00028008000500", @ANYRES32=r2], 0x3c}}, 0x6000000000000000) [ 2054.054931][T22517] total_inactive_file 0 [ 2054.059566][T22517] total_active_file 0 [ 2054.068762][T22517] total_unevictable 0 [ 2054.075953][T22517] anon_cost 0 [ 2054.094580][T22517] file_cost 0 02:44:57 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000000c5140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2054.100254][T22517] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22517,uid=0 [ 2054.119803][T22517] Memory cgroup out of memory: Killed process 22517 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2054.137681][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:44:57 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000c00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:44:57 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2054.205011][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:44:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xa00}, 0x0) [ 2054.290640][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2054.300393][T22537] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2054.300425][T22537] CPU: 0 PID: 22537 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2054.300449][T22537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2054.300460][T22537] Call Trace: [ 2054.300469][T22537] [ 2054.300478][T22537] dump_stack_lvl+0x1e7/0x2e0 [ 2054.300511][T22537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2054.300535][T22537] ? __pfx__printk+0x10/0x10 [ 2054.300554][T22537] ? ___ratelimit+0x4c4/0x670 [ 2054.300581][T22537] ? __pfx____ratelimit+0x10/0x10 [ 2054.300608][T22537] dump_header+0xda/0x6a0 [ 2054.365831][T22537] oom_kill_process+0x3a7/0x930 [ 2054.370706][T22537] out_of_memory+0xf67/0x1320 [ 2054.375417][T22537] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2054.381070][T22537] ? __pfx___mutex_lock+0x10/0x10 [ 2054.386122][T22537] ? __pfx_out_of_memory+0x10/0x10 [ 2054.391266][T22537] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2054.396829][T22537] ? __pfx_lock_release+0x10/0x10 [ 2054.400741][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2054.401850][T22537] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2054.401884][T22537] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2054.401909][T22537] ? mem_cgroup_iter+0x3e9/0x560 [ 2054.401936][T22537] try_charge_memcg+0xda2/0x18a0 [ 2054.432254][T22537] ? __pfx_try_charge_memcg+0x10/0x10 02:44:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x6400000000000000) [ 2054.437650][T22537] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2054.443394][T22537] ? __pfx_lock_release+0x10/0x10 [ 2054.448448][T22537] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2054.454463][T22537] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2054.460207][T22537] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2054.466035][T22537] obj_cgroup_charge+0x389/0x630 [ 2054.471001][T22537] ? obj_cgroup_charge+0x121/0x630 [ 2054.476131][T22537] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2054.481604][T22537] ? kmem_cache_alloc+0x4f/0x340 [ 2054.486556][T22537] ? __pfx___might_resched+0x10/0x10 02:44:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2054.491869][T22537] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2054.497707][T22537] ? __anon_vma_prepare+0x68/0x410 [ 2054.502843][T22537] kmem_cache_alloc+0x202/0x340 [ 2054.507723][T22537] __anon_vma_prepare+0x68/0x410 [ 2054.512693][T22537] __handle_mm_fault+0x6090/0x72d0 [ 2054.517861][T22537] ? __pfx___handle_mm_fault+0x10/0x10 [ 2054.523347][T22537] ? mt_find+0x226/0x850 [ 2054.527613][T22537] ? __pfx_lock_release+0x10/0x10 [ 2054.532668][T22537] ? mt_find+0x62d/0x850 [ 2054.536929][T22537] ? mt_find+0x226/0x850 [ 2054.541220][T22537] ? find_vma+0x142/0x1c0 [ 2054.545580][T22537] ? __pfx_find_vma+0x10/0x10 [ 2054.550283][T22537] handle_mm_fault+0x3c1/0x8a0 [ 2054.555084][T22537] exc_page_fault+0x2ad/0x870 [ 2054.559788][T22537] asm_exc_page_fault+0x26/0x30 [ 2054.564653][T22537] RIP: 0033:0x7f810c82c551 [ 2054.569072][T22537] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 02:44:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x6558000000000000) [ 2054.588685][T22537] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2054.594761][T22537] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2054.602751][T22537] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2054.610731][T22537] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2054.618715][T22537] R10: 000000008135df0e R11: 0000000000000246 R12: 00007f810c400060 [ 2054.626703][T22537] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2054.634707][T22537] 02:44:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xb00}, 0x0) [ 2054.637867][ C0] vkms_vblank_simulate: vblank timer overrun 02:44:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:44:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2054.759336][T22537] memory: usage 307200kB, limit 307200kB, failcnt 50282 [ 2054.774581][T22537] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2054.785468][T22537] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2054.796202][T22537] Memory cgroup stats for /syz4: [ 2054.796506][T22537] cache 0 [ 2054.808589][T22537] rss 147456 [ 2054.814194][T22537] rss_huge 0 [ 2054.817479][T22537] shmem 0 [ 2054.820502][T22537] mapped_file 0 [ 2054.831269][T22537] dirty 0 [ 2054.834589][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2054.836579][T22537] writeback 0 [ 2054.848509][T22537] workingset_refault_anon 12757 02:44:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x6800000000000000) [ 2054.863605][T22537] workingset_refault_file 333 [ 2054.875978][T22537] swap 393216 [ 2054.879798][T22537] swapcached 0 [ 2054.885237][T22537] pgpgin 285142 [ 2054.888843][T22537] pgpgout 285106 02:44:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xc00}, 0x0) [ 2054.910941][T22537] pgfault 570084 [ 2054.919245][T22537] pgmajfault 11568 [ 2054.933740][T22537] inactive_anon 0 [ 2054.948090][T22537] active_anon 147456 [ 2054.959713][T22537] inactive_file 0 02:44:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000010d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2054.965018][T22537] active_file 0 [ 2054.969523][T22537] unevictable 0 [ 2054.976897][T22537] hierarchical_memory_limit 314572800 [ 2054.985632][T22537] hierarchical_memsw_limit 9223372036854771712 [ 2054.992328][T22537] total_cache 0 [ 2054.996013][T22537] total_rss 147456 [ 2054.999940][T22537] total_rss_huge 0 [ 2055.005418][T22537] total_shmem 0 [ 2055.010658][T22537] total_mapped_file 0 [ 2055.015344][T22537] total_dirty 0 [ 2055.019149][T22537] total_writeback 0 [ 2055.023898][T22537] total_workingset_refault_anon 12757 [ 2055.029619][T22537] total_workingset_refault_file 333 [ 2055.040609][T22537] total_swap 393216 [ 2055.048942][T22537] total_swapcached 0 [ 2055.053525][T22537] total_pgpgin 285142 [ 2055.057788][T22537] total_pgpgout 285106 02:44:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2055.062655][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.062659][T22537] total_pgfault 570084 [ 2055.076815][T22537] total_pgmajfault 11568 [ 2055.093077][T22537] total_inactive_anon 0 [ 2055.097443][T22537] total_active_anon 147456 [ 2055.105608][T22537] total_inactive_file 0 02:44:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x6c00000000000000) [ 2055.113795][T22537] total_active_file 0 [ 2055.131856][T22537] total_unevictable 0 [ 2055.136199][T22537] anon_cost 0 [ 2055.140798][T22537] file_cost 0 [ 2055.146681][T22537] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22537,uid=0 02:44:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000003c7140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2055.166595][T22537] Memory cgroup out of memory: Killed process 22537 (syz-executor.4) total-vm:54508kB, anon-rss:492kB, file-rss:8768kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:44:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xd00}, 0x0) 02:44:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000020d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2055.324381][T22567] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2055.335018][T22567] CPU: 1 PID: 22567 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2055.345454][T22567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2055.355528][T22567] Call Trace: [ 2055.358821][T22567] [ 2055.361761][T22567] dump_stack_lvl+0x1e7/0x2e0 [ 2055.366462][T22567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2055.371684][T22567] ? __pfx__printk+0x10/0x10 [ 2055.376307][T22567] ? ___ratelimit+0x4c4/0x670 [ 2055.381007][T22567] ? __pfx____ratelimit+0x10/0x10 [ 2055.386056][T22567] dump_header+0xda/0x6a0 [ 2055.390401][T22567] oom_kill_process+0x3a7/0x930 [ 2055.395261][T22567] out_of_memory+0xf67/0x1320 [ 2055.399947][T22567] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2055.405577][T22567] ? __pfx___mutex_lock+0x10/0x10 [ 2055.410604][T22567] ? __pfx_out_of_memory+0x10/0x10 [ 2055.415735][T22567] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2055.421288][T22567] ? __pfx_lock_release+0x10/0x10 [ 2055.426304][T22567] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2055.432368][T22567] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2055.437565][T22567] ? mem_cgroup_iter+0x3e9/0x560 [ 2055.442507][T22567] try_charge_memcg+0xda2/0x18a0 [ 2055.447444][T22567] ? ath9k_hw_rxprocdesc+0x2f0/0xbc0 [ 2055.452752][T22567] ? __pfx_try_charge_memcg+0x10/0x10 [ 2055.458124][T22567] ? percpu_ref_tryget+0x14/0x180 [ 2055.463162][T22567] charge_memcg+0xa2/0x160 [ 2055.467579][T22567] __mem_cgroup_charge+0x27/0x80 [ 2055.472514][T22567] __handle_mm_fault+0x5120/0x72d0 [ 2055.477651][T22567] ? __pfx___handle_mm_fault+0x10/0x10 [ 2055.483109][T22567] ? mt_find+0x226/0x850 [ 2055.487350][T22567] ? __pfx_lock_release+0x10/0x10 [ 2055.492386][T22567] ? mt_find+0x62d/0x850 [ 2055.496626][T22567] ? mt_find+0x226/0x850 [ 2055.500877][T22567] ? find_vma+0x142/0x1c0 [ 2055.505204][T22567] ? __pfx_find_vma+0x10/0x10 [ 2055.509874][T22567] handle_mm_fault+0x3c1/0x8a0 [ 2055.514638][T22567] exc_page_fault+0x2ad/0x870 [ 2055.519314][T22567] asm_exc_page_fault+0x26/0x30 [ 2055.524181][T22567] RIP: 0033:0x7f810c82c551 [ 2055.528608][T22567] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2055.548215][T22567] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2055.554288][T22567] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2055.562257][T22567] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 02:44:59 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2055.570224][T22567] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2055.578190][T22567] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2055.586153][T22567] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2055.594135][T22567] [ 2055.609240][T22567] memory: usage 307200kB, limit 307200kB, failcnt 50346 [ 2055.634243][T22567] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2055.646294][T22567] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2055.655408][T22567] Memory cgroup stats for /syz4: [ 2055.655546][T22567] cache 0 [ 2055.664054][T22567] rss 147456 [ 2055.667526][T22567] rss_huge 0 [ 2055.670969][T22567] shmem 0 [ 2055.674700][T22567] mapped_file 0 [ 2055.678432][T22567] dirty 0 02:44:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x7400000000000000) [ 2055.682126][T22567] writeback 0 [ 2055.685704][T22567] workingset_refault_anon 12757 [ 2055.695478][T22567] workingset_refault_file 333 [ 2055.700480][T22567] swap 393216 [ 2055.714285][T22567] swapcached 0 [ 2055.717986][T22567] pgpgin 285164 02:44:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xe00}, 0x0) [ 2055.731913][T22567] pgpgout 285128 [ 2055.735685][T22567] pgfault 570143 [ 2055.740641][T22567] pgmajfault 11568 [ 2055.770586][T22567] inactive_anon 0 02:44:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000030d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2055.785990][T22567] active_anon 143360 [ 2055.796456][T22567] inactive_file 0 [ 2055.818805][T22567] active_file 0 [ 2055.827030][T22567] unevictable 0 [ 2055.848629][T22567] hierarchical_memory_limit 314572800 [ 2055.856607][T22567] hierarchical_memsw_limit 9223372036854771712 [ 2055.871128][T22567] total_cache 0 [ 2055.874998][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.876142][T22567] total_rss 147456 [ 2055.891006][T22567] total_rss_huge 0 [ 2055.895232][T22567] total_shmem 0 [ 2055.899931][T22567] total_mapped_file 0 [ 2055.905242][T22567] total_dirty 0 [ 2055.908973][T22567] total_writeback 0 [ 2055.913354][T22567] total_workingset_refault_anon 12757 [ 2055.920072][T22567] total_workingset_refault_file 333 [ 2055.925977][T22567] total_swap 393216 [ 2055.929953][T22567] total_swapcached 0 [ 2055.934131][T22567] total_pgpgin 285164 [ 2055.938327][T22567] total_pgpgout 285128 [ 2055.946218][T22567] total_pgfault 570143 02:44:59 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2055.950512][T22567] total_pgmajfault 11568 [ 2055.961679][T22567] total_inactive_anon 0 [ 2055.966010][T22567] total_active_anon 