1339] workingset_refault_anon 45233 [ 2667.876111][ T1339] workingset_refault_file 2 [ 2667.880698][ T1339] swap 217088 [ 2667.884120][ T1339] swapcached 8192 [ 2667.905950][ T1339] pgpgin 230857 [ 2667.909575][ T1339] pgpgout 230854 [ 2667.913162][ T1339] pgfault 513574 [ 2667.923238][ T1339] pgmajfault 44131 [ 2667.928782][ T1339] inactive_anon 0 [ 2667.932475][ T1339] active_anon 12288 [ 2667.942747][ T1339] inactive_file 0 [ 2667.948807][ T1339] active_file 0 [ 2667.969360][ T1339] unevictable 0 [ 2667.977478][ T1339] hierarchical_memory_limit 314572800 [ 2667.984098][ T1339] hierarchical_memsw_limit 9223372036854771712 [ 2667.998969][ T1339] total_cache 0 [ 2668.002617][ T1339] total_rss 12288 [ 2668.008696][ T1339] total_rss_huge 0 [ 2668.012964][ T1339] total_shmem 0 [ 2668.041221][ T1339] total_mapped_file 0 [ 2668.047603][ T1339] total_dirty 0 [ 2668.051754][ T1339] total_writeback 0 [ 2668.062587][ T1339] total_workingset_refault_anon 45233 [ 2668.072395][ T1339] total_workingset_refault_file 2 [ 2668.085142][ T1339] total_swap 217088 [ 2668.089030][ T1339] total_swapcached 8192 [ 2668.093226][ T1339] total_pgpgin 230857 [ 2668.106352][ T1339] total_pgpgout 230854 [ 2668.110627][ T1339] total_pgfault 513574 [ 2668.119866][ T1339] total_pgmajfault 44131 [ 2668.124805][ T1339] total_inactive_anon 0 [ 2668.129321][ T1339] total_active_anon 12288 [ 2668.133804][ T1339] total_inactive_file 0 [ 2668.140042][ T1339] total_active_file 0 [ 2668.152106][ T1339] total_unevictable 0 [ 2668.156695][ T1339] anon_cost 0 [ 2668.160114][ T1339] file_cost 0 [ 2668.163429][ T1339] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1339,uid=0 [ 2668.179811][ T1339] Memory cgroup out of memory: Killed process 1339 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:36 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2668.624011][ T1342] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2668.653569][ T1342] CPU: 1 PID: 1342 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2668.664009][ T1342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2668.674121][ T1342] Call Trace: [ 2668.677448][ T1342] [ 2668.680441][ T1342] dump_stack_lvl+0x1e7/0x2e0 [ 2668.685183][ T1342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2668.690425][ T1342] ? __pfx__printk+0x10/0x10 [ 2668.695050][ T1342] ? ___ratelimit+0x4c4/0x670 [ 2668.699802][ T1342] ? __pfx____ratelimit+0x10/0x10 [ 2668.704882][ T1342] dump_header+0xda/0x6a0 [ 2668.709237][ T1342] oom_kill_process+0x3a7/0x930 [ 2668.714105][ T1342] out_of_memory+0xf67/0x1320 [ 2668.718804][ T1342] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2668.724450][ T1342] ? __pfx___mutex_lock+0x10/0x10 [ 2668.729488][ T1342] ? __pfx_out_of_memory+0x10/0x10 [ 2668.734626][ T1342] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2668.741145][ T1342] ? __pfx_lock_release+0x10/0x10 [ 2668.746192][ T1342] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2668.752310][ T1342] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2668.757532][ T1342] ? mem_cgroup_iter+0x422/0x560 [ 2668.762513][ T1342] try_charge_memcg+0xda2/0x18a0 [ 2668.767486][ T1342] ? __pfx_try_charge_memcg+0x10/0x10 [ 2668.772872][ T1342] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2668.778603][ T1342] ? __pfx_lock_release+0x10/0x10 [ 2668.783650][ T1342] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2668.789685][ T1342] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2668.795431][ T1342] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2668.801276][ T1342] obj_cgroup_charge+0x389/0x630 [ 2668.806229][ T1342] ? obj_cgroup_charge+0x121/0x630 [ 2668.811355][ T1342] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2668.816827][ T1342] ? kmalloc_trace+0x4e/0x360 [ 2668.821534][ T1342] ? __pfx___might_resched+0x10/0x10 [ 2668.826840][ T1342] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2668.832663][ T1342] ? copy_semundo+0xb5/0x240 [ 2668.837275][ T1342] kmalloc_trace+0x216/0x360 [ 2668.841897][ T1342] ? __asan_memcpy+0x40/0x70 [ 2668.846520][ T1342] copy_semundo+0xb5/0x240 [ 2668.850968][ T1342] copy_process+0x1bc3/0x3fc0 [ 2668.855676][ T1342] ? copy_process+0x9c3/0x3fc0 [ 2668.860488][ T1342] ? __pfx_copy_process+0x10/0x10 [ 2668.865562][ T1342] ? __might_fault+0xc5/0x120 [ 2668.870288][ T1342] ? __asan_memset+0x23/0x50 [ 2668.874945][ T1342] kernel_clone+0x21d/0x8d0 [ 2668.879475][ T1342] ? __pfx_kernel_clone+0x10/0x10 [ 2668.884528][ T1342] __se_sys_clone3+0x2cb/0x350 [ 2668.889317][ T1342] ? __pfx___se_sys_clone3+0x10/0x10 [ 2668.894749][ T1342] ? do_syscall_64+0x108/0x240 [ 2668.899652][ T1342] ? do_syscall_64+0xb4/0x240 [ 2668.904383][ T1342] do_syscall_64+0xf9/0x240 [ 2668.908910][ T1342] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2668.914822][ T1342] RIP: 0033:0x7f0f5b4a9b99 [ 2668.919250][ T1342] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2668.938898][ T1342] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2668.947333][ T1342] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2668.955321][ T1342] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2668.963389][ T1342] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2668.971391][ T1342] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2668.979382][ T1342] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2668.987385][ T1342] [ 2668.991847][ T1342] memory: usage 307200kB, limit 307200kB, failcnt 145125 [ 2668.999005][ T1342] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0 [ 2669.007584][ T1342] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2669.015069][ T1342] Memory cgroup stats for /syz0: [ 2669.015226][ T1342] cache 0 [ 2669.023278][ T1342] rss 0 [ 2669.026391][ T1342] rss_huge 0 [ 2669.029714][ T1342] shmem 0 [ 2669.032681][ T1342] mapped_file 0 [ 2669.036418][ T1342] dirty 0 [ 2669.039374][ T1342] writeback 0 [ 2669.042659][ T1342] workingset_refault_anon 45299 [ 2669.047968][ T1342] workingset_refault_file 2 [ 2669.052577][ T1342] swap 253952 [ 2669.056073][ T1342] swapcached 0 [ 2669.059549][ T1342] pgpgin 230934 [ 2669.063070][ T1342] pgpgout 230934 [ 2669.067027][ T1342] pgfault 513698 [ 2669.070704][ T1342] pgmajfault 44189 [ 2669.074742][ T1342] inactive_anon 0 [ 2669.078513][ T1342] active_anon 0 [ 2669.082107][ T1342] inactive_file 0 [ 2669.086183][ T1342] active_file 0 [ 2669.089775][ T1342] unevictable 0 [ 2669.093328][ T1342] hierarchical_memory_limit 314572800 [ 2669.099105][ T1342] hierarchical_memsw_limit 9223372036854771712 [ 2669.105607][ T1342] total_cache 0 [ 2669.109132][ T1342] total_rss 0 [ 2669.112475][ T1342] total_rss_huge 0 [ 2669.116392][ T1342] total_shmem 0 [ 2669.120004][ T1342] total_mapped_file 0 [ 2669.124086][ T1342] total_dirty 0 [ 2669.127965][ T1342] total_writeback 0 [ 2669.131906][ T1342] total_workingset_refault_anon 45299 [ 2669.137490][ T1342] total_workingset_refault_file 2 [ 2669.142620][ T1342] total_swap 253952 [ 2669.147307][ T1342] total_swapcached 0 [ 2669.151348][ T1342] total_pgpgin 230934 [ 2669.155500][ T1342] total_pgpgout 230934 [ 2669.159699][ T1342] total_pgfault 513698 [ 2669.163844][ T1342] total_pgmajfault 44189 [ 2669.168536][ T5101] Bluetooth: hci7: command 0x0419 tx timeout [ 2669.168984][ T1342] total_inactive_anon 0 [ 2669.179573][ T1342] total_active_anon 0 [ 2669.183602][ T1342] total_inactive_file 0 [ 2669.188269][ T1342] total_active_file 0 [ 2669.192293][ T1342] total_unevictable 0 [ 2669.196472][ T1342] anon_cost 0 [ 2669.199792][ T1342] file_cost 0 [ 2669.203096][ T1342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1342,uid=0 12:19:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2669.219927][ T1342] Memory cgroup out of memory: Killed process 1342 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2670.059756][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2670.086536][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2670.096958][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2670.107069][ T5099] Call Trace: [ 2670.110399][ T5099] [ 2670.113379][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2670.118187][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2670.123481][ T5099] ? __pfx__printk+0x10/0x10 [ 2670.128136][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2670.132896][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2670.137995][ T5099] dump_header+0xda/0x6a0 [ 2670.142412][ T5099] oom_kill_process+0x3a7/0x930 [ 2670.147325][ T5099] out_of_memory+0xf67/0x1320 [ 2670.152044][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2670.157740][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2670.162786][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2670.167995][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2670.173686][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2670.178760][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2670.185041][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2670.190264][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2670.195233][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2670.200189][ T5099] ? mark_lock+0x9a/0x350 [ 2670.204547][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2670.210066][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2670.216237][ T5099] charge_memcg+0xa2/0x160 [ 2670.220680][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2670.226765][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2670.232404][ T5099] ? mark_lock+0x9a/0x350 [ 2670.236750][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2670.242744][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2670.248139][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2670.254044][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2670.259090][ T5099] ? xas_descend+0x37e/0x470 [ 2670.263697][ T5099] swapin_readahead+0x1ea/0x1070 [ 2670.268640][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2670.273781][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2670.279177][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2670.284483][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2670.289786][ T5099] do_swap_page+0x791/0x3f40 [ 2670.294404][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2670.299219][ T5099] ? do_swap_page+0x154/0x3f40 [ 2670.304015][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2670.309055][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2670.314622][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2670.320459][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2670.325690][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2670.331106][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2670.336589][ T5099] ? mt_find+0x226/0x850 [ 2670.340852][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2670.345912][ T5099] ? mt_find+0x62d/0x850 [ 2670.350169][ T5099] ? mt_find+0x226/0x850 [ 2670.354455][ T5099] ? find_vma+0x142/0x1c0 [ 2670.358802][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2670.363490][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2670.369489][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2670.374278][ T5099] exc_page_fault+0x2ad/0x870 [ 2670.378977][ T5099] asm_exc_page_fault+0x26/0x30 [ 2670.383841][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2670.388971][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2670.408603][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2670.414776][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2670.422792][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2670.430774][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2670.438759][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2670.446743][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2670.454745][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2670.460677][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2670.467022][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2670.472755][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2670.478400][ T5099] do_syscall_64+0x108/0x240 [ 2670.483007][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2670.488917][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2670.493348][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2670.512976][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2670.521408][ T5099] RAX: 0000000000000000 RBX: 000000000000427b RCX: 00007f0f5b4a91b5 [ 2670.529401][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2670.537390][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2670.545377][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2670.553482][ T5099] R13: 000000000028bb0c R14: 000000000028bb0c R15: 0000000000000000 [ 2670.561511][ T5099] [ 2670.609721][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 145813 [ 2670.617177][ T5099] memory+swap: usage 307440kB, limit 9007199254740988kB, failcnt 0 [ 2670.641876][ T5099] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2670.650032][ T5099] Memory cgroup stats for /syz0: [ 2670.650191][ T5099] cache 0 [ 2670.665238][ T5099] rss 0 [ 2670.668646][ T5099] rss_huge 0 [ 2670.673299][ T5099] shmem 0 [ 2670.677211][ T5099] mapped_file 0 [ 2670.680809][ T5099] dirty 0 [ 2670.683887][ T5099] writeback 0 [ 2670.688011][ T5099] workingset_refault_anon 45540 [ 2670.693026][ T5099] workingset_refault_file 2 [ 2670.698761][ T5099] swap 245760 [ 2670.702095][ T5099] swapcached 0 [ 2670.707023][ T5099] pgpgin 231188 [ 2670.710533][ T5099] pgpgout 231188 [ 2670.714116][ T5099] pgfault 514090 [ 2670.718460][ T5099] pgmajfault 44421 [ 2670.722219][ T5099] inactive_anon 0 [ 2670.732005][ T5099] active_anon 0 [ 2670.735686][ T5099] inactive_file 0 [ 2670.739360][ T5099] active_file 0 [ 2670.742852][ T5099] unevictable 0 [ 2670.754407][ T5099] hierarchical_memory_limit 314572800 [ 2670.759859][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2670.781714][ T5099] total_cache 0 [ 2670.785759][ T5099] total_rss 0 [ 2670.789099][ T5099] total_rss_huge 0 [ 2670.792864][ T5099] total_shmem 0 [ 2670.796725][ T5099] total_mapped_file 0 [ 2670.800751][ T5099] total_dirty 0 [ 2670.804240][ T5099] total_writeback 0 [ 2670.830507][ T5099] total_workingset_refault_anon 45540 [ 2670.836114][ T5099] total_workingset_refault_file 2 [ 2670.841194][ T5099] total_swap 245760 [ 2670.851360][ T5099] total_swapcached 0 [ 2670.860702][ T5099] total_pgpgin 231188 [ 2670.879569][ T5099] total_pgpgout 231188 [ 2670.883715][ T5099] total_pgfault 514090 [ 2670.890933][ T5099] total_pgmajfault 44421 [ 2670.900501][ T5099] total_inactive_anon 0 [ 2670.905107][ T5099] total_active_anon 0 [ 2670.909165][ T5099] total_inactive_file 0 [ 2670.913360][ T5099] total_active_file 0 [ 2670.924665][ T5099] total_unevictable 0 [ 2670.928807][ T5099] anon_cost 0 [ 2670.932135][ T5099] file_cost 0 [ 2670.939817][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1343,uid=0 [ 2670.955794][ T5099] Memory cgroup out of memory: Killed process 1343 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2671.316498][ T1344] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2671.327099][ T1344] CPU: 0 PID: 1344 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2671.337483][ T1344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2671.347596][ T1344] Call Trace: [ 2671.350915][ T1344] [ 2671.353885][ T1344] dump_stack_lvl+0x1e7/0x2e0 [ 2671.358671][ T1344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2671.364037][ T1344] ? __pfx__printk+0x10/0x10 [ 2671.368693][ T1344] ? ___ratelimit+0x4c4/0x670 [ 2671.373969][ T1344] ? __pfx____ratelimit+0x10/0x10 [ 2671.379061][ T1344] dump_header+0xda/0x6a0 [ 2671.383459][ T1344] oom_kill_process+0x3a7/0x930 [ 2671.388378][ T1344] out_of_memory+0xf67/0x1320 [ 2671.393093][ T1344] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2671.398755][ T1344] ? __pfx___mutex_lock+0x10/0x10 [ 2671.403801][ T1344] ? __pfx_out_of_memory+0x10/0x10 [ 2671.409039][ T1344] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2671.414622][ T1344] ? __pfx_lock_release+0x10/0x10 [ 2671.419675][ T1344] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2671.425853][ T1344] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2671.431067][ T1344] ? mem_cgroup_iter+0x422/0x560 [ 2671.436028][ T1344] try_charge_memcg+0xda2/0x18a0 [ 2671.441016][ T1344] ? __pfx_try_charge_memcg+0x10/0x10 [ 2671.446405][ T1344] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2671.452145][ T1344] ? __pfx_lock_release+0x10/0x10 [ 2671.457208][ T1344] ? memcg_account_kmem+0x1e7/0x210 [ 2671.462526][ T1344] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2671.468437][ T1344] __memcg_kmem_charge_page+0xe1/0x250 [ 2671.473914][ T1344] memcg_charge_kernel_stack+0x304/0x550 [ 2671.479575][ T1344] dup_task_struct+0x15d/0x7d0 [ 2671.484355][ T1344] copy_process+0x5d5/0x3fc0 [ 2671.489057][ T1344] ? __might_fault+0xa9/0x120 [ 2671.493751][ T1344] ? __pfx_lock_release+0x10/0x10 [ 2671.498804][ T1344] ? __pfx_copy_process+0x10/0x10 [ 2671.503840][ T1344] ? __might_fault+0xc5/0x120 [ 2671.508550][ T1344] ? __asan_memset+0x23/0x50 [ 2671.513167][ T1344] kernel_clone+0x21d/0x8d0 [ 2671.517712][ T1344] ? __pfx_kernel_clone+0x10/0x10 [ 2671.522767][ T1344] __se_sys_clone3+0x2cb/0x350 [ 2671.527589][ T1344] ? __pfx___se_sys_clone3+0x10/0x10 [ 2671.532899][ T1344] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2671.538999][ T1344] ? exc_page_fault+0x587/0x870 [ 2671.543953][ T1344] ? do_syscall_64+0xb4/0x240 [ 2671.548649][ T1344] do_syscall_64+0xf9/0x240 [ 2671.553173][ T1344] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2671.559091][ T1344] RIP: 0033:0x7f0f5b4a9b99 [ 2671.563523][ T1344] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2671.583148][ T1344] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2671.591591][ T1344] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2671.599577][ T1344] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2671.607567][ T1344] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2671.615639][ T1344] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2671.623623][ T1344] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2671.631629][ T1344] [ 2671.639584][ T1344] memory: usage 307200kB, limit 307200kB, failcnt 146013 [ 2671.648695][ T1344] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 2671.672879][ T1344] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2671.699419][ T1344] Memory cgroup stats for /syz0: [ 2671.699620][ T1344] cache 0 [ 2671.709134][ T1344] rss 12288 [ 2671.712527][ T1344] rss_huge 0 [ 2671.725272][ T1344] shmem 0 [ 2671.728438][ T1344] mapped_file 0 [ 2671.735129][ T1344] dirty 0 [ 2671.741339][ T1344] writeback 0 [ 2671.747188][ T1344] workingset_refault_anon 45607 [ 2671.752392][ T1344] workingset_refault_file 2 [ 2671.758137][ T1344] swap 241664 [ 2671.761693][ T1344] swapcached 4096 [ 2671.769065][ T1344] pgpgin 231266 [ 2671.772743][ T1344] pgpgout 231263 [ 2671.777477][ T1344] pgfault 514219 [ 2671.781205][ T1344] pgmajfault 44486 [ 2671.785938][ T1344] inactive_anon 0 [ 2671.790179][ T1344] active_anon 12288 [ 2671.796769][ T1344] inactive_file 0 [ 2671.800500][ T1344] active_file 0 [ 2671.804038][ T1344] unevictable 0 [ 2671.811865][ T1344] hierarchical_memory_limit 314572800 [ 2671.819519][ T1344] hierarchical_memsw_limit 9223372036854771712 [ 2671.826966][ T1344] total_cache 0 [ 2671.830641][ T1344] total_rss 12288 [ 2671.835083][ T1344] total_rss_huge 0 [ 2671.841973][ T1344] total_shmem 0 [ 2671.845930][ T1344] total_mapped_file 0 [ 2671.851415][ T1344] total_dirty 0 [ 2671.855761][ T1344] total_writeback 0 [ 2671.859758][ T1344] total_workingset_refault_anon 45607 [ 2671.867898][ T1344] total_workingset_refault_file 2 [ 2671.876036][ T1344] total_swap 241664 [ 2671.882254][ T1344] total_swapcached 4096 [ 2671.888296][ T1344] total_pgpgin 231266 [ 2671.894134][ T1344] total_pgpgout 231263 [ 2671.901205][ T1344] total_pgfault 514219 [ 2671.905735][ T1344] total_pgmajfault 44486 [ 2671.911163][ T1344] total_inactive_anon 0 [ 2671.921257][ T1344] total_active_anon 12288 [ 2671.933810][ T1344] total_inactive_file 0 [ 2671.938564][ T1344] total_active_file 0 [ 2671.942722][ T1344] total_unevictable 0 [ 2671.947715][ T1344] anon_cost 0 [ 2671.951176][ T1344] file_cost 0 [ 2671.955472][ T1344] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1344,uid=0 [ 2671.972497][ T1344] Memory cgroup out of memory: Killed process 1344 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x118]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2672.715461][ T1347] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2672.743423][ T1347] CPU: 0 PID: 1347 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2672.753839][ T1347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2672.763946][ T1347] Call Trace: [ 2672.767286][ T1347] [ 2672.770286][ T1347] dump_stack_lvl+0x1e7/0x2e0 [ 2672.775029][ T1347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2672.780293][ T1347] ? __pfx__printk+0x10/0x10 [ 2672.784944][ T1347] ? ___ratelimit+0x4c4/0x670 [ 2672.789703][ T1347] ? __pfx____ratelimit+0x10/0x10 [ 2672.794811][ T1347] dump_header+0xda/0x6a0 [ 2672.799222][ T1347] oom_kill_process+0x3a7/0x930 [ 2672.804166][ T1347] out_of_memory+0xf67/0x1320 [ 2672.808921][ T1347] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2672.814624][ T1347] ? __pfx___mutex_lock+0x10/0x10 [ 2672.819716][ T1347] ? __pfx_out_of_memory+0x10/0x10 [ 2672.824942][ T1347] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2672.830558][ T1347] ? __pfx_lock_release+0x10/0x10 [ 2672.835654][ T1347] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2672.841893][ T1347] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2672.847170][ T1347] ? mem_cgroup_iter+0x422/0x560 [ 2672.852159][ T1347] try_charge_memcg+0xda2/0x18a0 [ 2672.857617][ T1347] ? __pfx_try_charge_memcg+0x10/0x10 [ 2672.863055][ T1347] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2672.868845][ T1347] ? __pfx_lock_release+0x10/0x10 [ 2672.873961][ T1347] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2672.879838][ T1347] __memcg_kmem_charge_page+0xe1/0x250 [ 2672.885367][ T1347] memcg_charge_kernel_stack+0xa7/0x550 [ 2672.891079][ T1347] dup_task_struct+0x40d/0x7d0 [ 2672.895924][ T1347] copy_process+0x5d5/0x3fc0 [ 2672.900613][ T1347] ? __might_fault+0xa9/0x120 [ 2672.905361][ T1347] ? __pfx_lock_release+0x10/0x10 [ 2672.910458][ T1347] ? __lock_acquire+0x1345/0x1fd0 [ 2672.915646][ T1347] ? __pfx_copy_process+0x10/0x10 [ 2672.920752][ T1347] ? __might_fault+0xc5/0x120 [ 2672.925516][ T1347] ? __asan_memset+0x23/0x50 [ 2672.930184][ T1347] kernel_clone+0x21d/0x8d0 [ 2672.934765][ T1347] ? __pfx_kernel_clone+0x10/0x10 [ 2672.939874][ T1347] ? __pfx_lock_release+0x10/0x10 [ 2672.944984][ T1347] __se_sys_clone3+0x2cb/0x350 [ 2672.949857][ T1347] ? __might_fault+0xa9/0x120 [ 2672.954609][ T1347] ? __pfx___se_sys_clone3+0x10/0x10 [ 2672.959984][ T1347] ? rcu_is_watching+0x15/0xb0 [ 2672.965888][ T1347] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2672.971962][ T1347] ? exc_page_fault+0x587/0x870 [ 2672.976886][ T1347] ? do_syscall_64+0xb4/0x240 [ 2672.981725][ T1347] do_syscall_64+0xf9/0x240 [ 2672.986311][ T1347] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2672.992290][ T1347] RIP: 0033:0x7f0f5b4a9b99 [ 2672.996854][ T1347] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2673.016623][ T1347] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2673.025104][ T1347] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2673.033137][ T1347] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2673.041172][ T1347] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2673.049219][ T1347] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2673.057255][ T1347] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2673.065390][ T1347] [ 2673.079548][ T1347] memory: usage 307200kB, limit 307200kB, failcnt 146503 [ 2673.090693][ T1347] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 2673.099621][ T1347] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2673.107624][ T1347] Memory cgroup stats for /syz0: [ 2673.107789][ T1347] cache 0 [ 2673.116063][ T1347] rss 12288 [ 2673.119391][ T1347] rss_huge 0 [ 2673.122901][ T1347] shmem 0 [ 2673.126484][ T1347] mapped_file 0 [ 2673.131882][ T1347] dirty 0 [ 2673.135423][ T1347] writeback 0 [ 2673.138937][ T1347] workingset_refault_anon 45806 [ 2673.143967][ T1347] workingset_refault_file 2 [ 2673.148812][ T1347] swap 217088 [ 2673.156359][ T1347] swapcached 8192 [ 2673.163708][ T1347] pgpgin 231476 [ 2673.167823][ T1347] pgpgout 231473 [ 2673.171599][ T1347] pgfault 514535 [ 2673.180395][ T1347] pgmajfault 44679 [ 2673.184720][ T1347] inactive_anon 8192 [ 2673.188872][ T1347] active_anon 4096 [ 2673.192828][ T1347] inactive_file 0 [ 2673.198186][ T1347] active_file 0 [ 2673.201887][ T1347] unevictable 0 [ 2673.205965][ T1347] hierarchical_memory_limit 314572800 [ 2673.213235][ T1347] hierarchical_memsw_limit 9223372036854771712 [ 2673.228041][ T1347] total_cache 0 [ 2673.232171][ T1347] total_rss 12288 [ 2673.248142][ T1347] total_rss_huge 0 [ 2673.252183][ T1347] total_shmem 0 [ 2673.264909][ T1347] total_mapped_file 0 [ 2673.270956][ T1347] total_dirty 0 [ 2673.282016][ T1347] total_writeback 0 [ 2673.286163][ T1347] total_workingset_refault_anon 45806 [ 2673.292109][ T1347] total_workingset_refault_file 2 [ 2673.309156][ T1347] total_swap 217088 [ 2673.313064][ T1347] total_swapcached 8192 [ 2673.322921][ T1347] total_pgpgin 231476 [ 2673.330724][ T1347] total_pgpgout 231473 [ 2673.342031][ T1347] total_pgfault 514535 [ 2673.346329][ T1347] total_pgmajfault 44679 [ 2673.350632][ T1347] total_inactive_anon 8192 [ 2673.361450][ T1347] total_active_anon 4096 [ 2673.365972][ T1347] total_inactive_file 0 [ 2673.370297][ T1347] total_active_file 0 [ 2673.380395][ T1347] total_unevictable 0 [ 2673.385772][ T1347] anon_cost 0 [ 2673.389224][ T1347] file_cost 0 [ 2673.392755][ T1347] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1347,uid=0 [ 2673.425426][ T1347] Memory cgroup out of memory: Killed process 1347 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x144]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2674.088916][ T1348] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2674.113084][ T1348] CPU: 0 PID: 1348 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2674.123605][ T1348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2674.133752][ T1348] Call Trace: [ 2674.137084][ T1348] [ 2674.140061][ T1348] dump_stack_lvl+0x1e7/0x2e0 [ 2674.144806][ T1348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2674.150066][ T1348] ? __pfx__printk+0x10/0x10 [ 2674.154707][ T1348] ? ___ratelimit+0x4c4/0x670 [ 2674.159465][ T1348] ? __pfx____ratelimit+0x10/0x10 [ 2674.164673][ T1348] dump_header+0xda/0x6a0 [ 2674.169075][ T1348] oom_kill_process+0x3a7/0x930 [ 2674.174010][ T1348] out_of_memory+0xf67/0x1320 [ 2674.178783][ T1348] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2674.184487][ T1348] ? __pfx___mutex_lock+0x10/0x10 [ 2674.189575][ T1348] ? __pfx_out_of_memory+0x10/0x10 [ 2674.195202][ T1348] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2674.200821][ T1348] ? __pfx_lock_release+0x10/0x10 [ 2674.206003][ T1348] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2674.212234][ T1348] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2674.217498][ T1348] ? mem_cgroup_iter+0x422/0x560 [ 2674.222590][ T1348] try_charge_memcg+0xda2/0x18a0 [ 2674.227589][ T1348] ? __pfx_try_charge_memcg+0x10/0x10 [ 2674.232990][ T1348] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2674.238758][ T1348] ? __pfx_lock_release+0x10/0x10 [ 2674.243809][ T1348] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2674.249819][ T1348] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2674.255554][ T1348] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2674.261381][ T1348] obj_cgroup_charge+0x389/0x630 [ 2674.266359][ T1348] ? obj_cgroup_charge+0x121/0x630 [ 2674.271525][ T1348] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2674.277022][ T1348] ? kmalloc_trace+0x4e/0x360 [ 2674.281726][ T1348] ? __pfx___might_resched+0x10/0x10 [ 2674.288110][ T1348] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2674.293975][ T1348] ? copy_semundo+0xb5/0x240 [ 2674.298606][ T1348] kmalloc_trace+0x216/0x360 [ 2674.303242][ T1348] ? __asan_memcpy+0x40/0x70 [ 2674.307867][ T1348] copy_semundo+0xb5/0x240 [ 2674.312460][ T1348] copy_process+0x1bc3/0x3fc0 [ 2674.317189][ T1348] ? copy_process+0x9c3/0x3fc0 [ 2674.321986][ T1348] ? __pfx_copy_process+0x10/0x10 [ 2674.327048][ T1348] ? __might_fault+0xc5/0x120 [ 2674.331752][ T1348] ? __asan_memset+0x23/0x50 [ 2674.336372][ T1348] kernel_clone+0x21d/0x8d0 [ 2674.340905][ T1348] ? __pfx_kernel_clone+0x10/0x10 [ 2674.345961][ T1348] __se_sys_clone3+0x2cb/0x350 [ 2674.350753][ T1348] ? __pfx___se_sys_clone3+0x10/0x10 [ 2674.356153][ T1348] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2674.362166][ T1348] ? exc_page_fault+0x587/0x870 [ 2674.367037][ T1348] ? do_syscall_64+0xb4/0x240 [ 2674.371745][ T1348] do_syscall_64+0xf9/0x240 [ 2674.376356][ T1348] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2674.382270][ T1348] RIP: 0033:0x7f0f5b4a9b99 [ 2674.386700][ T1348] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2674.406409][ T1348] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2674.414842][ T1348] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2674.422921][ T1348] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2674.430908][ T1348] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2674.438894][ T1348] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2674.446876][ T1348] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2674.454887][ T1348] [ 2674.480682][ T1348] memory: usage 307200kB, limit 307200kB, failcnt 147038 12:19:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2674.488007][ T1348] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 2674.501284][ T1348] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2674.508976][ T1348] Memory cgroup stats for /syz0: [ 2674.509143][ T1348] cache 0 [ 2674.524249][ T1348] rss 12288 [ 2674.527629][ T1348] rss_huge 0 [ 2674.530875][ T1348] shmem 0 [ 2674.533845][ T1348] mapped_file 0 [ 2674.542596][ T1348] dirty 0 [ 2674.545970][ T1348] writeback 0 [ 2674.550174][ T1348] workingset_refault_anon 46003 [ 2674.559426][ T1348] workingset_refault_file 2 [ 2674.567896][ T1348] swap 249856 [ 2674.571361][ T1348] swapcached 8192 [ 2674.577651][ T1348] pgpgin 231685 [ 2674.581279][ T1348] pgpgout 231682 [ 2674.588128][ T1348] pgfault 514845 [ 2674.591970][ T1348] pgmajfault 44868 [ 2674.598449][ T1348] inactive_anon 0 [ 2674.602151][ T1348] active_anon 12288 [ 2674.609708][ T1348] inactive_file 0 [ 2674.613680][ T1348] active_file 0 [ 2674.619909][ T1348] unevictable 0 [ 2674.623438][ T1348] hierarchical_memory_limit 314572800 [ 2674.632592][ T1348] hierarchical_memsw_limit 9223372036854771712 [ 2674.641544][ T1348] total_cache 0 [ 2674.648604][ T1348] total_rss 12288 [ 2674.652354][ T1348] total_rss_huge 0 [ 2674.658597][ T1348] total_shmem 0 [ 2674.662119][ T1348] total_mapped_file 0 [ 2674.669829][ T1348] total_dirty 0 [ 2674.673368][ T1348] total_writeback 0 [ 2674.680272][ T1348] total_workingset_refault_anon 46003 [ 2674.689616][ T1348] total_workingset_refault_file 2 [ 2674.697604][ T1348] total_swap 249856 [ 2674.701866][ T1348] total_swapcached 8192 [ 2674.709388][ T1348] total_pgpgin 231685 [ 2674.713427][ T1348] total_pgpgout 231682 [ 2674.720466][ T1348] total_pgfault 514845 [ 2674.728435][ T1348] total_pgmajfault 44868 [ 2674.732750][ T1348] total_inactive_anon 0 [ 2674.739921][ T1348] total_active_anon 12288 [ 2674.748246][ T1348] total_inactive_file 0 [ 2674.752469][ T1348] total_active_file 0 [ 2674.759154][ T1348] total_unevictable 0 [ 2674.763183][ T1348] anon_cost 0 [ 2674.774704][ T1348] file_cost 0 [ 2674.778066][ T1348] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1348,uid=0 [ 2674.800063][ T1348] Memory cgroup out of memory: Killed process 1348 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2675.552027][ T1351] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2675.570624][ T1351] CPU: 1 PID: 1351 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2675.581055][ T1351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2675.591180][ T1351] Call Trace: [ 2675.594512][ T1351] [ 2675.597491][ T1351] dump_stack_lvl+0x1e7/0x2e0 [ 2675.602326][ T1351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2675.607598][ T1351] ? __pfx__printk+0x10/0x10 [ 2675.612364][ T1351] ? ___ratelimit+0x4c4/0x670 [ 2675.617467][ T1351] ? __pfx____ratelimit+0x10/0x10 [ 2675.622572][ T1351] dump_header+0xda/0x6a0 [ 2675.627067][ T1351] oom_kill_process+0x3a7/0x930 [ 2675.631995][ T1351] out_of_memory+0xf67/0x1320 [ 2675.636756][ T1351] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2675.642458][ T1351] ? __pfx___mutex_lock+0x10/0x10 [ 2675.647555][ T1351] ? __pfx_out_of_memory+0x10/0x10 [ 2675.652753][ T1351] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2675.658374][ T1351] ? __pfx_lock_release+0x10/0x10 [ 2675.663477][ T1351] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2675.670324][ T1351] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2675.675607][ T1351] ? mem_cgroup_iter+0x422/0x560 [ 2675.680619][ T1351] try_charge_memcg+0xda2/0x18a0 [ 2675.685666][ T1351] ? __pfx_try_charge_memcg+0x10/0x10 [ 2675.691107][ T1351] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2675.696897][ T1351] ? __pfx_lock_release+0x10/0x10 [ 2675.701996][ T1351] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2675.708054][ T1351] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2675.714022][ T1351] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2675.719994][ T1351] obj_cgroup_charge+0x389/0x630 [ 2675.725007][ T1351] ? obj_cgroup_charge+0x121/0x630 [ 2675.730178][ T1351] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2675.735705][ T1351] ? kmalloc_trace+0x4e/0x360 [ 2675.740455][ T1351] ? __pfx___might_resched+0x10/0x10 [ 2675.745810][ T1351] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2675.751686][ T1351] ? copy_semundo+0xb5/0x240 [ 2675.756339][ T1351] kmalloc_trace+0x216/0x360 [ 2675.761084][ T1351] ? __asan_memcpy+0x40/0x70 [ 2675.765744][ T1351] copy_semundo+0xb5/0x240 [ 2675.770225][ T1351] copy_process+0x1bc3/0x3fc0 [ 2675.774977][ T1351] ? copy_process+0x9c3/0x3fc0 [ 2675.779809][ T1351] ? __pfx_copy_process+0x10/0x10 [ 2675.784895][ T1351] ? __might_fault+0xc5/0x120 [ 2675.789641][ T1351] ? __asan_memset+0x23/0x50 [ 2675.794302][ T1351] kernel_clone+0x21d/0x8d0 [ 2675.798877][ T1351] ? __pfx_kernel_clone+0x10/0x10 [ 2675.803983][ T1351] __se_sys_clone3+0x2cb/0x350 [ 2675.808812][ T1351] ? __pfx___se_sys_clone3+0x10/0x10 [ 2675.814193][ T1351] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2675.820261][ T1351] ? exc_page_fault+0x587/0x870 [ 2675.825360][ T1351] ? do_syscall_64+0xb4/0x240 [ 2675.830092][ T1351] do_syscall_64+0xf9/0x240 [ 2675.834662][ T1351] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2675.840632][ T1351] RIP: 0033:0x7f0f5b4a9b99 [ 2675.845095][ T1351] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2675.864764][ T1351] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2675.873232][ T1351] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2675.881222][ T1351] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2675.889204][ T1351] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2675.897187][ T1351] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2675.905174][ T1351] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2675.913170][ T1351] [ 2675.943667][ T1351] memory: usage 307200kB, limit 307200kB, failcnt 147562 [ 2675.954144][ T1351] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2675.969197][ T1351] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2675.977318][ T1351] Memory cgroup stats for /syz0: [ 2675.977481][ T1351] cache 0 [ 2676.003241][ T1351] rss 12288 [ 2676.025187][ T1351] rss_huge 0 [ 2676.028482][ T1351] shmem 0 [ 2676.031475][ T1351] mapped_file 0 [ 2676.054031][ T1351] dirty 0 [ 2676.057923][ T1351] writeback 0 [ 2676.061638][ T1351] workingset_refault_anon 46204 [ 2676.072691][ T1351] workingset_refault_file 2 [ 2676.078036][ T1351] swap 208896 [ 2676.081369][ T1351] swapcached 8192 [ 2676.092279][ T1351] pgpgin 231897 [ 2676.096292][ T1351] pgpgout 231894 [ 2676.099893][ T1351] pgfault 515168 [ 2676.103484][ T1351] pgmajfault 45066 [ 2676.113860][ T1351] inactive_anon 0 [ 2676.125368][ T1351] active_anon 12288 [ 2676.129254][ T1351] inactive_file 0 [ 2676.132966][ T1351] active_file 0 [ 2676.137501][ T1351] unevictable 0 [ 2676.141013][ T1351] hierarchical_memory_limit 314572800 [ 2676.153760][ T1351] hierarchical_memsw_limit 9223372036854771712 [ 2676.160485][ T1351] total_cache 0 [ 2676.164006][ T1351] total_rss 12288 [ 2676.174350][ T1351] total_rss_huge 0 [ 2676.178142][ T1351] total_shmem 0 [ 2676.181646][ T1351] total_mapped_file 0 [ 2676.186434][ T1351] total_dirty 0 [ 2676.189944][ T1351] total_writeback 0 [ 2676.193779][ T1351] total_workingset_refault_anon 46204 [ 2676.211691][ T1351] total_workingset_refault_file 2 [ 2676.221805][ T1351] total_swap 208896 [ 2676.227474][ T1351] total_swapcached 8192 [ 2676.231689][ T1351] total_pgpgin 231897 [ 2676.241110][ T1351] total_pgpgout 231894 [ 2676.247423][ T1351] total_pgfault 515168 [ 2676.251619][ T1351] total_pgmajfault 45066 [ 2676.261733][ T1351] total_inactive_anon 0 [ 2676.267646][ T1351] total_active_anon 12288 [ 2676.272224][ T1351] total_inactive_file 0 [ 2676.277594][ T1351] total_active_file 0 [ 2676.281634][ T1351] total_unevictable 0 [ 2676.294972][ T1351] anon_cost 0 [ 2676.300240][ T1351] file_cost 0 [ 2676.303693][ T1351] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1351,uid=0 [ 2676.326813][ T1351] Memory cgroup out of memory: Killed process 1351 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2676.911726][ T1352] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2676.925611][ T1352] CPU: 1 PID: 1352 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2676.936191][ T1352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2676.946315][ T1352] Call Trace: [ 2676.949649][ T1352] [ 2676.952624][ T1352] dump_stack_lvl+0x1e7/0x2e0 [ 2676.957366][ T1352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2676.962714][ T1352] ? __pfx__printk+0x10/0x10 [ 2676.967353][ T1352] ? ___ratelimit+0x4c4/0x670 [ 2676.972111][ T1352] ? __pfx____ratelimit+0x10/0x10 [ 2676.977332][ T1352] dump_header+0xda/0x6a0 [ 2676.981738][ T1352] oom_kill_process+0x3a7/0x930 [ 2676.986753][ T1352] out_of_memory+0xf67/0x1320 [ 2676.991636][ T1352] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2676.997321][ T1352] ? __pfx___mutex_lock+0x10/0x10 [ 2677.002405][ T1352] ? __pfx_out_of_memory+0x10/0x10 [ 2677.007604][ T1352] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2677.013227][ T1352] ? __pfx_lock_release+0x10/0x10 [ 2677.018346][ T1352] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2677.024499][ T1352] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2677.029769][ T1352] ? mem_cgroup_iter+0x422/0x560 [ 2677.034971][ T1352] try_charge_memcg+0xda2/0x18a0 [ 2677.040007][ T1352] ? __pfx_try_charge_memcg+0x10/0x10 [ 2677.045440][ T1352] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2677.051188][ T1352] ? __pfx_lock_release+0x10/0x10 [ 2677.056241][ T1352] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2677.062252][ T1352] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2677.067989][ T1352] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2677.073818][ T1352] obj_cgroup_charge+0x389/0x630 [ 2677.079376][ T1352] ? obj_cgroup_charge+0x121/0x630 [ 2677.084503][ T1352] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2677.089995][ T1352] ? kmalloc_trace+0x4e/0x360 [ 2677.094699][ T1352] ? __pfx___might_resched+0x10/0x10 [ 2677.099998][ T1352] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2677.105851][ T1352] ? copy_semundo+0xb5/0x240 [ 2677.110450][ T1352] kmalloc_trace+0x216/0x360 [ 2677.115055][ T1352] ? __asan_memcpy+0x40/0x70 [ 2677.119672][ T1352] copy_semundo+0xb5/0x240 [ 2677.124104][ T1352] copy_process+0x1bc3/0x3fc0 [ 2677.128813][ T1352] ? copy_process+0x9c3/0x3fc0 [ 2677.133590][ T1352] ? __pfx_copy_process+0x10/0x10 [ 2677.138633][ T1352] ? __might_fault+0xc5/0x120 [ 2677.143368][ T1352] ? __asan_memset+0x23/0x50 [ 2677.148020][ T1352] kernel_clone+0x21d/0x8d0 [ 2677.152586][ T1352] ? __pfx_kernel_clone+0x10/0x10 [ 2677.157648][ T1352] __se_sys_clone3+0x2cb/0x350 [ 2677.162429][ T1352] ? __pfx___se_sys_clone3+0x10/0x10 [ 2677.167765][ T1352] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2677.173788][ T1352] ? exc_page_fault+0x587/0x870 [ 2677.178749][ T1352] ? do_syscall_64+0xb4/0x240 [ 2677.183442][ T1352] do_syscall_64+0xf9/0x240 [ 2677.188232][ T1352] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2677.194145][ T1352] RIP: 0033:0x7f0f5b4a9b99 [ 2677.198572][ T1352] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2677.218273][ T1352] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2677.226697][ T1352] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2677.234685][ T1352] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2677.242673][ T1352] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2677.250663][ T1352] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2677.258674][ T1352] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2677.266669][ T1352] [ 2677.292841][ T1352] memory: usage 307200kB, limit 307200kB, failcnt 147986 [ 2677.300112][ T1352] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2677.319885][ T1352] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2677.332449][ T1352] Memory cgroup stats for /syz0: [ 2677.332623][ T1352] cache 0 [ 2677.347729][ T1352] rss 0 [ 2677.350748][ T1352] rss_huge 0 [ 2677.354067][ T1352] shmem 0 [ 2677.359991][ T1352] mapped_file 0 [ 2677.363608][ T1352] dirty 0 [ 2677.374056][ T1352] writeback 0 [ 2677.379977][ T1352] workingset_refault_anon 46359 [ 2677.388078][ T1352] workingset_refault_file 2 [ 2677.392636][ T1352] swap 221184 [ 2677.398808][ T1352] swapcached 0 [ 2677.402231][ T1352] pgpgin 232063 [ 2677.406127][ T1352] pgpgout 232063 [ 2677.409716][ T1352] pgfault 515431 [ 2677.413292][ T1352] pgmajfault 45220 [ 2677.423266][ T1352] inactive_anon 0 [ 2677.427390][ T1352] active_anon 0 [ 2677.431168][ T1352] inactive_file 0 [ 2677.439936][ T1352] active_file 0 [ 2677.443449][ T1352] unevictable 0 [ 2677.447661][ T1352] hierarchical_memory_limit 314572800 [ 2677.453079][ T1352] hierarchical_memsw_limit 9223372036854771712 [ 2677.466215][ T1352] total_cache 0 [ 2677.469747][ T1352] total_rss 0 [ 2677.473064][ T1352] total_rss_huge 0 [ 2677.481029][ T1352] total_shmem 0 [ 2677.487451][ T1352] total_mapped_file 0 [ 2677.491484][ T1352] total_dirty 0 [ 2677.501727][ T1352] total_writeback 0 [ 2677.508689][ T1352] total_workingset_refault_anon 46359 [ 2677.514119][ T1352] total_workingset_refault_file 2 12:19:46 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2677.522991][ T1352] total_swap 221184 [ 2677.529679][ T1352] total_swapcached 0 [ 2677.533644][ T1352] total_pgpgin 232063 [ 2677.542244][ T1352] total_pgpgout 232063 [ 2677.549183][ T1352] total_pgfault 515431 [ 2677.553309][ T1352] total_pgmajfault 45220 [ 2677.561574][ T1352] total_inactive_anon 0 [ 2677.569145][ T1352] total_active_anon 0 [ 2677.573183][ T1352] total_inactive_file 0 [ 2677.581530][ T1352] total_active_file 0 [ 2677.588285][ T1352] total_unevictable 0 [ 2677.592432][ T1352] anon_cost 0 [ 2677.599934][ T1352] file_cost 0 [ 2677.603284][ T1352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1352,uid=0 [ 2677.624394][ T1352] Memory cgroup out of memory: Killed process 1352 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2678.356798][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2678.369781][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2678.380282][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2678.390476][ T5099] Call Trace: [ 2678.393802][ T5099] [ 2678.396773][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2678.401508][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2678.406766][ T5099] ? __pfx__printk+0x10/0x10 [ 2678.411405][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2678.416167][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2678.421285][ T5099] dump_header+0xda/0x6a0 [ 2678.426215][ T5099] oom_kill_process+0x3a7/0x930 [ 2678.431143][ T5099] out_of_memory+0xf67/0x1320 [ 2678.435884][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2678.441574][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2678.446656][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2678.451839][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2678.457445][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2678.462533][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2678.468666][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2678.473920][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2678.478918][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2678.483887][ T5099] ? mark_lock+0x9a/0x350 [ 2678.488250][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2678.493664][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2678.499827][ T5099] charge_memcg+0xa2/0x160 [ 2678.504252][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2678.510340][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2678.515896][ T5099] ? mark_lock+0x9a/0x350 [ 2678.520246][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2678.526261][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2678.531657][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2678.537565][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2678.542608][ T5099] ? xas_descend+0x37e/0x470 [ 2678.547216][ T5099] swapin_readahead+0x1ea/0x1070 [ 2678.552170][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2678.557317][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2678.562704][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2678.568012][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2678.573308][ T5099] do_swap_page+0x791/0x3f40 [ 2678.577923][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2678.582719][ T5099] ? do_swap_page+0x154/0x3f40 [ 2678.587497][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2678.592536][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2678.598018][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2678.603841][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2678.609060][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2678.614221][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2678.619713][ T5099] ? mt_find+0x226/0x850 [ 2678.623969][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2678.629036][ T5099] ? mt_find+0x62d/0x850 [ 2678.633296][ T5099] ? mt_find+0x226/0x850 [ 2678.637577][ T5099] ? find_vma+0x142/0x1c0 [ 2678.641923][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2678.646614][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2678.652617][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2678.657587][ T5099] exc_page_fault+0x2ad/0x870 [ 2678.662370][ T5099] asm_exc_page_fault+0x26/0x30 [ 2678.667238][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2678.672377][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2678.692000][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2678.698091][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2678.706075][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2678.714055][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2678.722124][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2678.730115][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2678.738122][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2678.744050][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2678.750398][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2678.756132][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2678.761783][ T5099] do_syscall_64+0x108/0x240 [ 2678.766390][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2678.772300][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2678.776734][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2678.796379][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2678.804817][ T5099] RAX: 0000000000000000 RBX: 0000000000004281 RCX: 00007f0f5b4a91b5 [ 2678.812796][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2678.820862][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2678.828856][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2678.836841][ T5099] R13: 000000000028dc02 R14: 000000000028dc02 R15: 0000000000000000 [ 2678.844837][ T5099] [ 2678.870628][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 148516 [ 2678.879019][ T5099] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 2678.899305][ T5099] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2678.910458][ T5099] Memory cgroup stats for /syz0: [ 2678.910630][ T5099] cache 0 [ 2678.923797][ T5099] rss 12288 [ 2678.927864][ T5099] rss_huge 0 [ 2678.931118][ T5099] shmem 0 [ 2678.934178][ T5099] mapped_file 0 [ 2678.938574][ T5099] dirty 0 [ 2678.941655][ T5099] writeback 0 [ 2678.946395][ T5099] workingset_refault_anon 46566 [ 2678.961734][ T5099] workingset_refault_file 2 [ 2678.967252][ T5099] swap 249856 [ 2678.970602][ T5099] swapcached 8192 [ 2678.974274][ T5099] pgpgin 232281 [ 2678.979602][ T5099] pgpgout 232278 [ 2678.983212][ T5099] pgfault 515769 [ 2678.988504][ T5099] pgmajfault 45420 [ 2678.992292][ T5099] inactive_anon 0 [ 2678.996665][ T5099] active_anon 12288 [ 2679.000552][ T5099] inactive_file 0 [ 2679.004232][ T5099] active_file 0 [ 2679.008557][ T5099] unevictable 0 [ 2679.012053][ T5099] hierarchical_memory_limit 314572800 [ 2679.028740][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2679.035486][ T5099] total_cache 0 [ 2679.039018][ T5099] total_rss 12288 [ 2679.042689][ T5099] total_rss_huge 0 [ 2679.047547][ T5099] total_shmem 0 [ 2679.051057][ T5099] total_mapped_file 0 [ 2679.055721][ T5099] total_dirty 0 [ 2679.059230][ T5099] total_writeback 0 [ 2679.063056][ T5099] total_workingset_refault_anon 46566 [ 2679.069774][ T5099] total_workingset_refault_file 2 [ 2679.084821][ T5099] total_swap 249856 [ 2679.093619][ T5099] total_swapcached 8192 [ 2679.098575][ T5099] total_pgpgin 232281 [ 2679.102613][ T5099] total_pgpgout 232278 [ 2679.113837][ T5099] total_pgfault 515769 [ 2679.130777][ T5099] total_pgmajfault 45420 [ 2679.135702][ T5099] total_inactive_anon 0 [ 2679.139914][ T5099] total_active_anon 12288 [ 2679.144285][ T5099] total_inactive_file 0 [ 2679.149693][ T5099] total_active_file 0 [ 2679.153713][ T5099] total_unevictable 0 [ 2679.158481][ T5099] anon_cost 0 [ 2679.161835][ T5099] file_cost 0 [ 2679.166006][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1355,uid=0 12:19:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25a]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2679.182417][ T5099] Memory cgroup out of memory: Killed process 1355 (syz-executor.0) total-vm:54508kB, anon-rss:404kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2679.786466][ T1356] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2679.797732][ T1356] CPU: 1 PID: 1356 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2679.808131][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2679.818241][ T1356] Call Trace: [ 2679.821571][ T1356] [ 2679.824546][ T1356] dump_stack_lvl+0x1e7/0x2e0 [ 2679.829297][ T1356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2679.834650][ T1356] ? __pfx__printk+0x10/0x10 [ 2679.839302][ T1356] ? ___ratelimit+0x4c4/0x670 [ 2679.844062][ T1356] ? __pfx____ratelimit+0x10/0x10 [ 2679.849191][ T1356] dump_header+0xda/0x6a0 [ 2679.853604][ T1356] oom_kill_process+0x3a7/0x930 [ 2679.858537][ T1356] out_of_memory+0xf67/0x1320 [ 2679.863286][ T1356] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2679.868981][ T1356] ? __pfx___mutex_lock+0x10/0x10 [ 2679.874175][ T1356] ? __pfx_out_of_memory+0x10/0x10 [ 2679.879364][ T1356] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2679.884975][ T1356] ? __pfx_lock_release+0x10/0x10 [ 2679.890079][ T1356] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2679.896224][ T1356] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2679.901527][ T1356] ? mem_cgroup_iter+0x422/0x560 [ 2679.906571][ T1356] try_charge_memcg+0xda2/0x18a0 [ 2679.911589][ T1356] ? __pfx_try_charge_memcg+0x10/0x10 [ 2679.917000][ T1356] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2679.922753][ T1356] ? __pfx_lock_release+0x10/0x10 [ 2679.927800][ T1356] ? memcg_account_kmem+0x1e7/0x210 [ 2679.933549][ T1356] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2679.939459][ T1356] __memcg_kmem_charge_page+0xe1/0x250 [ 2679.944936][ T1356] memcg_charge_kernel_stack+0x304/0x550 [ 2679.950679][ T1356] dup_task_struct+0x40d/0x7d0 [ 2679.955727][ T1356] copy_process+0x5d5/0x3fc0 [ 2679.960357][ T1356] ? __might_fault+0xa9/0x120 [ 2679.965057][ T1356] ? __pfx_lock_release+0x10/0x10 [ 2679.970106][ T1356] ? __pfx_copy_process+0x10/0x10 [ 2679.975141][ T1356] ? __might_fault+0xc5/0x120 [ 2679.979840][ T1356] ? __asan_memset+0x23/0x50 [ 2679.984454][ T1356] kernel_clone+0x21d/0x8d0 [ 2679.989047][ T1356] ? __pfx_kernel_clone+0x10/0x10 [ 2679.994195][ T1356] __se_sys_clone3+0x2cb/0x350 [ 2679.998982][ T1356] ? __pfx___se_sys_clone3+0x10/0x10 [ 2680.004321][ T1356] ? do_syscall_64+0x108/0x240 [ 2680.009222][ T1356] ? do_syscall_64+0xb4/0x240 [ 2680.013919][ T1356] do_syscall_64+0xf9/0x240 [ 2680.018438][ T1356] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2680.024380][ T1356] RIP: 0033:0x7f0f5b4a9b99 [ 2680.028836][ T1356] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2680.048575][ T1356] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2680.057114][ T1356] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2680.065110][ T1356] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2680.073109][ T1356] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2680.081090][ T1356] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2680.089071][ T1356] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2680.097072][ T1356] [ 2680.139468][ T1356] memory: usage 307200kB, limit 307200kB, failcnt 148969 [ 2680.158805][ T1356] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2680.172654][ T1356] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2680.181807][ T1356] Memory cgroup stats for /syz0: [ 2680.181968][ T1356] cache 0 [ 2680.197857][ T1356] rss 12288 [ 2680.201127][ T1356] rss_huge 0 [ 2680.212351][ T1356] shmem 0 [ 2680.218616][ T1356] mapped_file 0 [ 2680.222252][ T1356] dirty 0 [ 2680.226675][ T1356] writeback 0 [ 2680.230111][ T1356] workingset_refault_anon 46751 [ 2680.236265][ T1356] workingset_refault_file 2 [ 2680.240923][ T1356] swap 208896 [ 2680.245028][ T1356] swapcached 8192 [ 2680.248813][ T1356] pgpgin 232477 [ 2680.252424][ T1356] pgpgout 232474 [ 2680.257275][ T1356] pgfault 516072 [ 2680.261175][ T1356] pgmajfault 45601 [ 2680.267603][ T1356] inactive_anon 0 [ 2680.272901][ T1356] active_anon 12288 [ 2680.277532][ T1356] inactive_file 0 [ 2680.281331][ T1356] active_file 0 [ 2680.286065][ T1356] unevictable 0 [ 2680.289722][ T1356] hierarchical_memory_limit 314572800 [ 2680.295217][ T1356] hierarchical_memsw_limit 9223372036854771712 [ 2680.301414][ T1356] total_cache 0 [ 2680.308857][ T1356] total_rss 12288 [ 2680.312596][ T1356] total_rss_huge 0 [ 2680.318533][ T1356] total_shmem 0 [ 2680.322046][ T1356] total_mapped_file 0 [ 2680.328943][ T1356] total_dirty 0 [ 2680.332492][ T1356] total_writeback 0 [ 2680.337583][ T1356] total_workingset_refault_anon 46751 [ 2680.343113][ T1356] total_workingset_refault_file 2 [ 2680.349381][ T1356] total_swap 208896 [ 2680.353356][ T1356] total_swapcached 8192 [ 2680.360072][ T1356] total_pgpgin 232477 [ 2680.364201][ T1356] total_pgpgout 232474 [ 2680.369154][ T1356] total_pgfault 516072 [ 2680.373376][ T1356] total_pgmajfault 45601 [ 2680.379662][ T1356] total_inactive_anon 0 [ 2680.384887][ T1356] total_active_anon 12288 [ 2680.389372][ T1356] total_inactive_file 0 [ 2680.394215][ T1356] total_active_file 0 [ 2680.399153][ T1356] total_unevictable 0 [ 2680.403653][ T1356] anon_cost 0 [ 2680.408166][ T1356] file_cost 0 [ 2680.411616][ T1356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1356,uid=0 [ 2680.428284][ T1356] Memory cgroup out of memory: Killed process 1356 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x272]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:49 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2681.001601][ T1358] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2681.019766][ T1358] CPU: 0 PID: 1358 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2681.030175][ T1358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2681.040260][ T1358] Call Trace: [ 2681.043543][ T1358] [ 2681.046515][ T1358] dump_stack_lvl+0x1e7/0x2e0 [ 2681.051263][ T1358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2681.056486][ T1358] ? __pfx__printk+0x10/0x10 [ 2681.061091][ T1358] ? ___ratelimit+0x4c4/0x670 [ 2681.065801][ T1358] ? __pfx____ratelimit+0x10/0x10 [ 2681.070869][ T1358] dump_header+0xda/0x6a0 [ 2681.075227][ T1358] oom_kill_process+0x3a7/0x930 [ 2681.080103][ T1358] out_of_memory+0xf67/0x1320 [ 2681.084796][ T1358] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2681.090439][ T1358] ? __pfx___mutex_lock+0x10/0x10 [ 2681.095480][ T1358] ? __pfx_out_of_memory+0x10/0x10 [ 2681.100608][ T1358] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2681.106164][ T1358] ? __pfx_lock_release+0x10/0x10 [ 2681.111205][ T1358] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2681.117296][ T1358] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2681.122500][ T1358] ? mem_cgroup_iter+0x422/0x560 [ 2681.127450][ T1358] try_charge_memcg+0xda2/0x18a0 [ 2681.132420][ T1358] ? __pfx_try_charge_memcg+0x10/0x10 [ 2681.137799][ T1358] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2681.143526][ T1358] ? __pfx_lock_release+0x10/0x10 [ 2681.148560][ T1358] ? memcg_account_kmem+0x1e7/0x210 [ 2681.153774][ T1358] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2681.159598][ T1358] __memcg_kmem_charge_page+0xe1/0x250 [ 2681.165077][ T1358] memcg_charge_kernel_stack+0x210/0x550 [ 2681.170730][ T1358] dup_task_struct+0x40d/0x7d0 [ 2681.175590][ T1358] copy_process+0x5d5/0x3fc0 [ 2681.180194][ T1358] ? __might_fault+0xa9/0x120 [ 2681.184881][ T1358] ? __pfx_lock_release+0x10/0x10 [ 2681.189943][ T1358] ? __pfx_copy_process+0x10/0x10 [ 2681.194981][ T1358] ? __might_fault+0xc5/0x120 [ 2681.199669][ T1358] ? __asan_memset+0x23/0x50 [ 2681.204269][ T1358] kernel_clone+0x21d/0x8d0 [ 2681.208803][ T1358] ? __pfx_kernel_clone+0x10/0x10 [ 2681.213851][ T1358] __se_sys_clone3+0x2cb/0x350 [ 2681.218887][ T1358] ? __pfx___se_sys_clone3+0x10/0x10 [ 2681.224188][ T1358] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2681.230193][ T1358] ? exc_page_fault+0x587/0x870 [ 2681.235140][ T1358] ? do_syscall_64+0xb4/0x240 [ 2681.239822][ T1358] do_syscall_64+0xf9/0x240 [ 2681.244428][ T1358] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2681.250366][ T1358] RIP: 0033:0x7f0f5b4a9b99 [ 2681.254792][ T1358] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2681.274411][ T1358] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2681.282851][ T1358] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2681.290832][ T1358] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2681.298813][ T1358] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2681.306791][ T1358] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2681.314769][ T1358] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2681.322756][ T1358] [ 2681.348593][ T1358] memory: usage 307180kB, limit 307200kB, failcnt 149494 [ 2681.356334][ T1358] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 2681.364929][ T1358] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2681.372516][ T1358] Memory cgroup stats for /syz0: [ 2681.372675][ T1358] cache 0 [ 2681.381183][ T1358] rss 4096 [ 2681.385063][ T1358] rss_huge 0 [ 2681.388288][ T1358] shmem 0 [ 2681.391228][ T1358] mapped_file 0 [ 2681.399513][ T1358] dirty 0 [ 2681.402725][ T1358] writeback 0 [ 2681.406567][ T1358] workingset_refault_anon 46952 [ 2681.411808][ T1358] workingset_refault_file 2 [ 2681.417693][ T1358] swap 212992 [ 2681.421063][ T1358] swapcached 8192 [ 2681.425182][ T1358] pgpgin 232691 [ 2681.428656][ T1358] pgpgout 232689 [ 2681.432290][ T1358] pgfault 516369 [ 2681.436908][ T1358] pgmajfault 45786 [ 2681.440667][ T1358] inactive_anon 0 [ 2681.445034][ T1358] active_anon 4096 [ 2681.448972][ T1358] inactive_file 0 [ 2681.452647][ T1358] active_file 0 [ 2681.456257][ T1358] unevictable 0 [ 2681.459739][ T1358] hierarchical_memory_limit 314572800 [ 2681.465196][ T1358] hierarchical_memsw_limit 9223372036854771712 [ 2681.471470][ T1358] total_cache 0 [ 2681.475452][ T1358] total_rss 4096 [ 2681.479050][ T1358] total_rss_huge 0 [ 2681.482799][ T1358] total_shmem 0 [ 2681.486808][ T1358] total_mapped_file 0 [ 2681.490824][ T1358] total_dirty 0 [ 2681.495235][ T1358] total_writeback 0 [ 2681.499560][ T1358] total_workingset_refault_anon 46952 [ 2681.505408][ T1358] total_workingset_refault_file 2 [ 2681.510483][ T1358] total_swap 212992 [ 2681.514496][ T1358] total_swapcached 8192 [ 2681.518675][ T1358] total_pgpgin 232691 [ 2681.522665][ T1358] total_pgpgout 232689 [ 2681.526840][ T1358] total_pgfault 516369 [ 2681.530931][ T1358] total_pgmajfault 45786 [ 2681.535581][ T1358] total_inactive_anon 0 [ 2681.539770][ T1358] total_active_anon 4096 [ 2681.544011][ T1358] total_inactive_file 0 [ 2681.548336][ T1358] total_active_file 0 [ 2681.552345][ T1358] total_unevictable 0 [ 2681.556798][ T1358] anon_cost 0 [ 2681.560432][ T1358] file_cost 0 [ 2681.563719][ T1358] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1358,uid=0 [ 2681.580274][ T1358] Memory cgroup out of memory: Killed process 1358 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x291]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2682.212701][ T1361] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2682.224046][ T1361] CPU: 0 PID: 1361 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2682.234439][ T1361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2682.244551][ T1361] Call Trace: [ 2682.247871][ T1361] [ 2682.250842][ T1361] dump_stack_lvl+0x1e7/0x2e0 [ 2682.255583][ T1361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2682.260815][ T1361] ? __pfx__printk+0x10/0x10 [ 2682.265451][ T1361] ? ___ratelimit+0x4c4/0x670 [ 2682.270190][ T1361] ? __pfx____ratelimit+0x10/0x10 [ 2682.275255][ T1361] dump_header+0xda/0x6a0 [ 2682.279614][ T1361] oom_kill_process+0x3a7/0x930 [ 2682.284492][ T1361] out_of_memory+0xf67/0x1320 [ 2682.289193][ T1361] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2682.294855][ T1361] ? __pfx___mutex_lock+0x10/0x10 [ 2682.299896][ T1361] ? __pfx_out_of_memory+0x10/0x10 [ 2682.305121][ T1361] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2682.310683][ T1361] ? __pfx_lock_release+0x10/0x10 [ 2682.315726][ T1361] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2682.321815][ T1361] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2682.327049][ T1361] ? mem_cgroup_iter+0x422/0x560 [ 2682.332018][ T1361] try_charge_memcg+0xda2/0x18a0 [ 2682.336997][ T1361] ? __pfx_try_charge_memcg+0x10/0x10 [ 2682.342390][ T1361] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2682.348123][ T1361] ? __pfx_lock_release+0x10/0x10 [ 2682.353182][ T1361] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2682.359012][ T1361] __memcg_kmem_charge_page+0xe1/0x250 [ 2682.364485][ T1361] memcg_charge_kernel_stack+0xa7/0x550 [ 2682.370050][ T1361] dup_task_struct+0x40d/0x7d0 [ 2682.374827][ T1361] copy_process+0x5d5/0x3fc0 [ 2682.379441][ T1361] ? __might_fault+0xa9/0x120 [ 2682.384134][ T1361] ? __pfx_lock_release+0x10/0x10 [ 2682.389184][ T1361] ? __pfx_copy_process+0x10/0x10 [ 2682.394221][ T1361] ? __might_fault+0xc5/0x120 [ 2682.398920][ T1361] ? __asan_memset+0x23/0x50 [ 2682.403622][ T1361] kernel_clone+0x21d/0x8d0 [ 2682.408146][ T1361] ? __pfx_kernel_clone+0x10/0x10 [ 2682.413207][ T1361] __se_sys_clone3+0x2cb/0x350 [ 2682.418004][ T1361] ? __pfx___se_sys_clone3+0x10/0x10 [ 2682.423320][ T1361] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2682.429332][ T1361] ? exc_page_fault+0x587/0x870 [ 2682.434201][ T1361] ? do_syscall_64+0xb4/0x240 [ 2682.438891][ T1361] do_syscall_64+0xf9/0x240 [ 2682.443417][ T1361] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2682.449338][ T1361] RIP: 0033:0x7f0f5b4a9b99 [ 2682.453768][ T1361] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2682.473480][ T1361] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2682.481908][ T1361] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2682.489890][ T1361] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2682.497873][ T1361] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2682.505861][ T1361] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2682.513941][ T1361] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2682.521946][ T1361] [ 2682.560967][ T1361] memory: usage 307200kB, limit 307200kB, failcnt 150036 [ 2682.570895][ T1361] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 2682.583004][ T1361] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2682.599836][ T1361] Memory cgroup stats for /syz0: [ 2682.599999][ T1361] cache 0 [ 2682.614114][ T1361] rss 12288 [ 2682.621676][ T1361] rss_huge 0 [ 2682.627726][ T1361] shmem 0 [ 2682.630859][ T1361] mapped_file 0 [ 2682.638624][ T1361] dirty 0 [ 2682.641752][ T1361] writeback 0 [ 2682.648305][ T1361] workingset_refault_anon 47134 [ 2682.653350][ T1361] workingset_refault_file 2 [ 2682.662165][ T1361] swap 212992 [ 2682.668604][ T1361] swapcached 8192 [ 2682.672394][ T1361] pgpgin 232884 [ 2682.680204][ T1361] pgpgout 232881 [ 2682.683913][ T1361] pgfault 516649 [ 2682.690495][ T1361] pgmajfault 45952 [ 2682.701755][ T1361] inactive_anon 0 [ 2682.708331][ T1361] active_anon 12288 [ 2682.712313][ T1361] inactive_file 0 [ 2682.720312][ T1361] active_file 0 [ 2682.723957][ T1361] unevictable 0 [ 2682.730052][ T1361] hierarchical_memory_limit 314572800 [ 2682.739550][ T1361] hierarchical_memsw_limit 9223372036854771712 [ 2682.748767][ T1361] total_cache 0 [ 2682.752389][ T1361] total_rss 12288 [ 2682.760769][ T1361] total_rss_huge 0 [ 2682.767751][ T1361] total_shmem 0 [ 2682.771385][ T1361] total_mapped_file 0 [ 2682.780534][ T1361] total_dirty 0 [ 2682.784256][ T1361] total_writeback 0 [ 2682.788976][ T1361] total_workingset_refault_anon 47134 [ 2682.795308][ T1361] total_workingset_refault_file 2 [ 2682.800490][ T1361] total_swap 212992 [ 2682.805216][ T1361] total_swapcached 8192 [ 2682.809530][ T1361] total_pgpgin 232884 [ 2682.813652][ T1361] total_pgpgout 232881 [ 2682.818909][ T1361] total_pgfault 516649 [ 2682.823137][ T1361] total_pgmajfault 45952 [ 2682.830197][ T1361] total_inactive_anon 0 [ 2682.838494][ T1361] total_active_anon 12288 [ 2682.843015][ T1361] total_inactive_file 0 [ 2682.850240][ T1361] total_active_file 0 [ 2682.858583][ T1361] total_unevictable 0 [ 2682.862729][ T1361] anon_cost 0 [ 2682.869406][ T1361] file_cost 0 [ 2682.872851][ T1361] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1361,uid=0 [ 2682.896401][ T1361] Memory cgroup out of memory: Killed process 1361 (syz-executor.0) total-vm:54508kB, anon-rss:384kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:19:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2683.680556][ T1362] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2683.700694][ T1362] CPU: 1 PID: 1362 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2683.711116][ T1362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2683.721224][ T1362] Call Trace: [ 2683.724555][ T1362] [ 2683.727544][ T1362] dump_stack_lvl+0x1e7/0x2e0 [ 2683.732297][ T1362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2683.737552][ T1362] ? __pfx__printk+0x10/0x10 [ 2683.742214][ T1362] ? ___ratelimit+0x4c4/0x670 [ 2683.746965][ T1362] ? __pfx____ratelimit+0x10/0x10 [ 2683.752057][ T1362] dump_header+0xda/0x6a0 [ 2683.756453][ T1362] oom_kill_process+0x3a7/0x930 [ 2683.761372][ T1362] out_of_memory+0xf67/0x1320 [ 2683.766117][ T1362] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2683.771828][ T1362] ? __pfx___mutex_lock+0x10/0x10 [ 2683.776926][ T1362] ? __pfx_out_of_memory+0x10/0x10 [ 2683.782125][ T1362] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2683.787748][ T1362] ? __pfx_lock_release+0x10/0x10 [ 2683.792848][ T1362] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2683.798996][ T1362] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2683.804276][ T1362] ? mem_cgroup_iter+0x422/0x560 [ 2683.809283][ T1362] try_charge_memcg+0xda2/0x18a0 [ 2683.814276][ T1362] ? mark_lock+0x9a/0x350 [ 2683.818691][ T1362] ? __pfx_try_charge_memcg+0x10/0x10 [ 2683.824160][ T1362] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2683.830466][ T1362] charge_memcg+0xa2/0x160 [ 2683.835041][ T1362] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2683.841182][ T1362] __read_swap_cache_async+0x480/0x8b0 [ 2683.846791][ T1362] ? mark_lock+0x9a/0x350 [ 2683.851180][ T1362] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2683.857312][ T1362] swap_cluster_readahead+0x67c/0x810 [ 2683.862765][ T1362] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2683.868726][ T1362] ? __pfx_lock_release+0x10/0x10 [ 2683.873843][ T1362] ? xas_descend+0x37e/0x470 [ 2683.878616][ T1362] swapin_readahead+0x1ea/0x1070 [ 2683.883620][ T1362] ? filemap_get_entry+0x127/0x4e0 [ 2683.888855][ T1362] ? __pfx_swapin_readahead+0x10/0x10 [ 2683.894307][ T1362] ? __filemap_get_folio+0x935/0xbc0 [ 2683.899670][ T1362] ? swap_cache_get_folio+0x9f/0x570 [ 2683.905021][ T1362] do_swap_page+0x791/0x3f40 [ 2683.909678][ T1362] ? rcu_is_watching+0x15/0xb0 [ 2683.914521][ T1362] ? do_swap_page+0x154/0x3f40 [ 2683.919349][ T1362] ? __pfx_do_swap_page+0x10/0x10 [ 2683.924429][ T1362] ? pte_offset_map_nolock+0x137/0x1f0 [ 2683.929970][ T1362] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2683.935840][ T1362] ? __pfx_validate_chain+0x10/0x10 [ 2683.941100][ T1362] __handle_mm_fault+0x15e8/0x72d0 [ 2683.946398][ T1362] ? __pfx___handle_mm_fault+0x10/0x10 [ 2683.951941][ T1362] ? mt_find+0x226/0x850 [ 2683.956220][ T1362] ? __pfx_lock_release+0x10/0x10 [ 2683.961279][ T1362] ? mt_find+0x62d/0x850 [ 2683.965532][ T1362] ? mt_find+0x226/0x850 [ 2683.969801][ T1362] ? find_vma+0x142/0x1c0 [ 2683.974147][ T1362] ? __pfx_find_vma+0x10/0x10 [ 2683.978835][ T1362] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2683.984840][ T1362] handle_mm_fault+0x3c1/0x8a0 [ 2683.989641][ T1362] exc_page_fault+0x2ad/0x870 [ 2683.994453][ T1362] asm_exc_page_fault+0x26/0x30 [ 2683.999459][ T1362] RIP: 0010:__put_user_4+0x11/0x20 [ 2684.004705][ T1362] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 2684.024433][ T1362] RSP: 0018:ffffc90003cf7bd8 EFLAGS: 00050206 [ 2684.030511][ T1362] RAX: 0000000000004287 RBX: 0000000000000000 RCX: 00007f0f5c2c8990 [ 2684.038485][ T1362] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2684.046482][ T1362] RBP: ffffc90003cf7d10 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2684.054482][ T1362] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc90003cf7d78 [ 2684.062456][ T1362] R13: 00000000003d0f00 R14: ffffc90003cf7c40 R15: dffffc0000000000 [ 2684.070448][ T1362] kernel_clone+0x363/0x8d0 [ 2684.074974][ T1362] ? __pfx_kernel_clone+0x10/0x10 [ 2684.080019][ T1362] __se_sys_clone3+0x2cb/0x350 [ 2684.084792][ T1362] ? __pfx___se_sys_clone3+0x10/0x10 [ 2684.090094][ T1362] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2684.096210][ T1362] ? exc_page_fault+0x587/0x870 [ 2684.101185][ T1362] ? do_syscall_64+0xb4/0x240 [ 2684.105893][ T1362] do_syscall_64+0xf9/0x240 [ 2684.110412][ T1362] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2684.116311][ T1362] RIP: 0033:0x7f0f5b4a9b99 [ 2684.120729][ T1362] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2684.140447][ T1362] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2684.149068][ T1362] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2684.157075][ T1362] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2684.165116][ T1362] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2684.173090][ T1362] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2684.181091][ T1362] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2684.189104][ T1362] [ 2684.211967][ T1362] memory: usage 307200kB, limit 307200kB, failcnt 150559 [ 2684.219306][ T1362] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2684.227785][ T1362] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2684.235181][ T1362] Memory cgroup stats for /syz0: [ 2684.235325][ T1362] cache 0 [ 2684.243446][ T1362] rss 20480 [ 2684.246963][ T1362] rss_huge 0 [ 2684.250190][ T1362] shmem 0 [ 2684.253123][ T1362] mapped_file 0 [ 2684.256743][ T1362] dirty 0 [ 2684.259707][ T1362] writeback 0 [ 2684.263020][ T1362] workingset_refault_anon 47321 [ 2684.268219][ T1362] workingset_refault_file 2 [ 2684.272770][ T1362] swap 200704 [ 2684.276194][ T1362] swapcached 4096 [ 2684.279922][ T1362] pgpgin 233082 [ 2684.283401][ T1362] pgpgout 233077 [ 2684.287382][ T1362] pgfault 516957 [ 2684.290965][ T1362] pgmajfault 46137 [ 2684.295120][ T1362] inactive_anon 0 [ 2684.298801][ T1362] active_anon 20480 [ 2684.302647][ T1362] inactive_file 0 [ 2684.306745][ T1362] active_file 0 [ 2684.310345][ T1362] unevictable 0 [ 2684.313816][ T1362] hierarchical_memory_limit 314572800 [ 2684.320319][ T1362] hierarchical_memsw_limit 9223372036854771712 [ 2684.328306][ T1362] total_cache 0 [ 2684.331832][ T1362] total_rss 20480 [ 2684.336094][ T1362] total_rss_huge 0 [ 2684.339869][ T1362] total_shmem 0 [ 2684.343366][ T1362] total_mapped_file 0 [ 2684.348436][ T1362] total_dirty 0 [ 2684.351931][ T1362] total_writeback 0 [ 2684.356206][ T1362] total_workingset_refault_anon 47321 [ 2684.361610][ T1362] total_workingset_refault_file 2 [ 2684.366834][ T1362] total_swap 200704 [ 2684.370754][ T1362] total_swapcached 4096 [ 2684.375023][ T1362] total_pgpgin 233082 [ 2684.379053][ T1362] total_pgpgout 233077 [ 2684.383147][ T1362] total_pgfault 516957 [ 2684.387839][ T1362] total_pgmajfault 46137 [ 2684.392115][ T1362] total_inactive_anon 0 [ 2684.396400][ T1362] total_active_anon 20480 [ 2684.400757][ T1362] total_inactive_file 0 [ 2684.405054][ T1362] total_active_file 0 [ 2684.409076][ T1362] total_unevictable 0 [ 2684.413073][ T1362] anon_cost 0 [ 2684.416965][ T1362] file_cost 0 [ 2684.420282][ T1362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1362,uid=0 [ 2684.436501][ T1362] Memory cgroup out of memory: Killed process 1362 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2684.960165][ T1366] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2684.973788][ T1366] CPU: 1 PID: 1366 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2684.984279][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2684.994583][ T1366] Call Trace: [ 2684.997919][ T1366] [ 2685.000900][ T1366] dump_stack_lvl+0x1e7/0x2e0 [ 2685.005651][ T1366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2685.010919][ T1366] ? __pfx__printk+0x10/0x10 [ 2685.015574][ T1366] ? ___ratelimit+0x4c4/0x670 [ 2685.020330][ T1366] ? __pfx____ratelimit+0x10/0x10 [ 2685.025439][ T1366] dump_header+0xda/0x6a0 [ 2685.029917][ T1366] oom_kill_process+0x3a7/0x930 [ 2685.034850][ T1366] out_of_memory+0xf67/0x1320 [ 2685.039605][ T1366] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2685.045302][ T1366] ? __pfx___mutex_lock+0x10/0x10 [ 2685.050399][ T1366] ? __pfx_out_of_memory+0x10/0x10 [ 2685.055602][ T1366] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2685.061307][ T1366] ? __pfx_lock_release+0x10/0x10 [ 2685.066408][ T1366] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2685.072563][ T1366] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2685.077926][ T1366] ? mem_cgroup_iter+0x422/0x560 [ 2685.082917][ T1366] try_charge_memcg+0xda2/0x18a0 [ 2685.087906][ T1366] ? __pfx_try_charge_memcg+0x10/0x10 [ 2685.093295][ T1366] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2685.099030][ T1366] ? __pfx_lock_release+0x10/0x10 [ 2685.104077][ T1366] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2685.110088][ T1366] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2685.115926][ T1366] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2685.121762][ T1366] obj_cgroup_charge+0x389/0x630 [ 2685.126725][ T1366] ? obj_cgroup_charge+0x121/0x630 [ 2685.131856][ T1366] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2685.137331][ T1366] ? kmalloc_trace+0x4e/0x360 [ 2685.142146][ T1366] ? __pfx___might_resched+0x10/0x10 [ 2685.147454][ T1366] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2685.153276][ T1366] ? copy_semundo+0xb5/0x240 [ 2685.157879][ T1366] kmalloc_trace+0x216/0x360 [ 2685.162485][ T1366] ? __asan_memcpy+0x40/0x70 [ 2685.167096][ T1366] copy_semundo+0xb5/0x240 [ 2685.171528][ T1366] copy_process+0x1bc3/0x3fc0 [ 2685.176237][ T1366] ? copy_process+0x9c3/0x3fc0 [ 2685.181199][ T1366] ? __pfx_copy_process+0x10/0x10 [ 2685.186231][ T1366] ? __might_fault+0xc5/0x120 [ 2685.190928][ T1366] ? __asan_memset+0x23/0x50 [ 2685.195539][ T1366] kernel_clone+0x21d/0x8d0 [ 2685.200232][ T1366] ? __pfx_kernel_clone+0x10/0x10 [ 2685.205371][ T1366] __se_sys_clone3+0x2cb/0x350 [ 2685.210167][ T1366] ? __pfx___se_sys_clone3+0x10/0x10 [ 2685.215486][ T1366] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2685.221514][ T1366] ? exc_page_fault+0x587/0x870 [ 2685.226393][ T1366] ? do_syscall_64+0xb4/0x240 [ 2685.231085][ T1366] do_syscall_64+0xf9/0x240 [ 2685.235613][ T1366] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2685.241528][ T1366] RIP: 0033:0x7f0f5b4a9b99 [ 2685.245957][ T1366] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2685.265575][ T1366] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2685.274035][ T1366] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2685.282060][ T1366] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2685.290060][ T1366] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2685.298051][ T1366] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2685.306036][ T1366] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2685.314042][ T1366] [ 2685.344454][ T1366] memory: usage 307200kB, limit 307200kB, failcnt 151023 [ 2685.351556][ T1366] memory+swap: usage 307432kB, limit 9007199254740988kB, failcnt 0 [ 2685.369045][ T1366] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2685.376907][ T1366] Memory cgroup stats for /syz0: [ 2685.377066][ T1366] cache 0 [ 2685.390243][ T1366] rss 0 [ 2685.393176][ T1366] rss_huge 0 [ 2685.396764][ T1366] shmem 0 [ 2685.399753][ T1366] mapped_file 0 [ 2685.403249][ T1366] dirty 0 [ 2685.412449][ T1366] writeback 0 [ 2685.416204][ T1366] workingset_refault_anon 47379 [ 2685.421297][ T1366] workingset_refault_file 2 [ 2685.431846][ T1366] swap 237568 [ 2685.435680][ T1366] swapcached 0 [ 2685.439117][ T1366] pgpgin 233151 [ 2685.442616][ T1366] pgpgout 233151 [ 2685.450978][ T1366] pgfault 517069 [ 2685.455021][ T1366] pgmajfault 46195 [ 2685.458808][ T1366] inactive_anon 0 [ 2685.462483][ T1366] active_anon 0 [ 2685.466402][ T1366] inactive_file 0 [ 2685.470091][ T1366] active_file 0 [ 2685.473599][ T1366] unevictable 0 [ 2685.483484][ T1366] hierarchical_memory_limit 314572800 [ 2685.489115][ T1366] hierarchical_memsw_limit 9223372036854771712 [ 2685.501449][ T1366] total_cache 0 [ 2685.505109][ T1366] total_rss 0 [ 2685.508451][ T1366] total_rss_huge 0 [ 2685.512222][ T1366] total_shmem 0 [ 2685.521660][ T1366] total_mapped_file 0 [ 2685.525857][ T1366] total_dirty 0 [ 2685.529361][ T1366] total_writeback 0 [ 2685.533208][ T1366] total_workingset_refault_anon 47379 [ 2685.545083][ T1366] total_workingset_refault_file 2 [ 2685.550211][ T1366] total_swap 237568 [ 2685.554062][ T1366] total_swapcached 0 [ 2685.588851][ T1366] total_pgpgin 233151 [ 2685.598693][ T1366] total_pgpgout 233151 [ 2685.612155][ T1366] total_pgfault 517069 [ 2685.623757][ T1366] total_pgmajfault 46195 [ 2685.636246][ T1366] total_inactive_anon 0 [ 2685.649696][ T1366] total_active_anon 0 [ 2685.663004][ T1366] total_inactive_file 0 [ 2685.676541][ T1366] total_active_file 0 [ 2685.689889][ T1366] total_unevictable 0 [ 2685.714788][ T1366] anon_cost 0 [ 2685.718165][ T1366] file_cost 0 [ 2685.721492][ T1366] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1366,uid=0 [ 2685.778730][ T1366] Memory cgroup out of memory: Killed process 1366 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2686.618514][ T1367] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2686.654723][ T1367] CPU: 1 PID: 1367 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2686.665144][ T1367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2686.675249][ T1367] Call Trace: [ 2686.678573][ T1367] [ 2686.681634][ T1367] dump_stack_lvl+0x1e7/0x2e0 [ 2686.686543][ T1367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2686.691895][ T1367] ? __pfx__printk+0x10/0x10 [ 2686.696522][ T1367] ? ___ratelimit+0x4c4/0x670 [ 2686.701254][ T1367] ? __pfx____ratelimit+0x10/0x10 [ 2686.706329][ T1367] dump_header+0xda/0x6a0 [ 2686.710713][ T1367] oom_kill_process+0x3a7/0x930 [ 2686.715621][ T1367] out_of_memory+0xf67/0x1320 [ 2686.720444][ T1367] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2686.726129][ T1367] ? __pfx___mutex_lock+0x10/0x10 [ 2686.731213][ T1367] ? __pfx_out_of_memory+0x10/0x10 [ 2686.736388][ T1367] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2686.741991][ T1367] ? __pfx_lock_release+0x10/0x10 [ 2686.747069][ T1367] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2686.753213][ T1367] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2686.758557][ T1367] ? mem_cgroup_iter+0x422/0x560 [ 2686.763557][ T1367] try_charge_memcg+0xda2/0x18a0 12:19:55 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2686.768619][ T1367] ? __pfx_try_charge_memcg+0x10/0x10 [ 2686.774052][ T1367] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2686.779838][ T1367] ? __pfx_lock_release+0x10/0x10 [ 2686.784926][ T1367] ? memcg_account_kmem+0x1e7/0x210 [ 2686.790194][ T1367] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2686.796052][ T1367] __memcg_kmem_charge_page+0xe1/0x250 [ 2686.801576][ T1367] memcg_charge_kernel_stack+0x304/0x550 [ 2686.807262][ T1367] dup_task_struct+0x40d/0x7d0 [ 2686.812079][ T1367] copy_process+0x5d5/0x3fc0 [ 2686.816741][ T1367] ? __might_fault+0xa9/0x120 [ 2686.821488][ T1367] ? __pfx_lock_release+0x10/0x10 [ 2686.826583][ T1367] ? __pfx_copy_process+0x10/0x10 [ 2686.831659][ T1367] ? __might_fault+0xc5/0x120 [ 2686.836396][ T1367] ? __asan_memset+0x23/0x50 [ 2686.841062][ T1367] kernel_clone+0x21d/0x8d0 [ 2686.845643][ T1367] ? __pfx_kernel_clone+0x10/0x10 [ 2686.850845][ T1367] __se_sys_clone3+0x2cb/0x350 [ 2686.855763][ T1367] ? __pfx___se_sys_clone3+0x10/0x10 [ 2686.861137][ T1367] ? do_syscall_64+0x108/0x240 [ 2686.865976][ T1367] ? do_syscall_64+0xb4/0x240 [ 2686.870790][ T1367] do_syscall_64+0xf9/0x240 [ 2686.875346][ T1367] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2686.881291][ T1367] RIP: 0033:0x7f0f5b4a9b99 [ 2686.885865][ T1367] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2686.905520][ T1367] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2686.914170][ T1367] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2686.922195][ T1367] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2686.930218][ T1367] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2686.938254][ T1367] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2686.946278][ T1367] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2686.954319][ T1367] [ 2687.075069][ T1367] memory: usage 307200kB, limit 307200kB, failcnt 151433 [ 2687.082205][ T1367] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2687.101892][ T1367] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2687.110528][ T1367] Memory cgroup stats for /syz0: [ 2687.110688][ T1367] cache 0 [ 2687.119106][ T1367] rss 12288 [ 2687.122382][ T1367] rss_huge 0 [ 2687.125864][ T1367] shmem 0 [ 2687.128969][ T1367] mapped_file 0 [ 2687.132593][ T1367] dirty 0 [ 2687.136098][ T1367] writeback 0 [ 2687.139522][ T1367] workingset_refault_anon 47529 [ 2687.144566][ T1367] workingset_refault_file 2 [ 2687.154161][ T1367] swap 253952 [ 2687.158679][ T1367] swapcached 8192 [ 2687.162562][ T1367] pgpgin 233312 [ 2687.166388][ T1367] pgpgout 233309 [ 2687.170133][ T1367] pgfault 517324 [ 2687.174037][ T1367] pgmajfault 46342 [ 2687.178273][ T1367] inactive_anon 12288 [ 2687.182486][ T1367] active_anon 0 [ 2687.186371][ T1367] inactive_file 0 [ 2687.190250][ T1367] active_file 0 [ 2687.213020][ T1367] unevictable 0 [ 2687.223876][ T1367] hierarchical_memory_limit 314572800 [ 2687.230102][ T1367] hierarchical_memsw_limit 9223372036854771712 [ 2687.243216][ T1367] total_cache 0 [ 2687.248243][ T1367] total_rss 12288 [ 2687.252182][ T1367] total_rss_huge 0 [ 2687.275060][ T1367] total_shmem 0 [ 2687.278732][ T1367] total_mapped_file 0 [ 2687.282883][ T1367] total_dirty 0 [ 2687.293631][ T1367] total_writeback 0 [ 2687.298979][ T1367] total_workingset_refault_anon 47529 [ 2687.330912][ T1367] total_workingset_refault_file 2 [ 2687.340331][ T1367] total_swap 253952 [ 2687.351141][ T1367] total_swapcached 8192 [ 2687.356392][ T1367] total_pgpgin 233312 [ 2687.360626][ T1367] total_pgpgout 233309 [ 2687.366202][ T1367] total_pgfault 517324 [ 2687.377145][ T1367] total_pgmajfault 46342 [ 2687.382541][ T1367] total_inactive_anon 12288 [ 2687.391528][ T1367] total_active_anon 0 [ 2687.398805][ T1367] total_inactive_file 0 [ 2687.403192][ T1367] total_active_file 0 [ 2687.411667][ T1367] total_unevictable 0 [ 2687.419336][ T1367] anon_cost 0 [ 2687.423141][ T1367] file_cost 0 [ 2687.431216][ T1367] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1367,uid=0 [ 2687.454158][ T1367] Memory cgroup out of memory: Killed process 1367 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2687.788042][ T5111] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2687.803844][ T5111] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2687.813172][ T5111] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2687.836177][ T5111] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2687.845824][ T5111] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2687.853375][ T5111] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2688.101586][ T1371] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2688.112756][ T1371] CPU: 0 PID: 1371 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2688.123234][ T1371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2688.133337][ T1371] Call Trace: [ 2688.136641][ T1371] [ 2688.139584][ T1371] dump_stack_lvl+0x1e7/0x2e0 [ 2688.144289][ T1371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2688.149576][ T1371] ? __pfx__printk+0x10/0x10 [ 2688.154179][ T1371] ? ___ratelimit+0x4c4/0x670 [ 2688.158879][ T1371] ? __pfx____ratelimit+0x10/0x10 [ 2688.164018][ T1371] dump_header+0xda/0x6a0 [ 2688.168372][ T1371] oom_kill_process+0x3a7/0x930 [ 2688.173268][ T1371] out_of_memory+0xf67/0x1320 [ 2688.178057][ T1371] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2688.183734][ T1371] ? __pfx___mutex_lock+0x10/0x10 [ 2688.188782][ T1371] ? __pfx_out_of_memory+0x10/0x10 [ 2688.193928][ T1371] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2688.199507][ T1371] ? __pfx_lock_release+0x10/0x10 [ 2688.204651][ T1371] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2688.210841][ T1371] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2688.216059][ T1371] ? mem_cgroup_iter+0x422/0x560 [ 2688.221025][ T1371] try_charge_memcg+0xda2/0x18a0 [ 2688.226173][ T1371] ? __pfx_try_charge_memcg+0x10/0x10 [ 2688.231564][ T1371] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2688.237332][ T1371] ? __pfx_lock_release+0x10/0x10 [ 2688.242388][ T1371] ? memcg_account_kmem+0x1e7/0x210 [ 2688.247698][ T1371] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2688.253519][ T1371] __memcg_kmem_charge_page+0xe1/0x250 [ 2688.259264][ T1371] memcg_charge_kernel_stack+0x304/0x550 [ 2688.264922][ T1371] dup_task_struct+0x40d/0x7d0 [ 2688.269714][ T1371] copy_process+0x5d5/0x3fc0 [ 2688.274337][ T1371] ? __might_fault+0xa9/0x120 [ 2688.279062][ T1371] ? __pfx_lock_release+0x10/0x10 [ 2688.284227][ T1371] ? __pfx_copy_process+0x10/0x10 [ 2688.289289][ T1371] ? __might_fault+0xc5/0x120 [ 2688.294000][ T1371] ? __asan_memset+0x23/0x50 [ 2688.298615][ T1371] kernel_clone+0x21d/0x8d0 [ 2688.303137][ T1371] ? __pfx_kernel_clone+0x10/0x10 [ 2688.308197][ T1371] __se_sys_clone3+0x2cb/0x350 [ 2688.313074][ T1371] ? __pfx___se_sys_clone3+0x10/0x10 [ 2688.318401][ T1371] ? do_syscall_64+0x108/0x240 [ 2688.323206][ T1371] ? do_syscall_64+0xb4/0x240 [ 2688.327939][ T1371] do_syscall_64+0xf9/0x240 [ 2688.332483][ T1371] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2688.338430][ T1371] RIP: 0033:0x7f0f5b4a9b99 [ 2688.342952][ T1371] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2688.362658][ T1371] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2688.371089][ T1371] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2688.379071][ T1371] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2688.387054][ T1371] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2688.395034][ T1371] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2688.403011][ T1371] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2688.411007][ T1371] [ 2688.433245][ T1371] memory: usage 307200kB, limit 307200kB, failcnt 151695 [ 2688.461354][ T1371] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2688.483090][ T1371] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2688.491285][ T1371] Memory cgroup stats for /syz0: [ 2688.491654][ T1371] cache 0 [ 2688.506996][ T1371] rss 12288 [ 2688.510256][ T1371] rss_huge 0 [ 2688.513653][ T1371] shmem 0 [ 2688.535972][ T1371] mapped_file 0 [ 2688.541324][ T1371] dirty 0 [ 2688.551720][ T1371] writeback 0 [ 2688.558974][ T1371] workingset_refault_anon 47602 [ 2688.594676][ T1371] workingset_refault_file 2 [ 2688.599444][ T1371] swap 208896 [ 2688.611823][ T1371] swapcached 0 [ 2688.616425][ T1371] pgpgin 233396 [ 2688.622264][ T1371] pgpgout 233393 [ 2688.634965][ T1371] pgfault 517466 [ 2688.641199][ T1371] pgmajfault 46412 [ 2688.665367][ T1371] inactive_anon 12288 [ 2688.670743][ T1371] active_anon 0 [ 2688.695949][ T1371] inactive_file 0 [ 2688.699666][ T1371] active_file 0 [ 2688.703156][ T1371] unevictable 0 [ 2688.751301][ T1371] hierarchical_memory_limit 314572800 [ 2688.774870][ T1371] hierarchical_memsw_limit 9223372036854771712 [ 2688.784523][ T1371] total_cache 0 [ 2688.804507][ T1371] total_rss 12288 [ 2688.808293][ T1371] total_rss_huge 0 [ 2688.812057][ T1371] total_shmem 0 [ 2688.824711][ T1371] total_mapped_file 0 [ 2688.836388][ T1371] total_dirty 0 [ 2688.839923][ T1371] total_writeback 0 [ 2688.843763][ T1371] total_workingset_refault_anon 47602 [ 2688.887738][ T1371] total_workingset_refault_file 2 [ 2688.892849][ T1371] total_swap 208896 [ 2688.926561][ T1371] total_swapcached 0 [ 2688.930551][ T1371] total_pgpgin 233396 [ 2688.944643][ T1371] total_pgpgout 233393 [ 2688.960806][ T1371] total_pgfault 517466 [ 2688.971625][ T1371] total_pgmajfault 46412 [ 2688.976354][ T1371] total_inactive_anon 12288 [ 2688.981345][ T1371] total_active_anon 0 [ 2688.983820][ T5111] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2688.996632][ T1371] total_inactive_file 0 [ 2689.000921][ T1371] total_active_file 0 [ 2689.005487][ T1371] total_unevictable 0 [ 2689.014032][ T1371] anon_cost 0 [ 2689.017713][ T1371] file_cost 0 [ 2689.021029][ T1371] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1371,uid=0 [ 2689.037055][ T5111] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2689.045852][ T1371] Memory cgroup out of memory: Killed process 1371 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2689.064027][ T5111] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2689.073819][ T5111] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2689.082283][ T5111] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2689.095265][ T5111] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 12:19:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2689.610708][ T1381] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2689.622349][ T1381] CPU: 0 PID: 1381 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2689.632744][ T1381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2689.642844][ T1381] Call Trace: [ 2689.646142][ T1381] [ 2689.649085][ T1381] dump_stack_lvl+0x1e7/0x2e0 [ 2689.653783][ T1381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2689.659006][ T1381] ? __pfx__printk+0x10/0x10 [ 2689.663608][ T1381] ? ___ratelimit+0x4c4/0x670 [ 2689.668345][ T1381] ? __pfx____ratelimit+0x10/0x10 [ 2689.673397][ T1381] dump_header+0xda/0x6a0 [ 2689.677744][ T1381] oom_kill_process+0x3a7/0x930 [ 2689.682611][ T1381] out_of_memory+0xf67/0x1320 [ 2689.687307][ T1381] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2689.692956][ T1381] ? __pfx___mutex_lock+0x10/0x10 [ 2689.697996][ T1381] ? __pfx_out_of_memory+0x10/0x10 [ 2689.703131][ T1381] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2689.708691][ T1381] ? __pfx_lock_release+0x10/0x10 [ 2689.713730][ T1381] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2689.719902][ T1381] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2689.725214][ T1381] ? mem_cgroup_iter+0x422/0x560 [ 2689.730179][ T1381] try_charge_memcg+0xda2/0x18a0 [ 2689.735152][ T1381] ? __pfx_try_charge_memcg+0x10/0x10 [ 2689.740539][ T1381] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2689.746280][ T1381] ? __pfx_lock_release+0x10/0x10 [ 2689.751319][ T1381] ? memcg_account_kmem+0x1e7/0x210 [ 2689.756542][ T1381] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2689.762366][ T1381] __memcg_kmem_charge_page+0xe1/0x250 [ 2689.767839][ T1381] memcg_charge_kernel_stack+0x304/0x550 [ 2689.773492][ T1381] dup_task_struct+0x15d/0x7d0 [ 2689.778277][ T1381] copy_process+0x5d5/0x3fc0 [ 2689.782890][ T1381] ? __might_fault+0xa9/0x120 [ 2689.787581][ T1381] ? __pfx_lock_release+0x10/0x10 [ 2689.792626][ T1381] ? __pfx_copy_process+0x10/0x10 [ 2689.797657][ T1381] ? __might_fault+0xc5/0x120 [ 2689.802370][ T1381] ? __asan_memset+0x23/0x50 [ 2689.806983][ T1381] kernel_clone+0x21d/0x8d0 [ 2689.811507][ T1381] ? __pfx_kernel_clone+0x10/0x10 [ 2689.816566][ T1381] __se_sys_clone3+0x2cb/0x350 [ 2689.821348][ T1381] ? __pfx___se_sys_clone3+0x10/0x10 [ 2689.826669][ T1381] ? do_syscall_64+0x108/0x240 [ 2689.831448][ T1381] ? do_syscall_64+0xb4/0x240 [ 2689.836142][ T1381] do_syscall_64+0xf9/0x240 [ 2689.841096][ T1381] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2689.847004][ T1381] RIP: 0033:0x7f0f5b4a9b99 [ 2689.851522][ T1381] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2689.871140][ T1381] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2689.879574][ T1381] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2689.887560][ T1381] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2689.895543][ T1381] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2689.903530][ T1381] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 12:19:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2689.911648][ T1381] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2689.919646][ T1381] [ 2689.946377][ T1381] memory: usage 307200kB, limit 307200kB, failcnt 152098 [ 2689.953672][ T1381] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2689.962690][ T1381] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2689.964551][ T5101] Bluetooth: hci8: command 0x0409 tx timeout [ 2690.001840][ T1381] Memory cgroup stats for /syz0: [ 2690.002010][ T1381] cache 0 [ 2690.016993][ T1381] rss 12288 [ 2690.020389][ T1381] rss_huge 0 [ 2690.023752][ T1381] shmem 0 [ 2690.036426][ T1381] mapped_file 0 [ 2690.040727][ T1381] dirty 0 [ 2690.043778][ T1381] writeback 0 [ 2690.048898][ T1381] workingset_refault_anon 47754 [ 2690.053924][ T1381] workingset_refault_file 2 [ 2690.059623][ T1381] swap 208896 [ 2690.063068][ T1381] swapcached 8192 [ 2690.067680][ T1381] pgpgin 233559 [ 2690.071349][ T1381] pgpgout 233556 [ 2690.075969][ T1381] pgfault 517727 [ 2690.079658][ T1381] pgmajfault 46560 [ 2690.083509][ T1381] inactive_anon 0 [ 2690.087935][ T1381] active_anon 12288 [ 2690.091874][ T1381] inactive_file 0 [ 2690.096288][ T1381] active_file 0 [ 2690.099922][ T1381] unevictable 0 [ 2690.103501][ T1381] hierarchical_memory_limit 314572800 [ 2690.110075][ T1381] hierarchical_memsw_limit 9223372036854771712 [ 2690.117055][ T1381] total_cache 0 [ 2690.120668][ T1381] total_rss 12288 [ 2690.125334][ T1381] total_rss_huge 0 [ 2690.129212][ T1381] total_shmem 0 [ 2690.132787][ T1381] total_mapped_file 0 [ 2690.138044][ T1381] total_dirty 0 [ 2690.141653][ T1381] total_writeback 0 [ 2690.146621][ T1381] total_workingset_refault_anon 47754 [ 2690.152270][ T1381] total_workingset_refault_file 2 [ 2690.158052][ T1381] total_swap 208896 [ 2690.162017][ T1381] total_swapcached 8192 [ 2690.167214][ T1381] total_pgpgin 233559 [ 2690.171347][ T1381] total_pgpgout 233556 [ 2690.176281][ T1381] total_pgfault 517727 [ 2690.180572][ T1381] total_pgmajfault 46560 [ 2690.185697][ T1381] total_inactive_anon 0 [ 2690.189992][ T1381] total_active_anon 12288 [ 2690.200977][ T1381] total_inactive_file 0 [ 2690.205810][ T1381] total_active_file 0 [ 2690.209971][ T1381] total_unevictable 0 [ 2690.214100][ T1381] anon_cost 0 [ 2690.218515][ T1381] file_cost 0 [ 2690.221974][ T1381] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1381,uid=0 [ 2690.238684][ T1381] Memory cgroup out of memory: Killed process 1381 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:19:58 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2690.713162][ T1384] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2690.754670][ T1384] CPU: 0 PID: 1384 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2690.765102][ T1384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2690.775220][ T1384] Call Trace: [ 2690.778550][ T1384] [ 2690.781522][ T1384] dump_stack_lvl+0x1e7/0x2e0 [ 2690.786353][ T1384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2690.791623][ T1384] ? __pfx__printk+0x10/0x10 [ 2690.796270][ T1384] ? ___ratelimit+0x4c4/0x670 [ 2690.801021][ T1384] ? __pfx____ratelimit+0x10/0x10 [ 2690.806135][ T1384] dump_header+0xda/0x6a0 [ 2690.810622][ T1384] oom_kill_process+0x3a7/0x930 [ 2690.815549][ T1384] out_of_memory+0xf67/0x1320 [ 2690.820295][ T1384] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2690.826001][ T1384] ? __pfx___mutex_lock+0x10/0x10 [ 2690.831102][ T1384] ? __pfx_out_of_memory+0x10/0x10 [ 2690.836305][ T1384] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2690.841919][ T1384] ? __pfx_lock_release+0x10/0x10 [ 2690.847108][ T1384] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2690.853246][ T1384] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2690.858514][ T1384] ? mem_cgroup_iter+0x422/0x560 [ 2690.863602][ T1384] try_charge_memcg+0xda2/0x18a0 [ 2690.868640][ T1384] ? __pfx_try_charge_memcg+0x10/0x10 [ 2690.874094][ T1384] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2690.879886][ T1384] ? __pfx_lock_release+0x10/0x10 [ 2690.885072][ T1384] ? memcg_account_kmem+0x1e7/0x210 [ 2690.890360][ T1384] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2690.896237][ T1384] __memcg_kmem_charge_page+0xe1/0x250 [ 2690.901850][ T1384] memcg_charge_kernel_stack+0x210/0x550 [ 2690.907558][ T1384] dup_task_struct+0x40d/0x7d0 [ 2690.912400][ T1384] copy_process+0x5d5/0x3fc0 [ 2690.917105][ T1384] ? __might_fault+0xa9/0x120 [ 2690.921855][ T1384] ? __pfx_lock_release+0x10/0x10 [ 2690.926982][ T1384] ? __pfx_copy_process+0x10/0x10 [ 2690.932081][ T1384] ? __might_fault+0xc5/0x120 [ 2690.936843][ T1384] ? __asan_memset+0x23/0x50 [ 2690.941515][ T1384] kernel_clone+0x21d/0x8d0 [ 2690.946104][ T1384] ? __pfx_kernel_clone+0x10/0x10 [ 2690.951223][ T1384] __se_sys_clone3+0x2cb/0x350 [ 2690.956062][ T1384] ? __pfx___se_sys_clone3+0x10/0x10 [ 2690.961436][ T1384] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2690.967598][ T1384] ? exc_page_fault+0x587/0x870 [ 2690.972526][ T1384] ? do_syscall_64+0xb4/0x240 [ 2690.977372][ T1384] do_syscall_64+0xf9/0x240 [ 2690.981958][ T1384] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2690.987959][ T1384] RIP: 0033:0x7f0f5b4a9b99 [ 2690.992445][ T1384] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2691.012818][ T1384] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2691.021313][ T1384] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2691.029344][ T1384] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2691.037377][ T1384] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2691.045413][ T1384] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2691.053473][ T1384] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2691.061617][ T1384] [ 2691.085288][ T1384] memory: usage 307200kB, limit 307200kB, failcnt 152445 [ 2691.095977][ T1384] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2691.115121][ T1384] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2691.123922][ T1384] Memory cgroup stats for /syz0: [ 2691.124099][ T1384] cache 0 [ 2691.134954][ T1384] rss 0 [ 2691.137874][ T1384] rss_huge 0 [ 2691.141213][ T1384] shmem 0 [ 2691.155290][ T1384] mapped_file 0 [ 2691.159228][ T1384] dirty 0 [ 2691.162353][ T1384] writeback 0 [ 2691.166539][ T5101] Bluetooth: hci9: command 0x0409 tx timeout [ 2691.177897][ T1384] workingset_refault_anon 47885 [ 2691.182876][ T1384] workingset_refault_file 2 [ 2691.188958][ T1384] swap 221184 [ 2691.192405][ T1384] swapcached 0 [ 2691.196852][ T1384] pgpgin 233701 [ 2691.200480][ T1384] pgpgout 233701 [ 2691.204148][ T1384] pgfault 517938 [ 2691.209183][ T1384] pgmajfault 46682 [ 2691.214265][ T1384] inactive_anon 0 [ 2691.218606][ T1384] active_anon 0 [ 2691.222249][ T1384] inactive_file 0 [ 2691.227400][ T1384] active_file 0 [ 2691.231301][ T1384] unevictable 0 [ 2691.235544][ T1384] hierarchical_memory_limit 314572800 [ 2691.241131][ T1384] hierarchical_memsw_limit 9223372036854771712 [ 2691.248790][ T1384] total_cache 0 [ 2691.252472][ T1384] total_rss 0 [ 2691.257043][ T1384] total_rss_huge 0 [ 2691.260945][ T1384] total_shmem 0 [ 2691.265201][ T1384] total_mapped_file 0 [ 2691.269358][ T1384] total_dirty 0 [ 2691.273475][ T1384] total_writeback 0 [ 2691.278201][ T1384] total_workingset_refault_anon 47885 [ 2691.283627][ T1384] total_workingset_refault_file 2 [ 2691.293176][ T1384] total_swap 221184 [ 2691.297722][ T1384] total_swapcached 0 [ 2691.302324][ T1384] total_pgpgin 233701 [ 2691.307102][ T1384] total_pgpgout 233701 [ 2691.311335][ T1384] total_pgfault 517938 [ 2691.316419][ T1384] total_pgmajfault 46682 [ 2691.320823][ T1384] total_inactive_anon 0 [ 2691.325743][ T1384] total_active_anon 0 [ 2691.329882][ T1384] total_inactive_file 0 [ 2691.334122][ T1384] total_active_file 0 [ 2691.339279][ T1384] total_unevictable 0 [ 2691.345778][ T1384] anon_cost 0 [ 2691.349124][ T1384] file_cost 0 [ 2691.352440][ T1384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1384,uid=0 [ 2691.369409][ T1384] Memory cgroup out of memory: Killed process 1384 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x367]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2692.044873][ T5101] Bluetooth: hci8: command 0x041b tx timeout [ 2692.335481][ T1385] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2692.352590][ T1385] CPU: 1 PID: 1385 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2692.363018][ T1385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2692.373411][ T1385] Call Trace: [ 2692.376741][ T1385] [ 2692.379720][ T1385] dump_stack_lvl+0x1e7/0x2e0 [ 2692.384466][ T1385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2692.389731][ T1385] ? __pfx__printk+0x10/0x10 [ 2692.394383][ T1385] ? ___ratelimit+0x4c4/0x670 [ 2692.399148][ T1385] ? __pfx____ratelimit+0x10/0x10 [ 2692.404272][ T1385] dump_header+0xda/0x6a0 [ 2692.408686][ T1385] oom_kill_process+0x3a7/0x930 [ 2692.413614][ T1385] out_of_memory+0xf67/0x1320 [ 2692.418372][ T1385] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2692.424080][ T1385] ? __pfx___mutex_lock+0x10/0x10 [ 2692.429181][ T1385] ? __pfx_out_of_memory+0x10/0x10 [ 2692.434383][ T1385] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2692.440004][ T1385] ? __pfx_lock_release+0x10/0x10 [ 2692.445107][ T1385] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2692.451274][ T1385] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2692.456541][ T1385] ? mem_cgroup_iter+0x422/0x560 [ 2692.461647][ T1385] try_charge_memcg+0xda2/0x18a0 [ 2692.466688][ T1385] ? __pfx_try_charge_memcg+0x10/0x10 [ 2692.472155][ T1385] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2692.477941][ T1385] ? __pfx_lock_release+0x10/0x10 [ 2692.483034][ T1385] ? memcg_account_kmem+0x1e7/0x210 [ 2692.488313][ T1385] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2692.494276][ T1385] __memcg_kmem_charge_page+0xe1/0x250 [ 2692.499807][ T1385] memcg_charge_kernel_stack+0x304/0x550 [ 2692.505524][ T1385] dup_task_struct+0x15d/0x7d0 [ 2692.510364][ T1385] copy_process+0x5d5/0x3fc0 [ 2692.515205][ T1385] ? __might_fault+0xa9/0x120 [ 2692.519970][ T1385] ? __pfx_lock_release+0x10/0x10 [ 2692.525177][ T1385] ? __pfx_copy_process+0x10/0x10 [ 2692.530266][ T1385] ? __might_fault+0xc5/0x120 [ 2692.535018][ T1385] ? __asan_memset+0x23/0x50 [ 2692.539702][ T1385] kernel_clone+0x21d/0x8d0 [ 2692.544298][ T1385] ? __pfx_kernel_clone+0x10/0x10 [ 2692.549409][ T1385] __se_sys_clone3+0x2cb/0x350 [ 2692.554242][ T1385] ? __pfx___se_sys_clone3+0x10/0x10 [ 2692.559721][ T1385] ? do_syscall_64+0x108/0x240 [ 2692.564565][ T1385] ? do_syscall_64+0xb4/0x240 [ 2692.569330][ T1385] do_syscall_64+0xf9/0x240 [ 2692.573909][ T1385] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2692.579876][ T1385] RIP: 0033:0x7f0f5b4a9b99 [ 2692.584434][ T1385] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2692.604099][ T1385] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2692.612588][ T1385] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2692.620620][ T1385] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2692.628658][ T1385] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2692.636713][ T1385] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2692.644745][ T1385] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2692.652798][ T1385] [ 2692.664661][ T1385] memory: usage 307200kB, limit 307200kB, failcnt 153085 [ 2692.671758][ T1385] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 2692.680005][ T1385] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2692.687457][ T1385] Memory cgroup stats for /syz0: [ 2692.687611][ T1385] cache 0 [ 2692.695862][ T1385] rss 12288 [ 2692.699040][ T1385] rss_huge 0 [ 2692.702280][ T1385] shmem 0 [ 2692.705387][ T1385] mapped_file 0 [ 2692.708899][ T1385] dirty 0 [ 2692.711919][ T1385] writeback 0 [ 2692.724440][ T1385] workingset_refault_anon 48109 [ 2692.729399][ T1385] workingset_refault_file 2 [ 2692.733951][ T1385] swap 249856 [ 2692.737650][ T1385] swapcached 8192 [ 2692.741333][ T1385] pgpgin 233938 [ 2692.745023][ T1385] pgpgout 233935 [ 2692.748609][ T1385] pgfault 518305 [ 2692.752196][ T1385] pgmajfault 46901 [ 2692.761842][ T1385] inactive_anon 12288 [ 2692.766271][ T1385] active_anon 0 [ 2692.769795][ T1385] inactive_file 0 [ 2692.773482][ T1385] active_file 0 [ 2692.782917][ T1385] unevictable 0 [ 2692.786526][ T1385] hierarchical_memory_limit 314572800 [ 2692.791942][ T1385] hierarchical_memsw_limit 9223372036854771712 [ 2692.804273][ T1385] total_cache 0 [ 2692.808039][ T1385] total_rss 12288 [ 2692.811720][ T1385] total_rss_huge 0 [ 2692.821869][ T1385] total_shmem 0 [ 2692.825542][ T1385] total_mapped_file 0 [ 2692.829568][ T1385] total_dirty 0 [ 2692.833129][ T1385] total_writeback 0 [ 2692.848405][ T1385] total_workingset_refault_anon 48109 [ 2692.855135][ T1385] total_workingset_refault_file 2 [ 2692.860376][ T1385] total_swap 249856 [ 2692.865650][ T1385] total_swapcached 8192 [ 2692.869853][ T1385] total_pgpgin 233938 [ 2692.873868][ T1385] total_pgpgout 233935 [ 2692.881551][ T1385] total_pgfault 518305 [ 2692.896762][ T1385] total_pgmajfault 46901 [ 2692.906088][ T1385] total_inactive_anon 12288 [ 2692.910664][ T1385] total_active_anon 0 [ 2692.916547][ T1385] total_inactive_file 0 [ 2692.920869][ T1385] total_active_file 0 [ 2692.926873][ T1385] total_unevictable 0 [ 2692.931014][ T1385] anon_cost 0 [ 2692.935382][ T1385] file_cost 0 [ 2692.938827][ T1385] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1385,uid=0 [ 2692.956063][ T1385] Memory cgroup out of memory: Killed process 1385 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:01 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:20:01 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2693.244949][ T5101] Bluetooth: hci9: command 0x041b tx timeout [ 2693.470175][ T1387] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2693.481692][ T1387] CPU: 1 PID: 1387 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2693.492176][ T1387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2693.502551][ T1387] Call Trace: [ 2693.505888][ T1387] [ 2693.508868][ T1387] dump_stack_lvl+0x1e7/0x2e0 [ 2693.513617][ T1387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2693.518885][ T1387] ? __pfx__printk+0x10/0x10 [ 2693.523536][ T1387] ? ___ratelimit+0x4c4/0x670 [ 2693.528292][ T1387] ? __pfx____ratelimit+0x10/0x10 [ 2693.533398][ T1387] dump_header+0xda/0x6a0 [ 2693.537804][ T1387] oom_kill_process+0x3a7/0x930 [ 2693.543012][ T1387] out_of_memory+0xf67/0x1320 [ 2693.547766][ T1387] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2693.553487][ T1387] ? __pfx___mutex_lock+0x10/0x10 [ 2693.558592][ T1387] ? __pfx_out_of_memory+0x10/0x10 [ 2693.563794][ T1387] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2693.569425][ T1387] ? __pfx_lock_release+0x10/0x10 [ 2693.574527][ T1387] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2693.580769][ T1387] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2693.586223][ T1387] ? mem_cgroup_iter+0x422/0x560 [ 2693.591227][ T1387] try_charge_memcg+0xda2/0x18a0 [ 2693.596258][ T1387] ? __pfx_try_charge_memcg+0x10/0x10 [ 2693.601708][ T1387] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2693.607492][ T1387] ? __pfx_lock_release+0x10/0x10 [ 2693.612588][ T1387] ? memcg_account_kmem+0x1e7/0x210 [ 2693.617860][ T1387] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2693.623736][ T1387] __memcg_kmem_charge_page+0xe1/0x250 [ 2693.629263][ T1387] memcg_charge_kernel_stack+0x304/0x550 [ 2693.634986][ T1387] dup_task_struct+0x40d/0x7d0 [ 2693.639821][ T1387] copy_process+0x5d5/0x3fc0 [ 2693.644502][ T1387] ? __might_fault+0xa9/0x120 [ 2693.649227][ T1387] ? __pfx_lock_release+0x10/0x10 [ 2693.654322][ T1387] ? __pfx_copy_process+0x10/0x10 [ 2693.659403][ T1387] ? __might_fault+0xc5/0x120 [ 2693.664146][ T1387] ? __asan_memset+0x23/0x50 [ 2693.668803][ T1387] kernel_clone+0x21d/0x8d0 [ 2693.673371][ T1387] ? __pfx_kernel_clone+0x10/0x10 [ 2693.678472][ T1387] __se_sys_clone3+0x2cb/0x350 [ 2693.683309][ T1387] ? __pfx___se_sys_clone3+0x10/0x10 [ 2693.688692][ T1387] ? do_syscall_64+0x108/0x240 [ 2693.693512][ T1387] ? do_syscall_64+0xb4/0x240 [ 2693.698256][ T1387] do_syscall_64+0xf9/0x240 [ 2693.702832][ T1387] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2693.708784][ T1387] RIP: 0033:0x7f0f5b4a9b99 [ 2693.713252][ T1387] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2693.732923][ T1387] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2693.741403][ T1387] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2693.749435][ T1387] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2693.757467][ T1387] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2693.765498][ T1387] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2693.773523][ T1387] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2693.781569][ T1387] [ 2693.790844][ T1387] memory: usage 307200kB, limit 307200kB, failcnt 153426 [ 2693.807053][ T1387] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 2693.815359][ T1387] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2693.822911][ T1387] Memory cgroup stats for /syz0: [ 2693.823047][ T1387] cache 0 [ 2693.831932][ T1387] rss 12288 [ 2693.835506][ T1387] rss_huge 0 [ 2693.838845][ T1387] shmem 0 [ 2693.841909][ T1387] mapped_file 0 [ 2693.846197][ T1387] dirty 0 [ 2693.849467][ T1387] writeback 0 [ 2693.853147][ T1387] workingset_refault_anon 48231 [ 2693.858531][ T1387] workingset_refault_file 2 [ 2693.863257][ T1387] swap 217088 [ 2693.867071][ T1387] swapcached 12288 [ 2693.871005][ T1387] pgpgin 234071 [ 2693.883805][ T1387] pgpgout 234068 [ 2693.890719][ T1387] pgfault 518506 [ 2693.898390][ T1387] pgmajfault 47015 [ 2693.902286][ T1387] inactive_anon 0 [ 2693.906943][ T1387] active_anon 12288 [ 2693.910901][ T1387] inactive_file 0 [ 2693.921722][ T1387] active_file 0 [ 2693.926154][ T1387] unevictable 0 [ 2693.929677][ T1387] hierarchical_memory_limit 314572800 [ 2693.950977][ T1387] hierarchical_memsw_limit 9223372036854771712 [ 2693.958957][ T1387] total_cache 0 [ 2693.962494][ T1387] total_rss 12288 [ 2693.967032][ T1387] total_rss_huge 0 [ 2693.970800][ T1387] total_shmem 0 [ 2693.975891][ T1387] total_mapped_file 0 [ 2693.990281][ T1387] total_dirty 0 [ 2693.993817][ T1387] total_writeback 0 [ 2693.998378][ T1387] total_workingset_refault_anon 48231 [ 2694.003806][ T1387] total_workingset_refault_file 2 [ 2694.009996][ T1387] total_swap 217088 [ 2694.013852][ T1387] total_swapcached 12288 [ 2694.018894][ T1387] total_pgpgin 234071 [ 2694.022929][ T1387] total_pgpgout 234068 [ 2694.039590][ T1387] total_pgfault 518506 [ 2694.043765][ T1387] total_pgmajfault 47015 [ 2694.049097][ T1387] total_inactive_anon 0 [ 2694.053326][ T1387] total_active_anon 12288 [ 2694.058355][ T1387] total_inactive_file 0 [ 2694.062563][ T1387] total_active_file 0 [ 2694.067744][ T1387] total_unevictable 0 [ 2694.071783][ T1387] anon_cost 0 [ 2694.075885][ T1387] file_cost 0 [ 2694.079279][ T1387] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1387,uid=0 [ 2694.104479][ T1387] Memory cgroup out of memory: Killed process 1387 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2694.124805][ T5101] Bluetooth: hci8: command 0x040f tx timeout 12:20:02 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x372]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2694.900540][ T1389] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2694.934633][ T1389] CPU: 0 PID: 1389 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2694.945043][ T1389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2694.955158][ T1389] Call Trace: [ 2694.958470][ T1389] [ 2694.961425][ T1389] dump_stack_lvl+0x1e7/0x2e0 [ 2694.966156][ T1389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2694.971482][ T1389] ? __pfx__printk+0x10/0x10 [ 2694.976106][ T1389] ? ___ratelimit+0x4c4/0x670 [ 2694.980842][ T1389] ? __pfx____ratelimit+0x10/0x10 [ 2694.985921][ T1389] dump_header+0xda/0x6a0 [ 2694.990301][ T1389] oom_kill_process+0x3a7/0x930 [ 2694.995202][ T1389] out_of_memory+0xf67/0x1320 [ 2694.999931][ T1389] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2695.005614][ T1389] ? __pfx___mutex_lock+0x10/0x10 [ 2695.010865][ T1389] ? __pfx_out_of_memory+0x10/0x10 [ 2695.016039][ T1389] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2695.021721][ T1389] ? __pfx_lock_release+0x10/0x10 [ 2695.026790][ T1389] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2695.032908][ T1389] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2695.038144][ T1389] ? mem_cgroup_iter+0x422/0x560 [ 2695.043134][ T1389] try_charge_memcg+0xda2/0x18a0 [ 2695.048143][ T1389] ? __pfx_try_charge_memcg+0x10/0x10 [ 2695.053628][ T1389] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2695.059367][ T1389] ? __pfx_lock_release+0x10/0x10 [ 2695.064784][ T1389] ? memcg_account_kmem+0x1e7/0x210 [ 2695.070035][ T1389] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2695.075919][ T1389] __memcg_kmem_charge_page+0xe1/0x250 [ 2695.081447][ T1389] memcg_charge_kernel_stack+0x210/0x550 [ 2695.087116][ T1389] dup_task_struct+0x15d/0x7d0 [ 2695.091934][ T1389] copy_process+0x5d5/0x3fc0 [ 2695.096587][ T1389] ? __might_fault+0xa9/0x120 [ 2695.101307][ T1389] ? __pfx_lock_release+0x10/0x10 [ 2695.106423][ T1389] ? __pfx_copy_process+0x10/0x10 [ 2695.111466][ T1389] ? __might_fault+0xc5/0x120 [ 2695.116172][ T1389] ? __asan_memset+0x23/0x50 [ 2695.120802][ T1389] kernel_clone+0x21d/0x8d0 [ 2695.125351][ T1389] ? __pfx_kernel_clone+0x10/0x10 [ 2695.130407][ T1389] __se_sys_clone3+0x2cb/0x350 [ 2695.135191][ T1389] ? __pfx___se_sys_clone3+0x10/0x10 [ 2695.140541][ T1389] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2695.146588][ T1389] ? exc_page_fault+0x587/0x870 [ 2695.151471][ T1389] ? do_syscall_64+0xb4/0x240 [ 2695.156206][ T1389] do_syscall_64+0xf9/0x240 [ 2695.160765][ T1389] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2695.166703][ T1389] RIP: 0033:0x7f0f5b4a9b99 [ 2695.171139][ T1389] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2695.190923][ T1389] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2695.199364][ T1389] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2695.207450][ T1389] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2695.215534][ T1389] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2695.223526][ T1389] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2695.231509][ T1389] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2695.239507][ T1389] [ 2695.314720][ T1389] memory: usage 307200kB, limit 307200kB, failcnt 153932 [ 2695.345752][ T1389] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2695.356568][ T5101] Bluetooth: hci9: command 0x040f tx timeout [ 2695.395870][ T1389] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 2695.403293][ T1389] Memory cgroup stats for /syz0: [ 2695.403451][ T1389] cache 0 [ 2695.412531][ T1389] rss 20480 [ 2695.416356][ T1389] rss_huge 0 [ 2695.419702][ T1389] shmem 0 [ 2695.422781][ T1389] mapped_file 0 [ 2695.426804][ T1389] dirty 0 [ 2695.430130][ T1389] writeback 0 [ 2695.435810][ T1389] workingset_refault_anon 48408 [ 2695.440707][ T1389] workingset_refault_file 2 [ 2695.447448][ T1389] swap 200704 [ 2695.451361][ T1389] swapcached 12288 [ 2695.455843][ T1389] pgpgin 234259 [ 2695.459820][ T1389] pgpgout 234254 [ 2695.463460][ T1389] pgfault 518795 [ 2695.481167][ T1389] pgmajfault 47190 [ 2695.485662][ T1389] inactive_anon 0 [ 2695.489365][ T1389] active_anon 20480 [ 2695.493219][ T1389] inactive_file 0 [ 2695.500109][ T1389] active_file 0 [ 2695.503762][ T1389] unevictable 0 [ 2695.508287][ T1389] hierarchical_memory_limit 314572800 [ 2695.514117][ T1389] hierarchical_memsw_limit 9223372036854771712 [ 2695.521601][ T1389] total_cache 0 [ 2695.525565][ T1389] total_rss 20480 [ 2695.529261][ T1389] total_rss_huge 0 [ 2695.533062][ T1389] total_shmem 0 [ 2695.537183][ T1389] total_mapped_file 0 [ 2695.541222][ T1389] total_dirty 0 [ 2695.545520][ T1389] total_writeback 0 [ 2695.549391][ T1389] total_workingset_refault_anon 48408 [ 2695.555799][ T1389] total_workingset_refault_file 2 [ 2695.561129][ T1389] total_swap 200704 [ 2695.565681][ T1389] total_swapcached 12288 [ 2695.569983][ T1389] total_pgpgin 234259 [ 2695.573990][ T1389] total_pgpgout 234254 [ 2695.590608][ T1389] total_pgfault 518795 [ 2695.613409][ T1389] total_pgmajfault 47190 [ 2695.618522][ T1389] total_inactive_anon 0 [ 2695.622744][ T1389] total_active_anon 20480 [ 2695.627842][ T1389] total_inactive_file 0 [ 2695.632076][ T1389] total_active_file 0 [ 2695.636996][ T1389] total_unevictable 0 [ 2695.641034][ T1389] anon_cost 0 [ 2695.645052][ T1389] file_cost 0 [ 2695.648402][ T1389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1389,uid=0 [ 2695.666925][ T1389] Memory cgroup out of memory: Killed process 1389 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8720kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:04 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x386]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:20:04 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2696.204644][ T5101] Bluetooth: hci8: command 0x0419 tx timeout [ 2696.240525][ T1390] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2696.251717][ T1390] CPU: 1 PID: 1390 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2696.262114][ T1390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2696.272189][ T1390] Call Trace: [ 2696.275488][ T1390] [ 2696.278518][ T1390] dump_stack_lvl+0x1e7/0x2e0 [ 2696.283220][ T1390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2696.288436][ T1390] ? __pfx__printk+0x10/0x10 [ 2696.293041][ T1390] ? ___ratelimit+0x4c4/0x670 [ 2696.297775][ T1390] ? __pfx____ratelimit+0x10/0x10 [ 2696.302826][ T1390] dump_header+0xda/0x6a0 [ 2696.307197][ T1390] oom_kill_process+0x3a7/0x930 [ 2696.312080][ T1390] out_of_memory+0xf67/0x1320 [ 2696.316804][ T1390] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2696.322456][ T1390] ? __pfx___mutex_lock+0x10/0x10 [ 2696.327512][ T1390] ? __pfx_out_of_memory+0x10/0x10 [ 2696.332739][ T1390] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2696.338305][ T1390] ? __pfx_lock_release+0x10/0x10 [ 2696.343353][ T1390] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2696.349531][ T1390] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2696.354776][ T1390] ? mem_cgroup_iter+0x422/0x560 [ 2696.359862][ T1390] try_charge_memcg+0xda2/0x18a0 [ 2696.364856][ T1390] ? __pfx_try_charge_memcg+0x10/0x10 [ 2696.370336][ T1390] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2696.376070][ T1390] ? __pfx_lock_release+0x10/0x10 [ 2696.381114][ T1390] ? memcg_account_kmem+0x1e7/0x210 [ 2696.386337][ T1390] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2696.392161][ T1390] __memcg_kmem_charge_page+0xe1/0x250 [ 2696.397636][ T1390] memcg_charge_kernel_stack+0x304/0x550 [ 2696.403302][ T1390] dup_task_struct+0x40d/0x7d0 [ 2696.408105][ T1390] copy_process+0x5d5/0x3fc0 [ 2696.412726][ T1390] ? __might_fault+0xa9/0x120 [ 2696.417424][ T1390] ? __pfx_lock_release+0x10/0x10 [ 2696.422495][ T1390] ? __pfx_copy_process+0x10/0x10 [ 2696.427537][ T1390] ? __might_fault+0xc5/0x120 [ 2696.432322][ T1390] ? __asan_memset+0x23/0x50 [ 2696.436940][ T1390] kernel_clone+0x21d/0x8d0 [ 2696.441469][ T1390] ? __pfx_kernel_clone+0x10/0x10 [ 2696.446522][ T1390] __se_sys_clone3+0x2cb/0x350 [ 2696.451307][ T1390] ? __pfx___se_sys_clone3+0x10/0x10 [ 2696.456640][ T1390] ? do_syscall_64+0x108/0x240 [ 2696.461431][ T1390] ? do_syscall_64+0xb4/0x240 [ 2696.466125][ T1390] do_syscall_64+0xf9/0x240 [ 2696.470651][ T1390] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2696.476566][ T1390] RIP: 0033:0x7f0f5b4a9b99 [ 2696.480993][ T1390] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2696.500613][ T1390] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2696.509050][ T1390] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2696.517040][ T1390] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2696.525021][ T1390] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2696.533004][ T1390] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2696.540991][ T1390] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2696.549078][ T1390] [ 2696.565183][ T1390] memory: usage 307200kB, limit 307200kB, failcnt 154399 [ 2696.572518][ T1390] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2696.581693][ T1390] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2696.593299][ T1390] Memory cgroup stats for /syz0: [ 2696.593475][ T1390] cache 0 [ 2696.602436][ T1390] rss 12288 [ 2696.612289][ T1390] rss_huge 0 [ 2696.620192][ T1390] shmem 0 [ 2696.623352][ T1390] mapped_file 0 [ 2696.633295][ T1390] dirty 0 [ 2696.637487][ T1390] writeback 0 [ 2696.641083][ T1390] workingset_refault_anon 48573 [ 2696.652849][ T1390] workingset_refault_file 2 [ 2696.658352][ T1390] swap 208896 [ 2696.661877][ T1390] swapcached 8192 [ 2696.671844][ T1390] pgpgin 234439 [ 2696.676897][ T1390] pgpgout 234436 [ 2696.680687][ T1390] pgfault 519063 [ 2696.689291][ T1390] pgmajfault 47352 [ 2696.696010][ T1390] inactive_anon 12288 [ 2696.700744][ T1390] active_anon 0 [ 2696.709198][ T1390] inactive_file 0 [ 2696.713072][ T1390] active_file 0 [ 2696.717655][ T1390] unevictable 0 [ 2696.721345][ T1390] hierarchical_memory_limit 314572800 [ 2696.727886][ T1390] hierarchical_memsw_limit 9223372036854771712 [ 2696.734272][ T1390] total_cache 0 [ 2696.739442][ T1390] total_rss 12288 [ 2696.747302][ T1390] total_rss_huge 0 [ 2696.753760][ T1390] total_shmem 0 [ 2696.759279][ T1390] total_mapped_file 0 [ 2696.763424][ T1390] total_dirty 0 [ 2696.768185][ T1390] total_writeback 0 [ 2696.772387][ T1390] total_workingset_refault_anon 48573 [ 2696.778948][ T1390] total_workingset_refault_file 2 [ 2696.784205][ T1390] total_swap 208896 [ 2696.788986][ T1390] total_swapcached 8192 [ 2696.798230][ T1390] total_pgpgin 234439 [ 2696.802531][ T1390] total_pgpgout 234436 [ 2696.807408][ T1390] total_pgfault 519063 [ 2696.811719][ T1390] total_pgmajfault 47352 [ 2696.817122][ T1390] total_inactive_anon 12288 [ 2696.822310][ T1390] total_active_anon 0 [ 2696.827142][ T1390] total_inactive_file 0 [ 2696.833607][ T1390] total_active_file 0 [ 2696.838746][ T1390] total_unevictable 0 [ 2696.842905][ T1390] anon_cost 0 [ 2696.850854][ T1390] file_cost 0 [ 2696.855024][ T1390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1390,uid=0 [ 2696.871653][ T1390] Memory cgroup out of memory: Killed process 1390 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ce]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2697.404609][ T5101] Bluetooth: hci9: command 0x0419 tx timeout [ 2697.473524][ T1393] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2697.491118][ T1393] CPU: 0 PID: 1393 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2697.501540][ T1393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2697.511681][ T1393] Call Trace: [ 2697.515014][ T1393] [ 2697.517990][ T1393] dump_stack_lvl+0x1e7/0x2e0 [ 2697.522746][ T1393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2697.528013][ T1393] ? __pfx__printk+0x10/0x10 [ 2697.532710][ T1393] ? ___ratelimit+0x4c4/0x670 [ 2697.537480][ T1393] ? __pfx____ratelimit+0x10/0x10 [ 2697.542588][ T1393] dump_header+0xda/0x6a0 [ 2697.547085][ T1393] oom_kill_process+0x3a7/0x930 [ 2697.552018][ T1393] out_of_memory+0xf67/0x1320 [ 2697.556792][ T1393] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2697.562850][ T1393] ? __pfx___mutex_lock+0x10/0x10 [ 2697.567947][ T1393] ? __pfx_out_of_memory+0x10/0x10 [ 2697.573143][ T1393] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2697.578764][ T1393] ? __pfx_lock_release+0x10/0x10 [ 2697.583868][ T1393] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2697.590040][ T1393] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2697.595313][ T1393] ? mem_cgroup_iter+0x422/0x560 [ 2697.600337][ T1393] try_charge_memcg+0xda2/0x18a0 [ 2697.605466][ T1393] ? __pfx_try_charge_memcg+0x10/0x10 [ 2697.610909][ T1393] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2697.616795][ T1393] ? __pfx_lock_release+0x10/0x10 [ 2697.621942][ T1393] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2697.627826][ T1393] __memcg_kmem_charge_page+0xe1/0x250 [ 2697.633355][ T1393] memcg_charge_kernel_stack+0xa7/0x550 [ 2697.638990][ T1393] dup_task_struct+0x15d/0x7d0 [ 2697.643827][ T1393] copy_process+0x5d5/0x3fc0 [ 2697.648510][ T1393] ? __might_fault+0xa9/0x120 [ 2697.653256][ T1393] ? __pfx_lock_release+0x10/0x10 [ 2697.658372][ T1393] ? __pfx_copy_process+0x10/0x10 [ 2697.663449][ T1393] ? __might_fault+0xc5/0x120 [ 2697.668195][ T1393] ? __asan_memset+0x23/0x50 [ 2697.672853][ T1393] kernel_clone+0x21d/0x8d0 [ 2697.677417][ T1393] ? __pfx_kernel_clone+0x10/0x10 [ 2697.682519][ T1393] __se_sys_clone3+0x2cb/0x350 [ 2697.687348][ T1393] ? __pfx___se_sys_clone3+0x10/0x10 [ 2697.692714][ T1393] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2697.698782][ T1393] ? exc_page_fault+0x587/0x870 [ 2697.703695][ T1393] ? do_syscall_64+0xb4/0x240 [ 2697.708432][ T1393] do_syscall_64+0xf9/0x240 [ 2697.713001][ T1393] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2697.718958][ T1393] RIP: 0033:0x7f0f5b4a9b99 [ 2697.723433][ T1393] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2697.743097][ T1393] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2697.751575][ T1393] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2697.759694][ T1393] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2697.767813][ T1393] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2697.775868][ T1393] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2697.783895][ T1393] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2697.791942][ T1393] [ 2697.838587][ T1393] memory: usage 307200kB, limit 307200kB, failcnt 154872 [ 2697.846236][ T1393] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 2697.854387][ T1393] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2697.861903][ T1393] Memory cgroup stats for /syz0: [ 2697.862057][ T1393] cache 0 [ 2697.870531][ T1393] rss 12288 [ 2697.873781][ T1393] rss_huge 0 [ 2697.877221][ T1393] shmem 0 [ 2697.880296][ T1393] mapped_file 0 [ 2697.883889][ T1393] dirty 0 [ 2697.887097][ T1393] writeback 0 [ 2697.890527][ T1393] workingset_refault_anon 48763 [ 2697.895900][ T1393] workingset_refault_file 2 [ 2697.900549][ T1393] swap 249856 [ 2697.903966][ T1393] swapcached 8192 [ 2697.908154][ T1393] pgpgin 234642 [ 2697.911843][ T1393] pgpgout 234639 [ 2697.932482][ T1393] pgfault 519366 [ 2697.936708][ T1393] pgmajfault 47535 [ 2697.940589][ T1393] inactive_anon 0 [ 2697.944458][ T1393] active_anon 12288 [ 2697.948457][ T1393] inactive_file 0 [ 2697.952235][ T1393] active_file 0 [ 2697.973248][ T1393] unevictable 0 [ 2697.984878][ T1393] hierarchical_memory_limit 314572800 [ 2697.990447][ T1393] hierarchical_memsw_limit 9223372036854771712 [ 2698.001743][ T1393] total_cache 0 [ 2698.007457][ T1393] total_rss 12288 [ 2698.022280][ T1393] total_rss_huge 0 [ 2698.038374][ T1393] total_shmem 0 [ 2698.042026][ T1393] total_mapped_file 0 [ 2698.047172][ T1393] total_dirty 0 [ 2698.050809][ T1393] total_writeback 0 [ 2698.055201][ T1393] total_workingset_refault_anon 48763 [ 2698.060751][ T1393] total_workingset_refault_file 2 [ 2698.066263][ T1393] total_swap 249856 [ 2698.070824][ T1393] total_swapcached 8192 [ 2698.087403][ T1393] total_pgpgin 234642 [ 2698.091594][ T1393] total_pgpgout 234639 [ 2698.096634][ T1393] total_pgfault 519366 [ 2698.101270][ T1393] total_pgmajfault 47535 [ 2698.106358][ T1393] total_inactive_anon 0 [ 2698.110735][ T1393] total_active_anon 12288 [ 2698.116260][ T1393] total_inactive_file 0 [ 2698.130965][ T1393] total_active_file 0 [ 2698.135467][ T1393] total_unevictable 0 [ 2698.140077][ T1393] anon_cost 0 [ 2698.143905][ T1393] file_cost 0 [ 2698.147917][ T1393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1393,uid=0 [ 2698.167730][ T1393] Memory cgroup out of memory: Killed process 1393 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:06 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2698.970671][ T1394] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2698.982020][ T1394] CPU: 0 PID: 1394 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2698.992442][ T1394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2699.002536][ T1394] Call Trace: [ 2699.005831][ T1394] [ 2699.008773][ T1394] dump_stack_lvl+0x1e7/0x2e0 [ 2699.013472][ T1394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2699.018687][ T1394] ? __pfx__printk+0x10/0x10 [ 2699.023289][ T1394] ? ___ratelimit+0x4c4/0x670 [ 2699.027991][ T1394] ? __pfx____ratelimit+0x10/0x10 [ 2699.033349][ T1394] dump_header+0xda/0x6a0 [ 2699.037729][ T1394] oom_kill_process+0x3a7/0x930 [ 2699.042619][ T1394] out_of_memory+0xf67/0x1320 [ 2699.047331][ T1394] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2699.053015][ T1394] ? __pfx___mutex_lock+0x10/0x10 [ 2699.058101][ T1394] ? __pfx_out_of_memory+0x10/0x10 [ 2699.063268][ T1394] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2699.068936][ T1394] ? __pfx_lock_release+0x10/0x10 [ 2699.073991][ T1394] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2699.080103][ T1394] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2699.085345][ T1394] ? mem_cgroup_iter+0x422/0x560 [ 2699.090331][ T1394] try_charge_memcg+0xda2/0x18a0 [ 2699.095325][ T1394] ? __pfx_try_charge_memcg+0x10/0x10 [ 2699.100725][ T1394] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2699.106464][ T1394] ? __pfx_lock_release+0x10/0x10 [ 2699.111521][ T1394] ? memcg_account_kmem+0x1e7/0x210 [ 