143360 [ 2055.970639][T22567] total_inactive_file 0 [ 2055.979697][T22567] total_active_file 0 02:44:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xf00}, 0x0) [ 2055.998376][T22567] total_unevictable 0 [ 2056.006861][T22567] anon_cost 0 [ 2056.014817][T22567] file_cost 0 [ 2056.018495][T22567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22567,uid=0 02:44:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000001cf140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2056.035448][T22567] Memory cgroup out of memory: Killed process 22567 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:44:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x7a00000000000000) 02:44:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000e00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2056.174283][T22586] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2056.185514][T22586] CPU: 1 PID: 22586 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2056.195962][T22586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2056.206025][T22586] Call Trace: [ 2056.209299][T22586] [ 2056.212224][T22586] dump_stack_lvl+0x1e7/0x2e0 [ 2056.216901][T22586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2056.222092][T22586] ? __pfx__printk+0x10/0x10 [ 2056.226678][T22586] ? ___ratelimit+0x4c4/0x670 [ 2056.231354][T22586] ? __pfx____ratelimit+0x10/0x10 [ 2056.236375][T22586] dump_header+0xda/0x6a0 [ 2056.240703][T22586] oom_kill_process+0x3a7/0x930 [ 2056.245549][T22586] out_of_memory+0xf67/0x1320 [ 2056.250224][T22586] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2056.255849][T22586] ? __pfx___mutex_lock+0x10/0x10 [ 2056.260872][T22586] ? __pfx_out_of_memory+0x10/0x10 [ 2056.265989][T22586] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2056.271541][T22586] ? __pfx_lock_release+0x10/0x10 [ 2056.276576][T22586] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2056.282640][T22586] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2056.287831][T22586] ? mem_cgroup_iter+0x3e9/0x560 [ 2056.292766][T22586] try_charge_memcg+0xda2/0x18a0 [ 2056.297713][T22586] ? __pfx_try_charge_memcg+0x10/0x10 [ 2056.303084][T22586] ? percpu_ref_tryget+0x14/0x180 [ 2056.308133][T22586] charge_memcg+0xa2/0x160 [ 2056.312551][T22586] __mem_cgroup_charge+0x27/0x80 [ 2056.317494][T22586] folio_prealloc+0x52/0x170 [ 2056.322079][T22586] do_wp_page+0x1222/0x4c90 [ 2056.326591][T22586] ? __pfx_do_wp_page+0x10/0x10 [ 2056.331444][T22586] ? __pfx_lock_acquire+0x10/0x10 [ 2056.336475][T22586] ? do_raw_spin_lock+0x14e/0x370 [ 2056.341509][T22586] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2056.346733][T22586] __handle_mm_fault+0x26ad/0x72d0 [ 2056.351878][T22586] ? reacquire_held_locks+0x3eb/0x690 [ 2056.357251][T22586] ? __pfx___handle_mm_fault+0x10/0x10 [ 2056.362716][T22586] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2056.368440][T22586] ? mtree_range_walk+0x6fd/0x8e0 [ 2056.373461][T22586] ? lock_vma_under_rcu+0x18a/0x730 [ 2056.378658][T22586] ? __pfx_lock_release+0x10/0x10 [ 2056.383680][T22586] ? lock_vma_under_rcu+0x2f9/0x730 [ 2056.388890][T22586] ? lock_vma_under_rcu+0x18a/0x730 [ 2056.394088][T22586] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2056.399634][T22586] handle_mm_fault+0x3c1/0x8a0 [ 2056.404402][T22586] exc_page_fault+0x456/0x870 [ 2056.409109][T22586] asm_exc_page_fault+0x26/0x30 [ 2056.413959][T22586] RIP: 0033:0x7f810c839c40 [ 2056.418365][T22586] Code: 89 1c 24 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 89 c5 e9 7f fe ff ff 0f 1f 84 00 00 00 00 00 <43> 89 2c 8e e9 a5 fe ff ff 0f 1f 80 00 00 00 00 48 39 c3 74 99 48 [ 2056.437959][T22586] RSP: 002b:00007f810cacfa60 EFLAGS: 00010246 [ 2056.444020][T22586] RAX: 00000000845c9453 RBX: 00007f810c9ac018 RCX: 000000000000000c [ 2056.451982][T22586] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 000000000001eb8a [ 2056.459940][T22586] RBP: 00000000845c9453 R08: 0000001b32120000 R09: 0000000000001453 [ 2056.467901][T22586] R10: 00000000845c9457 R11: 0000000000000246 R12: 000000000000000c [ 2056.475871][T22586] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff845c9fda [ 2056.483841][T22586] ? apparmor_socket_create+0x10a/0x150 [ 2056.489398][T22586] [ 2056.509656][T22586] memory: usage 307200kB, limit 307200kB, failcnt 50411 02:45:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2056.520248][T22586] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2056.528891][T22586] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 2056.544675][T22586] Memory cgroup stats for /syz4: [ 2056.544818][T22586] cache 0 [ 2056.569303][T22586] rss 135168 [ 2056.573005][T22586] rss_huge 0 02:45:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x1100}, 0x0) [ 2056.576526][T22586] shmem 0 [ 2056.579769][T22586] mapped_file 0 [ 2056.602965][T22586] dirty 0 [ 2056.606115][T22586] writeback 0 [ 2056.623287][T22586] workingset_refault_anon 12757 [ 2056.637108][T22586] workingset_refault_file 333 [ 2056.649240][T22586] swap 393216 [ 2056.660991][T22586] swapcached 0 02:45:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x8100000000000000) 02:45:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2056.677037][T22586] pgpgin 285183 [ 2056.686094][T22586] pgpgout 285150 [ 2056.700129][T22586] pgfault 570197 02:45:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000030e00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2056.747993][T22586] pgmajfault 11568 [ 2056.759223][T22586] inactive_anon 0 [ 2056.767292][T22586] active_anon 135168 [ 2056.771338][T22586] inactive_file 0 [ 2056.775673][T22586] active_file 0 [ 2056.784358][T22586] unevictable 0 02:45:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x1200}, 0x0) [ 2056.794096][T22586] hierarchical_memory_limit 314572800 [ 2056.813499][T22586] hierarchical_memsw_limit 9223372036854771712 [ 2056.837720][T22586] total_cache 0 02:45:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2056.864611][T22586] total_rss 135168 [ 2056.868537][T22586] total_rss_huge 0 [ 2056.876796][T22586] total_shmem 0 [ 2056.880447][T22586] total_mapped_file 0 [ 2056.885771][T22586] total_dirty 0 [ 2056.891142][T22586] total_writeback 0 [ 2056.895428][T22586] total_workingset_refault_anon 12757 [ 2056.900969][T22586] total_workingset_refault_file 333 02:45:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x8847000000000000) [ 2056.910417][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2056.920824][T22586] total_swap 393216 [ 2056.924927][T22586] total_swapcached 0 [ 2056.929246][T22586] total_pgpgin 285183 [ 2056.933789][T22586] total_pgpgout 285150 02:45:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x1800}, 0x0) [ 2056.961834][T22586] total_pgfault 570197 [ 2056.969549][T22586] total_pgmajfault 11568 [ 2056.984231][T22586] total_inactive_anon 0 [ 2056.997423][T22586] total_active_anon 135168 [ 2057.023152][T22586] total_inactive_file 0 [ 2057.038606][T22586] total_active_file 0 [ 2057.052659][T22586] total_unevictable 0 [ 2057.059729][T22586] anon_cost 0 [ 2057.065633][T22586] file_cost 0 02:45:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2057.069179][T22586] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22586,uid=0 [ 2057.101801][T22586] Memory cgroup out of memory: Killed process 22586 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:45:00 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000003cf140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2000}, 0x0) [ 2057.244854][T22613] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2057.255496][T22613] CPU: 1 PID: 22613 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2057.265938][T22613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2057.276020][T22613] Call Trace: [ 2057.279313][T22613] [ 2057.282259][T22613] dump_stack_lvl+0x1e7/0x2e0 [ 2057.286954][T22613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2057.292162][T22613] ? __pfx__printk+0x10/0x10 [ 2057.296744][T22613] ? ___ratelimit+0x4c4/0x670 [ 2057.301415][T22613] ? __pfx____ratelimit+0x10/0x10 [ 2057.306464][T22613] dump_header+0xda/0x6a0 [ 2057.310812][T22613] oom_kill_process+0x3a7/0x930 [ 2057.315672][T22613] out_of_memory+0xf67/0x1320 [ 2057.320349][T22613] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2057.325981][T22613] ? __pfx___mutex_lock+0x10/0x10 [ 2057.331009][T22613] ? __pfx_out_of_memory+0x10/0x10 [ 2057.336126][T22613] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2057.341669][T22613] ? __pfx_lock_release+0x10/0x10 [ 2057.346694][T22613] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2057.352758][T22613] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2057.357950][T22613] ? mem_cgroup_iter+0x3e9/0x560 [ 2057.362886][T22613] try_charge_memcg+0xda2/0x18a0 [ 2057.367836][T22613] ? __pfx_try_charge_memcg+0x10/0x10 [ 2057.373200][T22613] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2057.378910][T22613] ? __pfx_lock_release+0x10/0x10 [ 2057.383931][T22613] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2057.389911][T22613] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2057.395623][T22613] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2057.401421][T22613] obj_cgroup_charge+0x389/0x630 [ 2057.406367][T22613] ? obj_cgroup_charge+0x121/0x630 [ 2057.411494][T22613] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2057.416987][T22613] ? kmem_cache_alloc+0x4f/0x340 [ 2057.421929][T22613] ? __pfx___might_resched+0x10/0x10 [ 2057.427218][T22613] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2057.433030][T22613] ? __anon_vma_prepare+0x68/0x410 [ 2057.438141][T22613] kmem_cache_alloc+0x202/0x340 [ 2057.442997][T22613] __anon_vma_prepare+0x68/0x410 [ 2057.447936][T22613] __handle_mm_fault+0x6090/0x72d0 [ 2057.453066][T22613] ? __pfx___handle_mm_fault+0x10/0x10 [ 2057.458534][T22613] ? mt_find+0x226/0x850 [ 2057.462778][T22613] ? __pfx_lock_release+0x10/0x10 [ 2057.467812][T22613] ? mt_find+0x62d/0x850 [ 2057.472051][T22613] ? mt_find+0x226/0x850 [ 2057.476305][T22613] ? find_vma+0x142/0x1c0 [ 2057.480624][T22613] ? __pfx_find_vma+0x10/0x10 [ 2057.485295][T22613] handle_mm_fault+0x3c1/0x8a0 [ 2057.490062][T22613] exc_page_fault+0x2ad/0x870 [ 2057.494737][T22613] asm_exc_page_fault+0x26/0x30 [ 2057.499602][T22613] RIP: 0033:0x7f810c82c551 [ 2057.504027][T22613] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2057.523642][T22613] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2057.529708][T22613] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2057.537672][T22613] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2057.545643][T22613] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2057.553607][T22613] R10: 000000008135df0e R11: 0000000000000246 R12: 00007f810c400060 [ 2057.561572][T22613] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2057.569548][T22613] [ 2057.582346][T22613] memory: usage 307200kB, limit 307200kB, failcnt 50495 [ 2057.591061][T22613] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2057.599616][T22613] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2057.607174][T22613] Memory cgroup stats for /syz4: [ 2057.607296][T22613] cache 0 [ 2057.616070][T22613] rss 135168 [ 2057.619346][T22613] rss_huge 0 [ 2057.627060][T22613] shmem 0 [ 2057.630106][T22613] mapped_file 0 [ 2057.633719][T22613] dirty 0 [ 2057.638134][T22613] writeback 0 [ 2057.641987][T22613] workingset_refault_anon 12757 02:45:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x8848000000000000) [ 2057.646929][T22613] workingset_refault_file 333 [ 2057.651786][T22613] swap 393216 [ 2057.655171][T22613] swapcached 0 [ 2057.658624][T22613] pgpgin 285202 [ 2057.664840][T22613] pgpgout 285169 02:45:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000001000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2057.689818][T22613] pgfault 570251 02:45:01 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2057.711132][T22613] pgmajfault 11568 [ 2057.719595][T22613] inactive_anon 0 [ 2057.726039][T22613] active_anon 135168 [ 2057.730171][T22613] inactive_file 0 [ 2057.734433][T22613] active_file 0 [ 2057.739521][T22613] unevictable 0 [ 2057.744600][T22613] hierarchical_memory_limit 314572800 [ 2057.751866][T22613] hierarchical_memsw_limit 9223372036854771712 [ 2057.762530][T22613] total_cache 0 [ 2057.767294][T22613] total_rss 135168 [ 2057.771185][T22613] total_rss_huge 0 [ 2057.775583][T22613] total_shmem 0 [ 2057.779233][T22613] total_mapped_file 0 [ 2057.792870][T22613] total_dirty 0 [ 2057.796600][T22613] total_writeback 0 [ 2057.800602][T22613] total_workingset_refault_anon 12757 02:45:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2100}, 0x0) [ 2057.808961][T22613] total_workingset_refault_file 333 [ 2057.840233][T22613] total_swap 393216 [ 2057.846636][T22613] total_swapcached 0 [ 2057.851159][T22613] total_pgpgin 285202 [ 2057.855954][T22613] total_pgpgout 285169 [ 2057.868471][T22613] total_pgfault 570251 [ 2057.872961][T22613] total_pgmajfault 11568 [ 2057.877322][T22613] total_inactive_anon 0 [ 2057.881699][T22613] total_active_anon 135168 [ 2057.886230][T22613] total_inactive_file 0 [ 2057.890470][T22613] total_active_file 0 [ 2057.897534][T22613] total_unevictable 0 [ 2057.904664][T22613] anon_cost 0 [ 2057.908263][T22613] file_cost 0 [ 2057.918337][T22613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22613,uid=0 02:45:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000001100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000003df140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2057.934545][T22613] Memory cgroup out of memory: Killed process 22613 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2057.953514][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x88a8ffff00000000) 02:45:01 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2500}, 0x0) [ 2058.103521][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.140977][T22627] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2058.157146][T22627] CPU: 0 PID: 22627 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2058.167595][T22627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2058.177656][T22627] Call Trace: [ 2058.180945][T22627] [ 2058.183889][T22627] dump_stack_lvl+0x1e7/0x2e0 [ 2058.188596][T22627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2058.193819][T22627] ? __pfx__printk+0x10/0x10 [ 2058.198429][T22627] ? ___ratelimit+0x4c4/0x670 [ 2058.203140][T22627] ? __pfx____ratelimit+0x10/0x10 [ 2058.208193][T22627] dump_header+0xda/0x6a0 [ 2058.212553][T22627] oom_kill_process+0x3a7/0x930 [ 2058.217431][T22627] out_of_memory+0xf67/0x1320 [ 2058.222140][T22627] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2058.227793][T22627] ? __pfx___mutex_lock+0x10/0x10 [ 2058.232846][T22627] ? __pfx_out_of_memory+0x10/0x10 [ 2058.237987][T22627] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2058.243552][T22627] ? __pfx_lock_release+0x10/0x10 [ 2058.248600][T22627] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 02:45:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000001200000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2058.254777][T22627] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2058.260000][T22627] ? mem_cgroup_iter+0x3e9/0x560 [ 2058.265000][T22627] try_charge_memcg+0xda2/0x18a0 [ 2058.269988][T22627] ? __pfx_try_charge_memcg+0x10/0x10 [ 2058.275380][T22627] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2058.281113][T22627] ? __pfx_lock_release+0x10/0x10 [ 2058.286159][T22627] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2058.292175][T22627] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2058.297910][T22627] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2058.303734][T22627] obj_cgroup_charge+0x389/0x630 [ 2058.308698][T22627] ? obj_cgroup_charge+0x121/0x630 [ 2058.313837][T22627] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2058.319319][T22627] ? kmem_cache_alloc+0x4f/0x340 [ 2058.324277][T22627] ? __pfx___might_resched+0x10/0x10 [ 2058.329590][T22627] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2058.335435][T22627] ? __anon_vma_prepare+0x68/0x410 [ 2058.340583][T22627] kmem_cache_alloc+0x202/0x340 [ 2058.345467][T22627] __anon_vma_prepare+0x68/0x410 [ 2058.350439][T22627] __handle_mm_fault+0x6090/0x72d0 [ 2058.355610][T22627] ? __pfx___handle_mm_fault+0x10/0x10 [ 2058.361107][T22627] ? mt_find+0x226/0x850 [ 2058.365378][T22627] ? __pfx_lock_release+0x10/0x10 [ 2058.370447][T22627] ? mt_find+0x62d/0x850 [ 2058.374710][T22627] ? mt_find+0x226/0x850 [ 2058.378990][T22627] ? find_vma+0x142/0x1c0 [ 2058.383339][T22627] ? __pfx_find_vma+0x10/0x10 [ 2058.388039][T22627] handle_mm_fault+0x3c1/0x8a0 [ 2058.392834][T22627] exc_page_fault+0x2ad/0x870 [ 2058.397538][T22627] asm_exc_page_fault+0x26/0x30 [ 2058.402408][T22627] RIP: 0033:0x7f810c82c551 [ 2058.406838][T22627] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2058.426466][T22627] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2058.432558][T22627] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2058.440546][T22627] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2058.448541][T22627] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2058.456533][T22627] R10: 000000008135df0e R11: 0000000000000246 R12: 00007f810c400060 [ 2058.464526][T22627] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2058.470307][T22640] __nla_validate_parse: 29 callbacks suppressed [ 2058.470324][T22640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2058.472513][T22627] [ 2058.472543][ C0] vkms_vblank_simulate: vblank timer overrun 02:45:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2bbe}, 0x0) 02:45:02 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2058.548925][T22627] memory: usage 307200kB, limit 307200kB, failcnt 50603 [ 2058.558727][T22627] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2058.638008][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2058.638290][T22627] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 02:45:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000011500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2058.678911][T22627] Memory cgroup stats for /syz4: [ 2058.679050][T22627] cache 0 [ 2058.690590][T22627] rss 147456 [ 2058.699488][T22627] rss_huge 0 [ 2058.702873][T22627] shmem 0 [ 2058.705949][T22627] mapped_file 0 [ 2058.709507][T22627] dirty 0 [ 2058.721570][T22627] writeback 0 [ 2058.734668][T22627] workingset_refault_anon 12757 [ 2058.756766][T22627] workingset_refault_file 333 [ 2058.768932][T22644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2058.787588][T22627] swap 393216 [ 2058.795467][T22627] swapcached 0 02:45:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0xf0ffffff00000000) 02:45:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2f00}, 0x0) [ 2058.806886][T22627] pgpgin 285227 [ 2058.819385][T22627] pgpgout 285191 [ 2058.835782][T22627] pgfault 570315 [ 2058.850109][T22627] pgmajfault 11568 [ 2058.858491][T22627] inactive_anon 0 [ 2058.877262][T22627] active_anon 147456 [ 2058.882592][T22646] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2058.887812][T22627] inactive_file 0 02:45:02 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2058.907715][T22627] active_file 0 [ 2058.922870][T22627] unevictable 0 [ 2058.941549][T22627] hierarchical_memory_limit 314572800 02:45:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000021500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2058.958716][T22627] hierarchical_memsw_limit 9223372036854771712 [ 2058.977823][T22627] total_cache 0 [ 2058.997037][T22627] total_rss 147456 [ 2059.036628][T22627] total_rss_huge 0 [ 2059.040387][T22627] total_shmem 0 [ 2059.052009][T22627] total_mapped_file 0 [ 2059.056143][T22627] total_dirty 0 [ 2059.059702][T22627] total_writeback 0 [ 2059.067673][T22627] total_workingset_refault_anon 12757 [ 2059.071499][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.080514][T22627] total_workingset_refault_file 333 02:45:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x3a00}, 0x0) [ 2059.089324][T22627] total_swap 393216 [ 2059.100073][T22627] total_swapcached 0 [ 2059.108037][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2059.125256][T22627] total_pgpgin 285227 [ 2059.129404][T22627] total_pgpgout 285191 [ 2059.140712][T22627] total_pgfault 570315 [ 2059.160225][T22627] total_pgmajfault 11568 [ 2059.170088][T22627] total_inactive_anon 0 [ 2059.180448][T22627] total_active_anon 147456 [ 2059.189428][T22627] total_inactive_file 0 [ 2059.196183][T22627] total_active_file 0 [ 2059.200420][T22627] total_unevictable 0 [ 2059.208951][T22627] anon_cost 0 [ 2059.212674][T22627] file_cost 0 [ 2059.214575][T22652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0xf318000000000000) 02:45:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000003e5140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2059.231308][T22627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22627,uid=0 [ 2059.253552][T22627] Memory cgroup out of memory: Killed process 22627 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2059.380337][T22659] syz-executor.4 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2059.390561][T22654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2059.412701][T22659] CPU: 0 PID: 22659 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 02:45:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2059.423155][T22659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2059.433228][T22659] Call Trace: [ 2059.436520][T22659] [ 2059.439470][T22659] dump_stack_lvl+0x1e7/0x2e0 [ 2059.444182][T22659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2059.449412][T22659] ? __pfx__printk+0x10/0x10 [ 2059.454024][T22659] ? ___ratelimit+0x4c4/0x670 [ 2059.458729][T22659] ? __pfx____ratelimit+0x10/0x10 [ 2059.463791][T22659] dump_header+0xda/0x6a0 [ 2059.468149][T22659] oom_kill_process+0x3a7/0x930 [ 2059.473028][T22659] out_of_memory+0xf67/0x1320 [ 2059.477730][T22659] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2059.483398][T22659] ? __pfx___mutex_lock+0x10/0x10 [ 2059.488463][T22659] ? __pfx_out_of_memory+0x10/0x10 [ 2059.493611][T22659] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2059.499193][T22659] ? __pfx_lock_release+0x10/0x10 [ 2059.504244][T22659] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2059.510341][T22659] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2059.515567][T22659] ? mem_cgroup_iter+0x3e9/0x560 [ 2059.520533][T22659] try_charge_memcg+0xda2/0x18a0 [ 2059.525525][T22659] ? __pfx_try_charge_memcg+0x10/0x10 [ 2059.530908][T22659] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2059.536643][T22659] ? __pfx_lock_release+0x10/0x10 [ 2059.541702][T22659] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2059.547447][T22659] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2059.553275][T22659] __memcg_kmem_charge_page+0xe1/0x250 [ 2059.558751][T22659] __alloc_pages+0x28b/0x680 [ 2059.563375][T22659] ? __pfx___alloc_pages+0x10/0x10 [ 2059.566642][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2059.568491][T22659] ? __lock_acquire+0x1345/0x1fd0 [ 2059.568532][T22659] ? policy_nodemask+0x1ec/0x720 [ 2059.568559][T22659] alloc_pages_mpol+0x3de/0x650 [ 2059.592539][T22659] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2059.597935][T22659] ? __pmd_alloc+0x50b/0x630 [ 2059.602541][T22659] ? alloc_pages+0xee/0x170 [ 2059.607059][T22659] pte_alloc_one+0x88/0x5d0 [ 2059.611590][T22659] ? __pfx_pte_alloc_one+0x10/0x10 [ 2059.616725][T22659] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2059.621937][T22659] __pte_alloc+0x79/0x3a0 02:45:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2059.623603][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2059.626268][T22659] ? __pfx___pte_alloc+0x10/0x10 [ 2059.626301][T22659] ? __pfx_validate_chain+0x10/0x10 [ 2059.626329][T22659] __handle_mm_fault+0x5e49/0x72d0 [ 2059.650786][T22659] ? __pfx___handle_mm_fault+0x10/0x10 [ 2059.656287][T22659] ? mt_find+0x226/0x850 [ 2059.660556][T22659] ? __pfx_lock_release+0x10/0x10 [ 2059.665626][T22659] ? mt_find+0x62d/0x850 [ 2059.669894][T22659] ? mt_find+0x226/0x850 [ 2059.674187][T22659] ? find_vma+0x142/0x1c0 [ 2059.678537][T22659] ? __pfx_find_vma+0x10/0x10 [ 2059.683239][T22659] handle_mm_fault+0x3c1/0x8a0 [ 2059.688035][T22659] exc_page_fault+0x2ad/0x870 [ 2059.692739][T22659] asm_exc_page_fault+0x26/0x30 [ 2059.697613][T22659] RIP: 0033:0x7f810c82c551 [ 2059.702041][T22659] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2059.721661][T22659] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2059.727742][T22659] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2059.728937][T22664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2059.735714][T22659] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2059.735731][T22659] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2059.735743][T22659] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2059.735756][T22659] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2059.735791][T22659] [ 2059.735942][ C0] vkms_vblank_simulate: vblank timer overrun [ 2059.785885][ C0] vkms_vblank_simulate: vblank timer overrun [ 2059.802038][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.825500][T22659] memory: usage 307200kB, limit 307200kB, failcnt 50702 02:45:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x3dc3}, 0x0) 02:45:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000031500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2059.833883][T22659] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2059.843249][T22659] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2059.850558][T22659] Memory cgroup stats for /syz4: [ 2059.850686][T22659] cache 0 [ 2059.862337][T22659] rss 131072 [ 2059.865559][T22659] rss_huge 0 [ 2059.868766][T22659] shmem 0 [ 2059.871928][T22659] mapped_file 0 [ 2059.875706][T22659] dirty 0 [ 2059.878659][T22659] writeback 0 02:45:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0xff7f000000000000) [ 2059.900745][T22659] workingset_refault_anon 12757 [ 2059.908858][T22659] workingset_refault_file 333 [ 2059.961282][T22659] swap 393216 [ 2059.970713][T22659] swapcached 0 [ 2059.976272][T22659] pgpgin 285246 [ 2059.979887][T22659] pgpgout 285214 [ 2059.985830][T22659] pgfault 570367 [ 2059.996953][T22659] pgmajfault 