2699.116747][ T1394] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2699.122569][ T1394] __memcg_kmem_charge_page+0xe1/0x250 [ 2699.128046][ T1394] memcg_charge_kernel_stack+0x304/0x550 [ 2699.133715][ T1394] dup_task_struct+0x40d/0x7d0 [ 2699.138498][ T1394] copy_process+0x5d5/0x3fc0 [ 2699.143113][ T1394] ? __might_fault+0xa9/0x120 [ 2699.147807][ T1394] ? __pfx_lock_release+0x10/0x10 [ 2699.152854][ T1394] ? __pfx_copy_process+0x10/0x10 [ 2699.159022][ T1394] ? __might_fault+0xc5/0x120 [ 2699.163726][ T1394] ? __asan_memset+0x23/0x50 [ 2699.168346][ T1394] kernel_clone+0x21d/0x8d0 [ 2699.172872][ T1394] ? __pfx_kernel_clone+0x10/0x10 [ 2699.177930][ T1394] __se_sys_clone3+0x2cb/0x350 [ 2699.182714][ T1394] ? __pfx___se_sys_clone3+0x10/0x10 [ 2699.188043][ T1394] ? do_syscall_64+0x108/0x240 [ 2699.192824][ T1394] ? do_syscall_64+0xb4/0x240 [ 2699.197517][ T1394] do_syscall_64+0xf9/0x240 [ 2699.202037][ T1394] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2699.207992][ T1394] RIP: 0033:0x7f0f5b4a9b99 [ 2699.212546][ T1394] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2699.232280][ T1394] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2699.240894][ T1394] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2699.248881][ T1394] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2699.256953][ T1394] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 12:20:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54080000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2699.264937][ T1394] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2699.272917][ T1394] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2699.280914][ T1394] [ 2699.322904][ T1394] memory: usage 307200kB, limit 307200kB, failcnt 155425 [ 2699.331368][ T1394] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2699.353250][ T1394] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2699.372817][ T1394] Memory cgroup stats for /syz0: [ 2699.372993][ T1394] cache 0 [ 2699.384424][ T1394] rss 12288 [ 2699.389318][ T1394] rss_huge 0 [ 2699.392667][ T1394] shmem 0 [ 2699.413346][ T1394] mapped_file 0 [ 2699.417173][ T1394] dirty 0 [ 2699.420293][ T1394] writeback 0 [ 2699.423743][ T1394] workingset_refault_anon 48966 [ 2699.429381][ T1394] workingset_refault_file 2 [ 2699.440147][ T1394] swap 208896 [ 2699.443615][ T1394] swapcached 0 [ 2699.457692][ T1394] pgpgin 234858 [ 2699.461345][ T1394] pgpgout 234855 [ 2699.465697][ T1394] pgfault 519697 [ 2699.474543][ T1394] pgmajfault 47734 [ 2699.479084][ T1394] inactive_anon 0 [ 2699.482871][ T1394] active_anon 12288 [ 2699.492060][ T1394] inactive_file 0 [ 2699.504453][ T1394] active_file 0 [ 2699.509412][ T1394] unevictable 0 [ 2699.513040][ T1394] hierarchical_memory_limit 314572800 [ 2699.519544][ T1394] hierarchical_memsw_limit 9223372036854771712 [ 2699.527017][ T1394] total_cache 0 [ 2699.530634][ T1394] total_rss 12288 [ 2699.534961][ T1394] total_rss_huge 0 [ 2699.539886][ T1394] total_shmem 0 [ 2699.543470][ T1394] total_mapped_file 0 [ 2699.547657][ T1394] total_dirty 0 [ 2699.551276][ T1394] total_writeback 0 [ 2699.555721][ T1394] total_workingset_refault_anon 48966 [ 2699.561369][ T1394] total_workingset_refault_file 2 [ 2699.567058][ T1394] total_swap 208896 [ 2699.571641][ T1394] total_swapcached 0 [ 2699.575976][ T1394] total_pgpgin 234858 [ 2699.580131][ T1394] total_pgpgout 234855 [ 2699.585671][ T1394] total_pgfault 519697 [ 2699.589978][ T1394] total_pgmajfault 47734 [ 2699.594504][ T1394] total_inactive_anon 0 [ 2699.598895][ T1394] total_active_anon 12288 [ 2699.603630][ T1394] total_inactive_file 0 [ 2699.608160][ T1394] total_active_file 0 [ 2699.612302][ T1394] total_unevictable 0 [ 2699.627598][ T1394] anon_cost 0 [ 2699.630981][ T1394] file_cost 0 [ 2699.640840][ T1394] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1394,uid=0 [ 2699.663328][ T1394] Memory cgroup out of memory: Killed process 1394 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:08 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3da]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2700.025793][ T1397] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2700.046340][ T1397] CPU: 0 PID: 1397 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2700.056776][ T1397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2700.066887][ T1397] Call Trace: [ 2700.070232][ T1397] [ 2700.073210][ T1397] dump_stack_lvl+0x1e7/0x2e0 [ 2700.077961][ T1397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2700.087062][ T1397] ? __pfx__printk+0x10/0x10 [ 2700.091711][ T1397] ? ___ratelimit+0x4c4/0x670 [ 2700.096496][ T1397] ? __pfx____ratelimit+0x10/0x10 [ 2700.101606][ T1397] dump_header+0xda/0x6a0 [ 2700.106024][ T1397] oom_kill_process+0x3a7/0x930 [ 2700.111044][ T1397] out_of_memory+0xf67/0x1320 [ 2700.115797][ T1397] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2700.121505][ T1397] ? __pfx___mutex_lock+0x10/0x10 [ 2700.126599][ T1397] ? __pfx_out_of_memory+0x10/0x10 [ 2700.131797][ T1397] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2700.137415][ T1397] ? __pfx_lock_release+0x10/0x10 [ 2700.142518][ T1397] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2700.148664][ T1397] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2700.153937][ T1397] ? mem_cgroup_iter+0x422/0x560 [ 2700.158957][ T1397] try_charge_memcg+0xda2/0x18a0 [ 2700.163989][ T1397] ? __pfx_try_charge_memcg+0x10/0x10 [ 2700.169434][ T1397] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2700.175233][ T1397] ? __pfx_lock_release+0x10/0x10 [ 2700.180383][ T1397] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2700.186266][ T1397] __memcg_kmem_charge_page+0xe1/0x250 [ 2700.191797][ T1397] memcg_charge_kernel_stack+0xa7/0x550 [ 2700.197423][ T1397] dup_task_struct+0x40d/0x7d0 [ 2700.202259][ T1397] copy_process+0x5d5/0x3fc0 [ 2700.206947][ T1397] ? __might_fault+0xa9/0x120 [ 2700.211697][ T1397] ? __pfx_lock_release+0x10/0x10 [ 2700.216793][ T1397] ? __lock_acquire+0x1345/0x1fd0 [ 2700.221891][ T1397] ? __pfx_copy_process+0x10/0x10 [ 2700.226979][ T1397] ? __might_fault+0xc5/0x120 [ 2700.231736][ T1397] ? __asan_memset+0x23/0x50 [ 2700.236413][ T1397] kernel_clone+0x21d/0x8d0 [ 2700.240984][ T1397] ? __pfx_kernel_clone+0x10/0x10 [ 2700.246433][ T1397] ? __pfx_lock_release+0x10/0x10 [ 2700.251545][ T1397] __se_sys_clone3+0x2cb/0x350 [ 2700.256557][ T1397] ? __might_fault+0xa9/0x120 [ 2700.261319][ T1397] ? __pfx___se_sys_clone3+0x10/0x10 [ 2700.266681][ T1397] ? rcu_is_watching+0x15/0xb0 [ 2700.271532][ T1397] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2700.278727][ T1397] ? exc_page_fault+0x587/0x870 [ 2700.283644][ T1397] ? do_syscall_64+0xb4/0x240 [ 2700.288393][ T1397] do_syscall_64+0xf9/0x240 [ 2700.292971][ T1397] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2700.298932][ T1397] RIP: 0033:0x7f0f5b4a9b99 [ 2700.303403][ T1397] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2700.323157][ T1397] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2700.331641][ T1397] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2700.339675][ T1397] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2700.347708][ T1397] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2700.356174][ T1397] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2700.364206][ T1397] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2700.372260][ T1397] [ 2700.398121][ T1397] memory: usage 307200kB, limit 307200kB, failcnt 155741 [ 2700.433683][ T1397] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 2700.442538][ T1397] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2700.455814][ T1397] Memory cgroup stats for /syz0: [ 2700.455985][ T1397] cache 0 [ 2700.468657][ T1397] rss 12288 [ 2700.471916][ T1397] rss_huge 0 [ 2700.478866][ T1397] shmem 0 [ 2700.481990][ T1397] mapped_file 0 [ 2700.491186][ T1397] dirty 0 [ 2700.494729][ T1397] writeback 0 [ 2700.498194][ T1397] workingset_refault_anon 49072 [ 2700.503260][ T1397] workingset_refault_file 2 [ 2700.513860][ T1397] swap 249856 [ 2700.517468][ T1397] swapcached 8192 [ 2700.522614][ T1397] pgpgin 234977 [ 2700.532517][ T1397] pgpgout 234974 [ 2700.536662][ T1397] pgfault 519877 [ 2700.540875][ T1397] pgmajfault 47835 [ 2700.544977][ T1397] inactive_anon 8192 [ 2700.548916][ T1397] active_anon 4096 [ 2700.552669][ T1397] inactive_file 0 [ 2700.562275][ T1397] active_file 0 [ 2700.566474][ T1397] unevictable 0 [ 2700.570263][ T1397] hierarchical_memory_limit 314572800 [ 2700.581959][ T1397] hierarchical_memsw_limit 9223372036854771712 [ 2700.588315][ T1397] total_cache 0 [ 2700.591820][ T1397] total_rss 12288 [ 2700.603591][ T1397] total_rss_huge 0 [ 2700.610143][ T1397] total_shmem 0 [ 2700.613661][ T1397] total_mapped_file 0 [ 2700.623694][ T1397] total_dirty 0 [ 2700.632066][ T1397] total_writeback 0 [ 2700.637884][ T1397] total_workingset_refault_anon 49072 [ 2700.643314][ T1397] total_workingset_refault_file 2 [ 2700.653619][ T1397] total_swap 249856 [ 2700.657852][ T1397] total_swapcached 8192 [ 2700.662064][ T1397] total_pgpgin 234977 [ 2700.671364][ T1397] total_pgpgout 234974 [ 2700.675691][ T1397] total_pgfault 519877 [ 2700.679802][ T1397] total_pgmajfault 47835 [ 2700.684090][ T1397] total_inactive_anon 8192 [ 2700.694407][ T1397] total_active_anon 4096 [ 2700.698716][ T1397] total_inactive_file 0 [ 2700.702906][ T1397] total_active_file 0 [ 2700.712959][ T1397] total_unevictable 0 [ 2700.717405][ T1397] anon_cost 0 [ 2700.720734][ T1397] file_cost 0 [ 2700.724075][ T1397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1397,uid=0 [ 2700.746011][ T1397] Memory cgroup out of memory: Killed process 1397 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2701.512248][ T1398] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2701.525333][ T1398] CPU: 0 PID: 1398 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2701.535736][ T1398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2701.545822][ T1398] Call Trace: [ 2701.549119][ T1398] [ 2701.552058][ T1398] dump_stack_lvl+0x1e7/0x2e0 [ 2701.556761][ T1398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2701.561974][ T1398] ? __pfx__printk+0x10/0x10 [ 2701.566581][ T1398] ? ___ratelimit+0x4c4/0x670 [ 2701.571286][ T1398] ? __pfx____ratelimit+0x10/0x10 [ 2701.576336][ T1398] dump_header+0xda/0x6a0 [ 2701.580804][ T1398] oom_kill_process+0x3a7/0x930 [ 2701.585677][ T1398] out_of_memory+0xf67/0x1320 [ 2701.590575][ T1398] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2701.596231][ T1398] ? __pfx___mutex_lock+0x10/0x10 [ 2701.601285][ T1398] ? __pfx_out_of_memory+0x10/0x10 [ 2701.606426][ T1398] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2701.611996][ T1398] ? __pfx_lock_release+0x10/0x10 [ 2701.617043][ T1398] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2701.623133][ T1398] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2701.628369][ T1398] ? mem_cgroup_iter+0x422/0x560 [ 2701.633335][ T1398] try_charge_memcg+0xda2/0x18a0 [ 2701.638316][ T1398] ? __pfx_try_charge_memcg+0x10/0x10 [ 2701.643703][ T1398] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2701.649443][ T1398] ? __pfx_lock_release+0x10/0x10 [ 2701.654508][ T1398] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2701.660334][ T1398] __memcg_kmem_charge_page+0xe1/0x250 [ 2701.665816][ T1398] memcg_charge_kernel_stack+0xa7/0x550 [ 2701.671382][ T1398] dup_task_struct+0x15d/0x7d0 [ 2701.676168][ T1398] copy_process+0x5d5/0x3fc0 [ 2701.680786][ T1398] ? __might_fault+0xa9/0x120 [ 2701.685482][ T1398] ? __pfx_lock_release+0x10/0x10 [ 2701.690622][ T1398] ? __pfx_copy_process+0x10/0x10 [ 2701.695661][ T1398] ? __might_fault+0xc5/0x120 [ 2701.700356][ T1398] ? __asan_memset+0x23/0x50 [ 2701.704973][ T1398] kernel_clone+0x21d/0x8d0 [ 2701.709508][ T1398] ? __pfx_kernel_clone+0x10/0x10 [ 2701.714560][ T1398] __se_sys_clone3+0x2cb/0x350 [ 2701.719344][ T1398] ? __pfx___se_sys_clone3+0x10/0x10 [ 2701.724653][ T1398] ? rcu_is_watching+0x15/0xb0 [ 2701.729466][ T1398] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2701.735484][ T1398] ? exc_page_fault+0x587/0x870 [ 2701.740349][ T1398] ? do_syscall_64+0xb4/0x240 [ 2701.745043][ T1398] do_syscall_64+0xf9/0x240 [ 2701.749566][ T1398] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2701.755479][ T1398] RIP: 0033:0x7f0f5b4a9b99 [ 2701.759907][ T1398] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2701.779542][ T1398] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2701.787979][ T1398] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2701.795967][ T1398] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2701.803948][ T1398] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2701.811936][ T1398] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2701.819920][ T1398] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2701.827929][ T1398] [ 2701.853575][ T1398] memory: usage 307200kB, limit 307200kB, failcnt 156323 [ 2701.864502][ T1398] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 2701.872592][ T1398] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2701.881130][ T1398] Memory cgroup stats for /syz0: [ 2701.881308][ T1398] cache 0 [ 2701.890124][ T1398] rss 12288 [ 2701.893437][ T1398] rss_huge 0 [ 2701.897639][ T1398] shmem 0 [ 2701.900716][ T1398] mapped_file 0 [ 2701.904989][ T1398] dirty 0 [ 2701.908124][ T1398] writeback 0 [ 2701.911627][ T1398] workingset_refault_anon 49272 [ 2701.918412][ T1398] workingset_refault_file 2 [ 2701.925496][ T1398] swap 249856 [ 2701.928997][ T1398] swapcached 8192 [ 2701.932848][ T1398] pgpgin 235189 [ 2701.937752][ T1398] pgpgout 235186 [ 2701.941492][ T1398] pgfault 520200 [ 2701.945892][ T1398] pgmajfault 48033 [ 2701.951239][ T1398] inactive_anon 12288 [ 2701.993208][ T1398] active_anon 0 [ 2701.997479][ T1398] inactive_file 0 [ 2702.001166][ T1398] active_file 0 [ 2702.004788][ T1398] unevictable 0 [ 2702.008361][ T1398] hierarchical_memory_limit 314572800 [ 2702.013951][ T1398] hierarchical_memsw_limit 9223372036854771712 [ 2702.021120][ T1398] total_cache 0 [ 2702.030787][ T1398] total_rss 12288 [ 2702.035112][ T1398] total_rss_huge 0 [ 2702.042262][ T1398] total_shmem 0 [ 2702.046909][ T1398] total_mapped_file 0 [ 2702.051062][ T1398] total_dirty 0 [ 2702.055637][ T1398] total_writeback 0 [ 2702.061091][ T1398] total_workingset_refault_anon 49272 [ 2702.067604][ T1398] total_workingset_refault_file 2 [ 2702.083700][ T1398] total_swap 249856 [ 2702.091710][ T1398] total_swapcached 8192 [ 2702.096474][ T1398] total_pgpgin 235189 [ 2702.100640][ T1398] total_pgpgout 235186 [ 2702.105806][ T1398] total_pgfault 520200 [ 2702.110096][ T1398] total_pgmajfault 48033 [ 2702.117381][ T1398] total_inactive_anon 12288 [ 2702.122096][ T1398] total_active_anon 0 [ 2702.127648][ T1398] total_inactive_file 0 [ 2702.131874][ T1398] total_active_file 0 [ 2702.153247][ T1398] total_unevictable 0 [ 2702.163460][ T1398] anon_cost 0 [ 2702.167308][ T1398] file_cost 0 [ 2702.170644][ T1398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1398,uid=0 [ 2702.192766][ T1398] Memory cgroup out of memory: Killed process 1398 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ec]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:20:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7eb2c9f5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2702.776661][ T1400] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2702.787818][ T1400] CPU: 1 PID: 1400 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2702.798231][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2702.808355][ T1400] Call Trace: [ 2702.811680][ T1400] [ 2702.814653][ T1400] dump_stack_lvl+0x1e7/0x2e0 [ 2702.819408][ T1400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2702.825217][ T1400] ? __pfx__printk+0x10/0x10 [ 2702.829866][ T1400] ? ___ratelimit+0x4c4/0x670 [ 2702.834624][ T1400] ? __pfx____ratelimit+0x10/0x10 [ 2702.840157][ T1400] dump_header+0xda/0x6a0 [ 2702.844553][ T1400] oom_kill_process+0x3a7/0x930 [ 2702.849473][ T1400] out_of_memory+0xf67/0x1320 [ 2702.854229][ T1400] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2702.859940][ T1400] ? __pfx___mutex_lock+0x10/0x10 [ 2702.865031][ T1400] ? __pfx_out_of_memory+0x10/0x10 [ 2702.870236][ T1400] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2702.875854][ T1400] ? __pfx_lock_release+0x10/0x10 [ 2702.880958][ T1400] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2702.887095][ T1400] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2702.892350][ T1400] ? mem_cgroup_iter+0x422/0x560 [ 2702.897311][ T1400] try_charge_memcg+0xda2/0x18a0 [ 2702.902291][ T1400] ? __pfx_try_charge_memcg+0x10/0x10 [ 2702.907680][ T1400] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2702.913412][ T1400] ? __pfx_lock_release+0x10/0x10 [ 2702.918466][ T1400] ? memcg_account_kmem+0x1e7/0x210 [ 2702.923697][ T1400] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2702.929530][ T1400] __memcg_kmem_charge_page+0xe1/0x250 [ 2702.935009][ T1400] memcg_charge_kernel_stack+0x210/0x550 [ 2702.940666][ T1400] dup_task_struct+0x15d/0x7d0 [ 2702.945445][ T1400] copy_process+0x5d5/0x3fc0 [ 2702.950060][ T1400] ? __might_fault+0xa9/0x120 [ 2702.954852][ T1400] ? __pfx_lock_release+0x10/0x10 [ 2702.959909][ T1400] ? __pfx_copy_process+0x10/0x10 [ 2702.965028][ T1400] ? __might_fault+0xc5/0x120 [ 2702.969813][ T1400] ? __asan_memset+0x23/0x50 [ 2702.974881][ T1400] kernel_clone+0x21d/0x8d0 [ 2702.979399][ T1400] ? __pfx_kernel_clone+0x10/0x10 [ 2702.984475][ T1400] __se_sys_clone3+0x2cb/0x350 [ 2702.989359][ T1400] ? __pfx___se_sys_clone3+0x10/0x10 [ 2702.994680][ T1400] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2703.000741][ T1400] ? exc_page_fault+0x587/0x870 [ 2703.005627][ T1400] ? do_syscall_64+0xb4/0x240 [ 2703.010350][ T1400] do_syscall_64+0xf9/0x240 [ 2703.014894][ T1400] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2703.020801][ T1400] RIP: 0033:0x7f0f5b4a9b99 [ 2703.025237][ T1400] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2703.044873][ T1400] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2703.053321][ T1400] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2703.061327][ T1400] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2703.069336][ T1400] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2703.077601][ T1400] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2703.085595][ T1400] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2703.093599][ T1400] [ 2703.106216][ T1400] memory: usage 307200kB, limit 307200kB, failcnt 156750 [ 2703.114782][ T1400] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2703.132727][ T1400] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2703.140406][ T1400] Memory cgroup stats for /syz0: [ 2703.140556][ T1400] cache 0 [ 2703.152232][ T1400] rss 0 [ 2703.155210][ T1400] rss_huge 0 [ 2703.159757][ T1400] shmem 0 [ 2703.163061][ T1400] mapped_file 0 [ 2703.167254][ T1400] dirty 0 [ 2703.170238][ T1400] writeback 0 [ 2703.173554][ T1400] workingset_refault_anon 49418 [ 2703.179596][ T1400] workingset_refault_file 2 [ 2703.184151][ T1400] swap 221184 [ 2703.194401][ T1400] swapcached 0 [ 2703.197850][ T1400] pgpgin 235347 [ 2703.201348][ T1400] pgpgout 235347 [ 2703.210061][ T1400] pgfault 520431 [ 2703.213687][ T1400] pgmajfault 48169 [ 2703.217878][ T1400] inactive_anon 0 [ 2703.221562][ T1400] active_anon 0 [ 2703.225805][ T1400] inactive_file 0 [ 2703.229490][ T1400] active_file 0 [ 2703.232982][ T1400] unevictable 0 [ 2703.237375][ T1400] hierarchical_memory_limit 314572800 [ 2703.242801][ T1400] hierarchical_memsw_limit 9223372036854771712 [ 2703.260777][ T1400] total_cache 0 [ 2703.265043][ T1400] total_rss 0 [ 2703.268507][ T1400] total_rss_huge 0 [ 2703.272757][ T1400] total_shmem 0 [ 2703.276770][ T1400] total_mapped_file 0 [ 2703.280933][ T1400] total_dirty 0 [ 2703.286614][ T1400] total_writeback 0 [ 2703.290703][ T1400] total_workingset_refault_anon 49418 [ 2703.297404][ T1400] total_workingset_refault_file 2 [ 2703.302788][ T1400] total_swap 221184 [ 2703.318400][ T1400] total_swapcached 0 [ 2703.322933][ T1400] total_pgpgin 235347 [ 2703.328472][ T1400] total_pgpgout 235347 [ 2703.333083][ T1400] total_pgfault 520431 [ 2703.337766][ T1400] total_pgmajfault 48169 [ 2703.342176][ T1400] total_inactive_anon 0 [ 2703.347863][ T1400] total_active_anon 0 [ 2703.352027][ T1400] total_inactive_file 0 [ 2703.357544][ T1400] total_active_file 0 [ 2703.361700][ T1400] total_unevictable 0 [ 2703.366404][ T1400] anon_cost 0 [ 2703.382639][ T1400] file_cost 0 [ 2703.388498][ T1400] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1400,uid=0 [ 2703.404963][ T1400] Memory cgroup out of memory: Killed process 1400 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2704.138380][ T1402] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2704.159706][ T1402] CPU: 1 PID: 1402 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2704.170143][ T1402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2704.180260][ T1402] Call Trace: [ 2704.183597][ T1402] [ 2704.186574][ T1402] dump_stack_lvl+0x1e7/0x2e0 [ 2704.191406][ T1402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2704.196670][ T1402] ? __pfx__printk+0x10/0x10 [ 2704.201324][ T1402] ? ___ratelimit+0x4c4/0x670 [ 2704.206082][ T1402] ? __pfx____ratelimit+0x10/0x10 [ 2704.211187][ T1402] dump_header+0xda/0x6a0 [ 2704.215606][ T1402] oom_kill_process+0x3a7/0x930 [ 2704.221244][ T1402] out_of_memory+0xf67/0x1320 [ 2704.226100][ T1402] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2704.231815][ T1402] ? __pfx___mutex_lock+0x10/0x10 [ 2704.237265][ T1402] ? __pfx_out_of_memory+0x10/0x10 [ 2704.242468][ T1402] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2704.248183][ T1402] ? __pfx_lock_release+0x10/0x10 [ 2704.253288][ T1402] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2704.259442][ T1402] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2704.264721][ T1402] ? mem_cgroup_iter+0x422/0x560 [ 2704.269837][ T1402] try_charge_memcg+0xda2/0x18a0 [ 2704.274886][ T1402] ? __pfx_try_charge_memcg+0x10/0x10 [ 2704.280337][ T1402] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2704.286135][ T1402] ? __pfx_lock_release+0x10/0x10 [ 2704.291358][ T1402] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2704.297326][ T1402] __memcg_kmem_charge_page+0xe1/0x250 [ 2704.302867][ T1402] memcg_charge_kernel_stack+0xa7/0x550 [ 2704.308494][ T1402] dup_task_struct+0x40d/0x7d0 [ 2704.313342][ T1402] copy_process+0x5d5/0x3fc0 [ 2704.318308][ T1402] ? __might_fault+0xa9/0x120 [ 2704.323321][ T1402] ? __pfx_lock_release+0x10/0x10 [ 2704.328432][ T1402] ? __pfx_copy_process+0x10/0x10 [ 2704.333530][ T1402] ? __might_fault+0xc5/0x120 [ 2704.338287][ T1402] ? __asan_memset+0x23/0x50 [ 2704.342961][ T1402] kernel_clone+0x21d/0x8d0 [ 2704.347535][ T1402] ? __pfx_kernel_clone+0x10/0x10 [ 2704.352645][ T1402] __se_sys_clone3+0x2cb/0x350 [ 2704.357486][ T1402] ? __pfx___se_sys_clone3+0x10/0x10 [ 2704.362836][ T1402] ? rcu_is_watching+0x15/0xb0 [ 2704.367685][ T1402] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2704.373768][ T1402] ? exc_page_fault+0x587/0x870 [ 2704.378686][ T1402] ? do_syscall_64+0xb4/0x240 [ 2704.383438][ T1402] do_syscall_64+0xf9/0x240 [ 2704.388015][ T1402] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2704.393972][ T1402] RIP: 0033:0x7f0f5b4a9b99 [ 2704.398447][ T1402] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2704.418206][ T1402] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2704.426875][ T1402] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2704.434922][ T1402] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2704.442976][ T1402] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2704.451007][ T1402] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2704.459125][ T1402] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2704.467183][ T1402] [ 2704.478177][ T1402] memory: usage 307200kB, limit 307200kB, failcnt 157274 [ 2704.494513][ T1402] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2704.514500][ T1402] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2704.534492][ T1402] Memory cgroup stats for /syz0: [ 2704.534668][ T1402] cache 0 [ 2704.542804][ T1402] rss 12288 [ 2704.547106][ T1402] rss_huge 0 [ 2704.554476][ T1402] shmem 0 [ 2704.564625][ T1402] mapped_file 0 [ 2704.568256][ T1402] dirty 0 [ 2704.571243][ T1402] writeback 0 [ 2704.579301][ T1402] workingset_refault_anon 49611 [ 2704.585049][ T1402] workingset_refault_file 2 [ 2704.589611][ T1402] swap 208896 [ 2704.593040][ T1402] swapcached 12288 [ 2704.603593][ T1402] pgpgin 235552 [ 2704.607711][ T1402] pgpgout 235549 [ 2704.611324][ T1402] pgfault 520735 [ 2704.615241][ T1402] pgmajfault 48355 [ 2704.619410][ T1402] inactive_anon 0 [ 2704.623088][ T1402] active_anon 12288 [ 2704.632462][ T1402] inactive_file 0 [ 2704.636305][ T1402] active_file 0 [ 2704.640140][ T1402] unevictable 0 [ 2704.643838][ T1402] hierarchical_memory_limit 314572800 [ 2704.658984][ T1402] hierarchical_memsw_limit 9223372036854771712 [ 2704.671990][ T1402] total_cache 0 [ 2704.678156][ T1402] total_rss 12288 [ 2704.681952][ T1402] total_rss_huge 0 [ 2704.689887][ T1402] total_shmem 0 [ 2704.693413][ T1402] total_mapped_file 0 [ 2704.700354][ T1402] total_dirty 0 [ 2704.703882][ T1402] total_writeback 0 [ 2704.712679][ T1402] total_workingset_refault_anon 49611 [ 2704.718499][ T1402] total_workingset_refault_file 2 [ 2704.723668][ T1402] total_swap 208896 [ 2704.733652][ T1402] total_swapcached 12288 [ 2704.738119][ T1402] total_pgpgin 235552 [ 2704.742432][ T1402] total_pgpgout 235549 [ 2704.752954][ T1402] total_pgfault 520735 [ 2704.757231][ T1402] total_pgmajfault 48355 [ 2704.761789][ T1402] total_inactive_anon 0 [ 2704.772543][ T1402] total_active_anon 12288 [ 2704.777788][ T1402] total_inactive_file 0 [ 2704.782271][ T1402] total_active_file 0 [ 2704.792443][ T1402] total_unevictable 0 [ 2704.796969][ T1402] anon_cost 0 [ 2704.800311][ T1402] file_cost 0 [ 2704.803632][ T1402] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1402,uid=0 [ 2704.826504][ T1402] Memory cgroup out of memory: Killed process 1402 (syz-executor.0) total-vm:54508kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:13 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:20:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2705.551115][ T1403] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2705.580970][ T1403] CPU: 0 PID: 1403 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2705.591392][ T1403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2705.601576][ T1403] Call Trace: [ 2705.604885][ T1403] [ 2705.607833][ T1403] dump_stack_lvl+0x1e7/0x2e0 [ 2705.612625][ T1403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2705.617842][ T1403] ? __pfx__printk+0x10/0x10 [ 2705.622459][ T1403] ? ___ratelimit+0x4c4/0x670 [ 2705.627164][ T1403] ? __pfx____ratelimit+0x10/0x10 [ 2705.632218][ T1403] dump_header+0xda/0x6a0 [ 2705.637020][ T1403] oom_kill_process+0x3a7/0x930 [ 2705.641900][ T1403] out_of_memory+0xf67/0x1320 [ 2705.646607][ T1403] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2705.652436][ T1403] ? __pfx___mutex_lock+0x10/0x10 [ 2705.657492][ T1403] ? __pfx_out_of_memory+0x10/0x10 [ 2705.662630][ T1403] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2705.668198][ T1403] ? __pfx_lock_release+0x10/0x10 [ 2705.673250][ T1403] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2705.679336][ T1403] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2705.684550][ T1403] ? mem_cgroup_iter+0x422/0x560 [ 2705.689513][ T1403] try_charge_memcg+0xda2/0x18a0 [ 2705.694490][ T1403] ? __pfx_try_charge_memcg+0x10/0x10 [ 2705.699885][ T1403] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2705.705660][ T1403] ? __pfx_lock_release+0x10/0x10 [ 2705.710887][ T1403] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2705.716898][ T1403] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2705.722894][ T1403] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2705.728732][ T1403] obj_cgroup_charge+0x389/0x630 [ 2705.733687][ T1403] ? obj_cgroup_charge+0x121/0x630 [ 2705.738812][ T1403] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2705.744284][ T1403] ? kmalloc_trace+0x4e/0x360 [ 2705.749011][ T1403] ? __pfx___might_resched+0x10/0x10 [ 2705.754327][ T1403] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2705.760157][ T1403] ? copy_semundo+0xb5/0x240 [ 2705.764764][ T1403] kmalloc_trace+0x216/0x360 [ 2705.769373][ T1403] ? __asan_memcpy+0x40/0x70 [ 2705.773988][ T1403] copy_semundo+0xb5/0x240 [ 2705.778512][ T1403] copy_process+0x1bc3/0x3fc0 [ 2705.783222][ T1403] ? copy_process+0x9c3/0x3fc0 [ 2705.788015][ T1403] ? __pfx_copy_process+0x10/0x10 [ 2705.793149][ T1403] ? __might_fault+0xc5/0x120 [ 2705.797851][ T1403] ? __asan_memset+0x23/0x50 [ 2705.802471][ T1403] kernel_clone+0x21d/0x8d0 [ 2705.807000][ T1403] ? __pfx_kernel_clone+0x10/0x10 [ 2705.812053][ T1403] __se_sys_clone3+0x2cb/0x350 [ 2705.816930][ T1403] ? __pfx___se_sys_clone3+0x10/0x10 [ 2705.822272][ T1403] ? do_syscall_64+0x108/0x240 [ 2705.827057][ T1403] ? do_syscall_64+0xb4/0x240 [ 2705.831749][ T1403] do_syscall_64+0xf9/0x240 [ 2705.836272][ T1403] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2705.842179][ T1403] RIP: 0033:0x7f0f5b4a9b99 [ 2705.846697][ T1403] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2705.866319][ T1403] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2705.874748][ T1403] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2705.882739][ T1403] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2705.890812][ T1403] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2705.898797][ T1403] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2705.906878][ T1403] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2705.914968][ T1403] [ 2705.929521][ T1403] memory: usage 307200kB, limit 307200kB, failcnt 157826 [ 2705.942822][ T1403] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2705.950864][ T1403] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2705.958739][ T1403] Memory cgroup stats for /syz0: [ 2705.958901][ T1403] cache 0 [ 2705.968194][ T1403] rss 12288 [ 2705.971454][ T1403] rss_huge 0 [ 2705.975786][ T1403] shmem 0 [ 2705.978912][ T1403] mapped_file 0 [ 2705.982522][ T1403] dirty 0 [ 2705.986354][ T1403] writeback 0 [ 2705.989750][ T1403] workingset_refault_anon 49792 [ 2705.995897][ T1403] workingset_refault_file 2 [ 2706.000497][ T1403] swap 208896 [ 2706.003845][ T1403] swapcached 8192 [ 2706.008564][ T1403] pgpgin 235744 [ 2706.012198][ T1403] pgpgout 235741 [ 2706.016290][ T1403] pgfault 521042 [ 2706.020295][ T1403] pgmajfault 48535 [ 2706.024194][ T1403] inactive_anon 12288 [ 2706.028845][ T1403] active_anon 0 [ 2706.032519][ T1403] inactive_file 0 [ 2706.036978][ T1403] active_file 0 [ 2706.040600][ T1403] unevictable 0 [ 2706.045393][ T1403] hierarchical_memory_limit 314572800 [ 2706.050904][ T1403] hierarchical_memsw_limit 9223372036854771712 [ 2706.061493][ T1403] total_cache 0 [ 2706.065249][ T1403] total_rss 12288 [ 2706.069016][ T1403] total_rss_huge 0 [ 2706.072773][ T1403] total_shmem 0 [ 2706.076669][ T1403] total_mapped_file 0 [ 2706.080692][ T1403] total_dirty 0 [ 2706.084174][ T1403] total_writeback 0 [ 2706.088229][ T1403] total_workingset_refault_anon 49792 [ 2706.093633][ T1403] total_workingset_refault_file 2 [ 2706.098802][ T1403] total_swap 208896 [ 2706.102730][ T1403] total_swapcached 8192 [ 2706.107331][ T1403] total_pgpgin 235744 [ 2706.111353][ T1403] total_pgpgout 235741 [ 2706.115574][ T1403] total_pgfault 521042 [ 2706.119679][ T1403] total_pgmajfault 48535 [ 2706.123958][ T1403] total_inactive_anon 12288 [ 2706.129310][ T1403] total_active_anon 0 [ 2706.133471][ T1403] total_inactive_file 0 [ 2706.142987][ T1403] total_active_file 0 [ 2706.147328][ T1403] total_unevictable 0 [ 2706.151360][ T1403] anon_cost 0 [ 2706.154810][ T1403] file_cost 0 [ 2706.158188][ T1403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1403,uid=0 [ 2706.174077][ T1403] Memory cgroup out of memory: Killed process 1403 (syz-executor.0) total-vm:54508kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2706.897994][ T1406] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2706.910394][ T1406] CPU: 0 PID: 1406 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2706.920824][ T1406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2706.931026][ T1406] Call Trace: [ 2706.934358][ T1406] [ 2706.937347][ T1406] dump_stack_lvl+0x1e7/0x2e0 [ 2706.942101][ T1406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2706.947391][ T1406] ? __pfx__printk+0x10/0x10 [ 2706.952053][ T1406] ? ___ratelimit+0x4c4/0x670 [ 2706.956862][ T1406] ? __pfx____ratelimit+0x10/0x10 [ 2706.961989][ T1406] dump_header+0xda/0x6a0 [ 2706.966413][ T1406] oom_kill_process+0x3a7/0x930 [ 2706.971437][ T1406] out_of_memory+0xf67/0x1320 [ 2706.976199][ T1406] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2706.982092][ T1406] ? __pfx___mutex_lock+0x10/0x10 [ 2706.987205][ T1406] ? __pfx_out_of_memory+0x10/0x10 [ 2706.992410][ T1406] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2706.998031][ T1406] ? __pfx_lock_release+0x10/0x10 [ 2707.003151][ T1406] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2707.009310][ T1406] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2707.014670][ T1406] ? mem_cgroup_iter+0x422/0x560 [ 2707.019781][ T1406] try_charge_memcg+0xda2/0x18a0 [ 2707.024830][ T1406] ? __pfx_try_charge_memcg+0x10/0x10 [ 2707.030290][ T1406] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2707.036178][ T1406] ? __pfx_lock_release+0x10/0x10 [ 2707.041312][ T1406] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2707.047460][ T1406] __memcg_kmem_charge_page+0xe1/0x250 [ 2707.053001][ T1406] memcg_charge_kernel_stack+0xa7/0x550 [ 2707.058627][ T1406] dup_task_struct+0x40d/0x7d0 [ 2707.063467][ T1406] copy_process+0x5d5/0x3fc0 [ 2707.068229][ T1406] ? __might_fault+0xa9/0x120 [ 2707.072980][ T1406] ? __pfx_lock_release+0x10/0x10 [ 2707.078099][ T1406] ? __pfx_copy_process+0x10/0x10 [ 2707.083200][ T1406] ? __might_fault+0xc5/0x120 [ 2707.087957][ T1406] ? __asan_memset+0x23/0x50 [ 2707.092628][ T1406] kernel_clone+0x21d/0x8d0 [ 2707.097206][ T1406] ? __pfx_kernel_clone+0x10/0x10 [ 2707.102317][ T1406] __se_sys_clone3+0x2cb/0x350 [ 2707.107156][ T1406] ? __pfx___se_sys_clone3+0x10/0x10 [ 2707.112535][ T1406] ? rcu_is_watching+0x15/0xb0 [ 2707.117662][ T1406] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2707.123735][ T1406] ? exc_page_fault+0x587/0x870 [ 2707.128747][ T1406] ? do_syscall_64+0xb4/0x240 [ 2707.133503][ T1406] do_syscall_64+0xf9/0x240 [ 2707.138081][ T1406] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2707.144041][ T1406] RIP: 0033:0x7f0f5b4a9b99 [ 2707.149210][ T1406] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2707.168889][ T1406] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2707.177368][ T1406] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2707.185400][ T1406] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2707.193433][ T1406] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2707.201464][ T1406] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2707.209493][ T1406] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2707.217547][ T1406] [ 2707.274561][ T1406] memory: usage 307200kB, limit 307200kB, failcnt 158400 [ 2707.281810][ T1406] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 2707.293119][ T1406] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2707.301440][ T1406] Memory cgroup stats for /syz0: [ 2707.301597][ T1406] cache 0 [ 2707.315191][ T1406] rss 12288 [ 2707.319065][ T1406] rss_huge 0 [ 2707.325067][ T1406] shmem 0 [ 2707.329828][ T1406] mapped_file 0 [ 2707.336121][ T1406] dirty 0 [ 2707.339124][ T1406] writeback 0 [ 2707.342442][ T1406] workingset_refault_anon 49976 [ 2707.347822][ T1406] workingset_refault_file 2 [ 2707.352384][ T1406] swap 208896 [ 2707.356221][ T1406] swapcached 8192 [ 2707.359890][ T1406] pgpgin 235939 [ 2707.363384][ T1406] pgpgout 235936 [ 2707.367188][ T1406] pgfault 521329 [ 2707.370788][ T1406] pgmajfault 48706 [ 2707.385757][ T1406] inactive_anon 12288 [ 2707.389835][ T1406] active_anon 0 [ 2707.393332][ T1406] inactive_file 0 [ 2707.397150][ T1406] active_file 0 [ 2707.400662][ T1406] unevictable 0 [ 2707.404156][ T1406] hierarchical_memory_limit 314572800 [ 2707.410109][ T1406] hierarchical_memsw_limit 9223372036854771712 [ 2707.417154][ T1406] total_cache 0 [ 2707.420802][ T1406] total_rss 12288 [ 2707.429925][ T1406] total_rss_huge 0 [ 2707.433725][ T1406] total_shmem 0 [ 2707.447021][ T1406] total_mapped_file 0 [ 2707.451123][ T1406] total_dirty 0 [ 2707.455189][ T1406] total_writeback 0 [ 2707.459155][ T1406] total_workingset_refault_anon 49976 [ 2707.466031][ T1406] total_workingset_refault_file 2 [ 2707.471236][ T1406] total_swap 208896 [ 2707.475308][ T1406] total_swapcached 8192 [ 2707.479663][ T1406] total_pgpgin 235939 [ 2707.483726][ T1406] total_pgpgout 235936 [ 2707.489916][ T1406] total_pgfault 521329 [ 2707.505206][ T1406] total_pgmajfault 48706 [ 2707.509657][ T1406] total_inactive_anon 12288 [ 2707.514763][ T1406] total_active_anon 0 [ 2707.518922][ T1406] total_inactive_file 0 [ 2707.525774][ T1406] total_active_file 0 [ 2707.529856][ T1406] total_unevictable 0 [ 2707.533883][ T1406] anon_cost 0 [ 2707.539018][ T1406] file_cost 0 [ 2707.545987][ T1406] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1406,uid=0 [ 2707.578598][ T1406] Memory cgroup out of memory: Killed process 1406 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x844]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2708.244236][ T1407] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2708.255149][ T1407] CPU: 0 PID: 1407 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2708.265547][ T1407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2708.275650][ T1407] Call Trace: [ 2708.278949][ T1407] [ 2708.281889][ T1407] dump_stack_lvl+0x1e7/0x2e0 [ 2708.286593][ T1407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2708.292091][ T1407] ? __pfx__printk+0x10/0x10 [ 2708.296708][ T1407] ? ___ratelimit+0x4c4/0x670 [ 2708.301408][ T1407] ? __pfx____ratelimit+0x10/0x10 [ 2708.306464][ T1407] dump_header+0xda/0x6a0 [ 2708.310817][ T1407] oom_kill_process+0x3a7/0x930 [ 2708.315721][ T1407] out_of_memory+0xf67/0x1320 [ 2708.320472][ T1407] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2708.326145][ T1407] ? __pfx___mutex_lock+0x10/0x10 [ 2708.331193][ T1407] ? __pfx_out_of_memory+0x10/0x10 [ 2708.336334][ T1407] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2708.341900][ T1407] ? __pfx_lock_release+0x10/0x10 [ 2708.346948][ T1407] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2708.353034][ T1407] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2708.358423][ T1407] ? mem_cgroup_iter+0x422/0x560 [ 2708.363380][ T1407] try_charge_memcg+0xda2/0x18a0 [ 2708.368359][ T1407] ? __pfx_try_charge_memcg+0x10/0x10 [ 2708.373758][ T1407] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2708.379497][ T1407] ? __pfx_lock_release+0x10/0x10 [ 2708.384544][ T1407] ? memcg_account_kmem+0x1e7/0x210 [ 2708.389889][ T1407] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2708.396184][ T1407] __memcg_kmem_charge_page+0xe1/0x250 [ 2708.401689][ T1407] memcg_charge_kernel_stack+0x304/0x550 [ 2708.407357][ T1407] dup_task_struct+0x15d/0x7d0 [ 2708.412838][ T1407] copy_process+0x5d5/0x3fc0 [ 2708.417458][ T1407] ? __might_fault+0xa9/0x120 [ 2708.422159][ T1407] ? __pfx_lock_release+0x10/0x10 [ 2708.427211][ T1407] ? __lock_acquire+0x1345/0x1fd0 [ 2708.432257][ T1407] ? __pfx_copy_process+0x10/0x10 [ 2708.437304][ T1407] ? __might_fault+0xc5/0x120 [ 2708.442004][ T1407] ? __asan_memset+0x23/0x50 [ 2708.446634][ T1407] kernel_clone+0x21d/0x8d0 [ 2708.451159][ T1407] ? __pfx_kernel_clone+0x10/0x10 [ 2708.456204][ T1407] ? __pfx_lock_release+0x10/0x10 [ 2708.461258][ T1407] __se_sys_clone3+0x2cb/0x350 [ 2708.466038][ T1407] ? __might_fault+0xa9/0x120 [ 2708.470736][ T1407] ? __pfx___se_sys_clone3+0x10/0x10 [ 2708.476038][ T1407] ? rcu_is_watching+0x15/0xb0 [ 2708.480836][ T1407] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2708.486935][ T1407] ? exc_page_fault+0x587/0x870 [ 2708.491805][ T1407] ? do_syscall_64+0xb4/0x240 [ 2708.496517][ T1407] do_syscall_64+0xf9/0x240 [ 2708.501048][ T1407] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2708.506958][ T1407] RIP: 0033:0x7f0f5b4a9b99 [ 2708.511387][ T1407] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2708.531022][ T1407] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2708.539453][ T1407] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2708.547522][ T1407] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2708.555505][ T1407] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2708.563486][ T1407] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2708.571468][ T1407] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2708.579468][ T1407] [ 2708.586784][ T1407] memory: usage 307200kB, limit 307200kB, failcnt 158859 12:20:17 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2708.594061][ T1407] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2708.632279][ T1407] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2708.646559][ T1407] Memory cgroup stats for /syz0: [ 2708.646761][ T1407] cache 0 [ 2708.658633][ T1407] rss 12288 [ 2708.661961][ T1407] rss_huge 0 [ 2708.668225][ T1407] shmem 0 [ 2708.671349][ T1407] mapped_file 0 [ 2708.675733][ T1407] dirty 0 [ 2708.684644][ T1407] writeback 0 [ 2708.704832][ T1407] workingset_refault_anon 50151 [ 2708.711736][ T1407] workingset_refault_file 2 [ 2708.716696][ T1407] swap 208896 [ 2708.720137][ T1407] swapcached 8192 [ 2708.723910][ T1407] pgpgin 236125 [ 2708.728013][ T1407] pgpgout 236122 [ 2708.731723][ T1407] pgfault 521606 [ 2708.744493][ T1407] pgmajfault 48871 [ 2708.760701][ T1407] inactive_anon 12288 [ 2708.766834][ T1407] active_anon 0 [ 2708.774087][ T1407] inactive_file 0 [ 2708.778293][ T1407] active_file 0 [ 2708.784919][ T1407] unevictable 0 [ 2708.800790][ T1407] hierarchical_memory_limit 314572800 [ 2708.810671][ T1407] hierarchical_memsw_limit 9223372036854771712 [ 2708.818413][ T1407] total_cache 0 [ 2708.822085][ T1407] total_rss 12288 [ 2708.832187][ T1407] total_rss_huge 0 [ 2708.837227][ T1407] total_shmem 0 [ 2708.840864][ T1407] total_mapped_file 0 [ 2708.845730][ T1407] total_dirty 0 [ 2708.855120][ T1407] total_writeback 0 [ 2708.860635][ T1407] total_workingset_refault_anon 50151 [ 2708.870637][ T1407] total_workingset_refault_file 2 [ 2708.881529][ T1407] total_swap 208896 [ 2708.885996][ T1407] total_swapcached 8192 [ 2708.890343][ T1407] total_pgpgin 236125 [ 2708.894918][ T1407] total_pgpgout 236122 [ 2708.904778][ T1407] total_pgfault 521606 [ 2708.920136][ T1407] total_pgmajfault 48871 [ 2708.925174][ T1407] total_inactive_anon 12288 [ 2708.931053][ T1407] total_active_anon 0 [ 2708.941292][ T1407] total_inactive_file 0 [ 2708.946231][ T1407] total_active_file 0 [ 2708.950402][ T1407] total_unevictable 0 [ 2708.954912][ T1407] anon_cost 0 [ 2708.964056][ T1407] file_cost 0 [ 2708.967753][ T1407] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1407,uid=0 [ 2708.984270][ T1407] Memory cgroup out of memory: Killed process 1407 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x854]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2709.436788][ T1410] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2709.461205][ T1410] CPU: 1 PID: 1410 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2709.471641][ T1410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2709.481752][ T1410] Call Trace: [ 2709.485082][ T1410] [ 2709.488061][ T1410] dump_stack_lvl+0x1e7/0x2e0 [ 2709.492806][ T1410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2709.498079][ T1410] ? __pfx__printk+0x10/0x10 [ 2709.502756][ T1410] ? ___ratelimit+0x4c4/0x670 [ 2709.507521][ T1410] ? __pfx____ratelimit+0x10/0x10 [ 2709.512628][ T1410] dump_header+0xda/0x6a0 [ 2709.517045][ T1410] oom_kill_process+0x3a7/0x930 [ 2709.521978][ T1410] out_of_memory+0xf67/0x1320 [ 2709.526844][ T1410] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2709.532558][ T1410] ? __pfx___mutex_lock+0x10/0x10 [ 2709.537661][ T1410] ? __pfx_out_of_memory+0x10/0x10 [ 2709.542950][ T1410] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2709.548575][ T1410] ? __pfx_lock_release+0x10/0x10 [ 2709.553679][ T1410] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2709.559841][ T1410] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2709.565115][ T1410] ? mem_cgroup_iter+0x422/0x560 [ 2709.570220][ T1410] try_charge_memcg+0xda2/0x18a0 [ 2709.575329][ T1410] ? __pfx_try_charge_memcg+0x10/0x10 [ 2709.580728][ T1410] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2709.586460][ T1410] ? __pfx_lock_release+0x10/0x10 [ 2709.591520][ T1410] ? memcg_account_kmem+0x1e7/0x210 [ 2709.596749][ T1410] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2709.602573][ T1410] __memcg_kmem_charge_page+0xe1/0x250 [ 2709.608222][ T1410] memcg_charge_kernel_stack+0x210/0x550 [ 2709.613875][ T1410] dup_task_struct+0x40d/0x7d0 [ 2709.618680][ T1410] copy_process+0x5d5/0x3fc0 [ 2709.623305][ T1410] ? __might_fault+0xa9/0x120 [ 2709.628005][ T1410] ? __pfx_lock_release+0x10/0x10 [ 2709.633056][ T1410] ? __pfx_copy_process+0x10/0x10 [ 2709.638092][ T1410] ? __might_fault+0xc5/0x120 [ 2709.642792][ T1410] ? __asan_memset+0x23/0x50 [ 2709.647410][ T1410] kernel_clone+0x21d/0x8d0 [ 2709.651937][ T1410] ? __pfx_kernel_clone+0x10/0x10 [ 2709.657005][ T1410] __se_sys_clone3+0x2cb/0x350 [ 2709.661788][ T1410] ? __pfx___se_sys_clone3+0x10/0x10 [ 2709.668706][ T1410] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2709.674748][ T1410] ? exc_page_fault+0x587/0x870 [ 2709.679626][ T1410] ? do_syscall_64+0xb4/0x240 [ 2709.684322][ T1410] do_syscall_64+0xf9/0x240 [ 2709.688942][ T1410] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2709.694858][ T1410] RIP: 0033:0x7f0f5b4a9b99 [ 2709.699289][ T1410] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2709.718921][ T1410] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2709.727354][ T1410] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2709.735339][ T1410] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2709.743320][ T1410] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2709.751300][ T1410] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2709.759282][ T1410] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2709.767287][ T1410] [ 2709.815306][ T1410] memory: usage 307200kB, limit 307200kB, failcnt 159192 [ 2709.822439][ T1410] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2709.845365][ T1410] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2709.852760][ T1410] Memory cgroup stats for /syz0: [ 2709.852910][ T1410] cache 0 [ 2709.863009][ T1410] rss 12288 [ 2709.866774][ T1410] rss_huge 0 [ 2709.870222][ T1410] shmem 0 [ 2709.873672][ T1410] mapped_file 0 [ 2709.878457][ T1410] dirty 0 [ 2709.881545][ T1410] writeback 0 [ 2709.885575][ T1410] workingset_refault_anon 50273 [ 2709.890595][ T1410] workingset_refault_file 2 [ 2709.896088][ T1410] swap 208896 [ 2709.899710][ T1410] swapcached 12288 [ 2709.903953][ T1410] pgpgin 236259 [ 2709.909102][ T1410] pgpgout 236256 [ 2709.912704][ T1410] pgfault 521814 [ 2709.919743][ T1410] pgmajfault 48989 [ 2709.923543][ T1410] inactive_anon 0 [ 2709.930579][ T1410] active_anon 12288 [ 2709.951584][ T1410] inactive_file 0 [ 2709.955635][ T1410] active_file 0 [ 2709.959154][ T1410] unevictable 0 [ 2709.962658][ T1410] hierarchical_memory_limit 314572800 [ 2709.974275][ T1410] hierarchical_memsw_limit 9223372036854771712 [ 2709.998704][ T1410] total_cache 0 [ 2710.002235][ T1410] total_rss 12288 [ 2710.012081][ T1410] total_rss_huge 0 [ 2710.016704][ T1410] total_shmem 0 [ 2710.020234][ T1410] total_mapped_file 0 [ 2710.024260][ T1410] total_dirty 0 [ 2710.028125][ T1410] total_writeback 0 [ 2710.031977][ T1410] total_workingset_refault_anon 50273 [ 2710.054190][ T1410] total_workingset_refault_file 2 [ 2710.064645][ T1410] total_swap 208896 [ 2710.070151][ T1410] total_swapcached 12288 [ 2710.075032][ T1410] total_pgpgin 236259 [ 2710.079068][ T1410] total_pgpgout 236256 [ 2710.083271][ T1410] total_pgfault 521814 [ 2710.093926][ T1410] total_pgmajfault 48989 [ 2710.111635][ T1410] total_inactive_anon 0 [ 2710.116251][ T1410] total_active_anon 12288 [ 2710.120642][ T1410] total_inactive_file 0 [ 2710.125053][ T1410] total_active_file 0 [ 2710.129084][ T1410] total_unevictable 0 [ 2710.133108][ T1410] anon_cost 0 [ 2710.142568][ T1410] file_cost 0 [ 2710.146280][ T1410] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1410,uid=0 [ 2710.173306][ T1410] Memory cgroup out of memory: Killed process 1410 (syz-executor.0) total-vm:54508kB, anon-rss:364kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2710.923524][ T1411] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2710.937013][ T1411] CPU: 0 PID: 1411 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2710.947433][ T1411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2710.957813][ T1411] Call Trace: [ 2710.961228][ T1411] [ 2710.964196][ T1411] dump_stack_lvl+0x1e7/0x2e0 [ 2710.968939][ T1411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2710.974222][ T1411] ? __pfx__printk+0x10/0x10 [ 2710.978872][ T1411] ? ___ratelimit+0x4c4/0x670 [ 2710.983628][ T1411] ? __pfx____ratelimit+0x10/0x10 [ 2710.988742][ T1411] dump_header+0xda/0x6a0 [ 2710.993156][ T1411] oom_kill_process+0x3a7/0x930 [ 2710.998094][ T1411] out_of_memory+0xf67/0x1320 [ 2711.002942][ T1411] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2711.008704][ T1411] ? __pfx___mutex_lock+0x10/0x10 [ 2711.013910][ T1411] ? __pfx_out_of_memory+0x10/0x10 [ 2711.019208][ T1411] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2711.025179][ T1411] ? __pfx_lock_release+0x10/0x10 [ 2711.030291][ T1411] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2711.036441][ T1411] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2711.041795][ T1411] ? mem_cgroup_iter+0x422/0x560 [ 2711.046814][ T1411] try_charge_memcg+0xda2/0x18a0 [ 2711.051853][ T1411] ? __pfx_try_charge_memcg+0x10/0x10 [ 2711.057302][ T1411] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2711.063263][ T1411] ? __pfx_lock_release+0x10/0x10 [ 2711.068382][ T1411] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2711.074275][ T1411] __memcg_kmem_charge_page+0xe1/0x250 [ 2711.079800][ T1411] memcg_charge_kernel_stack+0xa7/0x550 [ 2711.085424][ T1411] dup_task_struct+0x40d/0x7d0 [ 2711.090266][ T1411] copy_process+0x5d5/0x3fc0 [ 2711.094939][ T1411] ? __might_fault+0xa9/0x120 [ 2711.099681][ T1411] ? __pfx_lock_release+0x10/0x10 [ 2711.104775][ T1411] ? __pfx_copy_process+0x10/0x10 [ 2711.109851][ T1411] ? __might_fault+0xc5/0x120 [ 2711.114688][ T1411] ? __asan_memset+0x23/0x50 [ 2711.119518][ T1411] kernel_clone+0x21d/0x8d0 [ 2711.124082][ T1411] ? __pfx_kernel_clone+0x10/0x10 [ 2711.129203][ T1411] __se_sys_clone3+0x2cb/0x350 [ 2711.134133][ T1411] ? __pfx___se_sys_clone3+0x10/0x10 [ 2711.139504][ T1411] ? rcu_is_watching+0x15/0xb0 [ 2711.144358][ T1411] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2711.150435][ T1411] ? exc_page_fault+0x587/0x870 [ 2711.155359][ T1411] ? do_syscall_64+0xb4/0x240 [ 2711.160095][ T1411] do_syscall_64+0xf9/0x240 [ 2711.164751][ T1411] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2711.170711][ T1411] RIP: 0033:0x7f0f5b4a9b99 [ 2711.175188][ T1411] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2711.194857][ T1411] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2711.203535][ T1411] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2711.211562][ T1411] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2711.219942][ T1411] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2711.227981][ T1411] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2711.236022][ T1411] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2711.244274][ T1411] [ 2711.261693][ T1411] memory: usage 307192kB, limit 307200kB, failcnt 159695 [ 2711.282954][ T1411] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 2711.297274][ T1411] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2711.305370][ T1411] Memory cgroup stats for /syz0: [ 2711.306060][ T1411] cache 0 [ 2711.315013][ T1411] rss 12288 [ 2711.318199][ T1411] rss_huge 0 [ 2711.321482][ T1411] shmem 0 [ 2711.340317][ T1411] mapped_file 0 [ 2711.344623][ T1411] dirty 0 [ 2711.347955][ T1411] writeback 0 [ 2711.351401][ T1411] workingset_refault_anon 50477 [ 2711.357271][ T1411] workingset_refault_file 2 [ 2711.362202][ T1411] swap 237568 [ 2711.366092][ T1411] swapcached 8192 [ 2711.370155][ T1411] pgpgin 236476 [ 2711.373756][ T1411] pgpgout 236473 [ 2711.377693][ T1411] pgfault 522142 [ 2711.382191][ T1411] pgmajfault 49192 [ 2711.399429][ T1411] inactive_anon 12288 [ 2711.405630][ T1411] active_anon 0 [ 2711.409240][ T1411] inactive_file 0 [ 2711.416462][ T1411] active_file 0 [ 2711.420602][ T1411] unevictable 0 [ 2711.425312][ T1411] hierarchical_memory_limit 314572800 [ 2711.431080][ T1411] hierarchical_memsw_limit 9223372036854771712 [ 2711.437475][ T1411] total_cache 0 [ 2711.441890][ T1411] total_rss 12288 [ 2711.446191][ T1411] total_rss_huge 0 [ 2711.461018][ T1411] total_shmem 0 [ 2711.466658][ T1411] total_mapped_file 0 [ 2711.470800][ T1411] total_dirty 0 [ 2711.474670][ T1411] total_writeback 0 [ 2711.478907][ T1411] total_workingset_refault_anon 50477 [ 2711.508875][ T1411] total_workingset_refault_file 2 [ 2711.514118][ T1411] total_swap 237568 [ 2711.524144][ T1411] total_swapcached 8192 [ 2711.532134][ T1411] total_pgpgin 236476 [ 2711.538499][ T1411] total_pgpgout 236473 [ 2711.555060][ T1411] total_pgfault 522142 [ 2711.561337][ T1411] total_pgmajfault 49192 [ 2711.566542][ T1411] total_inactive_anon 12288 [ 2711.571470][ T1411] total_active_anon 0 [ 2711.576183][ T1411] total_inactive_file 0 [ 2711.580420][ T1411] total_active_file 0 [ 2711.596032][ T1411] total_unevictable 0 [ 2711.600214][ T1411] anon_cost 0 [ 2711.603566][ T1411] file_cost 0 12:20:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5c9b27e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2711.607572][ T1411] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1411,uid=0 [ 2711.623448][ T1411] Memory cgroup out of memory: Killed process 1411 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2712.169216][ T1414] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2712.187960][ T1414] CPU: 0 PID: 1414 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2712.198462][ T1414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2712.208543][ T1414] Call Trace: [ 2712.211838][ T1414] [ 2712.214803][ T1414] dump_stack_lvl+0x1e7/0x2e0 [ 2712.219533][ T1414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2712.224934][ T1414] ? __pfx__printk+0x10/0x10 [ 2712.229536][ T1414] ? ___ratelimit+0x4c4/0x670 [ 2712.234237][ T1414] ? __pfx____ratelimit+0x10/0x10 [ 2712.239295][ T1414] dump_header+0xda/0x6a0 [ 2712.243659][ T1414] oom_kill_process+0x3a7/0x930 [ 2712.248796][ T1414] out_of_memory+0xf67/0x1320 [ 2712.253496][ T1414] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2712.259152][ T1414] ? __pfx___mutex_lock+0x10/0x10 [ 2712.264197][ T1414] ? __pfx_out_of_memory+0x10/0x10 [ 2712.269425][ T1414] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2712.274993][ T1414] ? __pfx_lock_release+0x10/0x10 [ 2712.280055][ T1414] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2712.286230][ T1414] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2712.291462][ T1414] ? mem_cgroup_iter+0x422/0x560 [ 2712.296424][ T1414] try_charge_memcg+0xda2/0x18a0 [ 2712.301413][ T1414] ? __pfx_try_charge_memcg+0x10/0x10 [ 2712.306805][ T1414] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2712.312553][ T1414] ? __pfx_lock_release+0x10/0x10 [ 2712.317601][ T1414] ? memcg_account_kmem+0x1e7/0x210 [ 2712.323350][ T1414] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2712.329268][ T1414] __memcg_kmem_charge_page+0xe1/0x250 [ 2712.334745][ T1414] memcg_charge_kernel_stack+0x210/0x550 [ 2712.340404][ T1414] dup_task_struct+0x40d/0x7d0 [ 2712.345187][ T1414] copy_process+0x5d5/0x3fc0 [ 2712.349904][ T1414] ? __might_fault+0xa9/0x120 [ 2712.354780][ T1414] ? __pfx_lock_release+0x10/0x10 [ 2712.359831][ T1414] ? __pfx_copy_process+0x10/0x10 [ 2712.364871][ T1414] ? __might_fault+0xc5/0x120 [ 2712.369574][ T1414] ? __asan_memset+0x23/0x50 [ 2712.374201][ T1414] kernel_clone+0x21d/0x8d0 [ 2712.378729][ T1414] ? __pfx_kernel_clone+0x10/0x10 [ 2712.383879][ T1414] __se_sys_clone3+0x2cb/0x350 [ 2712.388665][ T1414] ? __pfx___se_sys_clone3+0x10/0x10 [ 2712.393978][ T1414] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2712.400026][ T1414] ? exc_page_fault+0x587/0x870 [ 2712.405071][ T1414] ? do_syscall_64+0xb4/0x240 [ 2712.409772][ T1414] do_syscall_64+0xf9/0x240 [ 2712.414471][ T1414] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2712.420428][ T1414] RIP: 0033:0x7f0f5b4a9b99 [ 2712.424856][ T1414] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2712.444481][ T1414] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2712.452914][ T1414] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2712.460897][ T1414] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2712.468890][ T1414] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2712.476874][ T1414] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2712.484860][ T1414] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2712.492860][ T1414] [ 2712.530894][ T1414] memory: usage 307200kB, limit 307200kB, failcnt 160205 [ 2712.541414][ T1414] memory+swap: usage 307484kB, limit 9007199254740988kB, failcnt 0 [ 2712.554222][ T1414] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2712.563279][ T1414] Memory cgroup stats for /syz0: [ 2712.563435][ T1414] cache 0 [ 2712.576404][ T1414] rss 0 [ 2712.579266][ T1414] rss_huge 0 [ 2712.582506][ T1414] shmem 0 [ 2712.589685][ T1414] mapped_file 0 [ 2712.593230][ T1414] dirty 0 [ 2712.598765][ T1414] writeback 0 [ 2712.602119][ T1414] workingset_refault_anon 50624 [ 2712.622211][ T1414] workingset_refault_file 2 [ 2712.633539][ T1414] swap 290816 [ 2712.637782][ T1414] swapcached 0 [ 2712.641225][ T1414] pgpgin 236634 [ 2712.651337][ T1414] pgpgout 236634 [ 2712.660427][ T1414] pgfault 522374 [ 2712.664051][ T1414] pgmajfault 49329 [ 2712.680199][ T1414] inactive_anon 0 [ 2712.683921][ T1414] active_anon 0 [ 2712.688570][ T1414] inactive_file 0 [ 2712.692276][ T1414] active_file 0 [ 2712.702372][ T1414] unevictable 0 [ 2712.706454][ T1414] hierarchical_memory_limit 314572800 [ 2712.711888][ T1414] hierarchical_memsw_limit 9223372036854771712 [ 2712.719796][ T1414] total_cache 0 [ 2712.723310][ T1414] total_rss 0 [ 2712.734892][ T1414] total_rss_huge 0 [ 2712.738691][ T1414] total_shmem 0 [ 2712.742189][ T1414] total_mapped_file 0 [ 2712.750667][ T1414] total_dirty 0 [ 2712.754203][ T1414] total_writeback 0 [ 2712.759097][ T1414] total_workingset_refault_anon 50624 [ 2712.765659][ T1414] total_workingset_refault_file 2 [ 2712.770753][ T1414] total_swap 290816 [ 2712.775755][ T1414] total_swapcached 0 [ 2712.779726][ T1414] total_pgpgin 236634 [ 2712.783840][ T1414] total_pgpgout 236634 [ 2712.789182][ T1414] total_pgfault 522374 [ 2712.804470][ T1414] total_pgmajfault 49329 [ 2712.808810][ T1414] total_inactive_anon 0 [ 2712.813013][ T1414] total_active_anon 0 [ 2712.818255][ T1414] total_inactive_file 0 [ 2712.822475][ T1414] total_active_file 0 [ 2712.827447][ T1414] total_unevictable 0 [ 2712.831502][ T1414] anon_cost 0 [ 2712.844910][ T1414] file_cost 0 [ 2712.848804][ T1414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1414,uid=0 [ 2712.867467][ T1414] Memory cgroup out of memory: Killed process 1414 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2713.565214][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2713.595381][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2713.605805][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2713.615924][ T5099] Call Trace: [ 2713.619617][ T5099] [ 2713.622597][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2713.627366][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2713.632629][ T5099] ? __pfx__printk+0x10/0x10 [ 2713.637287][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2713.642051][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2713.647516][ T5099] dump_header+0xda/0x6a0 [ 2713.651939][ T5099] oom_kill_process+0x3a7/0x930 [ 2713.656875][ T5099] out_of_memory+0xf67/0x1320 [ 2713.661650][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2713.667366][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2713.672561][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2713.677763][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2713.683399][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2713.688503][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2713.694657][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2713.699924][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2713.704944][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2713.709963][ T5099] ? mark_lock+0x9a/0x350 [ 2713.714492][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2713.720081][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2713.726312][ T5099] charge_memcg+0xa2/0x160 [ 2713.730815][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2713.737052][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2713.742577][ T5099] ? mark_lock+0x9a/0x350 [ 2713.746992][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2713.753066][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2713.758519][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2713.764493][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2713.769605][ T5099] ? xas_descend+0x37e/0x470 [ 2713.774286][ T5099] swapin_readahead+0x1ea/0x1070 [ 2713.779299][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2713.784680][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2713.790133][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2713.795511][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2713.800874][ T5099] do_swap_page+0x791/0x3f40 [ 2713.805538][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2713.810396][ T5099] ? do_swap_page+0x154/0x3f40 [ 2713.815237][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2713.820420][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2713.825958][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2713.831847][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2713.837129][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2713.842357][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2713.848086][ T5099] ? mt_find+0x226/0x850 [ 2713.852395][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2713.857612][ T5099] ? mt_find+0x62d/0x850 [ 2713.861930][ T5099] ? mt_find+0x226/0x850 [ 2713.866268][ T5099] ? find_vma+0x142/0x1c0 [ 2713.870682][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2713.875440][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2713.881501][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2713.886353][ T5099] exc_page_fault+0x2ad/0x870 [ 2713.891126][ T5099] asm_exc_page_fault+0x26/0x30 [ 2713.896063][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2713.901336][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2713.921003][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2713.927142][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2713.935177][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2713.943221][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2713.951340][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2713.959372][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2713.967430][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2713.973410][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2713.979821][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2713.985619][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2713.991330][ T5099] do_syscall_64+0x108/0x240 [ 2713.995997][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2714.001977][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2714.006460][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2714.026305][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2714.035488][ T5099] RAX: 0000000000000000 RBX: 000000000000429d RCX: 00007f0f5b4a91b5 [ 2714.043521][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2714.051552][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2714.059758][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2714.067789][ T5099] R13: 00000000002965ba R14: 00000000002965ba R15: 0000000000000000 [ 2714.075837][ T5099] [ 2714.114932][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 160810 [ 2714.123670][ T5099] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2714.145513][ T5099] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2714.153322][ T5099] Memory cgroup stats for /syz0: [ 2714.153489][ T5099] cache 0 [ 2714.163122][ T5099] rss 16384 [ 2714.166747][ T5099] rss_huge 0 [ 2714.170354][ T5099] shmem 0 [ 2714.173452][ T5099] mapped_file 0 [ 2714.177821][ T5099] dirty 0 [ 2714.180936][ T5099] writeback 0 [ 2714.188521][ T5099] workingset_refault_anon 50840 [ 2714.204707][ T5099] workingset_refault_file 2 [ 2714.209308][ T5099] swap 245760 [ 2714.212634][ T5099] swapcached 8192 [ 2714.219131][ T5099] pgpgin 236864 [ 2714.222795][ T5099] pgpgout 236860 [ 2714.229639][ T5099] pgfault 522723 [ 2714.233293][ T5099] pgmajfault 49540 [ 2714.240274][ T5099] inactive_anon 0 [ 2714.254985][ T5099] active_anon 16384 [ 2714.258984][ T5099] inactive_file 0 [ 2714.262805][ T5099] active_file 0 [ 2714.266998][ T5099] unevictable 0 [ 2714.270666][ T5099] hierarchical_memory_limit 314572800 [ 2714.276254][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2714.282456][ T5099] total_cache 0 [ 2714.288526][ T5099] total_rss 16384 [ 2714.304761][ T5099] total_rss_huge 0 [ 2714.308610][ T5099] total_shmem 0 [ 2714.312113][ T5099] total_mapped_file 0 [ 2714.316283][ T5099] total_dirty 0 [ 2714.319793][ T5099] total_writeback 0 [ 2714.323632][ T5099] total_workingset_refault_anon 50840 [ 2714.329202][ T5099] total_workingset_refault_file 2 [ 2714.334269][ T5099] total_swap 245760 [ 2714.349902][ T5099] total_swapcached 8192 [ 2714.354151][ T5099] total_pgpgin 236864 [ 2714.358306][ T5099] total_pgpgout 236860 [ 2714.362418][ T5099] total_pgfault 522723 [ 2714.367059][ T5099] total_pgmajfault 49540 [ 2714.371350][ T5099] total_inactive_anon 0 [ 2714.375777][ T5099] total_active_anon 16384 [ 2714.380147][ T5099] total_inactive_file 0 [ 2714.384614][ T5099] total_active_file 0 [ 2714.388650][ T5099] total_unevictable 0 [ 2714.392679][ T5099] anon_cost 0 [ 2714.397423][ T5099] file_cost 0 [ 2714.411510][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1415,uid=0 [ 2714.427710][ T5099] Memory cgroup out of memory: Killed process 1415 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:20:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2714.689013][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2714.696000][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 2715.026442][ T1416] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2715.037092][ T1416] CPU: 0 PID: 1416 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2715.047480][ T1416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2715.057602][ T1416] Call Trace: [ 2715.060920][ T1416] [ 2715.063897][ T1416] dump_stack_lvl+0x1e7/0x2e0 [ 2715.068646][ T1416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2715.073903][ T1416] ? __pfx__printk+0x10/0x10 [ 2715.078633][ T1416] ? ___ratelimit+0x4c4/0x670 [ 2715.083351][ T1416] ? __pfx____ratelimit+0x10/0x10 [ 2715.088407][ T1416] dump_header+0xda/0x6a0 [ 2715.092765][ T1416] oom_kill_process+0x3a7/0x930 [ 2715.097646][ T1416] out_of_memory+0xf67/0x1320 [ 2715.102357][ T1416] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2715.108019][ T1416] ? __pfx___mutex_lock+0x10/0x10 [ 2715.113064][ T1416] ? __pfx_out_of_memory+0x10/0x10 [ 2715.118207][ T1416] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2715.123773][ T1416] ? __pfx_lock_release+0x10/0x10 [ 2715.128823][ T1416] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2715.134915][ T1416] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2715.140133][ T1416] ? mem_cgroup_iter+0x422/0x560 [ 2715.145098][ T1416] try_charge_memcg+0xda2/0x18a0 [ 2715.150078][ T1416] ? __pfx_try_charge_memcg+0x10/0x10 [ 2715.155488][ T1416] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2715.161264][ T1416] ? __pfx_lock_release+0x10/0x10 [ 2715.166358][ T1416] ? memcg_account_kmem+0x1e7/0x210 [ 2715.171810][ T1416] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2715.177670][ T1416] __memcg_kmem_charge_page+0xe1/0x250 [ 2715.183171][ T1416] memcg_charge_kernel_stack+0x304/0x550 [ 2715.188829][ T1416] dup_task_struct+0x15d/0x7d0 [ 2715.193612][ T1416] copy_process+0x5d5/0x3fc0 [ 2715.198231][ T1416] ? __might_fault+0xa9/0x120 [ 2715.202926][ T1416] ? __pfx_lock_release+0x10/0x10 [ 2715.207977][ T1416] ? __pfx_copy_process+0x10/0x10 [ 2715.213013][ T1416] ? __might_fault+0xc5/0x120 [ 2715.217714][ T1416] ? __asan_memset+0x23/0x50 [ 2715.222329][ T1416] kernel_clone+0x21d/0x8d0 [ 2715.226858][ T1416] ? __pfx_kernel_clone+0x10/0x10 [ 2715.231914][ T1416] __se_sys_clone3+0x2cb/0x350 [ 2715.236700][ T1416] ? __pfx___se_sys_clone3+0x10/0x10 [ 2715.242024][ T1416] ? do_syscall_64+0x108/0x240 [ 2715.246809][ T1416] ? do_syscall_64+0xb4/0x240 [ 2715.251526][ T1416] do_syscall_64+0xf9/0x240 [ 2715.256058][ T1416] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2715.261966][ T1416] RIP: 0033:0x7f0f5b4a9b99 [ 2715.266406][ T1416] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2715.286029][ T1416] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2715.294457][ T1416] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2715.302444][ T1416] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2715.310424][ T1416] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2715.318404][ T1416] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2715.326385][ T1416] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2715.334389][ T1416] [ 2715.390700][ T1416] memory: usage 307200kB, limit 307200kB, failcnt 161195 [ 2715.407860][ T1416] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2715.420072][ T1416] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2715.432529][ T1416] Memory cgroup stats for /syz0: [ 2715.432698][ T1416] cache 0 [ 2715.446835][ T1416] rss 12288 [ 2715.450407][ T1416] rss_huge 0 [ 2715.463520][ T1416] shmem 0 [ 2715.469491][ T1416] mapped_file 0 [ 2715.479898][ T1416] dirty 0 [ 2715.491596][ T1416] writeback 0 [ 2715.496090][ T1416] workingset_refault_anon 50982 [ 2715.503407][ T1416] workingset_refault_file 2 [ 2715.516874][ T1416] swap 208896 [ 2715.520435][ T1416] swapcached 8192 [ 2715.532855][ T1416] pgpgin 237021 [ 2715.539399][ T1416] pgpgout 237018 [ 2715.543217][ T1416] pgfault 522957 [ 2715.551531][ T1416] pgmajfault 49677 [ 2715.559066][ T1416] inactive_anon 0 [ 2715.563451][ T1416] active_anon 12288 [ 2715.572351][ T1416] inactive_file 0 [ 2715.577653][ T1416] active_file 0 [ 2715.581619][ T1416] unevictable 0 [ 2715.590006][ T1416] hierarchical_memory_limit 314572800 [ 2715.599448][ T1416] hierarchical_memsw_limit 9223372036854771712 [ 2715.610642][ T1416] total_cache 0 [ 2715.625545][ T1416] total_rss 12288 [ 2715.629432][ T1416] total_rss_huge 0 [ 2715.633328][ T1416] total_shmem 0 [ 2715.637904][ T1416] total_mapped_file 0 [ 2715.641988][ T1416] total_dirty 0 [ 2715.647230][ T1416] total_writeback 0 [ 2715.651328][ T1416] total_workingset_refault_anon 50982 [ 2715.657546][ T1416] total_workingset_refault_file 2 [ 2715.662829][ T1416] total_swap 208896 [ 2715.667905][ T1416] total_swapcached 8192 [ 2715.673356][ T1416] total_pgpgin 237021 [ 2715.702577][ T1416] total_pgpgout 237018 [ 2715.717707][ T1416] total_pgfault 522957 [ 2715.721863][ T1416] total_pgmajfault 49677 [ 2715.732188][ T1416] total_inactive_anon 0 [ 2715.736875][ T1416] total_active_anon 12288 [ 2715.741254][ T1416] total_inactive_file 0 [ 2715.746363][ T1416] total_active_file 0 [ 2715.750399][ T1416] total_unevictable 0 [ 2715.760225][ T1416] anon_cost 0 [ 2715.763604][ T1416] file_cost 0 [ 2715.767358][ T1416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1416,uid=0 [ 2715.783342][ T1416] Memory cgroup out of memory: Killed process 1416 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2716.383956][ T1419] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2716.413946][ T1419] CPU: 1 PID: 1419 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2716.424379][ T1419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2716.434494][ T1419] Call Trace: [ 2716.437823][ T1419] [ 2716.440798][ T1419] dump_stack_lvl+0x1e7/0x2e0 [ 2716.445540][ T1419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2716.450887][ T1419] ? __pfx__printk+0x10/0x10 [ 2716.455533][ T1419] ? ___ratelimit+0x4c4/0x670 [ 2716.460375][ T1419] ? __pfx____ratelimit+0x10/0x10 [ 2716.465478][ T1419] dump_header+0xda/0x6a0 [ 2716.469865][ T1419] oom_kill_process+0x3a7/0x930 [ 2716.474776][ T1419] out_of_memory+0xf67/0x1320 [ 2716.479525][ T1419] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2716.485239][ T1419] ? __pfx___mutex_lock+0x10/0x10 [ 2716.490336][ T1419] ? __pfx_out_of_memory+0x10/0x10 [ 2716.495526][ T1419] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2716.501142][ T1419] ? __pfx_lock_release+0x10/0x10 [ 2716.506238][ T1419] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2716.512381][ T1419] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2716.517645][ T1419] ? mem_cgroup_iter+0x422/0x560 [ 2716.522658][ T1419] try_charge_memcg+0xda2/0x18a0 [ 2716.527691][ T1419] ? __pfx_try_charge_memcg+0x10/0x10 [ 2716.533135][ T1419] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2716.538918][ T1419] ? __pfx_lock_release+0x10/0x10 [ 2716.544451][ T1419] ? memcg_account_kmem+0x1e7/0x210 [ 2716.549735][ T1419] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2716.555612][ T1419] __memcg_kmem_charge_page+0xe1/0x250 [ 2716.561148][ T1419] memcg_charge_kernel_stack+0x210/0x550 [ 2716.566859][ T1419] dup_task_struct+0x40d/0x7d0 [ 2716.571695][ T1419] copy_process+0x5d5/0x3fc0 [ 2716.576372][ T1419] ? __might_fault+0xa9/0x120 [ 2716.581129][ T1419] ? __pfx_lock_release+0x10/0x10 [ 2716.586235][ T1419] ? __pfx_copy_process+0x10/0x10 [ 2716.591328][ T1419] ? __might_fault+0xc5/0x120 [ 2716.596087][ T1419] ? __asan_memset+0x23/0x50 [ 2716.600953][ T1419] kernel_clone+0x21d/0x8d0 [ 2716.605539][ T1419] ? __pfx_kernel_clone+0x10/0x10 [ 2716.610648][ T1419] __se_sys_clone3+0x2cb/0x350 [ 2716.615482][ T1419] ? __pfx___se_sys_clone3+0x10/0x10 [ 2716.620867][ T1419] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2716.627025][ T1419] ? exc_page_fault+0x587/0x870 [ 2716.632048][ T1419] ? do_syscall_64+0xb4/0x240 [ 2716.636816][ T1419] do_syscall_64+0xf9/0x240 [ 2716.641406][ T1419] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2716.647377][ T1419] RIP: 0033:0x7f0f5b4a9b99 [ 2716.651850][ T1419] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2716.671519][ T1419] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2716.680015][ T1419] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2716.688047][ T1419] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2716.696077][ T1419] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2716.704102][ T1419] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2716.712145][ T1419] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2716.720226][ T1419] [ 2716.748226][ T1419] memory: usage 307180kB, limit 307200kB, failcnt 161660 [ 2716.759048][ T1419] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0 [ 2716.770224][ T5111] Bluetooth: hci4: command 0x0406 tx timeout [ 2716.776598][ T1419] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2716.783994][ T1419] Memory cgroup stats for /syz0: [ 2716.784146][ T1419] cache 0 [ 2716.793437][ T1419] rss 0 [ 2716.796712][ T1419] rss_huge 0 [ 2716.799960][ T1419] shmem 0 [ 2716.802939][ T1419] mapped_file 0 [ 2716.807458][ T1419] dirty 0 [ 2716.810447][ T1419] writeback 0 [ 2716.814885][ T1419] workingset_refault_anon 51151 [ 2716.819785][ T1419] workingset_refault_file 2 [ 2716.830752][ T1419] swap 258048 [ 2716.834092][ T1419] swapcached 4096 [ 2716.839256][ T1419] pgpgin 237202 [ 2716.842777][ T1419] pgpgout 237201 [ 2716.847458][ T1419] pgfault 523230 [ 2716.851068][ T1419] pgmajfault 49842 [ 2716.854980][ T1419] inactive_anon 4096 [ 2716.858908][ T1419] active_anon 0 [ 2716.862402][ T1419] inactive_file 0 [ 2716.866561][ T1419] active_file 0 [ 2716.870062][ T1419] unevictable 0 [ 2716.873552][ T1419] hierarchical_memory_limit 314572800 [ 2716.879342][ T1419] hierarchical_memsw_limit 9223372036854771712 [ 2716.886168][ T1419] total_cache 0 [ 2716.889676][ T1419] total_rss 0 [ 2716.893687][ T1419] total_rss_huge 0 [ 2716.897556][ T1419] total_shmem 0 [ 2716.901050][ T1419] total_mapped_file 0 [ 2716.905744][ T1419] total_dirty 0 [ 2716.909253][ T1419] total_writeback 0 [ 2716.913259][ T1419] total_workingset_refault_anon 51151 [ 2716.918834][ T1419] total_workingset_refault_file 2 [ 2716.923902][ T1419] total_swap 258048 [ 2716.928057][ T1419] total_swapcached 4096 [ 2716.932255][ T1419] total_pgpgin 237202 [ 2716.936798][ T1419] total_pgpgout 237201 [ 2716.940963][ T1419] total_pgfault 523230 [ 2716.945160][ T1419] total_pgmajfault 49842 [ 2716.949469][ T1419] total_inactive_anon 4096 [ 2716.953926][ T1419] total_active_anon 0 [ 2716.958095][ T1419] total_inactive_file 0 [ 2716.962285][ T1419] total_active_file 0 [ 2716.967029][ T1419] total_unevictable 0 [ 2716.971055][ T1419] anon_cost 0 [ 2716.974516][ T1419] file_cost 0 [ 2716.977848][ T1419] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1419,uid=0 [ 2716.993402][ T1419] Memory cgroup out of memory: Killed process 1419 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2717.215288][ T1421] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2717.233192][ T1421] CPU: 0 PID: 1421 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2717.243616][ T1421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2717.253734][ T1421] Call Trace: [ 2717.257087][ T1421] [ 2717.260083][ T1421] dump_stack_lvl+0x1e7/0x2e0 [ 2717.264835][ T1421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2717.270106][ T1421] ? __pfx__printk+0x10/0x10 [ 2717.274768][ T1421] ? ___ratelimit+0x4c4/0x670 [ 2717.279532][ T1421] ? __pfx____ratelimit+0x10/0x10 [ 2717.284642][ T1421] dump_header+0xda/0x6a0 [ 2717.289444][ T1421] oom_kill_process+0x3a7/0x930 [ 2717.294373][ T1421] out_of_memory+0xf67/0x1320 [ 2717.299131][ T1421] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2717.304842][ T1421] ? __pfx___mutex_lock+0x10/0x10 [ 2717.309960][ T1421] ? __pfx_out_of_memory+0x10/0x10 [ 2717.315156][ T1421] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2717.320777][ T1421] ? __pfx_lock_release+0x10/0x10 [ 2717.326051][ T1421] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2717.332193][ T1421] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2717.337461][ T1421] ? mem_cgroup_iter+0x422/0x560 [ 2717.342471][ T1421] try_charge_memcg+0xda2/0x18a0 [ 2717.347467][ T1421] ? mark_lock+0x9a/0x350 [ 2717.351877][ T1421] ? __pfx_try_charge_memcg+0x10/0x10 [ 2717.357346][ T1421] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2717.363568][ T1421] charge_memcg+0xa2/0x160 [ 2717.368053][ T1421] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2717.374279][ T1421] __read_swap_cache_async+0x480/0x8b0 [ 2717.379794][ T1421] ? mark_lock+0x9a/0x350 [ 2717.384196][ T1421] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2717.390254][ T1421] swap_cluster_readahead+0x67c/0x810 [ 2717.395708][ T1421] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2717.401665][ T1421] ? __pfx_lock_release+0x10/0x10 [ 2717.406766][ T1421] ? xas_descend+0x37e/0x470 [ 2717.411517][ T1421] swapin_readahead+0x1ea/0x1070 [ 2717.416706][ T1421] ? filemap_get_entry+0x127/0x4e0 [ 2717.421904][ T1421] ? __pfx_swapin_readahead+0x10/0x10 [ 2717.427369][ T1421] ? __filemap_get_folio+0x935/0xbc0 [ 2717.432841][ T1421] ? swap_cache_get_folio+0x9f/0x570 [ 2717.438192][ T1421] do_swap_page+0x791/0x3f40 [ 2717.442853][ T1421] ? rcu_is_watching+0x15/0xb0 [ 2717.447693][ T1421] ? page_ext_get+0x20/0x2a0 [ 2717.452352][ T1421] ? do_swap_page+0x154/0x3f40 [ 2717.457185][ T1421] ? __pfx_do_swap_page+0x10/0x10 [ 2717.462269][ T1421] ? pte_offset_map_nolock+0x137/0x1f0 [ 2717.467800][ T1421] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2717.473774][ T1421] ? __pfx_validate_chain+0x10/0x10 [ 2717.479043][ T1421] __handle_mm_fault+0x15e8/0x72d0 [ 2717.484267][ T1421] ? __pfx___handle_mm_fault+0x10/0x10 [ 2717.489810][ T1421] ? mt_find+0x226/0x850 [ 2717.494114][ T1421] ? __pfx_lock_release+0x10/0x10 [ 2717.499222][ T1421] ? mt_find+0x62d/0x850 [ 2717.503541][ T1421] ? mt_find+0x226/0x850 [ 2717.507865][ T1421] ? find_vma+0x142/0x1c0 [ 2717.512261][ T1421] ? __pfx_find_vma+0x10/0x10 [ 2717.517027][ T1421] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2717.523188][ T1421] handle_mm_fault+0x3c1/0x8a0 [ 2717.528038][ T1421] exc_page_fault+0x2ad/0x870 [ 2717.532787][ T1421] asm_exc_page_fault+0x26/0x30 [ 2717.537716][ T1421] RIP: 0010:__get_user_8+0x11/0x20 [ 2717.542989][ T1421] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2717.562658][ T1421] RSP: 0018:ffffc90004c27d78 EFLAGS: 00050202 [ 2717.568804][ T1421] RAX: 0000555556cc6da8 RBX: ffff888029d4b2f8 RCX: ffffc90004c27c03 [ 2717.576838][ T1421] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2717.584872][ T1421] RBP: ffffc90004c27ec0 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2717.592902][ T1421] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc90004c27d80 [ 2717.600931][ T1421] R13: ffffc90004c27fd8 R14: dffffc0000000000 R15: ffff888029d49dc0 [ 2717.608991][ T1421] __rseq_handle_notify_resume+0x158/0x1490 [ 2717.614977][ T1421] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2717.621382][ T1421] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2717.627264][ T1421] irqentry_exit_to_user_mode+0xbb/0x270 [ 2717.632972][ T1421] exc_page_fault+0x587/0x870 [ 2717.637738][ T1421] asm_exc_page_fault+0x26/0x30 [ 2717.642657][ T1421] RIP: 0033:0x7f0f5b436fcf [ 2717.647139][ T1421] Code: 48 89 84 24 90 00 00 00 48 89 9c 24 98 00 00 00 4c 8b 35 c4 69 17 00 4d 8d ae 00 00 40 00 4d 39 ec 0f 83 91 06 00 00 4c 89 eb <4d> 8b 2c 24 4d 8d 7c 24 08 4c 89 bc 24 08 01 00 00 49 83 fd ff 0f [ 2717.666808][ T1421] RSP: 002b:00007ffcec9e1110 EFLAGS: 00010287 [ 2717.672949][ T1421] RAX: 00007ffcec9e1218 RBX: 00007f0f5b400000 RCX: 0000000000297548 [ 2717.680984][ T1421] RDX: 0000000000000081 RSI: 00007ffcec9e10f0 RDI: 7fffffffffffffff [ 2717.689121][ T1421] RBP: 0000000000000001 R08: 0000000000000010 R09: 0000000000000000 [ 2717.697152][ T1421] R10: 00007ffcec9e6080 R11: 000000000007e9f2 R12: 00007f0f5b000000 [ 2717.705180][ T1421] R13: 00007f0f5b400000 R14: 00007f0f5b000000 R15: 0000000000000001 [ 2717.713234][ T1421] [ 2717.763837][ T1421] memory: usage 307196kB, limit 307200kB, failcnt 161840 [ 2717.771134][ T1421] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 2717.780007][ T1421] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 2717.787683][ T1421] Memory cgroup stats for /syz0: [ 2717.787830][ T1421] cache 0 [ 2717.795973][ T1421] rss 12288 [ 2717.799205][ T1421] rss_huge 0 [ 2717.802545][ T1421] shmem 0 [ 2717.806008][ T1421] mapped_file 0 [ 2717.809719][ T1421] dirty 0 12:20:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2717.812813][ T1421] writeback 0 [ 2717.816488][ T1421] workingset_refault_anon 51189 [ 2717.822091][ T1421] workingset_refault_file 2 [ 2717.827329][ T1421] swap 278528 [ 2717.830758][ T1421] swapcached 8192 [ 2717.843726][ T1421] pgpgin 237250 [ 2717.849187][ T1421] pgpgout 237247 [ 2717.852796][ T1421] pgfault 523310 [ 2717.857464][ T1421] pgmajfault 49877 [ 2717.861248][ T1421] inactive_anon 12288 [ 2717.871679][ T1421] active_anon 0 [ 2717.884898][ T1421] inactive_file 0 [ 2717.888611][ T1421] active_file 0 [ 2717.892094][ T1421] unevictable 0 [ 2717.898488][ T1421] hierarchical_memory_limit 314572800 [ 2717.903945][ T1421] hierarchical_memsw_limit 9223372036854771712 [ 2717.910402][ T1421] total_cache 0 [ 2717.914036][ T1421] total_rss 12288 [ 2717.924262][ T1421] total_rss_huge 0 [ 2717.929234][ T1421] total_shmem 0 [ 2717.933871][ T1421] total_mapped_file 0 [ 2717.940671][ T1421] total_dirty 0 [ 2717.944231][ T1421] total_writeback 0 [ 2717.955077][ T1421] total_workingset_refault_anon 51189 [ 2717.960530][ T1421] total_workingset_refault_file 2 [ 2717.982582][ T1421] total_swap 278528 [ 2717.987215][ T1421] total_swapcached 8192 [ 2717.991464][ T1421] total_pgpgin 237250 [ 2717.996376][ T1421] total_pgpgout 237247 [ 2718.000499][ T1421] total_pgfault 523310 [ 2718.005507][ T1421] total_pgmajfault 49877 [ 2718.009901][ T1421] total_inactive_anon 12288 [ 2718.015463][ T1421] total_active_anon 0 [ 2718.019777][ T1421] total_inactive_file 0 [ 2718.023977][ T1421] total_active_file 0 [ 2718.034652][ T1421] total_unevictable 0 [ 2718.038724][ T1421] anon_cost 0 [ 2718.042056][ T1421] file_cost 0 12:20:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2718.051505][ T1421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1421,uid=0 [ 2718.068172][ T1421] Memory cgroup out of memory: Killed process 1421 (syz-executor.0) total-vm:54376kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2718.722967][ T1424] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2718.736143][ T1424] CPU: 0 PID: 1424 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2718.746560][ T1424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2718.756670][ T1424] Call Trace: [ 2718.759984][ T1424] [ 2718.762962][ T1424] dump_stack_lvl+0x1e7/0x2e0 [ 2718.767704][ T1424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2718.772976][ T1424] ? __pfx__printk+0x10/0x10 [ 2718.777624][ T1424] ? ___ratelimit+0x4c4/0x670 [ 2718.782373][ T1424] ? __pfx____ratelimit+0x10/0x10 [ 2718.787471][ T1424] dump_header+0xda/0x6a0 [ 2718.791861][ T1424] oom_kill_process+0x3a7/0x930 [ 2718.796783][ T1424] out_of_memory+0xf67/0x1320 [ 2718.801492][ T1424] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2718.807144][ T1424] ? __pfx___mutex_lock+0x10/0x10 [ 2718.812188][ T1424] ? __pfx_out_of_memory+0x10/0x10 [ 2718.817328][ T1424] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2718.822976][ T1424] ? __pfx_lock_release+0x10/0x10 [ 2718.828022][ T1424] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2718.834111][ T1424] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2718.839326][ T1424] ? mem_cgroup_iter+0x422/0x560 [ 2718.844297][ T1424] try_charge_memcg+0xda2/0x18a0 [ 2718.849290][ T1424] ? __pfx_try_charge_memcg+0x10/0x10 [ 2718.854690][ T1424] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2718.860427][ T1424] ? __pfx_lock_release+0x10/0x10 [ 2718.865472][ T1424] ? memcg_account_kmem+0x1e7/0x210 [ 2718.870698][ T1424] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2718.876525][ T1424] __memcg_kmem_charge_page+0xe1/0x250 [ 2718.882005][ T1424] memcg_charge_kernel_stack+0x210/0x550 [ 2718.887662][ T1424] dup_task_struct+0x40d/0x7d0 [ 2718.892445][ T1424] copy_process+0x5d5/0x3fc0 [ 2718.897064][ T1424] ? __might_fault+0xa9/0x120 [ 2718.901768][ T1424] ? __pfx_lock_release+0x10/0x10 [ 2718.906822][ T1424] ? __pfx_copy_process+0x10/0x10 [ 2718.911863][ T1424] ? __might_fault+0xc5/0x120 [ 2718.916579][ T1424] ? __asan_memset+0x23/0x50 [ 2718.921202][ T1424] kernel_clone+0x21d/0x8d0 [ 2718.926001][ T1424] ? __pfx_kernel_clone+0x10/0x10 [ 2718.931057][ T1424] __se_sys_clone3+0x2cb/0x350 [ 2718.935847][ T1424] ? __pfx___se_sys_clone3+0x10/0x10 [ 2718.941168][ T1424] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2718.947185][ T1424] ? exc_page_fault+0x587/0x870 [ 2718.952057][ T1424] ? do_syscall_64+0xb4/0x240 [ 2718.957015][ T1424] do_syscall_64+0xf9/0x240 [ 2718.961632][ T1424] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2718.967547][ T1424] RIP: 0033:0x7f0f5b4a9b99 [ 2718.971977][ T1424] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2718.991601][ T1424] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2719.000035][ T1424] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2719.008025][ T1424] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2719.016100][ T1424] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2719.024083][ T1424] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2719.032066][ T1424] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2719.040151][ T1424] [ 2719.069413][ T1424] memory: usage 307200kB, limit 307200kB, failcnt 162325 [ 2719.076815][ T1424] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2719.086375][ T1424] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2719.105350][ T1424] Memory cgroup stats for /syz0: [ 2719.105491][ T1424] cache 0 [ 2719.113599][ T1424] rss 0 [ 2719.117798][ T1424] rss_huge 0 [ 2719.121154][ T1424] shmem 0 [ 2719.125068][ T1424] mapped_file 0 [ 2719.128712][ T1424] dirty 0 [ 2719.131812][ T1424] writeback 0 [ 2719.148772][ T1424] workingset_refault_anon 51380 [ 2719.154264][ T1424] workingset_refault_file 2 [ 2719.160972][ T1424] swap 221184 [ 2719.165355][ T1424] swapcached 0 [ 2719.168976][ T1424] pgpgin 237454 [ 2719.174114][ T1424] pgpgout 237454 [ 2719.191419][ T1424] pgfault 523613 [ 2719.196154][ T1424] pgmajfault 50063 [ 2719.199938][ T1424] inactive_anon 0 [ 2719.203605][ T1424] active_anon 0 [ 2719.208390][ T1424] inactive_file 0 [ 2719.214135][ T1424] active_file 0 [ 2719.218611][ T1424] unevictable 0 [ 2719.222258][ T1424] hierarchical_memory_limit 314572800 [ 2719.229214][ T1424] hierarchical_memsw_limit 9223372036854771712 [ 2719.238271][ T1424] total_cache 0 [ 2719.242045][ T1424] total_rss 0 [ 2719.258426][ T1424] total_rss_huge 0 [ 2719.262342][ T1424] total_shmem 0 [ 2719.272126][ T1424] total_mapped_file 0 [ 2719.276493][ T1424] total_dirty 0 [ 2719.280004][ T1424] total_writeback 0 [ 2719.283843][ T1424] total_workingset_refault_anon 51380 [ 2719.290947][ T1424] total_workingset_refault_file 2 [ 2719.299710][ T1424] total_swap 221184 [ 2719.303586][ T1424] total_swapcached 0 [ 2719.308803][ T1424] total_pgpgin 237454 [ 2719.323685][ T1424] total_pgpgout 237454 [ 2719.328810][ T1424] total_pgfault 523613 [ 2719.332948][ T1424] total_pgmajfault 50063 [ 2719.337900][ T1424] total_inactive_anon 0 [ 2719.342110][ T1424] total_active_anon 0 [ 2719.346953][ T1424] total_inactive_file 0 [ 2719.351170][ T1424] total_active_file 0 [ 2719.356362][ T1424] total_unevictable 0 [ 2719.360406][ T1424] anon_cost 0 [ 2719.363741][ T1424] file_cost 0 [ 2719.368235][ T1424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1424,uid=0 [ 2719.395417][ T1424] Memory cgroup out of memory: Killed process 1424 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1801]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2720.176460][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2720.195358][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2720.205782][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2720.216176][ T5099] Call Trace: [ 2720.219507][ T5099] [ 2720.222489][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2720.227244][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2720.232511][ T5099] ? __pfx__printk+0x10/0x10 [ 2720.237177][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2720.242028][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2720.247151][ T5099] dump_header+0xda/0x6a0 [ 2720.251567][ T5099] oom_kill_process+0x3a7/0x930 [ 2720.256511][ T5099] out_of_memory+0xf67/0x1320 [ 2720.261276][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2720.267008][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2720.272120][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2720.277320][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2720.282974][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2720.288075][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2720.294226][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2720.299497][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2720.304514][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2720.309525][ T5099] ? mark_lock+0x9a/0x350 [ 2720.313952][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2720.319434][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2720.325747][ T5099] charge_memcg+0xa2/0x160 [ 2720.330235][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2720.336388][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2720.342089][ T5099] ? mark_lock+0x9a/0x350 [ 2720.346495][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2720.352556][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2720.358004][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2720.363967][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2720.369081][ T5099] ? xas_descend+0x37e/0x470 [ 2720.373846][ T5099] swapin_readahead+0x1ea/0x1070 [ 2720.378867][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2720.384074][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2720.389523][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2720.394886][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2720.400242][ T5099] do_swap_page+0x791/0x3f40 [ 2720.404912][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2720.409775][ T5099] ? do_swap_page+0x154/0x3f40 [ 2720.414687][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2720.419784][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2720.425335][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2720.431226][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2720.436499][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2720.441728][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2720.447298][ T5099] ? mt_find+0x226/0x850 [ 2720.451607][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2720.456809][ T5099] ? mt_find+0x62d/0x850 [ 2720.461120][ T5099] ? mt_find+0x226/0x850 [ 2720.465449][ T5099] ? find_vma+0x142/0x1c0 [ 2720.469865][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2720.474608][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2720.480686][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2720.485555][ T5099] exc_page_fault+0x2ad/0x870 [ 2720.490306][ T5099] asm_exc_page_fault+0x26/0x30 [ 2720.495315][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2720.500502][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2720.520255][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2720.526395][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2720.534428][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2720.542461][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2720.550507][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2720.558539][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2720.566597][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2720.572584][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2720.579082][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2720.584877][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2720.590585][ T5099] do_syscall_64+0x108/0x240 [ 2720.595247][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2720.601208][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2720.605682][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2720.625539][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2720.634198][ T5099] RAX: 0000000000000000 RBX: 00000000000042a2 RCX: 00007f0f5b4a91b5 [ 2720.642230][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2720.650262][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2720.658298][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2720.666330][ T5099] R13: 0000000000297ef1 R14: 0000000000297ef1 R15: 0000000000000000 [ 2720.674399][ T5099] [ 2720.682598][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 162908 [ 2720.690689][ T5099] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2720.702540][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2720.710316][ T5099] Memory cgroup stats for /syz0: [ 2720.710470][ T5099] cache 0 [ 2720.719075][ T5099] rss 12288 [ 2720.722249][ T5099] rss_huge 0 [ 2720.725954][ T5099] shmem 0 [ 2720.728939][ T5099] mapped_file 0 [ 2720.732435][ T5099] dirty 0 [ 2720.736274][ T5099] writeback 0 [ 2720.739867][ T5099] workingset_refault_anon 51575 [ 2720.745469][ T5099] workingset_refault_file 2 [ 2720.750557][ T5099] swap 208896 [ 2720.754013][ T5099] swapcached 8192 [ 2720.758434][ T5099] pgpgin 237663 [ 2720.762072][ T5099] pgpgout 237660 [ 2720.768740][ T5099] pgfault 523930 [ 2720.772490][ T5099] pgmajfault 50250 [ 2720.776863][ T5099] inactive_anon 0 [ 2720.780548][ T5099] active_anon 12288 [ 2720.797081][ T5099] inactive_file 0 [ 2720.800806][ T5099] active_file 0 [ 2720.805598][ T5099] unevictable 0 [ 2720.809375][ T5099] hierarchical_memory_limit 314572800 [ 2720.815972][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2720.822676][ T5099] total_cache 0 [ 2720.827244][ T5099] total_rss 12288 [ 2720.831036][ T5099] total_rss_huge 0 [ 2720.836026][ T5099] total_shmem 0 [ 2720.839661][ T5099] total_mapped_file 0 [ 2720.845146][ T5099] total_dirty 0 [ 2720.848668][ T5099] total_writeback 0 [ 2720.852513][ T5099] total_workingset_refault_anon 51575 [ 2720.859077][ T5099] total_workingset_refault_file 2 [ 2720.868272][ T5099] total_swap 208896 [ 2720.872184][ T5099] total_swapcached 8192 [ 2720.877334][ T5099] total_pgpgin 237663 12:20:29 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2720.881359][ T5099] total_pgpgout 237660 [ 2720.886320][ T5099] total_pgfault 523930 [ 2720.897112][ T5099] total_pgmajfault 50250 [ 2720.901437][ T5099] total_inactive_anon 0 [ 2720.905810][ T5099] total_active_anon 12288 [ 2720.910199][ T5099] total_inactive_file 0 [ 2720.914912][ T5099] total_active_file 0 [ 2720.918948][ T5099] total_unevictable 0 [ 2720.924373][ T5099] anon_cost 0 [ 2720.927713][ T5099] file_cost 0 12:20:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2720.931030][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1425,uid=0 [ 2720.948121][ T5099] Memory cgroup out of memory: Killed process 1425 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2721.514970][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2721.533860][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2721.544370][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2721.554483][ T5099] Call Trace: [ 2721.557907][ T5099] [ 2721.560893][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2721.565649][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2721.570917][ T5099] ? __pfx__printk+0x10/0x10 [ 2721.575573][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2721.580331][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2721.585784][ T5099] dump_header+0xda/0x6a0 [ 2721.590200][ T5099] oom_kill_process+0x3a7/0x930 [ 2721.595136][ T5099] out_of_memory+0xf67/0x1320 [ 2721.599901][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2721.605609][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2721.610716][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2721.615918][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2721.621536][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2721.626648][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2721.632797][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2721.638071][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2721.643047][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2721.648016][ T5099] ? mark_lock+0x9a/0x350 [ 2721.652388][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2721.657801][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2721.663997][ T5099] charge_memcg+0xa2/0x160 [ 2721.668430][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2721.674527][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2721.679994][ T5099] ? mark_lock+0x9a/0x350 [ 2721.684365][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2721.690382][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2721.695781][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2721.701701][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2721.706749][ T5099] ? xas_descend+0x37e/0x470 [ 2721.711359][ T5099] swapin_readahead+0x1ea/0x1070 [ 2721.716308][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2721.721540][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2721.728760][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2721.734072][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2721.739377][ T5099] do_swap_page+0x791/0x3f40 [ 2721.743995][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2721.748823][ T5099] ? do_swap_page+0x154/0x3f40 [ 2721.753645][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2721.758723][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2721.764234][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2721.770063][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2721.775295][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2721.780543][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2721.786035][ T5099] ? mt_find+0x226/0x850 [ 2721.790298][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2721.795358][ T5099] ? mt_find+0x62d/0x850 [ 2721.799642][ T5099] ? mt_find+0x226/0x850 [ 2721.803917][ T5099] ? find_vma+0x142/0x1c0 [ 2721.808265][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2721.813050][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2721.819147][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2721.823947][ T5099] exc_page_fault+0x2ad/0x870 [ 2721.828643][ T5099] asm_exc_page_fault+0x26/0x30 [ 2721.833511][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2721.838651][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2721.858270][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2721.864361][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2721.872345][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2721.880332][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2721.888321][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2721.896306][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2721.904316][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2721.910245][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2721.916597][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2721.922334][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2721.927986][ T5099] do_syscall_64+0x108/0x240 [ 2721.932597][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2721.938519][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2721.942947][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2721.962655][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2721.971086][ T5099] RAX: 0000000000000000 RBX: 00000000000042a3 RCX: 00007f0f5b4a91b5 [ 2721.979071][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2721.987073][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2721.995057][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2722.003149][ T5099] R13: 00000000002984f3 R14: 00000000002984f3 R15: 0000000000000000 [ 2722.011152][ T5099] [ 2722.068458][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 163390 [ 2722.078070][ T5099] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2722.090476][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2722.100627][ T5099] Memory cgroup stats for /syz0: [ 2722.100787][ T5099] cache 0 [ 2722.128100][ T5099] rss 24576 [ 2722.131398][ T5099] rss_huge 0 [ 2722.139783][ T5099] shmem 0 [ 2722.142811][ T5099] mapped_file 0 [ 2722.156805][ T5099] dirty 0 [ 2722.159828][ T5099] writeback 0 [ 2722.163162][ T5099] workingset_refault_anon 51750 [ 2722.171615][ T5099] workingset_refault_file 2 [ 2722.180301][ T5099] swap 196608 [ 2722.183683][ T5099] swapcached 20480 [ 2722.195187][ T5099] pgpgin 237850 [ 2722.198754][ T5099] pgpgout 237844 [ 2722.202353][ T5099] pgfault 524213 [ 2722.225315][ T5099] pgmajfault 50416 [ 2722.229151][ T5099] inactive_anon 4096 [ 2722.233092][ T5099] active_anon 20480 [ 2722.244671][ T5099] inactive_file 0 [ 2722.248399][ T5099] active_file 0 [ 2722.251910][ T5099] unevictable 0 [ 2722.260785][ T5099] hierarchical_memory_limit 314572800 [ 2722.266879][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2722.273108][ T5099] total_cache 0 [ 2722.283173][ T5099] total_rss 24576 [ 2722.287740][ T5099] total_rss_huge 0 [ 2722.291518][ T5099] total_shmem 0 [ 2722.301521][ T5099] total_mapped_file 0 [ 2722.306293][ T5099] total_dirty 0 [ 2722.309820][ T5099] total_writeback 0 [ 2722.313686][ T5099] total_workingset_refault_anon 51750 [ 2722.325316][ T5099] total_workingset_refault_file 2 [ 2722.330449][ T5099] total_swap 196608 [ 2722.341127][ T5099] total_swapcached 20480 [ 2722.346183][ T5099] total_pgpgin 237850 [ 2722.350267][ T5099] total_pgpgout 237844 [ 2722.360573][ T5099] total_pgfault 524213 [ 2722.365468][ T5099] total_pgmajfault 50416 [ 2722.369856][ T5099] total_inactive_anon 4096 [ 2722.383945][ T5099] total_active_anon 20480 [ 2722.389077][ T5099] total_inactive_file 0 [ 2722.393292][ T5099] total_active_file 0 [ 2722.398243][ T5099] total_unevictable 0 [ 2722.402279][ T5099] anon_cost 0 [ 2722.411998][ T5099] file_cost 0 [ 2722.415875][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1428,uid=0 [ 2722.435880][ T5099] Memory cgroup out of memory: Killed process 1428 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2723.063860][ T1429] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2723.100676][ T1429] CPU: 0 PID: 1429 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2723.111197][ T1429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2723.121407][ T1429] Call Trace: [ 2723.124723][ T1429] [ 2723.127664][ T1429] dump_stack_lvl+0x1e7/0x2e0 [ 2723.132363][ T1429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2723.137575][ T1429] ? __pfx__printk+0x10/0x10 [ 2723.142179][ T1429] ? ___ratelimit+0x4c4/0x670 [ 2723.146883][ T1429] ? __pfx____ratelimit+0x10/0x10 [ 2723.151948][ T1429] dump_header+0xda/0x6a0 [ 2723.156308][ T1429] oom_kill_process+0x3a7/0x930 [ 2723.161184][ T1429] out_of_memory+0xf67/0x1320 [ 2723.165882][ T1429] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2723.171545][ T1429] ? __pfx___mutex_lock+0x10/0x10 [ 2723.176678][ T1429] ? __pfx_out_of_memory+0x10/0x10 [ 2723.181816][ T1429] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2723.187385][ T1429] ? __pfx_lock_release+0x10/0x10 [ 2723.192432][ T1429] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2723.198523][ T1429] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2723.203736][ T1429] ? mem_cgroup_iter+0x422/0x560 [ 2723.208693][ T1429] try_charge_memcg+0xda2/0x18a0 [ 2723.213666][ T1429] ? __pfx_try_charge_memcg+0x10/0x10 [ 2723.219056][ T1429] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2723.224793][ T1429] ? __pfx_lock_release+0x10/0x10 [ 2723.229842][ T1429] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2723.235850][ T1429] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2723.241583][ T1429] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2723.247420][ T1429] obj_cgroup_charge+0x389/0x630 [ 2723.252372][ T1429] ? obj_cgroup_charge+0x121/0x630 [ 2723.257496][ T1429] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2723.262962][ T1429] ? kmalloc_trace+0x4e/0x360 [ 2723.267654][ T1429] ? __pfx___might_resched+0x10/0x10 [ 2723.272961][ T1429] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2723.278787][ T1429] ? copy_semundo+0xb5/0x240 [ 2723.283390][ T1429] kmalloc_trace+0x216/0x360 [ 2723.288116][ T1429] ? __asan_memcpy+0x40/0x70 [ 2723.292751][ T1429] copy_semundo+0xb5/0x240 [ 2723.297212][ T1429] copy_process+0x1bc3/0x3fc0 [ 2723.301968][ T1429] ? copy_process+0x9c3/0x3fc0 [ 2723.306750][ T1429] ? __pfx_copy_process+0x10/0x10 [ 2723.311784][ T1429] ? __might_fault+0xc5/0x120 [ 2723.316483][ T1429] ? __asan_memset+0x23/0x50 [ 2723.321099][ T1429] kernel_clone+0x21d/0x8d0 [ 2723.325631][ T1429] ? __pfx_kernel_clone+0x10/0x10 [ 2723.330683][ T1429] __se_sys_clone3+0x2cb/0x350 [ 2723.335463][ T1429] ? __pfx___se_sys_clone3+0x10/0x10 [ 2723.340772][ T1429] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2723.346778][ T1429] ? exc_page_fault+0x587/0x870 [ 2723.351639][ T1429] ? do_syscall_64+0xb4/0x240 [ 2723.356332][ T1429] do_syscall_64+0xf9/0x240 [ 2723.360851][ T1429] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2723.366760][ T1429] RIP: 0033:0x7f0f5b4a9b99 [ 2723.371183][ T1429] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2723.390799][ T1429] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2723.399230][ T1429] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2723.407300][ T1429] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2723.415366][ T1429] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2723.423343][ T1429] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2723.431361][ T1429] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2723.439363][ T1429] [ 2723.464508][ T1429] memory: usage 307200kB, limit 307200kB, failcnt 163855 [ 2723.481658][ T1429] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0 [ 2723.489742][ T1429] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2723.501698][ T1429] Memory cgroup stats for /syz0: [ 2723.501864][ T1429] cache 0 [ 2723.510508][ T1429] rss 0 [ 2723.513375][ T1429] rss_huge 0 [ 2723.523488][ T1429] shmem 0 [ 2723.527311][ T1429] mapped_file 0 [ 2723.530815][ T1429] dirty 0 [ 2723.533773][ T1429] writeback 0 [ 2723.543671][ T1429] workingset_refault_anon 51925 [ 2723.552045][ T1429] workingset_refault_file 2 [ 2723.562638][ T1429] swap 229376 [ 2723.573610][ T1429] swapcached 0 [ 2723.582330][ T1429] pgpgin 238036 [ 2723.586649][ T1429] pgpgout 238036 [ 2723.590252][ T1429] pgfault 524508 [ 2723.593847][ T1429] pgmajfault 50588 [ 2723.598747][ T1429] inactive_anon 0 [ 2723.602427][ T1429] active_anon 0 [ 2723.606885][ T1429] inactive_file 0 [ 2723.610584][ T1429] active_file 0 [ 2723.614072][ T1429] unevictable 0 [ 2723.618310][ T1429] hierarchical_memory_limit 314572800 [ 2723.623741][ T1429] hierarchical_memsw_limit 9223372036854771712 [ 2723.630829][ T1429] total_cache 0 [ 2723.640647][ T1429] total_rss 0 [ 2723.644021][ T1429] total_rss_huge 0 [ 2723.648773][ T1429] total_shmem 0 [ 2723.652294][ T1429] total_mapped_file 0 [ 2723.657217][ T1429] total_dirty 0 [ 2723.672337][ T1429] total_writeback 0 [ 2723.676740][ T1429] total_workingset_refault_anon 51925 [ 2723.682164][ T1429] total_workingset_refault_file 2 [ 2723.694102][ T1429] total_swap 229376 [ 2723.698609][ T1429] total_swapcached 0 [ 2723.702558][ T1429] total_pgpgin 238036 [ 2723.713374][ T1429] total_pgpgout 238036 [ 2723.718003][ T1429] total_pgfault 524508 [ 2723.722135][ T1429] total_pgmajfault 50588 [ 2723.727574][ T1429] total_inactive_anon 0 [ 2723.731788][ T1429] total_active_anon 0 [ 2723.741556][ T1429] total_inactive_file 0 [ 2723.746454][ T1429] total_active_file 0 [ 2723.750489][ T1429] total_unevictable 0 [ 2723.755469][ T1429] anon_cost 0 [ 2723.758809][ T1429] file_cost 0 12:20:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2723.762132][ T1429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1429,uid=0 [ 2723.779397][ T1429] Memory cgroup out of memory: Killed process 1429 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:32 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2724.422557][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2724.442033][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2724.452457][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2724.462745][ T5099] Call Trace: [ 2724.466074][ T5099] [ 2724.469060][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2724.473815][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2724.479079][ T5099] ? __pfx__printk+0x10/0x10 [ 2724.483731][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2724.488512][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2724.493630][ T5099] dump_header+0xda/0x6a0 [ 2724.498040][ T5099] oom_kill_process+0x3a7/0x930 [ 2724.502969][ T5099] out_of_memory+0xf67/0x1320 [ 2724.507733][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2724.513537][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2724.518643][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2724.523844][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2724.529468][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2724.534578][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2724.540795][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2724.546164][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2724.551164][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2724.556164][ T5099] ? mark_lock+0x9a/0x350 [ 2724.560588][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2724.566070][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2724.572338][ T5099] charge_memcg+0xa2/0x160 [ 2724.576815][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2724.582956][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2724.588482][ T5099] ? mark_lock+0x9a/0x350 [ 2724.592902][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2724.598965][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2724.604514][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2724.610488][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2724.615665][ T5099] ? xas_descend+0x37e/0x470 [ 2724.620425][ T5099] swapin_readahead+0x1ea/0x1070 [ 2724.625547][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2724.630750][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2724.636380][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2724.641769][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2724.647131][ T5099] do_swap_page+0x791/0x3f40 [ 2724.651830][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2724.656694][ T5099] ? do_swap_page+0x154/0x3f40 [ 2724.661703][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2724.666808][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2724.672359][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2724.678261][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2724.683497][ T5099] ? reacquire_held_locks+0x3eb/0x690 [ 2724.688941][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2724.694496][ T5099] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2724.700313][ T5099] ? mtree_range_walk+0x6fd/0x8e0 [ 2724.705416][ T5099] ? lock_vma_under_rcu+0x18a/0x730 [ 2724.710704][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2724.715800][ T5099] ? lock_vma_under_rcu+0x2f9/0x730 [ 2724.721111][ T5099] ? lock_vma_under_rcu+0x18a/0x730 [ 2724.726393][ T5099] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2724.732106][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2724.736953][ T5099] exc_page_fault+0x456/0x870 [ 2724.741875][ T5099] asm_exc_page_fault+0x26/0x30 [ 2724.747140][ T5099] RIP: 0033:0x7f0f5b4a9163 [ 2724.751613][ T5099] Code: 00 00 00 00 00 66 90 31 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 8e 6d 0d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 2724.771288][ T5099] RSP: 002b:00007ffcec9e12f8 EFLAGS: 00010293 [ 2724.777419][ T5099] RAX: 00000000fffffffa RBX: 00000000000042a5 RCX: 0000000000000000 [ 2724.785473][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2724.793512][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2724.801581][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2724.809615][ T5099] R13: 0000000000299035 R14: 0000000000299035 R15: 0000000000000000 [ 2724.817665][ T5099] [ 2724.856984][ T5099] memory: usage 307180kB, limit 307200kB, failcnt 164441 [ 2724.864185][ T5099] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 2724.894350][ T5099] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2724.925458][ T5099] Memory cgroup stats for /syz0: [ 2724.925613][ T5099] cache 0 [ 2724.933758][ T5099] rss 0 [ 2724.944588][ T5099] rss_huge 0 [ 2724.947883][ T5099] shmem 0 [ 2724.950866][ T5099] mapped_file 0 [ 2724.976411][ T5099] dirty 0 [ 2724.979479][ T5099] writeback 0 [ 2724.982888][ T5099] workingset_refault_anon 52142 [ 2724.992492][ T5099] workingset_refault_file 2 [ 2725.013778][ T5099] swap 221184 [ 2725.017750][ T5099] swapcached 0 [ 2725.021245][ T5099] pgpgin 238264 [ 2725.031859][ T5099] pgpgout 238264 [ 2725.036492][ T5099] pgfault 524850 [ 2725.040088][ T5099] pgmajfault 50801 [ 2725.043842][ T5099] inactive_anon 0 [ 2725.054062][ T5099] active_anon 0 [ 2725.074418][ T5099] inactive_file 0 [ 2725.078148][ T5099] active_file 0 [ 2725.081835][ T5099] unevictable 0 [ 2725.104550][ T5099] hierarchical_memory_limit 314572800 [ 2725.110012][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2725.125536][ T5099] total_cache 0 [ 2725.133544][ T5099] total_rss 0 [ 2725.150174][ T5099] total_rss_huge 0 [ 2725.153982][ T5099] total_shmem 0 [ 2725.164936][ T5099] total_mapped_file 0 [ 2725.169327][ T5099] total_dirty 0 [ 2725.172850][ T5099] total_writeback 0 [ 2725.184872][ T5099] total_workingset_refault_anon 52142 [ 2725.190332][ T5099] total_workingset_refault_file 2 [ 2725.211801][ T5099] total_swap 221184 [ 2725.224797][ T5099] total_swapcached 0 [ 2725.228782][ T5099] total_pgpgin 238264 [ 2725.232807][ T5099] total_pgpgout 238264 [ 2725.254590][ T5099] total_pgfault 524850 [ 2725.258748][ T5099] total_pgmajfault 50801 [ 2725.263039][ T5099] total_inactive_anon 0 [ 2725.296819][ T5099] total_active_anon 0 [ 2725.300894][ T5099] total_inactive_file 0 [ 2725.314424][ T5099] total_active_file 0 [ 2725.318502][ T5099] total_unevictable 0 [ 2725.322533][ T5099] anon_cost 0 [ 2725.354421][ T5099] file_cost 0 [ 2725.357801][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1430,uid=0 [ 2725.394637][ T5099] Memory cgroup out of memory: Killed process 1430 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2725.843492][ T1433] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2725.857165][ T1433] CPU: 0 PID: 1433 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2725.867580][ T1433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2725.877781][ T1433] Call Trace: [ 2725.881149][ T1433] [ 2725.884176][ T1433] dump_stack_lvl+0x1e7/0x2e0 [ 2725.889093][ T1433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2725.894347][ T1433] ? __pfx__printk+0x10/0x10 [ 2725.898993][ T1433] ? ___ratelimit+0x4c4/0x670 [ 2725.903740][ T1433] ? __pfx____ratelimit+0x10/0x10 [ 2725.908837][ T1433] dump_header+0xda/0x6a0 [ 2725.913245][ T1433] oom_kill_process+0x3a7/0x930 [ 2725.918288][ T1433] out_of_memory+0xf67/0x1320 [ 2725.923037][ T1433] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2725.928745][ T1433] ? __pfx___mutex_lock+0x10/0x10 [ 2725.933830][ T1433] ? __pfx_out_of_memory+0x10/0x10 [ 2725.939017][ T1433] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2725.944633][ T1433] ? __pfx_lock_release+0x10/0x10 [ 2725.949706][ T1433] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2725.955812][ T1433] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2725.961033][ T1433] ? mem_cgroup_iter+0x422/0x560 [ 2725.965999][ T1433] try_charge_memcg+0xda2/0x18a0 [ 2725.971011][ T1433] ? __pfx_try_charge_memcg+0x10/0x10 [ 2725.976436][ T1433] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2725.982189][ T1433] ? __pfx_lock_release+0x10/0x10 [ 2725.987673][ T1433] ? memcg_account_kmem+0x1e7/0x210 [ 2725.992899][ T1433] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2725.998723][ T1433] __memcg_kmem_charge_page+0xe1/0x250 [ 2726.004196][ T1433] memcg_charge_kernel_stack+0x304/0x550 [ 2726.009849][ T1433] dup_task_struct+0x15d/0x7d0 [ 2726.014719][ T1433] copy_process+0x5d5/0x3fc0 [ 2726.019596][ T1433] ? __might_fault+0xa9/0x120 [ 2726.024294][ T1433] ? __pfx_lock_release+0x10/0x10 [ 2726.029353][ T1433] ? __pfx_copy_process+0x10/0x10 [ 2726.034418][ T1433] ? __might_fault+0xc5/0x120 [ 2726.039176][ T1433] ? __asan_memset+0x23/0x50 [ 2726.043819][ T1433] kernel_clone+0x21d/0x8d0 [ 2726.048347][ T1433] ? __pfx_kernel_clone+0x10/0x10 [ 2726.053431][ T1433] __se_sys_clone3+0x2cb/0x350 [ 2726.058212][ T1433] ? __pfx___se_sys_clone3+0x10/0x10 [ 2726.063536][ T1433] ? do_syscall_64+0x108/0x240 [ 2726.068320][ T1433] ? do_syscall_64+0xb4/0x240 [ 2726.073099][ T1433] do_syscall_64+0xf9/0x240 [ 2726.077619][ T1433] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2726.083527][ T1433] RIP: 0033:0x7f0f5b4a9b99 [ 2726.088045][ T1433] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2726.107665][ T1433] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2726.116198][ T1433] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2726.124179][ T1433] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2726.132159][ T1433] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2726.140169][ T1433] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2726.148154][ T1433] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2726.156155][ T1433] [ 2726.185966][ T1433] memory: usage 307200kB, limit 307200kB, failcnt 164752 [ 2726.207851][ T1433] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 2726.219176][ T1433] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2726.229946][ T1433] Memory cgroup stats for /syz0: [ 2726.230235][ T1433] cache 0 [ 2726.244006][ T1433] rss 12288 [ 2726.252008][ T1433] rss_huge 0 [ 2726.258095][ T1433] shmem 0 [ 2726.262492][ T1433] mapped_file 0 [ 2726.271503][ T1433] dirty 0 [ 2726.277515][ T1433] writeback 0 [ 2726.281027][ T1433] workingset_refault_anon 52249 [ 2726.290495][ T1433] workingset_refault_file 2 [ 2726.296288][ T1433] swap 249856 [ 2726.308238][ T1433] swapcached 8192 [ 2726.311980][ T1433] pgpgin 238383 [ 2726.318610][ T1433] pgpgout 238380 [ 2726.322584][ T1433] pgfault 525031 [ 2726.332492][ T1433] pgmajfault 50902 [ 2726.336826][ T1433] inactive_anon 12288 [ 2726.340859][ T1433] active_anon 0 [ 2726.352549][ T1433] inactive_file 0 [ 2726.359182][ T1433] active_file 0 [ 2726.362763][ T1433] unevictable 0 [ 2726.374991][ T1433] hierarchical_memory_limit 314572800 [ 2726.381410][ T1433] hierarchical_memsw_limit 9223372036854771712 [ 2726.392853][ T1433] total_cache 0 [ 2726.396896][ T1433] total_rss 12288 [ 2726.400676][ T1433] total_rss_huge 0 [ 2726.408695][ T1433] total_shmem 0 [ 2726.412331][ T1433] total_mapped_file 0 [ 2726.418086][ T1433] total_dirty 0 [ 2726.423147][ T1433] total_writeback 0 [ 2726.431807][ T1433] total_workingset_refault_anon 52249 [ 2726.437731][ T1433] total_workingset_refault_file 2 [ 2726.448345][ T1433] total_swap 249856 [ 2726.452319][ T1433] total_swapcached 8192 [ 2726.457077][ T1433] total_pgpgin 238383 [ 2726.462453][ T1433] total_pgpgout 238380 [ 2726.472733][ T1433] total_pgfault 525031 [ 2726.479347][ T1433] total_pgmajfault 50902 [ 2726.493675][ T1433] total_inactive_anon 12288 [ 2726.505170][ T1433] total_active_anon 0 [ 2726.515250][ T1433] total_inactive_file 0 [ 2726.520720][ T1433] total_active_file 0 [ 2726.535196][ T1433] total_unevictable 0 [ 2726.539386][ T1433] anon_cost 0 [ 2726.546224][ T1433] file_cost 0 [ 2726.554151][ T1433] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1433,uid=0 [ 2726.589000][ T1433] Memory cgroup out of memory: Killed process 1433 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:20:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2727.181258][ T5111] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2727.193432][ T5111] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2727.203536][ T5111] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2727.213372][ T5111] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2727.223146][ T5111] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2727.231257][ T5111] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2727.571949][ T1435] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2727.611114][ T1435] CPU: 1 PID: 1435 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2727.621547][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2727.631662][ T1435] Call Trace: [ 2727.634985][ T1435] [ 2727.637936][ T1435] dump_stack_lvl+0x1e7/0x2e0 [ 2727.642636][ T1435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2727.647866][ T1435] ? __pfx__printk+0x10/0x10 [ 2727.652463][ T1435] ? ___ratelimit+0x4c4/0x670 [ 2727.657185][ T1435] ? __pfx____ratelimit+0x10/0x10 [ 2727.662240][ T1435] dump_header+0xda/0x6a0 [ 2727.666608][ T1435] oom_kill_process+0x3a7/0x930 [ 2727.671498][ T1435] out_of_memory+0xf67/0x1320 [ 2727.676197][ T1435] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2727.681850][ T1435] ? __pfx___mutex_lock+0x10/0x10 [ 2727.686906][ T1435] ? __pfx_out_of_memory+0x10/0x10 [ 2727.692044][ T1435] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2727.697608][ T1435] ? __pfx_lock_release+0x10/0x10 [ 2727.702667][ T1435] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2727.708766][ T1435] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2727.714008][ T1435] ? mem_cgroup_iter+0x422/0x560 [ 2727.719005][ T1435] try_charge_memcg+0xda2/0x18a0 [ 2727.723986][ T1435] ? mark_lock+0x9a/0x350 [ 2727.728361][ T1435] ? __pfx_try_charge_memcg+0x10/0x10 [ 2727.733777][ T1435] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2727.739944][ T1435] charge_memcg+0xa2/0x160 [ 2727.744374][ T1435] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2727.750455][ T1435] __read_swap_cache_async+0x480/0x8b0 [ 2727.756036][ T1435] ? mark_lock+0x9a/0x350 [ 2727.760384][ T1435] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2727.766391][ T1435] swap_cluster_readahead+0x67c/0x810 [ 2727.771833][ T1435] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2727.778033][ T1435] ? __pfx_lock_release+0x10/0x10 [ 2727.784003][ T1435] ? xas_descend+0x37e/0x470 [ 2727.788619][ T1435] swapin_readahead+0x1ea/0x1070 [ 2727.793753][ T1435] ? filemap_get_entry+0x127/0x4e0 [ 2727.798898][ T1435] ? __pfx_swapin_readahead+0x10/0x10 [ 2727.804306][ T1435] ? __filemap_get_folio+0x935/0xbc0 [ 2727.809620][ T1435] ? swap_cache_get_folio+0x9f/0x570 [ 2727.814951][ T1435] do_swap_page+0x791/0x3f40 [ 2727.819574][ T1435] ? rcu_is_watching+0x15/0xb0 [ 2727.824372][ T1435] ? do_swap_page+0x154/0x3f40 [ 2727.829158][ T1435] ? __pfx_do_swap_page+0x10/0x10 [ 2727.834300][ T1435] ? pte_offset_map_nolock+0x137/0x1f0 [ 2727.839784][ T1435] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2727.845617][ T1435] ? __pfx_validate_chain+0x10/0x10 [ 2727.850839][ T1435] __handle_mm_fault+0x15e8/0x72d0 [ 2727.856017][ T1435] ? __pfx___handle_mm_fault+0x10/0x10 [ 2727.861501][ T1435] ? mt_find+0x226/0x850 [ 2727.865771][ T1435] ? __pfx_lock_release+0x10/0x10 [ 2727.870835][ T1435] ? mt_find+0x62d/0x850 [ 2727.875094][ T1435] ? mt_find+0x226/0x850 [ 2727.879371][ T1435] ? find_vma+0x142/0x1c0 [ 2727.883985][ T1435] ? __pfx_find_vma+0x10/0x10 [ 2727.888678][ T1435] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2727.894960][ T1435] handle_mm_fault+0x3c1/0x8a0 [ 2727.899781][ T1435] exc_page_fault+0x2ad/0x870 [ 2727.904478][ T1435] asm_exc_page_fault+0x26/0x30 [ 2727.909432][ T1435] RIP: 0010:__put_user_4+0x11/0x20 [ 2727.914574][ T1435] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 2727.934218][ T1435] RSP: 0000:ffffc90004a5fbd8 EFLAGS: 00050206 [ 2727.940310][ T1435] RAX: 00000000000042a8 RBX: 0000000000000000 RCX: 00007f0f5c2c8990 [ 2727.948467][ T1435] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2727.956474][ T1435] RBP: ffffc90004a5fd10 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2727.964586][ T1435] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc90004a5fd78 [ 2727.972594][ T1435] R13: 00000000003d0f00 R14: ffffc90004a5fc40 R15: dffffc0000000000 [ 2727.980740][ T1435] kernel_clone+0x363/0x8d0 [ 2727.985371][ T1435] ? __pfx_kernel_clone+0x10/0x10 [ 2727.990424][ T1435] ? __pfx_lock_release+0x10/0x10 [ 2727.995474][ T1435] __se_sys_clone3+0x2cb/0x350 [ 2728.000255][ T1435] ? __might_fault+0xa9/0x120 [ 2728.004972][ T1435] ? __pfx___se_sys_clone3+0x10/0x10 [ 2728.010270][ T1435] ? rcu_is_watching+0x15/0xb0 [ 2728.015082][ T1435] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2728.021096][ T1435] ? exc_page_fault+0x587/0x870 [ 2728.025968][ T1435] ? do_syscall_64+0xb4/0x240 [ 2728.030748][ T1435] do_syscall_64+0xf9/0x240 [ 2728.035271][ T1435] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2728.041182][ T1435] RIP: 0033:0x7f0f5b4a9b99 [ 2728.045611][ T1435] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2728.065239][ T1435] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2728.073667][ T1435] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2728.081652][ T1435] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2728.089641][ T1435] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2728.097641][ T1435] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2728.105622][ T1435] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2728.113632][ T1435] [ 2728.166424][ T1435] memory: usage 307200kB, limit 307200kB, failcnt 165190 [ 2728.173734][ T1435] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2728.182850][ T1435] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2728.196161][ T1435] Memory cgroup stats for /syz0: [ 2728.196338][ T1435] cache 0 [ 2728.216738][ T1435] rss 0 [ 2728.219690][ T1435] rss_huge 0 [ 2728.222945][ T1435] shmem 0 [ 2728.245187][ T1435] mapped_file 0 [ 2728.248736][ T1435] dirty 0 [ 2728.251716][ T1435] writeback 0 [ 2728.271812][ T1435] workingset_refault_anon 52388 [ 2728.288225][ T1435] workingset_refault_file 2 [ 2728.292824][ T1435] swap 221184 [ 2728.309191][ T1435] swapcached 0 [ 2728.312663][ T1435] pgpgin 238533 [ 2728.322873][ T1435] pgpgout 238533 [ 2728.327042][ T1435] pgfault 525271 [ 2728.330654][ T1435] pgmajfault 51041 [ 2728.335676][ T1435] inactive_anon 0 [ 2728.339358][ T1435] active_anon 0 [ 2728.342850][ T1435] inactive_file 0 [ 2728.347782][ T1435] active_file 0 [ 2728.361873][ T1435] unevictable 0 [ 2728.383265][ T1435] hierarchical_memory_limit 314572800 [ 2728.389559][ T1435] hierarchical_memsw_limit 9223372036854771712 [ 2728.403522][ T1435] total_cache 0 [ 2728.407975][ T1435] total_rss 0 [ 2728.411339][ T1435] total_rss_huge 0 [ 2728.430834][ T1435] total_shmem 0 [ 2728.435048][ T1435] total_mapped_file 0 [ 2728.439092][ T1435] total_dirty 0 [ 2728.442593][ T1435] total_writeback 0 [ 2728.460485][ T1435] total_workingset_refault_anon 52388 [ 2728.470556][ T1435] total_workingset_refault_file 2 [ 2728.479176][ T1435] total_swap 221184 [ 2728.483315][ T1435] total_swapcached 0 [ 2728.491985][ T1435] total_pgpgin 238533 [ 2728.499145][ T1435] total_pgpgout 238533 [ 2728.503402][ T1435] total_pgfault 525271 [ 2728.511868][ T1435] total_pgmajfault 51041 [ 2728.519169][ T1435] total_inactive_anon 0 [ 2728.523549][ T1435] total_active_anon 0 [ 2728.532171][ T1435] total_inactive_file 0 [ 2728.539608][ T1435] total_active_file 0 [ 2728.543870][ T1435] total_unevictable 0 [ 2728.552424][ T1435] anon_cost 0 [ 2728.560013][ T1435] file_cost 0 [ 2728.563523][ T1435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1435,uid=0 [ 2728.586723][ T1435] Memory cgroup out of memory: Killed process 1435 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2728.889953][ T1443] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2728.901660][ T1443] CPU: 1 PID: 1443 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2728.912070][ T1443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2728.922185][ T1443] Call Trace: [ 2728.925518][ T1443] [ 2728.928511][ T1443] dump_stack_lvl+0x1e7/0x2e0 [ 2728.933265][ T1443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2728.938528][ T1443] ? __pfx__printk+0x10/0x10 [ 2728.943191][ T1443] ? ___ratelimit+0x4c4/0x670 [ 2728.947961][ T1443] ? __pfx____ratelimit+0x10/0x10 [ 2728.953082][ T1443] dump_header+0xda/0x6a0 [ 2728.957501][ T1443] oom_kill_process+0x3a7/0x930 [ 2728.962399][ T1443] out_of_memory+0xf67/0x1320 [ 2728.967104][ T1443] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2728.972779][ T1443] ? __pfx___mutex_lock+0x10/0x10 [ 2728.977866][ T1443] ? __pfx_out_of_memory+0x10/0x10 [ 2728.983095][ T1443] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2728.988661][ T1443] ? __pfx_lock_release+0x10/0x10 [ 2728.993796][ T1443] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2728.999904][ T1443] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2729.005123][ T1443] ? mem_cgroup_iter+0x422/0x560 [ 2729.010094][ T1443] try_charge_memcg+0xda2/0x18a0 [ 2729.015081][ T1443] ? __pfx_try_charge_memcg+0x10/0x10 [ 2729.020470][ T1443] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2729.026202][ T1443] ? __pfx_lock_release+0x10/0x10 [ 2729.031248][ T1443] ? memcg_account_kmem+0x1e7/0x210 [ 2729.036474][ T1443] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2729.042329][ T1443] __memcg_kmem_charge_page+0xe1/0x250 [ 2729.047872][ T1443] memcg_charge_kernel_stack+0x304/0x550 [ 2729.053725][ T1443] dup_task_struct+0x40d/0x7d0 [ 2729.058528][ T1443] copy_process+0x5d5/0x3fc0 [ 2729.063155][ T1443] ? __might_fault+0xa9/0x120 [ 2729.067876][ T1443] ? __pfx_lock_release+0x10/0x10 [ 2729.072930][ T1443] ? __pfx_copy_process+0x10/0x10 [ 2729.077967][ T1443] ? __might_fault+0xc5/0x120 [ 2729.082753][ T1443] ? __asan_memset+0x23/0x50 [ 2729.087372][ T1443] kernel_clone+0x21d/0x8d0 [ 2729.091984][ T1443] ? __pfx_kernel_clone+0x10/0x10 [ 2729.097037][ T1443] __se_sys_clone3+0x2cb/0x350 [ 2729.101813][ T1443] ? __pfx___se_sys_clone3+0x10/0x10 [ 2729.107149][ T1443] ? do_syscall_64+0x108/0x240 [ 2729.112023][ T1443] ? do_syscall_64+0xb4/0x240 [ 2729.116713][ T1443] do_syscall_64+0xf9/0x240 [ 2729.121336][ T1443] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2729.127241][ T1443] RIP: 0033:0x7f0f5b4a9b99 [ 2729.131941][ T1443] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2729.151733][ T1443] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2729.160168][ T1443] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2729.168154][ T1443] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2729.176163][ T1443] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2729.184157][ T1443] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2729.192141][ T1443] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2729.200153][ T1443] [ 2729.204779][ T1443] memory: usage 307200kB, limit 307200kB, failcnt 165366 [ 2729.212248][ T1443] memory+swap: usage 307440kB, limit 9007199254740988kB, failcnt 0 [ 2729.231116][ T1443] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2729.240113][ T1443] Memory cgroup stats for /syz0: [ 2729.240276][ T1443] cache 0 [ 2729.249835][ T1443] rss 12288 [ 2729.255479][ T1443] rss_huge 0 [ 2729.258814][ T1443] shmem 0 [ 2729.261891][ T1443] mapped_file 0 [ 2729.266405][ T1443] dirty 0 [ 2729.269485][ T1443] writeback 0 [ 2729.273032][ T1443] workingset_refault_anon 52438 [ 2729.285481][ T1443] workingset_refault_file 2 [ 2729.294214][ T1443] swap 245760 [ 2729.298385][ T1443] swapcached 0 [ 2729.301957][ T1443] pgpgin 238594 [ 2729.306398][ T1443] pgpgout 238591 [ 2729.310114][ T1443] pgfault 525373 [ 2729.313809][ T1443] pgmajfault 51091 [ 2729.325404][ T1443] inactive_anon 12288 [ 2729.329566][ T1443] active_anon 0 [ 2729.333183][ T1443] inactive_file 0 [ 2729.334874][ T5101] Bluetooth: hci10: command 0x0409 tx timeout [ 2729.343848][ T1443] active_file 0 [ 2729.364931][ T1443] unevictable 0 [ 2729.368869][ T1443] hierarchical_memory_limit 314572800 [ 2729.381505][ T1443] hierarchical_memsw_limit 9223372036854771712 [ 2729.388754][ T1443] total_cache 0 [ 2729.392376][ T1443] total_rss 12288 [ 2729.402550][ T1443] total_rss_huge 0 [ 2729.415895][ T1443] total_shmem 0 [ 2729.429398][ T1443] total_mapped_file 0 [ 2729.433465][ T1443] total_dirty 0 [ 2729.448777][ T1443] total_writeback 0 [ 2729.452667][ T1443] total_workingset_refault_anon 52438 [ 2729.462529][ T1443] total_workingset_refault_file 2 [ 2729.493931][ T1443] total_swap 245760 [ 2729.502048][ T1443] total_swapcached 0 [ 2729.506963][ T1443] total_pgpgin 238594 [ 2729.517216][ T1443] total_pgpgout 238591 [ 2729.523962][ T1443] total_pgfault 525373 [ 2729.538026][ T1443] total_pgmajfault 51091 [ 2729.542348][ T1443] total_inactive_anon 12288 [ 2729.549977][ T1443] total_active_anon 0 [ 2729.554132][ T1443] total_inactive_file 0 [ 2729.566463][ T1443] total_active_file 0 [ 2729.570714][ T1443] total_unevictable 0 [ 2729.579036][ T1443] anon_cost 0 [ 2729.582490][ T1443] file_cost 0 [ 2729.587794][ T1443] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1443,uid=0 [ 2729.610070][ T1443] Memory cgroup out of memory: Killed process 1443 (syz-executor.0) total-vm:54508kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4408]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:20:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2730.510869][ T1444] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2730.527983][ T1444] CPU: 1 PID: 1444 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2730.538406][ T1444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2730.548517][ T1444] Call Trace: [ 2730.551858][ T1444] [ 2730.554845][ T1444] dump_stack_lvl+0x1e7/0x2e0 [ 2730.559614][ T1444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2730.564969][ T1444] ? __pfx__printk+0x10/0x10 [ 2730.569619][ T1444] ? ___ratelimit+0x4c4/0x670 [ 2730.574381][ T1444] ? __pfx____ratelimit+0x10/0x10 [ 2730.579493][ T1444] dump_header+0xda/0x6a0 [ 2730.583912][ T1444] oom_kill_process+0x3a7/0x930 [ 2730.588862][ T1444] out_of_memory+0xf67/0x1320 [ 2730.593619][ T1444] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2730.599332][ T1444] ? __pfx___mutex_lock+0x10/0x10 [ 2730.604522][ T1444] ? __pfx_out_of_memory+0x10/0x10 [ 2730.609740][ T1444] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2730.615376][ T1444] ? __pfx_lock_release+0x10/0x10 [ 2730.620482][ T1444] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2730.626634][ T1444] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2730.631908][ T1444] ? mem_cgroup_iter+0x422/0x560 [ 2730.636990][ T1444] try_charge_memcg+0xda2/0x18a0 [ 2730.642087][ T1444] ? __pfx_try_charge_memcg+0x10/0x10 [ 2730.647537][ T1444] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2730.653335][ T1444] ? __pfx_lock_release+0x10/0x10 [ 2730.658541][ T1444] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2730.664430][ T1444] __memcg_kmem_charge_page+0xe1/0x250 [ 2730.669968][ T1444] memcg_charge_kernel_stack+0xa7/0x550 [ 2730.675603][ T1444] dup_task_struct+0x15d/0x7d0 [ 2730.680449][ T1444] copy_process+0x5d5/0x3fc0 [ 2730.685131][ T1444] ? __might_fault+0xa9/0x120 [ 2730.689882][ T1444] ? __pfx_lock_release+0x10/0x10 [ 2730.695087][ T1444] ? __pfx_copy_process+0x10/0x10 [ 2730.700229][ T1444] ? __might_fault+0xc5/0x120 [ 2730.704989][ T1444] ? __asan_memset+0x23/0x50 [ 2730.709668][ T1444] kernel_clone+0x21d/0x8d0 [ 2730.714254][ T1444] ? __pfx_kernel_clone+0x10/0x10 [ 2730.719372][ T1444] __se_sys_clone3+0x2cb/0x350 [ 2730.724214][ T1444] ? __pfx___se_sys_clone3+0x10/0x10 [ 2730.729580][ T1444] ? rcu_is_watching+0x15/0xb0 [ 2730.734956][ T1444] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2730.741040][ T1444] ? exc_page_fault+0x587/0x870 [ 2730.745968][ T1444] ? do_syscall_64+0xb4/0x240 [ 2730.750725][ T1444] do_syscall_64+0xf9/0x240 [ 2730.755299][ T1444] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2730.761264][ T1444] RIP: 0033:0x7f0f5b4a9b99 [ 2730.765749][ T1444] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2730.785416][ T1444] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2730.793896][ T1444] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2730.801929][ T1444] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2730.809964][ T1444] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2730.818002][ T1444] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2730.826056][ T1444] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2730.834113][ T1444] [ 2730.855900][ T1444] memory: usage 307200kB, limit 307200kB, failcnt 166034 [ 2730.864506][ T1444] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2730.893640][ T1444] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2730.901696][ T1444] Memory cgroup stats for /syz0: [ 2730.901858][ T1444] cache 0 [ 2730.910578][ T1444] rss 12288 [ 2730.924393][ T1444] rss_huge 0 [ 2730.927773][ T1444] shmem 0 [ 2730.930746][ T1444] mapped_file 0 [ 2730.934236][ T1444] dirty 0 [ 2730.937747][ T1444] writeback 0 [ 2730.941209][ T1444] workingset_refault_anon 52690 [ 2730.946891][ T1444] workingset_refault_file 2 [ 2730.951838][ T1444] swap 208896 [ 2730.959835][ T1444] swapcached 12288 [ 2730.963760][ T1444] pgpgin 238857 [ 2730.970042][ T1444] pgpgout 238854 [ 2730.973752][ T1444] pgfault 525779 [ 2730.983070][ T1444] pgmajfault 51335 [ 2730.988279][ T1444] inactive_anon 12288 [ 2730.992430][ T1444] active_anon 0 [ 2731.002677][ T1444] inactive_file 0 [ 2731.007958][ T1444] active_file 0 [ 2731.013748][ T1444] unevictable 0 [ 2731.024070][ T1444] hierarchical_memory_limit 314572800 [ 2731.032176][ T1444] hierarchical_memsw_limit 9223372036854771712 [ 2731.044896][ T1444] total_cache 0 [ 2731.048492][ T1444] total_rss 12288 [ 2731.052172][ T1444] total_rss_huge 0 [ 2731.057028][ T1444] total_shmem 0 [ 2731.060645][ T1444] total_mapped_file 0 [ 2731.064846][ T1444] total_dirty 0 [ 2731.068452][ T1444] total_writeback 0 [ 2731.072375][ T1444] total_workingset_refault_anon 52690 [ 2731.084136][ T1444] total_workingset_refault_file 2 [ 2731.090134][ T1444] total_swap 208896 [ 2731.094140][ T1444] total_swapcached 12288 [ 2731.103364][ T1444] total_pgpgin 238857 [ 2731.109056][ T1444] total_pgpgout 238854 [ 2731.113278][ T1444] total_pgfault 525779 [ 2731.118159][ T1444] total_pgmajfault 51335 [ 2731.122564][ T1444] total_inactive_anon 12288 [ 2731.127490][ T1444] total_active_anon 0 [ 2731.131648][ T1444] total_inactive_file 0 [ 2731.136399][ T1444] total_active_file 0 [ 2731.140762][ T1444] total_unevictable 0 [ 2731.145638][ T1444] anon_cost 0 [ 2731.149092][ T1444] file_cost 0 [ 2731.152545][ T1444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1444,uid=0 [ 2731.168985][ T1444] Memory cgroup out of memory: Killed process 1444 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2731.414886][ T5101] Bluetooth: hci10: command 0x041b tx timeout [ 2731.721971][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2731.745849][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2731.756282][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2731.766566][ T5099] Call Trace: [ 2731.769952][ T5099] [ 2731.772931][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2731.777679][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2731.783036][ T5099] ? __pfx__printk+0x10/0x10 [ 2731.787689][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2731.792442][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2731.797536][ T5099] dump_header+0xda/0x6a0 [ 2731.801939][ T5099] oom_kill_process+0x3a7/0x930 [ 2731.806888][ T5099] out_of_memory+0xf67/0x1320 [ 2731.811625][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2731.817315][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2731.822500][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2731.827707][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2731.833328][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2731.838470][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2731.844630][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2731.849908][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2731.854924][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2731.860023][ T5099] ? mark_lock+0x9a/0x350 [ 2731.864564][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2731.870103][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2731.876361][ T5099] charge_memcg+0xa2/0x160 [ 2731.880876][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2731.887021][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2731.892543][ T5099] ? mark_lock+0x9a/0x350 [ 2731.896953][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2731.903013][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2731.908463][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2731.914425][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2731.919534][ T5099] ? xas_descend+0x37e/0x470 [ 2731.924202][ T5099] swapin_readahead+0x1ea/0x1070 [ 2731.929204][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2731.934420][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2731.939879][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2731.945261][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2731.950626][ T5099] do_swap_page+0x791/0x3f40 [ 2731.955298][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2731.960243][ T5099] ? do_swap_page+0x154/0x3f40 [ 2731.965253][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2731.970439][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2731.975979][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2731.981864][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2731.987141][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2731.992370][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2731.998021][ T5099] ? mt_find+0x226/0x850 [ 2732.002332][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2732.007456][ T5099] ? mt_find+0x62d/0x850 [ 2732.011775][ T5099] ? mt_find+0x226/0x850 [ 2732.016201][ T5099] ? find_vma+0x142/0x1c0 [ 2732.020606][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2732.025355][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2732.031421][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2732.036287][ T5099] exc_page_fault+0x2ad/0x870 [ 2732.041053][ T5099] asm_exc_page_fault+0x26/0x30 [ 2732.045977][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2732.051174][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2732.071073][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2732.077215][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2732.085260][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2732.093478][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2732.101627][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2732.109662][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2732.117987][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2732.124092][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2732.130506][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2732.136481][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2732.142294][ T5099] do_syscall_64+0x108/0x240 [ 2732.146975][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2732.152946][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2732.157527][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2732.177198][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2732.185683][ T5099] RAX: 0000000000000000 RBX: 00000000000042ab RCX: 00007f0f5b4a91b5 [ 2732.193804][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2732.201836][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2732.209866][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2732.217989][ T5099] R13: 000000000029ad1f R14: 000000000029ad1f R15: 0000000000000000 [ 2732.226047][ T5099] [ 2732.275603][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 166386 [ 2732.282723][ T5099] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2732.297624][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2732.307921][ T5099] Memory cgroup stats for /syz0: [ 2732.308083][ T5099] cache 0 [ 2732.320040][ T5099] rss 0 [ 2732.322897][ T5099] rss_huge 0 [ 2732.329064][ T5099] shmem 0 [ 2732.332188][ T5099] mapped_file 0 [ 2732.339761][ T5099] dirty 0 [ 2732.342774][ T5099] writeback 0 [ 2732.348976][ T5099] workingset_refault_anon 52798 [ 2732.353907][ T5099] workingset_refault_file 2 [ 2732.362410][ T5099] swap 221184 [ 2732.373718][ T5099] swapcached 0 [ 2732.381656][ T5099] pgpgin 238977 [ 2732.388049][ T5099] pgpgout 238977 [ 2732.391668][ T5099] pgfault 525960 [ 2732.399278][ T5099] pgmajfault 51440 [ 2732.403252][ T5099] inactive_anon 0 [ 2732.407814][ T5099] active_anon 0 [ 2732.417096][ T5099] inactive_file 0 [ 2732.420804][ T5099] active_file 0 [ 2732.426616][ T5099] unevictable 0 [ 2732.430153][ T5099] hierarchical_memory_limit 314572800 [ 2732.439543][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2732.449235][ T5099] total_cache 0 [ 2732.452773][ T5099] total_rss 0 [ 2732.460053][ T5099] total_rss_huge 0 [ 2732.464115][ T5099] total_shmem 0 [ 2732.470542][ T5099] total_mapped_file 0 [ 2732.478995][ T5099] total_dirty 0 [ 2732.482522][ T5099] total_writeback 0 [ 2732.489357][ T5099] total_workingset_refault_anon 52798 [ 2732.501117][ T5099] total_workingset_refault_file 2 [ 2732.509153][ T5099] total_swap 221184 [ 2732.513036][ T5099] total_swapcached 0 [ 2732.518026][ T5099] total_pgpgin 238977 [ 2732.522170][ T5099] total_pgpgout 238977 [ 2732.537649][ T5099] total_pgfault 525960 [ 2732.541812][ T5099] total_pgmajfault 51440 [ 2732.546812][ T5099] total_inactive_anon 0 [ 2732.551045][ T5099] total_active_anon 0 [ 2732.561751][ T5099] total_inactive_file 0 [ 2732.566519][ T5099] total_active_file 0 [ 2732.570566][ T5099] total_unevictable 0 [ 2732.580967][ T5099] anon_cost 0 [ 2732.585171][ T5099] file_cost 0 [ 2732.588926][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1447,uid=0 [ 2732.619530][ T5099] Memory cgroup out of memory: Killed process 1447 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4900]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) 12:20:41 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2733.310957][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2733.322338][ T5099] CPU: 0 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2733.332733][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2733.342937][ T5099] Call Trace: [ 2733.346274][ T5099] [ 2733.349243][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2733.353975][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2733.359241][ T5099] ? __pfx__printk+0x10/0x10 [ 2733.363892][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2733.368645][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2733.373830][ T5099] dump_header+0xda/0x6a0 [ 2733.378249][ T5099] oom_kill_process+0x3a7/0x930 [ 2733.383193][ T5099] out_of_memory+0xf67/0x1320 [ 2733.387958][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2733.393657][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2733.398770][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2733.403969][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2733.409591][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2733.414693][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2733.420841][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2733.426108][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2733.431127][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2733.436226][ T5099] ? mark_lock+0x9a/0x350 [ 2733.440644][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2733.446127][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2733.452358][ T5099] charge_memcg+0xa2/0x160 [ 2733.456853][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2733.462994][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2733.468521][ T5099] ? mark_lock+0x9a/0x350 [ 2733.472927][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2733.478989][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2733.484457][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2733.490424][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2733.495541][ T5099] ? xas_descend+0x37e/0x470 [ 2733.500210][ T5099] swapin_readahead+0x1ea/0x1070 [ 2733.505294][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2733.510499][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2733.515962][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2733.521426][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2733.526794][ T5099] do_swap_page+0x791/0x3f40 [ 2733.531467][ T5099] ? __lock_acquire+0x1345/0x1fd0 [ 2733.536578][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2733.541449][ T5099] ? do_swap_page+0x154/0x3f40 [ 2733.546295][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2733.551403][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2733.556957][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2733.562843][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2733.568119][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2733.573348][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2733.578898][ T5099] ? mt_find+0x226/0x850 [ 2733.583406][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2733.588533][ T5099] ? mt_find+0x62d/0x850 [ 2733.592845][ T5099] ? mt_find+0x226/0x850 [ 2733.597174][ T5099] ? find_vma+0x142/0x1c0 [ 2733.601577][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2733.606325][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2733.612384][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2733.617244][ T5099] exc_page_fault+0x2ad/0x870 [ 2733.621996][ T5099] asm_exc_page_fault+0x26/0x30 [ 2733.626919][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2733.632098][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2733.651772][ T5099] RSP: 0000:ffffc9000478fd78 EFLAGS: 00050202 [ 2733.657915][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2733.665947][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2733.673985][ T5099] RBP: ffffc9000478fec0 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2733.682712][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fd80 [ 2733.690750][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2733.698813][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2733.704803][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2733.711239][ T5099] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2733.717209][ T5099] irqentry_exit_to_user_mode+0xbb/0x270 [ 2733.722924][ T5099] exc_page_fault+0x587/0x870 [ 2733.727682][ T5099] asm_exc_page_fault+0x26/0x30 [ 2733.732592][ T5099] RIP: 0033:0x7f0f5b47a780 [ 2733.737078][ T5099] Code: ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 <80> 3d 71 57 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 48 3d 00 [ 2733.756750][ T5099] RSP: 002b:00007ffcec9e1338 EFLAGS: 00010246 [ 2733.762977][ T5099] RAX: 0000000000000139 RBX: 00000000000042ad RCX: 0000000000000000 [ 2733.771010][ T5099] RDX: 0000000040000001 RSI: 00007ffcec9e139c RDI: 00000000ffffffff [ 2733.779050][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000010 R09: 00007ffcec9e60b0 [ 2733.787093][ T5099] R10: 00007ffcec9e6080 R11: 000000000007f490 R12: 0000000000000032 [ 2733.795123][ T5099] R13: 000000000029b379 R14: 000000000029b379 R15: 0000000000000000 [ 2733.803167][ T5099] [ 2733.808409][ T5101] Bluetooth: hci10: command 0x040f tx timeout [ 2733.824566][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 166973 [ 2733.831680][ T5099] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 2733.840216][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2733.847638][ T5099] Memory cgroup stats for /syz0: [ 2733.847808][ T5099] cache 0 [ 2733.855918][ T5099] rss 0 [ 2733.858737][ T5099] rss_huge 0 [ 2733.861987][ T5099] shmem 0 [ 2733.865348][ T5099] mapped_file 0 [ 2733.868855][ T5099] dirty 0 [ 2733.871937][ T5099] writeback 0 [ 2733.875434][ T5099] workingset_refault_anon 52942 [ 2733.880318][ T5099] workingset_refault_file 2 [ 2733.885036][ T5099] swap 262144 [ 2733.888362][ T5099] swapcached 0 [ 2733.891776][ T5099] pgpgin 239135 [ 2733.895959][ T5099] pgpgout 239135 [ 2733.899557][ T5099] pgfault 526199 [ 2733.903147][ T5099] pgmajfault 51581 [ 2733.907235][ T5099] inactive_anon 0 [ 2733.911091][ T5099] active_anon 0 [ 2733.914773][ T5099] inactive_file 0 [ 2733.918468][ T5099] active_file 0 [ 2733.921959][ T5099] unevictable 0 [ 2733.926179][ T5099] hierarchical_memory_limit 314572800 [ 2733.931604][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2733.938073][ T5099] total_cache 0 [ 2733.941576][ T5099] total_rss 0 [ 2733.945370][ T5099] total_rss_huge 0 [ 2733.949143][ T5099] total_shmem 0 [ 2733.952627][ T5099] total_mapped_file 0 [ 2733.957412][ T5099] total_dirty 0 [ 2733.960944][ T5099] total_writeback 0 [ 2733.965426][ T5099] total_workingset_refault_anon 52942 [ 2733.970853][ T5099] total_workingset_refault_file 2 [ 2733.976348][ T5099] total_swap 262144 [ 2733.980220][ T5099] total_swapcached 0 [ 2733.984197][ T5099] total_pgpgin 239135 [ 2733.994416][ T5099] total_pgpgout 239135 [ 2733.998664][ T5099] total_pgfault 526199 [ 2734.002774][ T5099] total_pgmajfault 51581 [ 2734.009955][ T5099] total_inactive_anon 0 [ 2734.014244][ T5099] total_active_anon 0 [ 2734.018932][ T5099] total_inactive_file 0 [ 2734.023151][ T5099] total_active_file 0 [ 2734.027793][ T5099] total_unevictable 0 [ 2734.031840][ T5099] anon_cost 0 [ 2734.041608][ T5099] file_cost 0 [ 2734.045399][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1449,uid=0 [ 2734.062110][ T5099] Memory cgroup out of memory: Killed process 1449 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e00]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2734.763469][ T5099] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2734.775344][ T5099] CPU: 1 PID: 5099 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2734.785745][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2734.795854][ T5099] Call Trace: [ 2734.799230][ T5099] [ 2734.802211][ T5099] dump_stack_lvl+0x1e7/0x2e0 [ 2734.806957][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2734.812228][ T5099] ? __pfx__printk+0x10/0x10 [ 2734.816882][ T5099] ? ___ratelimit+0x4c4/0x670 [ 2734.821641][ T5099] ? __pfx____ratelimit+0x10/0x10 [ 2734.826754][ T5099] dump_header+0xda/0x6a0 [ 2734.831168][ T5099] oom_kill_process+0x3a7/0x930 [ 2734.836121][ T5099] out_of_memory+0xf67/0x1320 [ 2734.840943][ T5099] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2734.846637][ T5099] ? __pfx___mutex_lock+0x10/0x10 [ 2734.851821][ T5099] ? __pfx_out_of_memory+0x10/0x10 [ 2734.857038][ T5099] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2734.862662][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2734.867764][ T5099] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2734.873928][ T5099] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2734.879204][ T5099] ? mem_cgroup_iter+0x422/0x560 [ 2734.884224][ T5099] try_charge_memcg+0xda2/0x18a0 [ 2734.889259][ T5099] ? mark_lock+0x9a/0x350 [ 2734.893664][ T5099] ? __pfx_try_charge_memcg+0x10/0x10 [ 2734.899113][ T5099] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2734.905297][ T5099] charge_memcg+0xa2/0x160 [ 2734.909731][ T5099] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2734.915818][ T5099] __read_swap_cache_async+0x480/0x8b0 [ 2734.921379][ T5099] ? mark_lock+0x9a/0x350 [ 2734.925730][ T5099] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2734.931732][ T5099] swap_cluster_readahead+0x67c/0x810 [ 2734.937139][ T5099] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2734.943058][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2734.948109][ T5099] ? xas_descend+0x37e/0x470 [ 2734.952720][ T5099] swapin_readahead+0x1ea/0x1070 [ 2734.957670][ T5099] ? filemap_get_entry+0x127/0x4e0 [ 2734.962819][ T5099] ? __pfx_swapin_readahead+0x10/0x10 [ 2734.968212][ T5099] ? __filemap_get_folio+0x935/0xbc0 [ 2734.973614][ T5099] ? swap_cache_get_folio+0x9f/0x570 [ 2734.978912][ T5099] do_swap_page+0x791/0x3f40 [ 2734.983524][ T5099] ? rcu_is_watching+0x15/0xb0 [ 2734.988325][ T5099] ? do_swap_page+0x154/0x3f40 [ 2734.993108][ T5099] ? __pfx_do_swap_page+0x10/0x10 [ 2734.998148][ T5099] ? pte_offset_map_nolock+0x137/0x1f0 [ 2735.003629][ T5099] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2735.009454][ T5099] ? __pfx_validate_chain+0x10/0x10 [ 2735.014680][ T5099] __handle_mm_fault+0x15e8/0x72d0 [ 2735.019846][ T5099] ? __pfx___handle_mm_fault+0x10/0x10 [ 2735.025334][ T5099] ? mt_find+0x226/0x850 [ 2735.029635][ T5099] ? __pfx_lock_release+0x10/0x10 [ 2735.034781][ T5099] ? mt_find+0x62d/0x850 [ 2735.039086][ T5099] ? mt_find+0x226/0x850 [ 2735.043367][ T5099] ? find_vma+0x142/0x1c0 [ 2735.047801][ T5099] ? __pfx_find_vma+0x10/0x10 [ 2735.052498][ T5099] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2735.058526][ T5099] handle_mm_fault+0x3c1/0x8a0 [ 2735.063359][ T5099] exc_page_fault+0x2ad/0x870 [ 2735.068104][ T5099] asm_exc_page_fault+0x26/0x30 [ 2735.073008][ T5099] RIP: 0010:__get_user_8+0x11/0x20 [ 2735.078370][ T5099] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2735.098456][ T5099] RSP: 0018:ffffc9000478fd98 EFLAGS: 00050202 [ 2735.104547][ T5099] RAX: 0000555556cc6da8 RBX: ffff88801f299538 RCX: ffffc9000478fc03 [ 2735.112535][ T5099] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2735.120518][ T5099] RBP: ffffc9000478fec8 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2735.128520][ T5099] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc9000478fda0 [ 2735.136537][ T5099] R13: ffffc9000478ffd8 R14: dffffc0000000000 R15: ffff88801f298000 [ 2735.144641][ T5099] __rseq_handle_notify_resume+0x158/0x1490 [ 2735.150657][ T5099] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2735.157003][ T5099] ? syscall_exit_to_user_mode+0xa2/0x360 [ 2735.162738][ T5099] syscall_exit_to_user_mode+0x113/0x360 [ 2735.168428][ T5099] do_syscall_64+0x108/0x240 [ 2735.173059][ T5099] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2735.178973][ T5099] RIP: 0033:0x7f0f5b4a91b5 [ 2735.183397][ T5099] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2735.203027][ T5099] RSP: 002b:00007ffcec9e12d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2735.211464][ T5099] RAX: 0000000000000000 RBX: 00000000000042ae RCX: 00007f0f5b4a91b5 [ 2735.219445][ T5099] RDX: 00007ffcec9e1310 RSI: 0000000000000000 RDI: 0000000000000000 [ 2735.227436][ T5099] RBP: 00007ffcec9e139c R08: 0000000000000000 R09: 00007ffcec9e60b0 [ 2735.235426][ T5099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2735.243408][ T5099] R13: 000000000029b85d R14: 000000000029b85d R15: 0000000000000000 [ 2735.251495][ T5099] [ 2735.302156][ T5099] memory: usage 307200kB, limit 307200kB, failcnt 167396 [ 2735.329931][ T5099] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0 [ 2735.341271][ T5099] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2735.352871][ T5099] Memory cgroup stats for /syz0: [ 2735.353041][ T5099] cache 0 [ 2735.380740][ T5099] rss 12288 [ 2735.383943][ T5099] rss_huge 0 [ 2735.392873][ T5099] shmem 0 [ 2735.397843][ T5099] mapped_file 0 [ 2735.401362][ T5099] dirty 0 [ 2735.410356][ T5099] writeback 0 [ 2735.413724][ T5099] workingset_refault_anon 53092 [ 2735.420547][ T5099] workingset_refault_file 2 [ 2735.435741][ T5099] swap 245760 [ 2735.439125][ T5099] swapcached 8192 [ 2735.442803][ T5099] pgpgin 239298 [ 2735.451879][ T5099] pgpgout 239295 [ 2735.456946][ T5099] pgfault 526454 [ 2735.460551][ T5099] pgmajfault 51729 [ 2735.471009][ T5099] inactive_anon 0 [ 2735.476562][ T5099] active_anon 12288 [ 2735.480443][ T5099] inactive_file 0 [ 2735.484122][ T5099] active_file 0 [ 2735.494216][ T5099] unevictable 0 [ 2735.511912][ T5099] hierarchical_memory_limit 314572800 [ 2735.517892][ T5099] hierarchical_memsw_limit 9223372036854771712 [ 2735.524125][ T5099] total_cache 0 [ 2735.534410][ T5099] total_rss 12288 [ 2735.538154][ T5099] total_rss_huge 0 [ 2735.541930][ T5099] total_shmem 0 [ 2735.551406][ T5099] total_mapped_file 0 [ 2735.556401][ T5099] total_dirty 0 [ 2735.560295][ T5099] total_writeback 0 [ 2735.571013][ T5099] total_workingset_refault_anon 53092 [ 2735.576936][ T5099] total_workingset_refault_file 2 [ 2735.582024][ T5099] total_swap 245760 [ 2735.592796][ T5099] total_swapcached 8192 [ 2735.597526][ T5099] total_pgpgin 239298 [ 2735.601568][ T5099] total_pgpgout 239295 [ 2735.606844][ T5099] total_pgfault 526454 [ 2735.610978][ T5099] total_pgmajfault 51729 [ 2735.621777][ T5099] total_inactive_anon 0 [ 2735.626849][ T5099] total_active_anon 12288 [ 2735.631246][ T5099] total_inactive_file 0 [ 2735.640952][ T5099] total_active_file 0 [ 2735.646052][ T5099] total_unevictable 0 [ 2735.651575][ T5099] anon_cost 0 [ 2735.655769][ T5099] file_cost 0 [ 2735.659140][ T5099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1452,uid=0 [ 2735.686250][ T5099] Memory cgroup out of memory: Killed process 1452 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 12:20:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e03]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2735.884739][ T5101] Bluetooth: hci10: command 0x0419 tx timeout 12:20:44 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2736.268149][ T1453] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2736.286661][ T1453] CPU: 1 PID: 1453 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2736.297076][ T1453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2736.307182][ T1453] Call Trace: [ 2736.310516][ T1453] [ 2736.313507][ T1453] dump_stack_lvl+0x1e7/0x2e0 [ 2736.318341][ T1453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2736.323600][ T1453] ? __pfx__printk+0x10/0x10 [ 2736.328240][ T1453] ? ___ratelimit+0x4c4/0x670 [ 2736.332987][ T1453] ? __pfx____ratelimit+0x10/0x10 [ 2736.338085][ T1453] dump_header+0xda/0x6a0 [ 2736.342493][ T1453] oom_kill_process+0x3a7/0x930 [ 2736.347430][ T1453] out_of_memory+0xf67/0x1320 [ 2736.352281][ T1453] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2736.358081][ T1453] ? __pfx___mutex_lock+0x10/0x10 [ 2736.363271][ T1453] ? __pfx_out_of_memory+0x10/0x10 [ 2736.368474][ T1453] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2736.374109][ T1453] ? __pfx_lock_release+0x10/0x10 [ 2736.379208][ T1453] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2736.385353][ T1453] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2736.390617][ T1453] ? mem_cgroup_iter+0x422/0x560 [ 2736.395631][ T1453] try_charge_memcg+0xda2/0x18a0 [ 2736.400665][ T1453] ? __pfx_try_charge_memcg+0x10/0x10 [ 2736.406369][ T1453] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2736.412159][ T1453] ? __pfx_lock_release+0x10/0x10 [ 2736.417263][ T1453] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2736.423326][ T1453] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2736.429119][ T1453] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2736.435070][ T1453] obj_cgroup_charge+0x389/0x630 [ 2736.440077][ T1453] ? obj_cgroup_charge+0x121/0x630 [ 2736.445255][ T1453] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2736.450780][ T1453] ? kmalloc_trace+0x4e/0x360 [ 2736.455530][ T1453] ? __pfx___might_resched+0x10/0x10 [ 2736.460886][ T1453] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2736.466762][ T1453] ? copy_semundo+0xb5/0x240 [ 2736.471494][ T1453] kmalloc_trace+0x216/0x360 [ 2736.476147][ T1453] ? __asan_memcpy+0x40/0x70 [ 2736.480805][ T1453] copy_semundo+0xb5/0x240 [ 2736.485283][ T1453] copy_process+0x1bc3/0x3fc0 [ 2736.490032][ T1453] ? copy_process+0x9c3/0x3fc0 [ 2736.494866][ T1453] ? __pfx_copy_process+0x10/0x10 [ 2736.499950][ T1453] ? __might_fault+0xc5/0x120 [ 2736.504704][ T1453] ? __asan_memset+0x23/0x50 [ 2736.509371][ T1453] kernel_clone+0x21d/0x8d0 [ 2736.513947][ T1453] ? __pfx_kernel_clone+0x10/0x10 [ 2736.519060][ T1453] __se_sys_clone3+0x2cb/0x350 [ 2736.523895][ T1453] ? __pfx___se_sys_clone3+0x10/0x10 [ 2736.529337][ T1453] ? do_syscall_64+0x108/0x240 [ 2736.534177][ T1453] ? do_syscall_64+0xb4/0x240 [ 2736.538921][ T1453] do_syscall_64+0xf9/0x240 [ 2736.543498][ T1453] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2736.549497][ T1453] RIP: 0033:0x7f0f5b4a9b99 [ 2736.553975][ T1453] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2736.573642][ T1453] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2736.582469][ T1453] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2736.590593][ T1453] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2736.598711][ T1453] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2736.606736][ T1453] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2736.614768][ T1453] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2736.622823][ T1453] [ 2736.635194][ T1453] memory: usage 307200kB, limit 307200kB, failcnt 167814 [ 2736.647718][ T1453] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 2736.663917][ T1453] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2736.673142][ T1453] Memory cgroup stats for /syz0: [ 2736.673308][ T1453] cache 0 [ 2736.683069][ T1453] rss 8192 [ 2736.686577][ T1453] rss_huge 0 [ 2736.689934][ T1453] shmem 0 [ 2736.693199][ T1453] mapped_file 0 [ 2736.697427][ T1453] dirty 0 [ 2736.700507][ T1453] writeback 0 [ 2736.704025][ T1453] workingset_refault_anon 53252 [ 2736.709351][ T1453] workingset_refault_file 2 [ 2736.714081][ T1453] swap 212992 [ 2736.717978][ T1453] swapcached 4096 [ 2736.721737][ T1453] pgpgin 239474 [ 2736.726006][ T1453] pgpgout 239472 [ 2736.729677][ T1453] pgfault 526726 [ 2736.733284][ T1453] pgmajfault 51883 [ 2736.739112][ T1453] inactive_anon 0 [ 2736.742906][ T1453] active_anon 8192 [ 2736.747374][ T1453] inactive_file 0 [ 2736.751084][ T1453] active_file 0 [ 2736.755566][ T1453] unevictable 0 [ 2736.759073][ T1453] hierarchical_memory_limit 314572800 [ 2736.765311][ T1453] hierarchical_memsw_limit 9223372036854771712 [ 2736.771533][ T1453] total_cache 0 [ 2736.775617][ T1453] total_rss 8192 [ 2736.779196][ T1453] total_rss_huge 0 [ 2736.782924][ T1453] total_shmem 0 [ 2736.786538][ T1453] total_mapped_file 0 [ 2736.790579][ T1453] total_dirty 0 [ 2736.794068][ T1453] total_writeback 0 [ 2736.798537][ T1453] total_workingset_refault_anon 53252 [ 2736.804031][ T1453] total_workingset_refault_file 2 [ 2736.809874][ T1453] total_swap 212992 [ 2736.813765][ T1453] total_swapcached 4096 [ 2736.818241][ T1453] total_pgpgin 239474 [ 2736.822237][ T1453] total_pgpgout 239472 [ 2736.826479][ T1453] total_pgfault 526726 [ 2736.830579][ T1453] total_pgmajfault 51883 [ 2736.840815][ T1453] total_inactive_anon 0 [ 2736.846010][ T1453] total_active_anon 8192 [ 2736.850298][ T1453] total_inactive_file 0 [ 2736.854890][ T1453] total_active_file 0 [ 2736.858912][ T1453] total_unevictable 0 [ 2736.862899][ T1453] anon_cost 0 [ 2736.866824][ T1453] file_cost 0 12:20:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f03]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2736.870141][ T1453] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1453,uid=0 [ 2736.886058][ T1453] Memory cgroup out of memory: Killed process 1453 (syz-executor.0) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2737.095322][ T29] INFO: task dhcpcd:4737 blocked for more than 143 seconds. [ 2737.102710][ T29] Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2737.130239][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2737.139913][ T29] task:dhcpcd state:D stack:20952 pid:4737 tgid:4737 ppid:4736 flags:0x00004002 [ 2737.165140][ T29] Call Trace: [ 2737.168522][ T29] [ 2737.171603][ T29] __schedule+0x17d1/0x49f0 [ 2737.186012][ T29] ? __pfx___schedule+0x10/0x10 [ 2737.190974][ T29] ? __pfx_lock_release+0x10/0x10 [ 2737.200555][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2737.208984][ T29] ? schedule+0x8e/0x260 [ 2737.213411][ T29] schedule+0x149/0x260 [ 2737.222207][ T29] schedule_preempt_disabled+0x13/0x30 [ 2737.228782][ T29] __mutex_lock+0x6a3/0xd70 [ 2737.233392][ T29] ? __mutex_lock+0x526/0xd70 [ 2737.245314][ T29] ? netlink_dump+0x676/0xda0 [ 2737.250381][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2737.263419][ T29] ? __pfx___alloc_skb+0x10/0x10 [ 2737.274967][ T29] ? __mutex_trylock_common+0x182/0x2e0 [ 2737.280624][ T29] netlink_dump+0x676/0xda0 [ 2737.292808][ T29] ? __pfx_netlink_dump+0x10/0x10 [ 2737.298457][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 2737.303586][ T29] __netlink_dump_start+0x59d/0x780 [ 2737.314721][ T29] rtnetlink_rcv_msg+0xcf7/0x10d0 [ 2737.319867][ T29] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 2737.331032][ T29] ? rtnetlink_rcv_msg+0x208/0x10d0 [ 2737.336838][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2737.342454][ T29] ? mark_lock+0x9a/0x350 [ 2737.353765][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 2737.359381][ T29] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 2737.366130][ T29] netlink_rcv_skb+0x1e3/0x430 [ 2737.376371][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2737.383464][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2737.392717][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 2737.402910][ T29] netlink_unicast+0x7ea/0x980 [ 2737.411217][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 2737.420854][ T29] ? __virt_addr_valid+0x44e/0x520 [ 2737.435336][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 2737.440519][ T29] ? __check_object_size+0x4bb/0xa00 [ 2737.447506][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 2737.451969][ T1456] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2737.459205][ T29] netlink_sendmsg+0x8e0/0xcb0 [ 2737.471841][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2737.474991][ T1456] CPU: 1 PID: 1456 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2737.481996][ T29] ? aa_sock_msg_perm+0x91/0x160 [ 2737.487518][ T1456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2737.487537][ T1456] Call Trace: [ 2737.487548][ T1456] [ 2737.487557][ T1456] dump_stack_lvl+0x1e7/0x2e0 [ 2737.487590][ T1456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2737.493906][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2737.502693][ T1456] ? __pfx__printk+0x10/0x10 [ 2737.502722][ T1456] ? ___ratelimit+0x4c4/0x670 [ 2737.502760][ T1456] ? __pfx____ratelimit+0x10/0x10 [ 2737.502799][ T1456] dump_header+0xda/0x6a0 [ 2737.507015][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 2737.509006][ T1456] oom_kill_process+0x3a7/0x930 [ 2737.509050][ T1456] out_of_memory+0xf67/0x1320 [ 2737.513885][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2737.519074][ T1456] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2737.519111][ T1456] ? __pfx___mutex_lock+0x10/0x10 [ 2737.519144][ T1456] ? __pfx_out_of_memory+0x10/0x10 [ 2737.579454][ T1456] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2737.585039][ T1456] ? __pfx_lock_release+0x10/0x10 [ 2737.590082][ T1456] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2737.596170][ T1456] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2737.601384][ T1456] ? mem_cgroup_iter+0x422/0x560 [ 2737.606346][ T1456] try_charge_memcg+0xda2/0x18a0 [ 2737.611323][ T1456] ? __pfx_try_charge_memcg+0x10/0x10 [ 2737.616717][ T1456] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2737.622456][ T1456] ? __pfx_lock_release+0x10/0x10 [ 2737.627518][ T1456] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2737.633363][ T1456] __memcg_kmem_charge_page+0xe1/0x250 [ 2737.638838][ T1456] memcg_charge_kernel_stack+0xa7/0x550 [ 2737.644421][ T1456] dup_task_struct+0x15d/0x7d0 [ 2737.649210][ T1456] copy_process+0x5d5/0x3fc0 [ 2737.653826][ T1456] ? __might_fault+0xa9/0x120 [ 2737.658523][ T1456] ? __pfx_lock_release+0x10/0x10 [ 2737.663570][ T1456] ? __pfx_copy_process+0x10/0x10 [ 2737.668695][ T1456] ? __might_fault+0xc5/0x120 [ 2737.673390][ T1456] ? __asan_memset+0x23/0x50 [ 2737.678013][ T1456] kernel_clone+0x21d/0x8d0 [ 2737.682538][ T1456] ? __pfx_kernel_clone+0x10/0x10 [ 2737.687593][ T1456] __se_sys_clone3+0x2cb/0x350 [ 2737.692372][ T1456] ? __pfx___se_sys_clone3+0x10/0x10 [ 2737.697672][ T1456] ? rcu_is_watching+0x15/0xb0 [ 2737.702466][ T1456] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2737.708482][ T1456] ? exc_page_fault+0x587/0x870 [ 2737.713349][ T1456] ? do_syscall_64+0xb4/0x240 [ 2737.718045][ T1456] do_syscall_64+0xf9/0x240 [ 2737.722568][ T1456] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2737.728485][ T1456] RIP: 0033:0x7f0f5b4a9b99 [ 2737.732921][ T1456] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2737.752545][ T1456] RSP: 002b:00007ffcec9e0ef8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2737.760977][ T1456] RAX: ffffffffffffffda RBX: 00007f0f5b452270 RCX: 00007f0f5b4a9b99 [ 2737.768960][ T1456] RDX: 00007f0f5b452270 RSI: 0000000000000058 RDI: 00007ffcec9e0f40 [ 2737.776945][ T1456] RBP: 00007f0f5c2c86c0 R08: 00007f0f5c2c86c0 R09: 00007ffcec9e1027 [ 2737.784940][ T1456] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2737.793180][ T1456] R13: 000000000000000b R14: 00007ffcec9e0f40 R15: 00007ffcec9e1028 [ 2737.801181][ T1456] [ 2737.850260][ T1456] memory: usage 307200kB, limit 307200kB, failcnt 168176 [ 2737.865994][ T1456] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2737.874071][ T1456] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 2737.897205][ T29] __sock_sendmsg+0x221/0x270 [ 2737.912185][ T29] __sys_sendto+0x3a4/0x4f0 [ 2737.919274][ T29] ? __pfx___sys_sendto+0x10/0x10 [ 2737.933352][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2737.934666][ T1456] Memory cgroup stats for [ 2737.940475][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2737.944646][ T1456] /syz0 [ 2737.946302][ T29] __x64_sys_sendto+0xde/0x100 [ 2737.956401][ T1456] : [ 2737.961393][ T1456] cache 0 [ 2737.964347][ T29] do_syscall_64+0xf9/0x240 [ 2737.973693][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2737.974741][ T1456] rss 12288 [ 2737.985660][ T1456] rss_huge 0 [ 2737.987795][ T29] RIP: 0033:0x7f827d98bad7 [ 2737.991380][ T1456] shmem 0 [ 2737.993322][ T29] RSP: 002b:00007fff1b64ec48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2737.993358][ T29] RAX: ffffffffffffffda RBX: 00007fff1b64fd70 RCX: 00007f827d98bad7 [ 2738.001701][ T1456] mapped_file 0 [ 2738.009541][ T29] RDX: 0000000000000014 RSI: 00007fff1b64fc90 RDI: 0000000000000017 [ 2738.013610][ T1456] dirty 0 [ 2738.020652][ T29] RBP: 00007fff1b64fd00 R08: 00007fff1b64fc74 R09: 000000000000000c [ 2738.031829][ T1456] writeback 0 [ 2738.042257][ T1456] workingset_refault_anon 53425 [ 2738.044423][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 2738.053268][ T1456] workingset_refault_file 2 [ 2738.060175][ T1456] swap 208896 [ 2738.063819][ T1456] swapcached 8192 [ 2738.071049][ T29] R13: 00007fff1b64fc74 R14: 00007fff1b64fc90 R15: 0000000000000105 [ 2738.071997][ T1456] pgpgin 239659 [ 2738.087985][ T1456] pgpgout 239656 [ 2738.089293][ T29] [ 2738.095130][ T1456] pgfault 526995 [ 2738.096628][ T29] INFO: task kworker/u4:1:27918 blocked for more than 144 seconds. [ 2738.103368][ T1456] pgmajfault 52043 [ 2738.112294][ T29] Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2738.114411][ T1456] inactive_anon 12288 [ 2738.122136][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2738.125917][ T1456] active_anon 0 [ 2738.138744][ T29] task:kworker/u4:1 state:D stack:24824 pid:27918 tgid:27918 ppid:2 flags:0x00004000 [ 2738.148125][ T1456] inactive_file 0 [ 2738.153056][ T29] Workqueue: ipv6_addrconf addrconf_verify_work [ 2738.157188][ T1456] active_file 0 [ 2738.163027][ T1456] unevictable 0 [ 2738.163660][ T29] Call Trace: [ 2738.170460][ T1456] hierarchical_memory_limit 314572800 [ 2738.172423][ T29] [ 2738.181854][ T1456] hierarchical_memsw_limit 9223372036854771712 [ 2738.184343][ T29] __schedule+0x17d1/0x49f0 [ 2738.192706][ T29] ? __pfx___schedule+0x10/0x10 [ 2738.196031][ T1456] total_cache 0 [ 2738.201377][ T1456] total_rss 12288 [ 2738.207882][ T1456] total_rss_huge 0 [ 2738.211741][ T29] ? __pfx_lock_release+0x10/0x10 [ 2738.215918][ T1456] total_shmem 0 [ 2738.223734][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2738.226448][ T1456] total_mapped_file 0 [ 2738.233490][ T1456] total_dirty 0 [ 2738.235180][ T29] ? kthread_data+0x52/0xd0 [ 2738.239262][ T1456] total_writeback 0 [ 2738.242942][ T29] ? wq_worker_sleeping+0x66/0x240 [ 2738.254573][ T1456] total_workingset_refault_anon 53425 [ 2738.258839][ T29] ? schedule+0x8e/0x260 [ 2738.263485][ T1456] total_workingset_refault_file 2 [ 2738.264250][ T29] schedule+0x149/0x260 [ 2738.271110][ T1456] total_swap 208896 [ 2738.273833][ T29] schedule_preempt_disabled+0x13/0x30 [ 2738.285445][ T1456] total_swapcached 8192 [ 2738.290286][ T29] __mutex_lock+0x6a3/0xd70 [ 2738.294505][ T1456] total_pgpgin 239659 [ 2738.295708][ T29] ? __mutex_lock+0x526/0xd70 [ 2738.303506][ T1456] total_pgpgout 239656 [ 2738.303523][ T1456] total_pgfault 526995 [ 2738.314866][ T29] ? addrconf_verify_work+0x19/0x30 [ 2738.316928][ T1456] total_pgmajfault 52043 [ 2738.320384][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2738.320436][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2738.333412][ T1456] total_inactive_anon 12288 [ 2738.340308][ T1456] total_active_anon 0 [ 2738.346792][ T1456] total_inactive_file 0 [ 2738.354889][ T29] ? process_scheduled_works+0x825/0x1420 [ 2738.355975][ T1456] total_active_file 0 [ 2738.360679][ T29] addrconf_verify_work+0x19/0x30 [ 2738.360717][ T29] process_scheduled_works+0x913/0x1420 [ 2738.375856][ T1456] total_unevictable 0 [ 2738.384586][ T1456] anon_cost 0 [ 2738.391235][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 2738.391504][ T1456] file_cost 0 [ 2738.398331][ T29] ? assign_work+0x364/0x3d0 [ 2738.404079][ T1456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1456,uid=0 [ 2738.412545][ T29] worker_thread+0xa5f/0x1000 [ 2738.435586][ T29] ? __pfx_worker_thread+0x10/0x10 [ 2738.440823][ T29] kthread+0x2ef/0x390 [ 2738.441083][ T1456] Memory cgroup out of memory: Killed process 1456 (syz-executor.0) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2738.445885][ T29] ? __pfx_worker_thread+0x10/0x10 [ 2738.475179][ T29] ? __pfx_kthread+0x10/0x10 [ 2738.479864][ T29] ret_from_fork+0x4b/0x80 [ 2738.490052][ T29] ? __pfx_kthread+0x10/0x10 [ 2738.498967][ T29] ret_from_fork_asm+0x1b/0x30 [ 2738.503851][ T29] [ 2738.524061][ T29] INFO: task kworker/0:11:324 blocked for more than 144 seconds. [ 2738.538620][ T29] Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2738.548119][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2738.562728][ T29] task:kworker/0:11 state:D stack:27472 pid:324 tgid:324 ppid:2 flags:0x00004000 [ 2738.573576][ T29] Workqueue: events switchdev_deferred_process_work [ 2738.587544][ T29] Call Trace: [ 2738.590911][ T29] [ 2738.593895][ T29] __schedule+0x17d1/0x49f0 [ 2738.602016][ T29] ? __pfx___schedule+0x10/0x10 [ 2738.611186][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 12:20:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5408]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2738.622121][ T29] ? __pfx_lock_release+0x10/0x10 [ 2738.634818][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 2738.640211][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 2738.653250][ T29] ? schedule+0x8e/0x260 [ 2738.658151][ T29] schedule+0x149/0x260 [ 2738.662520][ T29] schedule_preempt_disabled+0x13/0x30 [ 2738.669450][ T29] __mutex_lock+0x6a3/0xd70 [ 2738.680614][ T29] ? __mutex_lock+0x526/0xd70 [ 2738.687086][ T29] ? switchdev_deferred_process_work+0xe/0x20 [ 2738.693674][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2738.706408][ T29] ? process_scheduled_works+0x825/0x1420 [ 2738.712390][ T29] switchdev_deferred_process_work+0xe/0x20 [ 2738.724220][ T29] process_scheduled_works+0x913/0x1420 [ 2738.732104][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 2738.741994][ T29] ? assign_work+0x364/0x3d0 [ 2738.750753][ T29] worker_thread+0xa5f/0x1000 [ 2738.759083][ T29] ? __pfx_worker_thread+0x10/0x10 [ 2738.768755][ T29] kthread+0x2ef/0x390 [ 2738.773047][ T29] ? __pfx_worker_thread+0x10/0x10 [ 2738.782224][ T29] ? __pfx_kthread+0x10/0x10 [ 2738.791193][ T29] ret_from_fork+0x4b/0x80 [ 2738.798078][ T29] ? __pfx_kthread+0x10/0x10 [ 2738.802876][ T29] ret_from_fork_asm+0x1b/0x30 [ 2738.815829][ T29] [ 2738.819168][ T29] INFO: task syz-executor.4:1191 blocked for more than 145 seconds. [ 2738.834944][ T29] Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2738.854904][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2738.874869][ T29] task:syz-executor.4 state:D stack:19760 pid:1191 tgid:1190 ppid:5104 flags:0x00004006 [ 2738.894411][ T29] Call Trace: [ 2738.900178][ T29] [ 2738.906391][ T29] __schedule+0x17d1/0x49f0 [ 2738.916993][ T29] ? __pfx___schedule+0x10/0x10 [ 2738.928204][ T29] ? __pfx_lock_release+0x10/0x10 [ 2738.939721][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2738.950235][ T29] ? schedule+0x8e/0x260 [ 2738.954831][ T29] schedule+0x149/0x260 [ 2738.959175][ T29] schedule_preempt_disabled+0x13/0x30 [ 2738.966550][ T29] __mutex_lock+0x6a3/0xd70 [ 2738.978106][ T29] ? __mutex_lock+0x526/0xd70 [ 2738.983343][ T29] ? rtnetlink_rcv_msg+0x842/0x10d0 [ 2738.989571][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2739.001947][ T29] rtnetlink_rcv_msg+0x842/0x10d0 [ 2739.007740][ T29] ? rtnetlink_rcv_msg+0x208/0x10d0 [ 2739.013586][ T29] ? 0xffffffffa0003b40 [ 2739.018760][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2739.033823][ T29] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2739.040869][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2739.053389][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2739.060974][ T1457] syz-executor.0 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2739.061559][ T29] ? mark_lock+0x9a/0x350 [ 2739.079485][ T29] ? __pfx_validate_chain+0x10/0x10 [ 2739.084656][ T1457] CPU: 1 PID: 1457 Comm: syz-executor.0 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2739.095100][ T1457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2739.102504][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 2739.105177][ T1457] Call Trace: [ 2739.105192][ T1457] [ 2739.105202][ T1457] dump_stack_lvl+0x1e7/0x2e0 [ 2739.105234][ T1457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2739.105261][ T1457] ? __pfx__printk+0x10/0x10 [ 2739.110834][ T29] ? mark_lock+0x9a/0x350 [ 2739.113648][ T1457] ? ___ratelimit+0x4c4/0x670 [ 2739.118195][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 2739.121252][ T1457] ? __pfx____ratelimit+0x10/0x10 [ 2739.121299][ T1457] dump_header+0xda/0x6a0 [ 2739.127438][ T29] netlink_rcv_skb+0x1e3/0x430 [ 2739.131071][ T1457] oom_kill_process+0x3a7/0x930 [ 2739.131114][ T1457] out_of_memory+0xf67/0x1320 [ 2739.168974][ T1457] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2739.174645][ T1457] ? __pfx___mutex_lock+0x10/0x10 [ 2739.179701][ T1457] ? __pfx_out_of_memory+0x10/0x10 [ 2739.184858][ T1457] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2739.190439][ T1457] ? __pfx_lock_release+0x10/0x10 [ 2739.195488][ T1457] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2739.201574][ T1457] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2739.206788][ T1457] ? mem_cgroup_iter+0x422/0x560 [ 2739.211754][ T1457] try_charge_memcg+0xda2/0x18a0 [ 2739.216749][ T1457] ? __pfx_try_charge_memcg+0x10/0x10 [ 2739.222153][ T1457] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2739.228410][ T1457] ? __pfx_lock_release+0x10/0x10 [ 2739.233469][ T1457] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2739.239214][ T1457] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2739.245050][ T1457] __memcg_kmem_charge_page+0xe1/0x250 [ 2739.250528][ T1457] __alloc_pages+0x28b/0x680 [ 2739.255136][ T1457] ? __pfx___alloc_pages+0x10/0x10 [ 2739.260311][ T1457] ? policy_nodemask+0x1ec/0x720 [ 2739.265298][ T1457] alloc_pages_mpol+0x3de/0x650 [ 2739.270275][ T1457] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2739.275672][ T1457] ? alloc_pages+0xee/0x170 [ 2739.280409][ T1457] pte_alloc_one+0x88/0x5d0 [ 2739.284969][ T1457] ? __pfx_pte_alloc_one+0x10/0x10 [ 2739.290139][ T1457] __handle_mm_fault+0x317a/0x72d0 [ 2739.295308][ T1457] ? reacquire_held_locks+0x3eb/0x690 [ 2739.300783][ T1457] ? __pfx___handle_mm_fault+0x10/0x10 [ 2739.306290][ T1457] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2739.312043][ T1457] ? mtree_range_walk+0x6fd/0x8e0 [ 2739.317093][ T1457] ? lock_vma_under_rcu+0x18a/0x730 [ 2739.322322][ T1457] ? __pfx_lock_release+0x10/0x10 [ 2739.327362][ T1457] ? lock_vma_under_rcu+0x2f9/0x730 [ 2739.332598][ T1457] ? lock_vma_under_rcu+0x18a/0x730 [ 2739.337823][ T1457] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2739.343398][ T1457] handle_mm_fault+0x3c1/0x8a0 [ 2739.348195][ T1457] exc_page_fault+0x456/0x870 [ 2739.352899][ T1457] asm_exc_page_fault+0x26/0x30 [ 2739.357769][ T1457] RIP: 0033:0x7f0f5b436fcf [ 2739.362195][ T1457] Code: 48 89 84 24 90 00 00 00 48 89 9c 24 98 00 00 00 4c 8b 35 c4 69 17 00 4d 8d ae 00 00 40 00 4d 39 ec 0f 83 91 06 00 00 4c 89 eb <4d> 8b 2c 24 4d 8d 7c 24 08 4c 89 bc 24 08 01 00 00 49 83 fd ff 0f [ 2739.381814][ T1457] RSP: 002b:00007ffcec9e1110 EFLAGS: 00010287 [ 2739.387911][ T1457] RAX: 00007ffcec9e1218 RBX: 00007f0f5b400000 RCX: 000000000029c750 [ 2739.395899][ T1457] RDX: 00000000000003c8 RSI: 00007ffcec9e10f0 RDI: 7fffffffffffffff [ 2739.403899][ T1457] RBP: 0000000000000001 R08: 0000000000000010 R09: 0000000000000000 [ 2739.411966][ T1457] R10: 00007ffcec9e6080 R11: 000000000007f840 R12: 00007f0f5b000000 [ 2739.419960][ T1457] R13: 00007f0f5b400000 R14: 00007f0f5b000000 R15: 0000000000000001 [ 2739.427962][ T1457] [ 2739.431140][ T29] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2739.437672][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2739.443065][ T29] ? netlink_deliver_tap+0x2e/0x1b0 12:20:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2739.455117][ T29] netlink_unicast+0x7ea/0x980 [ 2739.460158][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 2739.467849][ T29] ? __virt_addr_valid+0x44e/0x520 [ 2739.473578][ T1457] memory: usage 307200kB, limit 307200kB, failcnt 168471 [ 2739.480795][ T1457] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2739.484461][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 2739.493920][ T29] ? __check_object_size+0x4bb/0xa00 [ 2739.495483][ T1457] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2739.504455][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 2739.511778][ T1457] Memory cgroup stats for /syz0: [ 2739.512037][ T1457] cache 0 [ 2739.520513][ T29] netlink_sendmsg+0x8e0/0xcb0 [ 2739.522055][ T1457] rss 12288 [ 2739.530764][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2739.533594][ T1457] rss_huge 0 [ 2739.539115][ T29] ? aa_sock_msg_perm+0x91/0x160 [ 2739.544945][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2739.550883][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 2739.560900][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2739.564412][ T1457] shmem 0 [ 2739.567164][ T29] __sock_sendmsg+0x221/0x270 [ 2739.569204][ T1457] mapped_file 0 [ 2739.569218][ T1457] dirty 0 [ 2739.569227][ T1457] writeback 0 [ 2739.569237][ T1457] workingset_refault_anon 53529 [ 2739.569248][ T1457] workingset_refault_file 2 [ 2739.569258][ T1457] swap 208896 [ 2739.569268][ T1457] swapcached 8192 [ 2739.574093][ T29] __sys_sendto+0x3a4/0x4f0 [ 2739.609805][ T1457] pgpgin 239771 [ 2739.610252][ T29] ? __pfx___sys_sendto+0x10/0x10 [ 2739.613297][ T1457] pgpgout 239768 [ 2739.613310][ T1457] pgfault 527173 [ 2739.613320][ T1457] pgmajfault 52144 [ 2739.613331][ T1457] inactive_anon 12288 [ 2739.613340][ T1457] active_anon 0 [ 2739.613350][ T1457] inactive_file 0 [ 2739.619835][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2739.636903][ T1457] active_file 0 [ 2739.661434][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2739.663761][ T1457] unevictable 0 [ 2739.672668][ T29] ? exc_page_fault+0x587/0x870 [ 2739.678134][ T29] __x64_sys_sendto+0xde/0x100 [ 2739.683087][ T29] do_syscall_64+0xf9/0x240 [ 2739.687728][ T1457] hierarchical_memory_limit 314572800 [ 2739.687746][ T1457] hierarchical_memsw_limit 9223372036854771712 [ 2739.687758][ T1457] total_cache 0 [ 2739.687768][ T1457] total_rss 12288 [ 2739.687778][ T1457] total_rss_huge 0 [ 2739.687787][ T1457] total_shmem 0 [ 2739.687797][ T1457] total_mapped_file 0 [ 2739.687806][ T1457] total_dirty 0 [ 2739.687816][ T1457] total_writeback 0 [ 2739.687826][ T1457] total_workingset_refault_anon 53529 [ 2739.687836][ T1457] total_workingset_refault_file 2 [ 2739.687846][ T1457] total_swap 208896 [ 2739.687856][ T1457] total_swapcached 8192 [ 2739.687865][ T1457] total_pgpgin 239771 [ 2739.687875][ T1457] total_pgpgout 239768 [ 2739.687884][ T1457] total_pgfault 527173 [ 2739.687894][ T1457] total_pgmajfault 52144 [ 2739.687904][ T1457] total_inactive_anon 12288 [ 2739.687915][ T1457] total_active_anon 0 [ 2739.687924][ T1457] total_inactive_file 0 [ 2739.687935][ T1457] total_active_file 0 [ 2739.687956][ T1457] total_unevictable 0 [ 2739.687966][ T1457] anon_cost 0 [ 2739.687975][ T1457] file_cost 0 [ 2739.687985][ T1457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 2739.698663][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2739.722393][ T1457] syz0 [ 2739.726958][ T29] RIP: 0033:0x7f6f5b87fa9c [ 2739.741759][ T1457] ,mems_allowed=0-1 [ 2739.745885][ T29] RSP: 002b:00007f6f5c68cf60 EFLAGS: 00000293 [ 2739.750557][ T1457] ,oom_memcg= [ 2739.753572][ T29] ORIG_RAX: 000000000000002c [ 2739.762734][ T1457] /syz0 [ 2739.767836][ T29] RAX: ffffffffffffffda RBX: 00007f6f5c68d050 RCX: 00007f6f5b87fa9c [ 2739.770906][ T1457] ,task_memcg= [ 2739.776177][ T29] RDX: 0000000000000020 RSI: 00007f6f5c68d0a0 RDI: 0000000000000006 [ 2739.785447][ T1457] /syz0 [ 2739.787572][ T29] RBP: 0000000000000000 R08: 00007f6f5c68cfb4 R09: 000000000000000c [ 2739.789936][ T1457] ,task=syz-executor.0,pid=1457,uid=0 [ 2739.798143][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2739.803981][ T1457] Memory cgroup out of memory: Killed process 1457 (syz-executor.0) total-vm:54376kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2739.816645][ T29] R13: 00007f6f5c68d008 R14: 00007f6f5c68d0a0 R15: 0000000000000000 [ 2739.827719][ T1458] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2739.830551][ T29] [ 2739.832823][ T1458] CPU: 1 PID: 1458 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2739.925102][ T1458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2739.935196][ T1458] Call Trace: [ 2739.938485][ T1458] [ 2739.941422][ T1458] dump_stack_lvl+0x1e7/0x2e0 [ 2739.946121][ T1458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2739.951418][ T1458] ? __pfx__printk+0x10/0x10 [ 2739.956190][ T1458] ? ___ratelimit+0x4c4/0x670 [ 2739.961067][ T1458] ? __pfx____ratelimit+0x10/0x10 [ 2739.966117][ T1458] dump_header+0xda/0x6a0 [ 2739.970470][ T1458] oom_kill_process+0x3a7/0x930 [ 2739.975349][ T1458] out_of_memory+0xf67/0x1320 [ 2739.980053][ T1458] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2739.985734][ T1458] ? __pfx___mutex_lock+0x10/0x10 [ 2739.990828][ T1458] ? __pfx_out_of_memory+0x10/0x10 [ 2739.995989][ T1458] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2740.001566][ T1458] ? __pfx_lock_release+0x10/0x10 [ 2740.006642][ T1458] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2740.012759][ T1458] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2740.018080][ T1458] ? mem_cgroup_iter+0x3e9/0x560 [ 2740.023052][ T1458] try_charge_memcg+0xda2/0x18a0 [ 2740.028035][ T1458] ? __pfx_try_charge_memcg+0x10/0x10 [ 2740.033429][ T1458] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2740.039341][ T1458] ? __pfx_lock_release+0x10/0x10 [ 2740.044401][ T1458] ? memcg_account_kmem+0x1e7/0x210 [ 2740.049713][ T1458] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2740.055544][ T1458] __memcg_kmem_charge_page+0xe1/0x250 [ 2740.061019][ T1458] memcg_charge_kernel_stack+0x37e/0x550 [ 2740.066670][ T1458] dup_task_struct+0x15d/0x7d0 [ 2740.071452][ T1458] copy_process+0x5d5/0x3fc0 [ 2740.076074][ T1458] ? __might_fault+0xa9/0x120 [ 2740.080778][ T1458] ? __pfx_lock_release+0x10/0x10 [ 2740.085842][ T1458] ? __pfx_copy_process+0x10/0x10 [ 2740.091143][ T1458] ? __might_fault+0xc5/0x120 [ 2740.095847][ T1458] ? __asan_memset+0x23/0x50 [ 2740.100460][ T1458] kernel_clone+0x21d/0x8d0 [ 2740.104982][ T1458] ? __pfx_kernel_clone+0x10/0x10 [ 2740.110036][ T1458] __se_sys_clone3+0x2cb/0x350 [ 2740.114818][ T1458] ? __pfx___se_sys_clone3+0x10/0x10 [ 2740.120145][ T1458] ? do_syscall_64+0x108/0x240 [ 2740.124940][ T1458] ? do_syscall_64+0xb4/0x240 [ 2740.129736][ T1458] do_syscall_64+0xf9/0x240 [ 2740.134303][ T1458] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2740.140238][ T1458] RIP: 0033:0x7fa3bb4a9b99 [ 2740.144677][ T1458] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2740.164336][ T1458] RSP: 002b:00007ffde67ff948 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2740.172807][ T1458] RAX: ffffffffffffffda RBX: 00007fa3bb452270 RCX: 00007fa3bb4a9b99 [ 2740.180834][ T1458] RDX: 00007fa3bb452270 RSI: 0000000000000058 RDI: 00007ffde67ff990 [ 2740.188842][ T1458] RBP: 00007fa3bc1866c0 R08: 00007fa3bc1866c0 R09: 00007ffde67ffa77 [ 2740.196844][ T1458] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2740.204838][ T1458] R13: 000000000000000b R14: 00007ffde67ff990 R15: 00007ffde67ffa78 12:20:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a02]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2740.212868][ T1458] [ 2740.217201][ T29] INFO: task syz-executor.1:1200 blocked for more than 146 seconds. [ 2740.234797][ T29] Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2740.264429][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2740.273182][ T29] task:syz-executor.1 state:D stack:26072 pid:1200 tgid:1199 ppid:5102 flags:0x00004006 [ 2740.283614][ T1458] memory: usage 307168kB, limit 307200kB, failcnt 452204 [ 2740.294628][ T1458] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 2740.294682][ T29] Call Trace: [ 2740.302552][ T1458] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 2740.305983][ T29] [ 2740.316618][ T29] __schedule+0x17d1/0x49f0 [ 2740.321226][ T29] ? __pfx___schedule+0x10/0x10 [ 2740.326774][ T29] ? __pfx_lock_release+0x10/0x10 [ 2740.333927][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2740.339527][ T1458] Memory cgroup stats for /syz3: [ 2740.339678][ T1458] cache 0 [ 2740.339688][ T1458] rss 0 [ 2740.339697][ T1458] rss_huge 0 [ 2740.339706][ T1458] shmem 0 [ 2740.339715][ T1458] mapped_file 0 [ 2740.339723][ T1458] dirty 0 [ 2740.339732][ T1458] writeback 0 [ 2740.339740][ T1458] workingset_refault_anon 318656 [ 2740.339749][ T1458] workingset_refault_file 94 [ 2740.339758][ T1458] swap 299008 [ 2740.339767][ T1458] swapcached 0 [ 2740.339776][ T1458] pgpgin 523346 [ 2740.339785][ T1458] pgpgout 523346 [ 2740.366842][ T29] ? schedule+0x8e/0x260 [ 2740.404889][ T1458] pgfault 857559 [ 2740.408510][ T1458] pgmajfault 308775 [ 2740.412478][ T1458] inactive_anon 0 [ 2740.417086][ T29] schedule+0x149/0x260 [ 2740.417920][ T1458] active_anon 0 [ 2740.421300][ T29] schedule_preempt_disabled+0x13/0x30 [ 2740.430700][ T1458] inactive_file 0 [ 2740.435452][ T29] __mutex_lock+0x6a3/0xd70 [ 2740.436328][ T1458] active_file 0 [ 2740.440004][ T29] ? __mutex_lock+0x526/0xd70 [ 2740.443450][ T1458] unevictable 0 [ 2740.452111][ T1458] hierarchical_memory_limit 314572800 [ 2740.457051][ T29] ? ethnl_set_features+0x2eb/0xcb0 [ 2740.463017][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2740.464073][ T1458] hierarchical_memsw_limit 9223372036854771712 [ 2740.473007][ T29] ethnl_set_features+0x2eb/0xcb0 [ 2740.480319][ T29] ? __pfx_ethnl_set_features+0x10/0x10 [ 2740.487269][ T29] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 2740.487888][ T1458] total_cache 0 [ 2740.493576][ T29] ? rcu_is_watching+0x15/0xb0 [ 2740.502631][ T29] ? __nla_parse+0x40/0x60 [ 2740.507854][ T29] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 12:20:49 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2740.515078][ T29] genl_rcv_msg+0xb14/0xec0 [ 2740.519745][ T29] ? mark_lock+0x9a/0x350 [ 2740.524132][ T29] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2740.529206][ T1458] total_rss 0 [ 2740.529219][ T1458] total_rss_huge 0 [ 2740.529229][ T1458] total_shmem 0 [ 2740.529238][ T1458] total_mapped_file 0 [ 2740.529248][ T1458] total_dirty 0 [ 2740.529257][ T1458] total_writeback 0 [ 2740.529265][ T1458] total_workingset_refault_anon 318656 [ 2740.529275][ T1458] total_workingset_refault_file 94 [ 2740.529285][ T1458] total_swap 299008 [ 2740.529294][ T1458] total_swapcached 0 [ 2740.529302][ T1458] total_pgpgin 523346 [ 2740.529310][ T1458] total_pgpgout 523346 [ 2740.529318][ T1458] total_pgfault 857559 [ 2740.529327][ T1458] total_pgmajfault 308775 [ 2740.529336][ T1458] total_inactive_anon 0 [ 2740.529344][ T1458] total_active_anon 0 [ 2740.529352][ T1458] total_inactive_file 0 [ 2740.529360][ T1458] total_active_file 0 [ 2740.529369][ T1458] total_unevictable 0 [ 2740.529378][ T1458] anon_cost 0 [ 2740.529386][ T1458] file_cost 0 [ 2740.529396][ T1458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1458,uid=0 [ 2740.529518][ T1458] Memory cgroup out of memory: Killed process 1458 (syz-executor.3) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2740.675855][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 2740.681112][ T29] ? __pfx_ethnl_set_features+0x10/0x10 [ 2740.686966][ T29] ? __pfx___might_resched+0x10/0x10 [ 2740.692447][ T29] netlink_rcv_skb+0x1e3/0x430 [ 2740.697730][ T29] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2740.702927][ T29] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2740.708767][ T29] ? __pfx_lock_release+0x10/0x10 [ 2740.713993][ T29] genl_rcv+0x28/0x40 [ 2740.718758][ T29] netlink_unicast+0x7ea/0x980 [ 2740.724203][ T29] ? __pfx_netlink_unicast+0x10/0x10 [ 2740.730007][ T29] ? __virt_addr_valid+0x44e/0x520 [ 2740.737180][ T29] ? __phys_addr_symbol+0x2f/0x70 [ 2740.752586][ T29] ? __check_object_size+0x4bb/0xa00 [ 2740.759901][ T29] ? bpf_lsm_netlink_send+0x9/0x10 [ 2740.770839][ T29] netlink_sendmsg+0x8e0/0xcb0 [ 2740.786476][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2740.792082][ T29] ? __import_iovec+0x552/0x890 [ 2740.804859][ T29] ? aa_sock_msg_perm+0x91/0x160 [ 2740.809910][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2740.851661][ T29] ? security_socket_sendmsg+0x87/0xb0 [ 2740.865249][ T29] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2740.870639][ T29] __sock_sendmsg+0x221/0x270 [ 2740.893074][ T5105] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2740.896643][ T29] ____sys_sendmsg+0x525/0x7d0 [ 2740.904724][ T5105] CPU: 1 PID: 5105 Comm: syz-executor.3 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2740.919495][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2740.929650][ T5105] Call Trace: [ 2740.932947][ T5105] [ 2740.935893][ T5105] dump_stack_lvl+0x1e7/0x2e0 [ 2740.940596][ T5105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2740.945812][ T5105] ? __pfx__printk+0x10/0x10 [ 2740.950499][ T5105] ? ___ratelimit+0x4c4/0x670 [ 2740.955207][ T5105] ? __pfx____ratelimit+0x10/0x10 [ 2740.960349][ T5105] dump_header+0xda/0x6a0 [ 2740.964705][ T5105] oom_kill_process+0x3a7/0x930 [ 2740.969578][ T5105] out_of_memory+0xf67/0x1320 [ 2740.974281][ T5105] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2740.979938][ T5105] ? __pfx___mutex_lock+0x10/0x10 [ 2740.984983][ T5105] ? __pfx_out_of_memory+0x10/0x10 [ 2740.990131][ T5105] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2740.995923][ T5105] ? __pfx_lock_release+0x10/0x10 [ 2741.001012][ T5105] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2741.007133][ T5105] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2741.012403][ T5105] ? mem_cgroup_iter+0x3e9/0x560 [ 2741.017415][ T5105] try_charge_memcg+0xda2/0x18a0 [ 2741.022398][ T5105] ? mark_lock+0x9a/0x350 [ 2741.026768][ T5105] ? __pfx_try_charge_memcg+0x10/0x10 [ 2741.032291][ T5105] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2741.038648][ T5105] charge_memcg+0xa2/0x160 [ 2741.043082][ T5105] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2741.049176][ T5105] __read_swap_cache_async+0x480/0x8b0 [ 2741.054683][ T5105] ? mark_lock+0x9a/0x350 [ 2741.059222][ T5105] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2741.065225][ T5105] swap_cluster_readahead+0x67c/0x810 [ 2741.070618][ T5105] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2741.076529][ T5105] ? __pfx_lock_release+0x10/0x10 [ 2741.081756][ T5105] ? xas_descend+0x37e/0x470 [ 2741.086371][ T5105] swapin_readahead+0x1ea/0x1070 [ 2741.091318][ T5105] ? filemap_get_entry+0x127/0x4e0 [ 2741.096463][ T5105] ? __pfx_swapin_readahead+0x10/0x10 [ 2741.101866][ T5105] ? __filemap_get_folio+0x935/0xbc0 [ 2741.107187][ T5105] ? swap_cache_get_folio+0x9f/0x570 [ 2741.112486][ T5105] do_swap_page+0x791/0x3f40 [ 2741.117096][ T5105] ? __lock_acquire+0x1345/0x1fd0 [ 2741.122149][ T5105] ? rcu_is_watching+0x15/0xb0 [ 2741.126950][ T5105] ? do_swap_page+0x154/0x3f40 [ 2741.131726][ T5105] ? __pfx_do_swap_page+0x10/0x10 [ 2741.136812][ T5105] ? pte_offset_map_nolock+0x137/0x1f0 [ 2741.142341][ T5105] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2741.148187][ T5105] ? __pfx_validate_chain+0x10/0x10 [ 2741.153408][ T5105] __handle_mm_fault+0x15e8/0x72d0 [ 2741.158600][ T5105] ? __pfx___handle_mm_fault+0x10/0x10 [ 2741.164666][ T5105] ? mt_find+0x226/0x850 [ 2741.168979][ T5105] ? __pfx_lock_release+0x10/0x10 [ 2741.174262][ T5105] ? mt_find+0x62d/0x850 [ 2741.178618][ T5105] ? mt_find+0x226/0x850 [ 2741.182897][ T5105] ? find_vma+0x142/0x1c0 [ 2741.187287][ T5105] ? __pfx_find_vma+0x10/0x10 [ 2741.192012][ T5105] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2741.198030][ T5105] handle_mm_fault+0x3c1/0x8a0 [ 2741.202852][ T5105] exc_page_fault+0x2ad/0x870 [ 2741.207573][ T5105] asm_exc_page_fault+0x26/0x30 [ 2741.212449][ T5105] RIP: 0010:__get_user_8+0x11/0x20 [ 2741.217672][ T5105] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2741.237466][ T5105] RSP: 0000:ffffc900047dfd78 EFLAGS: 00050202 [ 2741.243549][ T5105] RAX: 0000555555c31da8 RBX: ffff888018311538 RCX: ffffc900047dfc03 [ 2741.251536][ T5105] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fe0 [ 2741.259529][ T5105] RBP: ffffc900047dfec0 R08: ffffffff8f85feef R09: 1ffffffff1f0bfdd [ 2741.267518][ T5105] R10: dffffc0000000000 R11: fffffbfff1f0bfde R12: ffffc900047dfd80 [ 2741.275592][ T5105] R13: ffffc900047dffd8 R14: dffffc0000000000 R15: ffff888018310000 [ 2741.283597][ T5105] __rseq_handle_notify_resume+0x158/0x1490 [ 2741.289523][ T5105] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2741.296401][ T5105] ? irqentry_exit_to_user_mode+0x52/0x270 [ 2741.302241][ T5105] irqentry_exit_to_user_mode+0xbb/0x270 [ 2741.307895][ T5105] exc_page_fault+0x587/0x870 [ 2741.312602][ T5105] asm_exc_page_fault+0x26/0x30 [ 2741.317467][ T5105] RIP: 0033:0x7fa3bb4a4bc6 [ 2741.321897][ T5105] Code: 03 00 00 48 8d b9 08 03 00 00 89 d6 83 ce 02 39 d6 74 21 89 d0 f0 0f b1 37 89 c6 75 1b 83 e2 3b 83 ca 02 83 fa 0a 74 14 89 f0 66 0f 1f 84 00 00 00 00 00 89 d6 eb f0 89 c2 eb ce 50 48 c7 81 [ 2741.341517][ T5105] RSP: 002b:00007ffde67ffd58 EFLAGS: 00010293 [ 2741.347600][ T5105] RAX: 0000000000000000 RBX: 000000000000496d RCX: 0000555555c31480 [ 2741.355587][ T5105] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000555555c31788 [ 2741.363572][ T5105] RBP: 00007ffde67ffdec R08: 0000000000000010 R09: 00007ffde692b0b0 [ 2741.371553][ T5105] R10: 0000000000000000 R11: 000000000007f934 R12: 0000000000000032 [ 2741.379541][ T5105] R13: 000000000029d197 R14: 000000000029d197 R15: 0000000000000000 [ 2741.387542][ T5105] [ 2741.414571][ T29] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2741.420084][ T29] __sys_sendmsg+0x2b0/0x3a0 [ 2741.421369][ T5105] memory: usage 307200kB, limit 307200kB, failcnt 452478 [ 2741.434373][ T29] ? __pfx___sys_sendmsg+0x10/0x10 [ 2741.439615][ T29] ? restore_fpregs_from_fpstate+0x100/0x250 [ 2741.443961][ T5105] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 2741.454355][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2741.458697][ T5105] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 2741.460914][ T29] ? do_syscall_64+0x108/0x240 [ 2741.481195][ T29] ? do_syscall_64+0xb4/0x240 [ 2741.485950][ T5105] Memory cgroup stats for /syz3 [ 2741.486108][ T29] do_syscall_64+0xf9/0x240 [ 2741.486830][ T5105] : [ 2741.491009][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2741.506658][ T5105] cache 0 [ 2741.510501][ T5105] rss 4096 [ 2741.513575][ T5105] rss_huge 0 [ 2741.514577][ T29] RIP: 0033:0x7f739747dda9 [ 2741.521237][ T29] RSP: 002b:00007f739820d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2741.529290][ T5105] shmem 0 [ 2741.533776][ T5105] mapped_file 0 [ 2741.536025][ T29] RAX: ffffffffffffffda RBX: 00007f73975abf80 RCX: 00007f739747dda9 [ 2741.542598][ T5105] dirty 0 [ 2741.551159][ T29] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2741.551672][ T5105] writeback 0 [ 2741.559840][ T29] RBP: 00007f73974ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2741.571297][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2741.572596][ T5105] workingset_refault_anon 318754 [ 2741.584792][ T29] R13: 000000000000000b R14: 00007f73975abf80 R15: 00007fff05f24a38 [ 2741.593149][ T29] [ 2741.596814][ T29] [ 2741.596814][ T29] Showing all locks held in the system: [ 2741.608011][ T5105] workingset_refault_file 94 [ 2741.611080][ T29] 1 lock held by khungtaskd/29: [ 2741.612640][ T5105] swap 208896 [ 2741.618091][ T29] #0: ffffffff8e130be0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2741.631719][ T29] 2 locks held by dhcpcd/4737: [ 2741.639004][ T29] #0: ffff888074e8d678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x780 [ 2741.649640][ T29] #1: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x676/0xda0 [ 2741.652053][ T5105] swapcached 4096 [ 2741.659207][ T29] 2 locks held by getty/4826: [ 2741.667922][ T29] #0: ffff88802e2e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2741.678200][ T29] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 2741.678499][ T5105] pgpgin 523452 [ 2741.688669][ T29] 3 locks held by syz-executor.0/5099: [ 2741.688691][ T29] #0: ffff88807f28c420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2e0 [ 2741.688771][ T29] #1: ffffffff8e243920 (memcg_oom_lock#2){+.+.}-{0:0}, at: try_charge_memcg+0xc25/0x18a0 [ 2741.688844][ T29] #2: ffffffff8e1de208 ( [ 2741.724049][ T5105] pgpgout 523451 [ 2741.733214][ T5105] pgfault 857715 [ 2741.737548][ T5105] pgmajfault 308869 [ 2741.741397][ T5105] inactive_anon 0 [ 2741.746002][ T5105] active_anon 4096 [ 2741.747109][ T29] oom_lock [ 2741.749755][ T5105] inactive_file 0 [ 2741.749769][ T5105] active_file 0 [ 2741.749779][ T5105] unevictable 0 [ 2741.752851][ T29] ){+.+.}-{3:3} [ 2741.757334][ T5105] hierarchical_memory_limit 314572800 [ 2741.768766][ T29] , at: mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2741.779428][ T5105] hierarchical_memsw_limit 9223372036854771712 [ 2741.779450][ T5105] total_cache 0 [ 2741.779459][ T5105] total_rss 4096 [ 2741.779469][ T5105] total_rss_huge 0 [ 2741.791302][ T29] 7 locks held by syz-executor.3/5105: [ 2741.801069][ T5105] total_shmem 0 [ 2741.802556][ T29] 5 locks held by kworker/u4:3/21432: [ 2741.811591][ T29] #0: ffff888015ea4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2741.812498][ T5105] total_mapped_file 0 [ 2741.828848][ T29] #1: ffffc90015c87d20 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2741.843857][ T29] #2: ffffffff8f36c8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 2741.855966][ T29] #3: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 2741.866092][ T29] #4: ffffffff8e136440 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x550 [ 2741.868670][ T5105] total_dirty 0 [ 2741.877152][ T29] 3 locks held by kworker/u4:1/27918: [ 2741.886239][ T29] #0: ffff888029d92138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2741.892196][ T5105] total_writeback 0 [ 2741.898886][ T29] #1: ffffc9001310fd20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2741.916651][ T29] #2: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 2741.927030][ T29] 3 locks held by kworker/u4:0/32661: [ 2741.932456][ T29] 3 locks held by kworker/0:11/324: [ 2741.934383][ T5105] total_workingset_refault_anon 318754 [ 2741.938678][ T29] #0: [ 2741.943146][ T5105] total_workingset_refault_file 94 [ 2741.943161][ T29] ffff888014c78938 ((wq_completion)events){+.+.}-{0:0} [ 2741.954558][ T5105] total_swap 208896 [ 2741.954556][ T29] , at: process_scheduled_works+0x825/0x1420 [ 2741.961425][ T5105] total_swapcached 4096 [ 2741.975166][ T29] #1: ffffc900090f7d20 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2741.987046][ T5105] total_pgpgin 523452 [ 2741.987066][ T5105] total_pgpgout 523451 [ 2741.987076][ T5105] total_pgfault 857715 [ 2741.987085][ T5105] total_pgmajfault 308869 [ 2741.987095][ T5105] total_inactive_anon 0 [ 2741.987104][ T5105] total_active_anon 4096 [ 2741.987114][ T5105] total_inactive_file 0 [ 2741.987124][ T5105] total_active_file 0 [ 2742.001973][ T29] #2: [ 2742.008264][ T5105] total_unevictable 0 [ 2742.008282][ T5105] anon_cost 0 [ 2742.008293][ T5105] file_cost 0 [ 2742.008305][ T5105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2742.017506][ T29] ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 2742.017580][ T29] 1 lock held by syz-executor.4/1191: [ 2742.017614][ T29] #0: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 [ 2742.017679][ T29] 2 locks held by syz-executor.1/1200: [ 2742.017693][ T29] #0: [ 2742.021681][ T5105] ,oom_memcg= [ 2742.035546][ T29] ffffffff8f3dd230 [ 2742.051076][ T5105] /syz3 [ 2742.055863][ T29] ( [ 2742.079941][ T5105] ,task_memcg= [ 2742.081092][ T29] cb_lock [ 2742.083614][ T5105] /syz3 [ 2742.087801][ T29] ){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2742.108825][ T29] #1: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_set_features+0x2eb/0xcb0 [ 2742.112561][ T5105] ,task=syz-executor.3,pid=1461,uid=0 [ 2742.119135][ T29] 1 lock held by syz-executor.2/1212: [ 2742.134507][ T29] #0: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 [ 2742.144119][ T29] 1 lock held by syz-executor.4/1261: [ 2742.149627][ T5105] Memory cgroup out of memory: Killed process 1461 (syz-executor.3) total-vm:54508kB, anon-rss:388kB, file-rss:8784kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 12:20:50 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="780000002400518600"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736671"], 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, @TCA_POLICE_RATE={0x404}]}]}}]}, 0x884}}, 0x0) [ 2742.180550][ T29] #0: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 [ 2742.194255][ T29] 1 lock held by syz-executor.1/1269: [ 2742.223932][ T29] #0: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 [ 2742.241374][ T29] 1 lock held by syz-executor.2/1327: [ 2742.251431][ T29] #0: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 [ 2742.270075][ T29] 1 lock held by syz-executor.4/1372: [ 2742.280658][ T29] #0: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 [ 2742.300330][ T29] 1 lock held by syz-executor.1/1379: [ 2742.311060][ T29] #0: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 [ 2742.328489][ T29] 1 lock held by syz-executor.2/1437: [ 2742.333949][ T29] #0: ffffffff8f378f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 [ 2742.355413][ T29] 1 lock held by syz-executor.0/1459: [ 2742.360881][ T29] 1 lock held by syz-executor.3/1464: [ 2742.374435][ T29] [ 2742.376843][ T29] ============================================= [ 2742.376843][ T29] [ 2742.404161][ T29] NMI backtrace for cpu 0 [ 2742.408569][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2742.418428][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2742.428540][ T29] Call Trace: [ 2742.431853][ T29] [ 2742.434819][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 2742.439558][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2742.444815][ T29] ? __pfx__printk+0x10/0x10 [ 2742.449460][ T29] ? vprintk_emit+0x607/0x720 [ 2742.454227][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 2742.459312][ T29] nmi_cpu_backtrace+0x49c/0x4d0 [ 2742.464317][ T29] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2742.469837][ T29] ? _printk+0xd5/0x120 [ 2742.474049][ T29] ? __pfx__printk+0x10/0x10 [ 2742.478694][ T29] ? __wake_up_klogd+0xcc/0x110 [ 2742.483632][ T29] ? __pfx__printk+0x10/0x10 [ 2742.488286][ T29] ? __rcu_read_unlock+0xa0/0x110 [ 2742.493453][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2742.499583][ T29] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2742.505725][ T29] watchdog+0xfaf/0xff0 [ 2742.509946][ T29] ? watchdog+0x1e9/0xff0 [ 2742.514310][ T29] ? __pfx_watchdog+0x10/0x10 [ 2742.519194][ T29] kthread+0x2ef/0x390 [ 2742.523275][ T29] ? __pfx_watchdog+0x10/0x10 [ 2742.527984][ T29] ? __pfx_kthread+0x10/0x10 [ 2742.532673][ T29] ret_from_fork+0x4b/0x80 [ 2742.537105][ T29] ? __pfx_kthread+0x10/0x10 [ 2742.541707][ T29] ret_from_fork_asm+0x1b/0x30 [ 2742.546508][ T29] [ 2742.550938][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2742.556244][ C1] NMI backtrace for cpu 1 [ 2742.556258][ C1] CPU: 1 PID: 32737 Comm: kworker/u4:6 Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2742.556280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2742.556293][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2742.556348][ C1] RIP: 0010:batadv_iv_ogm_schedule+0xa07/0x1090 [ 2742.556385][ C1] Code: 30 48 c1 e8 03 48 89 44 24 60 49 c7 c7 80 ef 8a 94 49 8d 5e 78 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 df e8 df 24 c3 f6 48 8b 1b 48 b8 00 00 00 00 00 fc ff [ 2742.556403][ C1] RSP: 0018:ffffc90004a3fa00 EFLAGS: 00000246 [ 2742.556418][ C1] RAX: 1ffff1101121330f RBX: ffff888089099878 RCX: dffffc0000000000 [ 2742.556433][ C1] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 2742.556445][ C1] RBP: ffffc90004a3fb38 R08: ffffffff8b32f723 R09: 1ffff1100dd3cb04 [ 2742.556459][ C1] R10: dffffc0000000000 R11: ffffed100dd3cb05 R12: ffff88806e9e1878 [ 2742.556474][ C1] R13: ffff88806e9e1800 R14: ffff888089099800 R15: ffffffff948aef80 [ 2742.556488][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 2742.556505][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2742.556518][ C1] CR2: 00007fa3bc186980 CR3: 000000001ce92000 CR4: 00000000003506f0 [ 2742.556535][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2742.556547][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2742.556559][ C1] Call Trace: [ 2742.556567][ C1] [ 2742.556575][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2742.556600][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2742.556630][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2742.556654][ C1] ? nmi_handle+0x2a/0x580 [ 2742.556682][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2742.556703][ C1] ? nmi_handle+0x14f/0x580 [ 2742.556719][ C1] ? nmi_handle+0x2a/0x580 [ 2742.556737][ C1] ? batadv_iv_ogm_schedule+0xa07/0x1090 [ 2742.556765][ C1] ? default_do_nmi+0x63/0x160 [ 2742.556790][ C1] ? exc_nmi+0x123/0x1f0 [ 2742.556814][ C1] ? end_repeat_nmi+0xf/0x60 [ 2742.556840][ C1] ? batadv_iv_ogm_schedule+0xcb3/0x1090 [ 2742.556870][ C1] ? batadv_iv_ogm_schedule+0xa07/0x1090 [ 2742.556899][ C1] ? batadv_iv_ogm_schedule+0xa07/0x1090 [ 2742.556929][ C1] ? batadv_iv_ogm_schedule+0xa07/0x1090 [ 2742.556957][ C1] [ 2742.556963][ C1] [ 2742.556974][ C1] ? batadv_iv_ogm_schedule+0x8b8/0x1090 [ 2742.557005][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 2742.557036][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2742.557065][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 [ 2742.557104][ C1] ? process_scheduled_works+0x825/0x1420 [ 2742.557133][ C1] process_scheduled_works+0x913/0x1420 [ 2742.557176][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2742.557208][ C1] ? assign_work+0x364/0x3d0 [ 2742.557238][ C1] worker_thread+0xa5f/0x1000 [ 2742.557278][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2742.557305][ C1] kthread+0x2ef/0x390 [ 2742.557324][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2742.557350][ C1] ? __pfx_kthread+0x10/0x10 [ 2742.557375][ C1] ret_from_fork+0x4b/0x80 [ 2742.557400][ C1] ? __pfx_kthread+0x10/0x10 [ 2742.557419][ C1] ret_from_fork_asm+0x1b/0x30 [ 2742.557454][ C1] [ 2742.923247][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2742.930187][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc6-syzkaller-01946-g09fcde547761 #0 [ 2742.940044][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2742.950155][ T29] Call Trace: [ 2742.954254][ T29] [ 2742.957217][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 2742.961939][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2742.963776][ T5105] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2742.978206][ T29] ? __pfx__printk+0x10/0x10 [ 2742.982865][ T29] ? vscnprintf+0x5d/0x90 [ 2742.987265][ T29] panic+0x349/0x860 [ 2742.991202][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2742.997409][ T29] ? __pfx_panic+0x10/0x10 [ 2743.001875][ T29] ? tick_nohz_tick_stopped+0x7b/0xc0 [ 2743.007296][ T29] ? __irq_work_queue_local+0x137/0x3e0 [ 2743.012897][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2743.018318][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2743.024540][ T29] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2743.030767][ T29] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2743.036991][ T29] watchdog+0xfee/0xff0 [ 2743.041196][ T29] ? watchdog+0x1e9/0xff0 [ 2743.045557][ T29] ? __pfx_watchdog+0x10/0x10 [ 2743.050253][ T29] kthread+0x2ef/0x390 [ 2743.054506][ T29] ? __pfx_watchdog+0x10/0x10 [ 2743.059287][ T29] ? __pfx_kthread+0x10/0x10 [ 2743.063886][ T29] ret_from_fork+0x4b/0x80 [ 2743.068320][ T29] ? __pfx_kthread+0x10/0x10 [ 2743.072919][ T29] ret_from_fork_asm+0x1b/0x30 [ 2743.077712][ T29] [ 2743.081022][ T29] Kernel Offset: disabled [ 2743.085351][ T29] Rebooting in 86400 seconds..