11568 [ 2060.000782][T22659] inactive_anon 0 02:45:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2060.011554][T22659] active_anon 122880 [ 2060.022613][T22659] inactive_file 0 [ 2060.032544][T22659] active_file 0 [ 2060.039504][T22659] unevictable 0 [ 2060.046533][T22659] hierarchical_memory_limit 314572800 02:45:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4000}, 0x0) [ 2060.056679][T22659] hierarchical_memsw_limit 9223372036854771712 [ 2060.063366][T22659] total_cache 0 [ 2060.066967][T22659] total_rss 131072 [ 2060.070824][T22659] total_rss_huge 0 [ 2060.075238][T22659] total_shmem 0 [ 2060.078832][T22659] total_mapped_file 0 [ 2060.083355][T22659] total_dirty 0 [ 2060.086950][T22659] total_writeback 0 [ 2060.093293][T22659] total_workingset_refault_anon 12757 [ 2060.113607][T22659] total_workingset_refault_file 333 [ 2060.119007][T22659] total_swap 393216 [ 2060.119128][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.126527][T22659] total_swapcached 0 [ 2060.136374][T22659] total_pgpgin 285246 [ 2060.151679][T22659] total_pgpgout 285214 [ 2060.159058][T22659] total_pgfault 570367 02:45:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0xffffff7f00000000) [ 2060.168245][T22659] total_pgmajfault 11568 [ 2060.181954][T22659] total_inactive_anon 0 [ 2060.186469][T22659] total_active_anon 122880 [ 2060.192111][T22659] total_inactive_file 0 [ 2060.207725][T22659] total_active_file 0 [ 2060.212964][T22659] total_unevictable 0 02:45:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000031700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2060.217149][T22659] anon_cost 0 [ 2060.220575][T22659] file_cost 0 [ 2060.224419][T22659] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22659,uid=0 [ 2060.250352][T22659] Memory cgroup out of memory: Killed process 22659 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:45:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000002e7140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4788}, 0x0) [ 2060.380867][T22681] syz-executor.4 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2060.433975][T22681] CPU: 1 PID: 22681 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2060.444437][T22681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2060.454510][T22681] Call Trace: [ 2060.457806][T22681] [ 2060.460761][T22681] dump_stack_lvl+0x1e7/0x2e0 [ 2060.465470][T22681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2060.470696][T22681] ? __pfx__printk+0x10/0x10 [ 2060.475310][T22681] ? ___ratelimit+0x4c4/0x670 02:45:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0xffffffff00000000) [ 2060.480022][T22681] ? __pfx____ratelimit+0x10/0x10 [ 2060.485078][T22681] dump_header+0xda/0x6a0 [ 2060.489435][T22681] oom_kill_process+0x3a7/0x930 [ 2060.494319][T22681] out_of_memory+0xf67/0x1320 [ 2060.499024][T22681] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2060.504679][T22681] ? __pfx___mutex_lock+0x10/0x10 [ 2060.509740][T22681] ? __pfx_out_of_memory+0x10/0x10 [ 2060.514894][T22681] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2060.520469][T22681] ? __pfx_lock_release+0x10/0x10 [ 2060.525522][T22681] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2060.531620][T22681] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2060.536838][T22681] ? mem_cgroup_iter+0x3e9/0x560 [ 2060.541794][T22681] try_charge_memcg+0xda2/0x18a0 [ 2060.546758][T22681] ? __pfx_try_charge_memcg+0x10/0x10 [ 2060.552144][T22681] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2060.557896][T22681] ? __pfx_lock_release+0x10/0x10 [ 2060.562962][T22681] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2060.568704][T22681] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2060.574535][T22681] __memcg_kmem_charge_page+0xe1/0x250 [ 2060.580023][T22681] __alloc_pages+0x28b/0x680 02:45:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2060.584641][T22681] ? __pfx___alloc_pages+0x10/0x10 [ 2060.589776][T22681] ? __lock_acquire+0x1345/0x1fd0 [ 2060.594840][T22681] ? policy_nodemask+0x1ec/0x720 [ 2060.599808][T22681] alloc_pages_mpol+0x3de/0x650 [ 2060.604687][T22681] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2060.610083][T22681] ? __pmd_alloc+0x50b/0x630 [ 2060.614698][T22681] ? alloc_pages+0xee/0x170 [ 2060.619229][T22681] pte_alloc_one+0x88/0x5d0 [ 2060.623756][T22681] ? __pfx_pte_alloc_one+0x10/0x10 [ 2060.628896][T22681] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2060.634132][T22681] __pte_alloc+0x79/0x3a0 [ 2060.638497][T22681] ? __pfx___pte_alloc+0x10/0x10 [ 2060.643462][T22681] ? __pfx_validate_chain+0x10/0x10 [ 2060.648692][T22681] __handle_mm_fault+0x5e49/0x72d0 [ 2060.653866][T22681] ? __pfx___handle_mm_fault+0x10/0x10 [ 2060.659361][T22681] ? mt_find+0x226/0x850 [ 2060.663631][T22681] ? __pfx_lock_release+0x10/0x10 [ 2060.668701][T22681] ? mt_find+0x62d/0x850 [ 2060.672975][T22681] ? mt_find+0x226/0x850 [ 2060.677263][T22681] ? find_vma+0x142/0x1c0 [ 2060.681616][T22681] ? __pfx_find_vma+0x10/0x10 [ 2060.686321][T22681] handle_mm_fault+0x3c1/0x8a0 [ 2060.691121][T22681] exc_page_fault+0x2ad/0x870 [ 2060.695839][T22681] asm_exc_page_fault+0x26/0x30 [ 2060.700750][T22681] RIP: 0033:0x7f810c82c551 [ 2060.705187][T22681] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2060.724815][T22681] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 02:45:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x27ab, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2060.730910][T22681] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2060.738896][T22681] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2060.746887][T22681] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2060.754873][T22681] R10: 000000008135df0e R11: 0000000000000246 R12: 00007f810c400060 [ 2060.762863][T22681] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2060.770873][T22681] [ 2060.794758][T22681] memory: usage 307200kB, limit 307200kB, failcnt 50740 [ 2060.802674][T22681] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2060.817165][T22681] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2060.830160][T22681] Memory cgroup stats for /syz4: [ 2060.830302][T22681] cache 0 [ 2060.840544][T22681] rss 147456 [ 2060.844389][T22681] rss_huge 0 [ 2060.847734][T22681] shmem 0 [ 2060.850805][T22681] mapped_file 0 [ 2060.855347][T22681] dirty 0 [ 2060.858387][T22681] writeback 0 [ 2060.862191][T22681] workingset_refault_anon 12757 [ 2060.867139][T22681] workingset_refault_file 333 [ 2060.872347][T22681] swap 393216 [ 2060.875752][T22681] swapcached 0 [ 2060.879223][T22681] pgpgin 285272 [ 2060.883346][T22681] pgpgout 285236 [ 2060.889139][T22681] pgfault 570435 02:45:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000001800000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4800}, 0x0) [ 2060.898008][T22681] pgmajfault 11568 [ 2060.904178][T22681] inactive_anon 0 [ 2060.910382][T22681] active_anon 147456 [ 2060.923724][T22681] inactive_file 0 [ 2060.928779][T22681] active_file 0 [ 2060.942773][T22681] unevictable 0 [ 2060.954406][T22681] hierarchical_memory_limit 314572800 [ 2060.968210][T22681] hierarchical_memsw_limit 9223372036854771712 02:45:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2061.012861][T22681] total_cache 0 [ 2061.030406][T22681] total_rss 147456 [ 2061.047735][T22681] total_rss_huge 0 [ 2061.056546][T22681] total_shmem 0 [ 2061.060226][T22681] total_mapped_file 0 [ 2061.066010][T22681] total_dirty 0 [ 2061.069664][T22681] total_writeback 0 [ 2061.073810][T22681] total_workingset_refault_anon 12757 [ 2061.079434][T22681] total_workingset_refault_file 333 [ 2061.085075][T22681] total_swap 393216 [ 2061.089184][T22681] total_swapcached 0 [ 2061.093437][T22681] total_pgpgin 285272 [ 2061.097608][T22681] total_pgpgout 285236 [ 2061.101952][T22681] total_pgfault 570435 [ 2061.106381][T22681] total_pgmajfault 11568 02:45:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x27ab, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2061.110886][T22681] total_inactive_anon 0 [ 2061.115541][T22681] total_active_anon 147456 [ 2061.123686][T22681] total_inactive_file 0 [ 2061.131310][T22681] total_active_file 0 [ 2061.136633][T22681] total_unevictable 0 [ 2061.142579][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2061.150735][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000021800000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4888}, 0x0) [ 2061.183008][T22681] anon_cost 0 [ 2061.186977][T22681] file_cost 0 [ 2061.199544][T22681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22681,uid=0 02:45:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000002ea140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2061.247342][T22681] Memory cgroup out of memory: Killed process 22681 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:45:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x27ab, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2061.379743][T22706] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2061.396752][T22706] CPU: 0 PID: 22706 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2061.407206][T22706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2061.417282][T22706] Call Trace: [ 2061.420576][T22706] [ 2061.423529][T22706] dump_stack_lvl+0x1e7/0x2e0 [ 2061.428510][T22706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2061.433758][T22706] ? __pfx__printk+0x10/0x10 [ 2061.438357][T22706] ? ___ratelimit+0x4c4/0x670 [ 2061.443056][T22706] ? __pfx____ratelimit+0x10/0x10 [ 2061.448112][T22706] dump_header+0xda/0x6a0 [ 2061.452477][T22706] oom_kill_process+0x3a7/0x930 [ 2061.457348][T22706] out_of_memory+0xf67/0x1320 [ 2061.462025][T22706] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2061.467673][T22706] ? __pfx___mutex_lock+0x10/0x10 [ 2061.472718][T22706] ? __pfx_out_of_memory+0x10/0x10 [ 2061.477843][T22706] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2061.483391][T22706] ? __pfx_lock_release+0x10/0x10 [ 2061.488417][T22706] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2061.494486][T22706] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2061.499682][T22706] ? mem_cgroup_iter+0x3e9/0x560 [ 2061.504623][T22706] try_charge_memcg+0xda2/0x18a0 [ 2061.509577][T22706] ? __pfx_try_charge_memcg+0x10/0x10 [ 2061.514945][T22706] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2061.520660][T22706] ? __pfx_lock_release+0x10/0x10 [ 2061.525699][T22706] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2061.531710][T22706] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2061.537444][T22706] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2061.543248][T22706] obj_cgroup_charge+0x389/0x630 [ 2061.548185][T22706] ? obj_cgroup_charge+0x121/0x630 [ 2061.553295][T22706] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2061.558751][T22706] ? kmem_cache_alloc+0x4f/0x340 [ 2061.563684][T22706] ? __pfx___might_resched+0x10/0x10 [ 2061.568966][T22706] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2061.574777][T22706] ? __anon_vma_prepare+0x68/0x410 [ 2061.579883][T22706] kmem_cache_alloc+0x202/0x340 [ 2061.584736][T22706] __anon_vma_prepare+0x68/0x410 [ 2061.589679][T22706] __handle_mm_fault+0x6090/0x72d0 [ 2061.594808][T22706] ? __pfx___handle_mm_fault+0x10/0x10 [ 2061.600268][T22706] ? mt_find+0x226/0x850 [ 2061.604508][T22706] ? __pfx_lock_release+0x10/0x10 [ 2061.609543][T22706] ? mt_find+0x62d/0x850 [ 2061.613782][T22706] ? mt_find+0x226/0x850 [ 2061.618034][T22706] ? find_vma+0x142/0x1c0 [ 2061.622359][T22706] ? __pfx_find_vma+0x10/0x10 [ 2061.627032][T22706] handle_mm_fault+0x3c1/0x8a0 [ 2061.631806][T22706] exc_page_fault+0x2ad/0x870 [ 2061.636492][T22706] asm_exc_page_fault+0x26/0x30 [ 2061.641336][T22706] RIP: 0033:0x7f810c82c551 [ 2061.645747][T22706] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2061.665345][T22706] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2061.671408][T22706] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2061.679374][T22706] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2061.687334][T22706] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2061.695295][T22706] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2061.703257][T22706] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2061.711235][T22706] [ 2061.714383][ C0] vkms_vblank_simulate: vblank timer overrun [ 2061.725690][T22706] memory: usage 307200kB, limit 307200kB, failcnt 50773 [ 2061.734881][T22706] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2061.748879][T22706] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2061.757242][T22706] Memory cgroup stats for /syz4: [ 2061.757372][T22706] cache 0 [ 2061.766086][T22706] rss 147456 [ 2061.770496][T22706] rss_huge 0 [ 2061.774618][T22706] shmem 0 [ 2061.777638][T22706] mapped_file 0 02:45:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000001d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4c00}, 0x0) [ 2061.781165][T22706] dirty 0 [ 2061.784478][T22706] writeback 0 [ 2061.787854][T22706] workingset_refault_anon 12757 [ 2061.793207][T22706] workingset_refault_file 333 [ 2061.797969][T22706] swap 393216 [ 2061.801334][T22706] swapcached 0 [ 2061.806351][T22706] pgpgin 285294 [ 2061.809908][T22706] pgpgout 285258 [ 2061.814376][T22706] pgfault 570494 [ 2061.819886][T22706] pgmajfault 11568 [ 2061.824074][T22706] inactive_anon 0 [ 2061.827819][T22706] active_anon 147456 [ 2061.838340][T22706] inactive_file 0 [ 2061.844446][T22706] active_file 0 [ 2061.853517][T22706] unevictable 0 [ 2061.861073][T22706] hierarchical_memory_limit 314572800 [ 2061.874202][T22706] hierarchical_memsw_limit 9223372036854771712 [ 2061.889119][T22706] total_cache 0 [ 2061.893136][T22706] total_rss 147456 [ 2061.896964][T22706] total_rss_huge 0 [ 2061.901260][T22706] total_shmem 0 [ 2061.906128][T22706] total_mapped_file 0 [ 2061.910316][T22706] total_dirty 0 [ 2061.914526][T22706] total_writeback 0 [ 2061.918480][T22706] total_workingset_refault_anon 12757 [ 2061.924531][T22706] total_workingset_refault_file 333 [ 2061.929875][T22706] total_swap 393216 [ 2061.936131][T22706] total_swapcached 0 [ 2061.940276][T22706] total_pgpgin 285294 [ 2061.947769][T22706] total_pgpgout 285258 [ 2061.952352][T22706] total_pgfault 570494 [ 2061.956668][T22706] total_pgmajfault 11568 [ 2061.961170][T22706] total_inactive_anon 0 [ 2061.966234][T22706] total_active_anon 147456 [ 2061.970886][T22706] total_inactive_file 0 [ 2061.975985][T22706] total_active_file 0 [ 2061.980217][T22706] total_unevictable 0 [ 2061.985700][T22706] anon_cost 0 02:45:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d6163767461700000028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2061.989240][T22706] file_cost 0 [ 2061.993221][T22706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22706,uid=0 02:45:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000002ed140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2062.031168][T22706] Memory cgroup out of memory: Killed process 22706 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x5865}, 0x0) [ 2062.162527][T22721] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2062.178141][T22721] CPU: 1 PID: 22721 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2062.188587][T22721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2062.198667][T22721] Call Trace: [ 2062.201960][T22721] [ 2062.204915][T22721] dump_stack_lvl+0x1e7/0x2e0 02:45:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000021d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2062.209632][T22721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2062.214860][T22721] ? __pfx__printk+0x10/0x10 [ 2062.219471][T22721] ? ___ratelimit+0x4c4/0x670 [ 2062.224187][T22721] ? __pfx____ratelimit+0x10/0x10 [ 2062.229247][T22721] dump_header+0xda/0x6a0 [ 2062.233609][T22721] oom_kill_process+0x3a7/0x930 [ 2062.238498][T22721] out_of_memory+0xf67/0x1320 [ 2062.243201][T22721] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2062.248847][T22721] ? __pfx___mutex_lock+0x10/0x10 [ 2062.253904][T22721] ? __pfx_out_of_memory+0x10/0x10 [ 2062.259052][T22721] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2062.264624][T22721] ? __pfx_lock_release+0x10/0x10 [ 2062.269674][T22721] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2062.275760][T22721] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2062.280984][T22721] ? mem_cgroup_iter+0x3e9/0x560 [ 2062.285957][T22721] try_charge_memcg+0xda2/0x18a0 [ 2062.290933][T22721] ? __pfx_try_charge_memcg+0x10/0x10 [ 2062.296322][T22721] ? percpu_ref_tryget+0x14/0x180 [ 2062.301382][T22721] charge_memcg+0xa2/0x160 [ 2062.305826][T22721] __mem_cgroup_charge+0x27/0x80 02:45:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000031d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2062.310784][T22721] folio_prealloc+0x52/0x170 [ 2062.315398][T22721] do_wp_page+0x1222/0x4c90 [ 2062.319940][T22721] ? __pfx_do_wp_page+0x10/0x10 [ 2062.324821][T22721] ? __pfx_lock_acquire+0x10/0x10 [ 2062.329878][T22721] ? do_raw_spin_lock+0x14e/0x370 [ 2062.334934][T22721] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2062.340169][T22721] __handle_mm_fault+0x26ad/0x72d0 [ 2062.345335][T22721] ? reacquire_held_locks+0x3eb/0x690 [ 2062.350730][T22721] ? __pfx___handle_mm_fault+0x10/0x10 [ 2062.356226][T22721] ? __pfx_reacquire_held_locks+0x10/0x10 02:45:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000002000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2062.361982][T22721] ? mtree_range_walk+0x6fd/0x8e0 [ 2062.367029][T22721] ? lock_vma_under_rcu+0x18a/0x730 [ 2062.372247][T22721] ? __pfx_lock_release+0x10/0x10 [ 2062.377291][T22721] ? lock_vma_under_rcu+0x2f9/0x730 [ 2062.382532][T22721] ? lock_vma_under_rcu+0x18a/0x730 [ 2062.387749][T22721] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2062.393313][T22721] handle_mm_fault+0x3c1/0x8a0 [ 2062.398098][T22721] exc_page_fault+0x456/0x870 [ 2062.402805][T22721] asm_exc_page_fault+0x26/0x30 [ 2062.407681][T22721] RIP: 0033:0x7f810c839c40 [ 2062.412118][T22721] Code: 89 1c 24 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 89 c5 e9 7f fe ff ff 0f 1f 84 00 00 00 00 00 <43> 89 2c 8e e9 a5 fe ff ff 0f 1f 80 00 00 00 00 48 39 c3 74 99 48 [ 2062.431747][T22721] RSP: 002b:00007f810cacfa60 EFLAGS: 00010246 [ 2062.437840][T22721] RAX: 00000000845c9453 RBX: 00007f810c9ac018 RCX: 000000000000000c [ 2062.445826][T22721] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 000000000001eb8a [ 2062.453802][T22721] RBP: 00000000845c9453 R08: 0000001b32120000 R09: 0000000000001453 [ 2062.461783][T22721] R10: 00000000845c9457 R11: 0000000000000246 R12: 000000000000000c [ 2062.469778][T22721] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff845c9fda [ 2062.477772][T22721] ? apparmor_socket_create+0x10a/0x150 [ 2062.483366][T22721] [ 2062.491037][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.499733][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.502343][T22721] memory: usage 307200kB, limit 307200kB, failcnt 50843 [ 2062.509047][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.515648][T22721] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2062.531355][T22721] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 02:45:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d6163767461700000028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000002100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2062.557030][T22721] Memory cgroup stats for /syz4: [ 2062.557167][T22721] cache 0 [ 2062.571751][T22721] rss 131072 [ 2062.579977][T22721] rss_huge 0 [ 2062.587356][T22721] shmem 0 [ 2062.591788][T22721] mapped_file 0 [ 2062.598702][T22721] dirty 0 02:45:06 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2062.610042][T22721] writeback 0 [ 2062.619738][T22721] workingset_refault_anon 12757 [ 2062.632226][T22721] workingset_refault_file 333 [ 2062.653001][T22721] swap 393216 [ 2062.656391][T22721] swapcached 0 02:45:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d6163767461700000028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6000}, 0x0) [ 2062.678149][T22721] pgpgin 285312 [ 2062.690753][T22721] pgpgout 285280 [ 2062.699471][T22721] pgfault 570545 [ 2062.711612][T22721] pgmajfault 11568 [ 2062.717757][T22721] inactive_anon 0 [ 2062.732019][T22721] active_anon 131072 [ 2062.743993][T22721] inactive_file 0 [ 2062.751203][T22721] active_file 0 [ 2062.755319][T22721] unevictable 0 [ 2062.758866][T22721] hierarchical_memory_limit 314572800 [ 2062.764832][T22721] hierarchical_memsw_limit 9223372036854771712 [ 2062.771082][T22721] total_cache 0 [ 2062.774698][T22721] total_rss 131072 [ 2062.778510][T22721] total_rss_huge 0 02:45:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000002500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2062.782540][T22721] total_shmem 0 [ 2062.786094][T22721] total_mapped_file 0 [ 2062.790156][T22721] total_dirty 0 [ 2062.793777][T22721] total_writeback 0 [ 2062.797679][T22721] total_workingset_refault_anon 12757 [ 2062.803457][T22721] total_workingset_refault_file 333 [ 2062.808810][T22721] total_swap 393216 [ 2062.813256][T22721] total_swapcached 0 [ 2062.817324][T22721] total_pgpgin 285312 [ 2062.824754][T22721] total_pgpgout 285280 [ 2062.828973][T22721] total_pgfault 570545 [ 2062.835114][T22721] total_pgmajfault 11568 [ 2062.839499][T22721] total_inactive_anon 0 [ 2062.846525][T22721] total_active_anon 131072 [ 2062.851076][T22721] total_inactive_file 0 [ 2062.861188][T22721] total_active_file 0 [ 2062.870240][T22721] total_unevictable 0 [ 2062.878924][T22721] anon_cost 0 02:45:06 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000003ef140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2062.883751][T22721] file_cost 0 [ 2062.887168][T22721] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22721,uid=0 [ 2062.908962][T22721] Memory cgroup out of memory: Killed process 22721 (syz-executor.4) total-vm:54508kB, anon-rss:496kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:45:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000032900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d61053cf210ee482575f0529c57d3d9", @ANYRES8=r2], 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r1, 0x40, 0x7, 0x9, 0x40, {{0x18, 0x4, 0x0, 0x2f, 0x60, 0x65, 0x0, 0x7f, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp_prespec={0x44, 0x3c, 0xdf, 0x3, 0x2, [{@rand_addr=0x64010101, 0xc1ec41b4}, {@rand_addr=0x64010101, 0xffff}, {@loopback, 0xde7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@multicast1, 0x401}, {@empty, 0x560}, {@multicast2, 0x80000000}]}, @ssrr={0x89, 0xf, 0xf7, [@empty, @broadcast, @multicast1]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@bridge_setlink={0x64, 0x13, 0x400, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r4, 0x2000, 0x8214}, [@IFLA_PHYS_SWITCH_ID={0x16, 0x24, "37c7bf9e2554b1fb69113659ce8f0c5c4bdb"}, @IFLA_MTU={0x8, 0x4, 0x80000001}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3a619}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 02:45:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6400}, 0x0) [ 2063.053779][T22747] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2063.097292][T22747] CPU: 0 PID: 22747 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2063.107752][T22747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2063.117821][T22747] Call Trace: [ 2063.121123][T22747] [ 2063.124067][T22747] dump_stack_lvl+0x1e7/0x2e0 [ 2063.128769][T22747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2063.133994][T22747] ? __pfx__printk+0x10/0x10 [ 2063.138636][T22747] ? ___ratelimit+0x4c4/0x670 02:45:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6558}, 0x0) [ 2063.143349][T22747] ? __pfx____ratelimit+0x10/0x10 [ 2063.148456][T22747] dump_header+0xda/0x6a0 [ 2063.152817][T22747] oom_kill_process+0x3a7/0x930 [ 2063.157701][T22747] out_of_memory+0xf67/0x1320 [ 2063.162411][T22747] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2063.168066][T22747] ? __pfx___mutex_lock+0x10/0x10 [ 2063.173126][T22747] ? __pfx_out_of_memory+0x10/0x10 [ 2063.178269][T22747] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2063.183841][T22747] ? __pfx_lock_release+0x10/0x10 [ 2063.188891][T22747] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2063.194980][T22747] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2063.200180][T22747] ? mem_cgroup_iter+0x3e9/0x560 [ 2063.205117][T22747] try_charge_memcg+0xda2/0x18a0 [ 2063.210068][T22747] ? __pfx_try_charge_memcg+0x10/0x10 [ 2063.215438][T22747] ? percpu_ref_tryget+0x14/0x180 [ 2063.220472][T22747] charge_memcg+0xa2/0x160 [ 2063.224889][T22747] __mem_cgroup_charge+0x27/0x80 [ 2063.229823][T22747] folio_prealloc+0x52/0x170 [ 2063.234410][T22747] do_wp_page+0x1222/0x4c90 [ 2063.238919][T22747] ? __pfx_do_wp_page+0x10/0x10 [ 2063.243770][T22747] ? __pfx_lock_acquire+0x10/0x10 [ 2063.248796][T22747] ? do_raw_spin_lock+0x14e/0x370 [ 2063.253830][T22747] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2063.259029][T22747] __handle_mm_fault+0x26ad/0x72d0 [ 2063.264155][T22747] ? reacquire_held_locks+0x3eb/0x690 [ 2063.269524][T22747] ? __pfx___handle_mm_fault+0x10/0x10 [ 2063.274992][T22747] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2063.280717][T22747] ? mtree_range_walk+0x6fd/0x8e0 [ 2063.285737][T22747] ? lock_vma_under_rcu+0x18a/0x730 [ 2063.290929][T22747] ? __pfx_lock_release+0x10/0x10 [ 2063.295952][T22747] ? lock_vma_under_rcu+0x2f9/0x730 [ 2063.301160][T22747] ? lock_vma_under_rcu+0x18a/0x730 [ 2063.306353][T22747] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2063.311901][T22747] handle_mm_fault+0x3c1/0x8a0 [ 2063.316667][T22747] exc_page_fault+0x456/0x870 [ 2063.321341][T22747] asm_exc_page_fault+0x26/0x30 [ 2063.326309][T22747] RIP: 0033:0x7f810c839c40 [ 2063.330744][T22747] Code: 89 1c 24 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 89 c5 e9 7f fe ff ff 0f 1f 84 00 00 00 00 00 <43> 89 2c 8e e9 a5 fe ff ff 0f 1f 80 00 00 00 00 48 39 c3 74 99 48 [ 2063.350367][T22747] RSP: 002b:00007f810cacfa60 EFLAGS: 00010246 [ 2063.356461][T22747] RAX: 00000000845ce3c5 RBX: 00007f810c9ac018 RCX: 000000000000000b [ 2063.364448][T22747] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 000000000001818b [ 2063.372434][T22747] RBP: 00000000845ce3c5 R08: 0000001b32120000 R09: 00000000000003c5 [ 2063.380440][T22747] R10: 00000000845ce3c9 R11: 0000000000000246 R12: 000000000000000b [ 2063.388431][T22747] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff845ce45b [ 2063.396418][T22747] ? begin_current_label_crit_section+0xeb/0x1e0 [ 2063.402792][T22747] [ 2063.405971][ C0] vkms_vblank_simulate: vblank timer overrun [ 2063.499764][ C0] net_ratelimit: 1 callbacks suppressed [ 2063.499784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.550318][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.560670][T22752] __nla_validate_parse: 30 callbacks suppressed [ 2063.560686][T22752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2063.568486][T22747] memory: usage 307176kB, limit 307200kB, failcnt 50883 [ 2063.585058][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.623952][T22747] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 2063.632404][T22747] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 2063.636251][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2063.640051][T22747] Memory cgroup stats for /syz4: [ 2063.649412][T22747] cache 0 [ 2063.659823][T22747] rss 110592 [ 2063.663487][T22747] rss_huge 0 02:45:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000002b00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2063.688891][T22747] shmem 0 [ 2063.696138][T22747] mapped_file 0 [ 2063.699888][T22747] dirty 0 [ 2063.705109][T22747] writeback 0 [ 2063.711174][T22747] workingset_refault_anon 12757 [ 2063.718240][T22747] workingset_refault_file 333 [ 2063.723686][T22747] swap 393216 [ 2063.727274][T22747] swapcached 0 [ 2063.730932][T22747] pgpgin 285326 [ 2063.735257][T22747] pgpgout 285299 02:45:07 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2063.739043][T22747] pgfault 570589 [ 2063.743154][T22747] pgmajfault 11568 [ 2063.746502][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2063.749848][T22747] inactive_anon 0 [ 2063.771266][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2063.776022][T22747] active_anon 110592 [ 2063.793054][T22747] inactive_file 0 [ 2063.796953][T22747] active_file 0 [ 2063.800701][T22747] unevictable 0 [ 2063.807346][T22747] hierarchical_memory_limit 314572800 [ 2063.813401][T22747] hierarchical_memsw_limit 9223372036854771712 [ 2063.828751][T22747] total_cache 0 [ 2063.832943][T22747] total_rss 110592 02:45:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6800}, 0x0) [ 2063.835253][T22760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2063.846926][T22747] total_rss_huge 0 [ 2063.856439][T22747] total_shmem 0 [ 2063.866551][T22747] total_mapped_file 0 [ 2063.870705][T22747] total_dirty 0 [ 2063.878105][T22747] total_writeback 0 [ 2063.884032][T22747] total_workingset_refault_anon 12757 [ 2063.896156][T22747] total_workingset_refault_file 333 [ 2063.903457][T22747] total_swap 393216 [ 2063.907475][T22747] total_swapcached 0 [ 2063.913798][T22747] total_pgpgin 285326 [ 2063.918014][T22747] total_pgpgout 285299 [ 2063.928202][T22747] total_pgfault 570589 [ 2063.933357][T22747] total_pgmajfault 11568 02:45:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000002d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2063.954346][T22747] total_inactive_anon 0 [ 2063.961539][T22747] total_active_anon 110592 [ 2063.972230][T22747] total_inactive_file 0 [ 2063.977702][T22747] total_active_file 0 [ 2063.985316][T22747] total_unevictable 0 [ 2063.988315][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2063.991787][T22747] anon_cost 0 02:45:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6c00}, 0x0) 02:45:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d61053cf210ee482575f0529c57d3d9", @ANYRES8=r2], 0x3c}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r1, 0x40, 0x7, 0x9, 0x40, {{0x18, 0x4, 0x0, 0x2f, 0x60, 0x65, 0x0, 0x7f, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp_prespec={0x44, 0x3c, 0xdf, 0x3, 0x2, [{@rand_addr=0x64010101, 0xc1ec41b4}, {@rand_addr=0x64010101, 0xffff}, {@loopback, 0xde7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@multicast1, 0x401}, {@empty, 0x560}, {@multicast2, 0x80000000}]}, @ssrr={0x89, 0xf, 0xf7, [@empty, @broadcast, @multicast1]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@bridge_setlink={0x64, 0x13, 0x400, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r4, 0x2000, 0x8214}, [@IFLA_PHYS_SWITCH_ID={0x16, 0x24, "37c7bf9e2554b1fb69113659ce8f0c5c4bdb"}, @IFLA_MTU={0x8, 0x4, 0x80000001}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3a619}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000) [ 2064.033091][T22747] file_cost 0 [ 2064.043946][T22747] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22747,uid=0 [ 2064.060583][T22747] Memory cgroup out of memory: Killed process 22747 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:45:07 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000001f7140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2064.134736][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000032d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2064.228314][T22771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2064.256820][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x7400}, 0x0) [ 2064.271631][T22776] syz-executor.4 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2064.289802][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2064.310626][T22776] CPU: 0 PID: 22776 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2064.321070][T22776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2064.331137][T22776] Call Trace: [ 2064.334426][T22776] [ 2064.337368][T22776] dump_stack_lvl+0x1e7/0x2e0 [ 2064.342065][T22776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2064.347311][T22776] ? __pfx__printk+0x10/0x10 [ 2064.351923][T22776] ? ___ratelimit+0x4c4/0x670 [ 2064.356629][T22776] ? __pfx____ratelimit+0x10/0x10 [ 2064.361678][T22776] dump_header+0xda/0x6a0 [ 2064.366041][T22776] oom_kill_process+0x3a7/0x930 [ 2064.370925][T22776] out_of_memory+0xf67/0x1320 [ 2064.375634][T22776] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2064.381297][T22776] ? __pfx___mutex_lock+0x10/0x10 [ 2064.386348][T22776] ? __pfx_out_of_memory+0x10/0x10 [ 2064.391487][T22776] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2064.397065][T22776] ? __pfx_lock_release+0x10/0x10 [ 2064.402117][T22776] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2064.408216][T22776] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2064.413454][T22776] ? mem_cgroup_iter+0x3e9/0x560 [ 2064.418395][T22776] try_charge_memcg+0xda2/0x18a0 [ 2064.423346][T22776] ? __pfx_try_charge_memcg+0x10/0x10 [ 2064.428713][T22776] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2064.434432][T22776] ? __pfx_lock_release+0x10/0x10 [ 2064.439467][T22776] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2064.445181][T22776] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2064.450985][T22776] __memcg_kmem_charge_page+0xe1/0x250 [ 2064.456449][T22776] __alloc_pages+0x28b/0x680 [ 2064.461040][T22776] ? __pfx___alloc_pages+0x10/0x10 [ 2064.466148][T22776] ? __lock_acquire+0x1345/0x1fd0 [ 2064.471177][T22776] ? policy_nodemask+0x1ec/0x720 [ 2064.476115][T22776] alloc_pages_mpol+0x3de/0x650 [ 2064.480962][T22776] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2064.486339][T22776] ? __pmd_alloc+0x50b/0x630 [ 2064.490921][T22776] ? alloc_pages+0xee/0x170 [ 2064.495428][T22776] pte_alloc_one+0x88/0x5d0 [ 2064.499942][T22776] ? __pfx_pte_alloc_one+0x10/0x10 [ 2064.505054][T22776] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2064.510253][T22776] __pte_alloc+0x79/0x3a0 [ 2064.514601][T22776] ? __pfx___pte_alloc+0x10/0x10 [ 2064.519545][T22776] ? __pfx_validate_chain+0x10/0x10 [ 2064.524747][T22776] __handle_mm_fault+0x5e49/0x72d0 [ 2064.529881][T22776] ? __pfx___handle_mm_fault+0x10/0x10 [ 2064.535345][T22776] ? mt_find+0x226/0x850 [ 2064.539601][T22776] ? __pfx_lock_release+0x10/0x10 [ 2064.544645][T22776] ? mt_find+0x62d/0x850 [ 2064.548887][T22776] ? mt_find+0x226/0x850 [ 2064.553144][T22776] ? find_vma+0x142/0x1c0 [ 2064.557467][T22776] ? __pfx_find_vma+0x10/0x10 [ 2064.562144][T22776] handle_mm_fault+0x3c1/0x8a0 [ 2064.566914][T22776] exc_page_fault+0x2ad/0x870 [ 2064.571595][T22776] asm_exc_page_fault+0x26/0x30 [ 2064.576451][T22776] RIP: 0033:0x7f810c82c551 [ 2064.580863][T22776] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2064.600466][T22776] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2064.606535][T22776] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2064.614506][T22776] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2064.622469][T22776] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2064.630431][T22776] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2064.638394][T22776] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2064.646372][T22776] [ 2064.649551][ C0] vkms_vblank_simulate: vblank timer overrun 02:45:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x7a00}, 0x0) 02:45:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2064.690657][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2064.703708][T22776] memory: usage 307200kB, limit 307200kB, failcnt 50952 [ 2064.710765][T22776] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 02:45:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d61053cf210ee482575f0529c57d3d9", @ANYRES8=r2], 0x3c}}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r1, 0x40, 0x7, 0x9, 0x40, {{0x18, 0x4, 0x0, 0x2f, 0x60, 0x65, 0x0, 0x7f, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp_prespec={0x44, 0x3c, 0xdf, 0x3, 0x2, [{@rand_addr=0x64010101, 0xc1ec41b4}, {@rand_addr=0x64010101, 0xffff}, {@loopback, 0xde7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@multicast1, 0x401}, {@empty, 0x560}, {@multicast2, 0x80000000}]}, @ssrr={0x89, 0xf, 0xf7, [@empty, @broadcast, @multicast1]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@bridge_setlink={0x64, 0x13, 0x400, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r4, 0x2000, 0x8214}, [@IFLA_PHYS_SWITCH_ID={0x16, 0x24, "37c7bf9e2554b1fb69113659ce8f0c5c4bdb"}, @IFLA_MTU={0x8, 0x4, 0x80000001}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3a619}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000) [ 2064.735472][T22776] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2064.746134][T22776] Memory cgroup stats for /syz4: [ 2064.746265][T22776] cache 0 [ 2064.758824][T22776] rss 147456 [ 2064.776694][T22776] rss_huge 0 02:45:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000002f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2064.796492][T22776] shmem 0 [ 2064.799613][T22776] mapped_file 0 [ 2064.813167][T22776] dirty 0 [ 2064.821310][T22776] writeback 0 [ 2064.828410][T22776] workingset_refault_anon 12757 [ 2064.837562][T22776] workingset_refault_file 333 02:45:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2064.846919][T22776] swap 393216 [ 2064.859828][T22776] swapcached 0 [ 2064.869208][T22776] pgpgin 285353 [ 2064.875951][T22776] pgpgout 285317 [ 2064.882175][T22776] pgfault 570660 [ 2064.893112][T22776] pgmajfault 11568 [ 2064.905039][T22776] inactive_anon 0 [ 2064.915502][T22776] active_anon 147456 [ 2064.920778][T22776] inactive_file 0 [ 2064.929020][T22776] active_file 0 [ 2064.936733][T22776] unevictable 0 [ 2064.943860][T22776] hierarchical_memory_limit 314572800 02:45:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x8100}, 0x0) [ 2064.950319][T22776] hierarchical_memsw_limit 9223372036854771712 [ 2064.958703][T22776] total_cache 0 [ 2064.962772][T22776] total_rss 147456 [ 2064.969047][T22776] total_rss_huge 0 [ 2064.977910][T22776] total_shmem 0 [ 2064.987557][T22776] total_mapped_file 0 [ 2064.995220][T22776] total_dirty 0 [ 2064.999377][T22776] total_writeback 0 [ 2065.003878][T22776] total_workingset_refault_anon 12757 [ 2065.012420][T22776] total_workingset_refault_file 333 [ 2065.017916][T22776] total_swap 393216 [ 2065.024070][T22776] total_swapcached 0 [ 2065.028286][T22776] total_pgpgin 285353 [ 2065.037616][T22776] total_pgpgout 285317 [ 2065.041954][T22776] total_pgfault 570660 02:45:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000003100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc72, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRESOCT=r1], 0x3c}}, 0x8804) [ 2065.055238][T22776] total_pgmajfault 11568 [ 2065.067197][T22776] total_inactive_anon 0 [ 2065.078288][T22776] total_active_anon 147456 [ 2065.090723][T22776] total_inactive_file 0 [ 2065.099927][T22776] total_active_file 0 02:45:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2065.117750][T22776] total_unevictable 0 [ 2065.123272][T22776] anon_cost 0 [ 2065.126731][T22776] file_cost 0 [ 2065.130168][T22776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22776,uid=0 02:45:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc72, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRESOCT=r1], 0x3c}}, 0x8804) 02:45:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x8847}, 0x0) [ 2065.174863][T22776] Memory cgroup out of memory: Killed process 22776 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:45:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000003500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000003f7140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc72, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRESOCT=r1], 0x3c}}, 0x8804) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffc72, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRESOCT=r1], 0x3c}}, 0x8804) (async) 02:45:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)="00c5c8ee", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2065.396404][T22811] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2065.430479][T22811] CPU: 0 PID: 22811 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 02:45:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)="00c5c8ee", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2065.440938][T22811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2065.451014][T22811] Call Trace: [ 2065.454316][T22811] [ 2065.457273][T22811] dump_stack_lvl+0x1e7/0x2e0 [ 2065.461988][T22811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2065.467217][T22811] ? __pfx__printk+0x10/0x10 [ 2065.471827][T22811] ? ___ratelimit+0x4c4/0x670 [ 2065.476530][T22811] ? __pfx____ratelimit+0x10/0x10 [ 2065.481587][T22811] dump_header+0xda/0x6a0 [ 2065.485947][T22811] oom_kill_process+0x3a7/0x930 [ 2065.490827][T22811] out_of_memory+0xf67/0x1320 [ 2065.495537][T22811] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2065.501198][T22811] ? __pfx___mutex_lock+0x10/0x10 [ 2065.506255][T22811] ? __pfx_out_of_memory+0x10/0x10 [ 2065.511403][T22811] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2065.516978][T22811] ? __pfx_lock_release+0x10/0x10 [ 2065.522037][T22811] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2065.528149][T22811] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2065.533372][T22811] ? mem_cgroup_iter+0x3e9/0x560 [ 2065.538333][T22811] try_charge_memcg+0xda2/0x18a0 [ 2065.543290][T22811] ? __pfx_try_charge_memcg+0x10/0x10 [ 2065.548662][T22811] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2065.554379][T22811] ? __pfx_lock_release+0x10/0x10 [ 2065.559405][T22811] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2065.565396][T22811] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2065.571111][T22811] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2065.576915][T22811] obj_cgroup_charge+0x389/0x630 [ 2065.581860][T22811] ? obj_cgroup_charge+0x121/0x630 [ 2065.586971][T22811] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2065.592429][T22811] ? kmem_cache_alloc+0x4f/0x340 [ 2065.597362][T22811] ? __pfx___might_resched+0x10/0x10 [ 2065.602650][T22811] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2065.608458][T22811] ? __anon_vma_prepare+0x68/0x410 [ 2065.613571][T22811] kmem_cache_alloc+0x202/0x340 [ 2065.618429][T22811] __anon_vma_prepare+0x68/0x410 [ 2065.623369][T22811] __handle_mm_fault+0x6090/0x72d0 [ 2065.628503][T22811] ? __pfx___handle_mm_fault+0x10/0x10 [ 2065.633966][T22811] ? mt_find+0x226/0x850 [ 2065.638206][T22811] ? __pfx_lock_release+0x10/0x10 [ 2065.643242][T22811] ? mt_find+0x62d/0x850 [ 2065.647481][T22811] ? mt_find+0x226/0x850 [ 2065.651734][T22811] ? find_vma+0x142/0x1c0 [ 2065.656059][T22811] ? __pfx_find_vma+0x10/0x10 [ 2065.660730][T22811] handle_mm_fault+0x3c1/0x8a0 [ 2065.665493][T22811] exc_page_fault+0x2ad/0x870 [ 2065.670170][T22811] asm_exc_page_fault+0x26/0x30 [ 2065.675016][T22811] RIP: 0033:0x7f810c82c551 [ 2065.679424][T22811] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2065.699022][T22811] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2065.705085][T22811] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2065.713052][T22811] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2065.721012][T22811] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2065.728974][T22811] R10: 000000008135df0e R11: 0000000000000246 R12: 00007f810c400060 [ 2065.736943][T22811] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2065.744922][T22811] 02:45:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000040)="00c5c8ee", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2065.748103][ C0] vkms_vblank_simulate: vblank timer overrun [ 2065.766489][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x8848}, 0x0) [ 2065.798268][T22811] memory: usage 307200kB, limit 307200kB, failcnt 51016 [ 2065.836807][T22811] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 02:45:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000e6ff130000800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000023500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2065.854926][T22811] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2065.872879][T22811] Memory cgroup stats for /syz4: [ 2065.873001][T22811] cache 0 02:45:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2065.936316][T22811] rss 147456 [ 2065.939563][T22811] rss_huge 0 [ 2065.962244][T22811] shmem 0 [ 2065.965215][T22811] mapped_file 0 [ 2065.968679][T22811] dirty 0 02:45:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xbe2b}, 0x0) 02:45:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000e6ff130000800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000e6ff130000800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) (async) [ 2065.994730][T22811] writeback 0 [ 2066.007414][T22811] workingset_refault_anon 12757 [ 2066.018030][T22811] workingset_refault_file 333 [ 2066.043732][T22811] swap 393216 [ 2066.047054][T22811] swapcached 0 [ 2066.050440][T22811] pgpgin 285375 [ 2066.078293][T22811] pgpgout 285339 [ 2066.087664][T22811] pgfault 570719 [ 2066.091273][T22811] pgmajfault 11568 02:45:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003040000002b3500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2066.110780][T22811] inactive_anon 0 [ 2066.127204][T22811] active_anon 126976 [ 2066.131141][T22811] inactive_file 0 [ 2066.135302][T22811] active_file 0 [ 2066.138782][T22811] unevictable 0 02:45:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2066.158488][T22811] hierarchical_memory_limit 314572800 02:45:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xc33d}, 0x0) 02:45:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000e6ff130000800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2066.182074][T22811] hierarchical_memsw_limit 9223372036854771712 [ 2066.188260][T22811] total_cache 0 [ 2066.202251][T22811] total_rss 147456 [ 2066.207423][T22811] total_rss_huge 0 [ 2066.211265][T22811] total_shmem 0 [ 2066.218324][T22811] total_mapped_file 0 [ 2066.227901][T22811] total_dirty 0 [ 2066.256871][T22811] total_writeback 0 [ 2066.260858][T22811] total_workingset_refault_anon 12757 [ 2066.279451][T22811] total_workingset_refault_file 333 [ 2066.286793][T22811] total_swap 393216 [ 2066.291005][T22811] total_swapcached 0 02:45:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000013900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2066.307483][T22811] total_pgpgin 285375 [ 2066.321135][T22811] total_pgpgout 285339 [ 2066.327477][T22811] total_pgfault 570719 [ 2066.334583][T22811] total_pgmajfault 11568 [ 2066.340121][T22811] total_inactive_anon 0 02:45:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2066.355476][T22811] total_active_anon 126976 [ 2066.360464][T22811] total_inactive_file 0 [ 2066.373201][T22811] total_active_file 0 [ 2066.380002][T22811] total_unevictable 0 [ 2066.397348][T22811] anon_cost 0 [ 2066.406585][T22811] file_cost 0 02:45:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\r\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f0000000300)='.\n$)|.\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xff', 0xfeffffff00000000) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 02:45:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xff7f}, 0x0) [ 2066.438757][T22811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22811,uid=0 [ 2066.463020][T22811] Memory cgroup out of memory: Killed process 22811 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000003fd140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\r\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f0000000300)='.\n$)|.\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xff', 0xfeffffff00000000) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) fsopen(&(0x7f0000000080)='binder\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\r\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f0000000300)='.\n$)|.\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xff', 0xfeffffff00000000) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async) [ 2066.603823][T22860] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2066.636482][T22860] CPU: 0 PID: 22860 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2066.646937][T22860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2066.657014][T22860] Call Trace: [ 2066.660314][T22860] [ 2066.663260][T22860] dump_stack_lvl+0x1e7/0x2e0 [ 2066.667978][T22860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2066.673221][T22860] ? __pfx__printk+0x10/0x10 [ 2066.677833][T22860] ? ___ratelimit+0x4c4/0x670 [ 2066.682549][T22860] ? __pfx____ratelimit+0x10/0x10 [ 2066.687600][T22860] dump_header+0xda/0x6a0 [ 2066.691960][T22860] oom_kill_process+0x3a7/0x930 [ 2066.696830][T22860] out_of_memory+0xf67/0x1320 [ 2066.701508][T22860] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2066.707134][T22860] ? __pfx___mutex_lock+0x10/0x10 [ 2066.712153][T22860] ? __pfx_out_of_memory+0x10/0x10 [ 2066.717257][T22860] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2066.722792][T22860] ? __pfx_lock_release+0x10/0x10 [ 2066.727822][T22860] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2066.733904][T22860] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2066.739102][T22860] ? mem_cgroup_iter+0x3e9/0x560 [ 2066.744038][T22860] try_charge_memcg+0xda2/0x18a0 [ 2066.749003][T22860] ? __pfx_try_charge_memcg+0x10/0x10 [ 2066.754402][T22860] ? percpu_ref_tryget+0x14/0x180 [ 2066.759447][T22860] charge_memcg+0xa2/0x160 [ 2066.763865][T22860] __mem_cgroup_charge+0x27/0x80 [ 2066.768795][T22860] __handle_mm_fault+0x5120/0x72d0 [ 2066.773916][T22860] ? __pfx___handle_mm_fault+0x10/0x10 [ 2066.779370][T22860] ? mt_find+0x226/0x850 [ 2066.783608][T22860] ? __pfx_lock_release+0x10/0x10 [ 2066.788634][T22860] ? mt_find+0x62d/0x850 [ 2066.792873][T22860] ? mt_find+0x226/0x850 [ 2066.797122][T22860] ? find_vma+0x142/0x1c0 [ 2066.801454][T22860] ? __pfx_find_vma+0x10/0x10 [ 2066.806144][T22860] handle_mm_fault+0x3c1/0x8a0 [ 2066.810905][T22860] exc_page_fault+0x2ad/0x870 [ 2066.815579][T22860] asm_exc_page_fault+0x26/0x30 [ 2066.820419][T22860] RIP: 0033:0x7f810c82c551 [ 2066.824825][T22860] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2066.844429][T22860] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 02:45:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000003a00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2066.850517][T22860] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2066.858498][T22860] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2066.866460][T22860] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2066.874423][T22860] R10: 000000008135df0e R11: 0000000000000246 R12: 00007f810c400060 [ 2066.882383][T22860] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2066.890383][T22860] [ 2066.893495][ C0] vkms_vblank_simulate: vblank timer overrun 02:45:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x1000000}, 0x0) 02:45:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\r\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f0000000300)='.\n$)|.\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xff', 0xfeffffff00000000) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) [ 2066.904069][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2066.912513][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2066.937478][T22860] memory: usage 307200kB, limit 307200kB, failcnt 51082 [ 2066.944828][T22860] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 02:45:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2066.980460][T22860] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2066.996711][T22860] Memory cgroup stats for /syz4: [ 2066.997813][T22860] cache 0 [ 2067.018363][T22860] rss 147456 [ 2067.024646][T22860] rss_huge 0 02:45:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2000000}, 0x0) [ 2067.043115][T22860] shmem 0 [ 2067.056814][T22860] mapped_file 0 [ 2067.074392][T22860] dirty 0 [ 2067.083395][T22860] writeback 0 02:45:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="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", @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) [ 2067.091612][T22860] workingset_refault_anon 12757 [ 2067.097092][T22860] workingset_refault_file 333 [ 2067.103835][T22860] swap 393216 [ 2067.107479][T22860] swapcached 0 [ 2067.111032][T22860] pgpgin 285398 [ 2067.126573][T22860] pgpgout 285362 [ 2067.137131][T22860] pgfault 570778 [ 2067.154487][T22860] pgmajfault 11568 [ 2067.159225][T22860] inactive_anon 0 [ 2067.163658][T22860] active_anon 147456 [ 2067.167773][T22860] inactive_file 0 [ 2067.171713][T22860] active_file 0 [ 2067.175415][T22860] unevictable 0 [ 2067.179081][T22860] hierarchical_memory_limit 314572800 [ 2067.185319][T22860] hierarchical_memsw_limit 9223372036854771712 [ 2067.191906][T22860] total_cache 0 [ 2067.195620][T22860] total_rss 147456 [ 2067.199591][T22860] total_rss_huge 0 02:45:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000023b00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2067.203637][T22860] total_shmem 0 [ 2067.207385][T22860] total_mapped_file 0 [ 2067.217025][T22860] total_dirty 0 [ 2067.225285][T22860] total_writeback 0 [ 2067.231051][T22860] total_workingset_refault_anon 12757 02:45:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2067.257239][T22860] total_workingset_refault_file 333 02:45:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="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", @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="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", @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) 02:45:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x3000000}, 0x0) [ 2067.279902][T22860] total_swap 393216 [ 2067.297529][T22860] total_swapcached 0 [ 2067.321715][T22860] total_pgpgin 285398 [ 2067.325855][T22860] total_pgpgout 285362 [ 2067.330019][T22860] total_pgfault 570778 [ 2067.335188][T22860] total_pgmajfault 11568 [ 2067.340684][T22860] total_inactive_anon 0 [ 2067.352880][T22860] total_active_anon 147456 [ 2067.357671][T22860] total_inactive_file 0 [ 2067.367416][T22860] total_active_file 0 02:45:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000003d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2067.374025][T22860] total_unevictable 0 [ 2067.378720][T22860] anon_cost 0 [ 2067.390598][T22860] file_cost 0 [ 2067.397067][T22860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22860,uid=0 02:45:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000003ff140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2067.433958][T22860] Memory cgroup out of memory: Killed process 22860 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="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", @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 02:45:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4000000}, 0x0) [ 2067.598514][T22897] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2067.608999][T22897] CPU: 0 PID: 22897 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2067.619427][T22897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2067.629500][T22897] Call Trace: [ 2067.632796][T22897] [ 2067.635734][T22897] dump_stack_lvl+0x1e7/0x2e0 [ 2067.640418][T22897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2067.645612][T22897] ? __pfx__printk+0x10/0x10 [ 2067.650197][T22897] ? ___ratelimit+0x4c4/0x670 [ 2067.654868][T22897] ? __pfx____ratelimit+0x10/0x10 [ 2067.659887][T22897] dump_header+0xda/0x6a0 [ 2067.664226][T22897] oom_kill_process+0x3a7/0x930 [ 2067.669101][T22897] out_of_memory+0xf67/0x1320 [ 2067.673796][T22897] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2067.679433][T22897] ? __pfx___mutex_lock+0x10/0x10 [ 2067.684462][T22897] ? __pfx_out_of_memory+0x10/0x10 [ 2067.689583][T22897] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2067.695129][T22897] ? __pfx_lock_release+0x10/0x10 [ 2067.700156][T22897] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2067.706223][T22897] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2067.711417][T22897] ? mem_cgroup_iter+0x3e9/0x560 [ 2067.716364][T22897] try_charge_memcg+0xda2/0x18a0 [ 2067.721317][T22897] ? __pfx_try_charge_memcg+0x10/0x10 [ 2067.726683][T22897] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2067.732397][T22897] ? __pfx_lock_release+0x10/0x10 [ 2067.737422][T22897] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2067.743403][T22897] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2067.749113][T22897] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2067.754915][T22897] obj_cgroup_charge+0x389/0x630 [ 2067.759849][T22897] ? obj_cgroup_charge+0x121/0x630 [ 2067.764962][T22897] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2067.770414][T22897] ? kmem_cache_alloc+0x4f/0x340 [ 2067.775348][T22897] ? __pfx___might_resched+0x10/0x10 [ 2067.780634][T22897] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2067.786444][T22897] ? __anon_vma_prepare+0x68/0x410 [ 2067.791565][T22897] kmem_cache_alloc+0x202/0x340 [ 2067.796415][T22897] __anon_vma_prepare+0x68/0x410 [ 2067.801351][T22897] __handle_mm_fault+0x6090/0x72d0 [ 2067.806481][T22897] ? __pfx___handle_mm_fault+0x10/0x10 [ 2067.811964][T22897] ? mt_find+0x226/0x850 [ 2067.816216][T22897] ? __pfx_lock_release+0x10/0x10 [ 2067.821254][T22897] ? mt_find+0x62d/0x850 [ 2067.825493][T22897] ? mt_find+0x226/0x850 [ 2067.829748][T22897] ? find_vma+0x142/0x1c0 [ 2067.834070][T22897] ? __pfx_find_vma+0x10/0x10 [ 2067.838760][T22897] handle_mm_fault+0x3c1/0x8a0 [ 2067.843529][T22897] exc_page_fault+0x2ad/0x870 [ 2067.848207][T22897] asm_exc_page_fault+0x26/0x30 [ 2067.853055][T22897] RIP: 0033:0x7f810c82c551 [ 2067.857464][T22897] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2067.877076][T22897] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2067.883150][T22897] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2067.891138][T22897] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2067.899106][T22897] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2067.907078][T22897] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2067.915047][T22897] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2067.923026][T22897] [ 2067.926204][ C0] vkms_vblank_simulate: vblank timer overrun [ 2067.939405][T22897] memory: usage 307200kB, limit 307200kB, failcnt 51143 02:45:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000013d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2067.952393][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2067.965582][T22897] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2067.974807][T22897] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2067.982900][T22897] Memory cgroup stats for /syz4: [ 2067.983037][T22897] cache 0 [ 2067.991229][T22897] rss 147456 [ 2067.996115][T22897] rss_huge 0 02:45:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)={0x58, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @vht_group_id={0x15, 0x1, {0x0, "796d6e9f0d3180738b3391f564d73d37"}}}}]}, 0x58}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe4, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe1e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x509}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x93b4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4b678b9b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003040043b881d92b2ac119000300", @ANYRES32=r5, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) 02:45:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2068.004264][T22897] shmem 0 [ 2068.008096][T22897] mapped_file 0 [ 2068.012126][T22897] dirty 0 [ 2068.015233][T22897] writeback 0 [ 2068.018646][T22897] workingset_refault_anon 12757 [ 2068.024616][T22897] workingset_refault_file 333 [ 2068.029421][T22897] swap 393216 [ 2068.044844][T22897] swapcached 0 [ 2068.048333][T22897] pgpgin 285420 [ 2068.085145][T22897] pgpgout 285384 02:45:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x5000000}, 0x0) [ 2068.110137][T22897] pgfault 570837 [ 2068.134484][T22897] pgmajfault 11568 [ 2068.148047][T22897] inactive_anon 0 [ 2068.159897][T22897] active_anon 147456 [ 2068.167737][T22897] inactive_file 0 [ 2068.172213][T22897] active_file 0 [ 2068.175860][T22897] unevictable 0 02:45:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000004000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2068.184372][T22897] hierarchical_memory_limit 314572800 [ 2068.194534][T22897] hierarchical_memsw_limit 9223372036854771712 [ 2068.200991][T22897] total_cache 0 [ 2068.204988][T22897] total_rss 147456 [ 2068.208876][T22897] total_rss_huge 0 [ 2068.213049][T22897] total_shmem 0 [ 2068.218141][T22897] total_mapped_file 0 [ 2068.222898][T22897] total_dirty 0 [ 2068.226619][T22897] total_writeback 0 [ 2068.230672][T22897] total_workingset_refault_anon 12757 [ 2068.236793][T22897] total_workingset_refault_file 333 [ 2068.243872][T22897] total_swap 393216 [ 2068.247956][T22897] total_swapcached 0 [ 2068.252403][T22897] total_pgpgin 285420 [ 2068.272480][T22897] total_pgpgout 285384 [ 2068.279038][T22897] total_pgfault 570837 02:45:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)={0x58, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @vht_group_id={0x15, 0x1, {0x0, "796d6e9f0d3180738b3391f564d73d37"}}}}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe4, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe1e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x509}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x93b4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4b678b9b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003040043b881d92b2ac119000300", @ANYRES32=r5, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) 02:45:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6000000}, 0x0) [ 2068.290537][T22897] total_pgmajfault 11568 [ 2068.296205][T22897] total_inactive_anon 0 [ 2068.300514][T22897] total_active_anon 147456 [ 2068.307126][T22897] total_inactive_file 0 [ 2068.330781][T22897] total_active_file 0 [ 2068.373716][T22897] total_unevictable 0 [ 2068.377775][T22897] anon_cost 0 [ 2068.381074][T22897] file_cost 0 02:45:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000004100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2068.410835][T22897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22897,uid=0 02:45:12 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)={0x58, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @action={@with_ht={{{}, {}, @device_a, @device_b}}, @vht_group_id={0x15, 0x1, {0x0, "796d6e9f0d3180738b3391f564d73d37"}}}}]}, 0x58}}, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (rerun: 64) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe4, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe1e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x509}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x93b4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4b678b9b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003040043b881d92b2ac119000300", @ANYRES32=r5, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) [ 2068.539806][T20465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.548737][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.559939][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.581964][T22897] Memory cgroup out of memory: Killed process 22897 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x7000000}, 0x0) 02:45:12 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000007fff140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$FITHAW(r0, 0xc0045878) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) [ 2068.680509][T22921] __nla_validate_parse: 30 callbacks suppressed [ 2068.680528][T22921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2068.782155][T22930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2068.806649][T22935] syz-executor.4 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2068.820011][T22935] CPU: 0 PID: 22935 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2068.830456][T22935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2068.840523][T22935] Call Trace: [ 2068.843824][T22935] [ 2068.846771][T22935] dump_stack_lvl+0x1e7/0x2e0 [ 2068.850125][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2068.851459][T22935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2068.851490][T22935] ? __pfx__printk+0x10/0x10 [ 2068.851511][T22935] ? ___ratelimit+0x4c4/0x670 [ 2068.851537][T22935] ? __pfx____ratelimit+0x10/0x10 [ 2068.851564][T22935] dump_header+0xda/0x6a0 [ 2068.884536][T22935] oom_kill_process+0x3a7/0x930 [ 2068.889417][T22935] out_of_memory+0xf67/0x1320 [ 2068.894125][T22935] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2068.899776][T22935] ? __pfx___mutex_lock+0x10/0x10 [ 2068.904822][T22935] ? __pfx_out_of_memory+0x10/0x10 [ 2068.909950][T22935] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2068.915513][T22935] ? __pfx_lock_release+0x10/0x10 [ 2068.920554][T22935] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2068.926647][T22935] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2068.931866][T22935] ? mem_cgroup_iter+0x3e9/0x560 [ 2068.936824][T22935] try_charge_memcg+0xda2/0x18a0 [ 2068.941801][T22935] ? __pfx_try_charge_memcg+0x10/0x10 [ 2068.947197][T22935] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2068.952937][T22935] ? __pfx_lock_release+0x10/0x10 [ 2068.958012][T22935] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2068.963749][T22935] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2068.969583][T22935] __memcg_kmem_charge_page+0xe1/0x250 [ 2068.975074][T22935] __alloc_pages+0x28b/0x680 02:45:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) ioctl$FITHAW(r0, 0xc0045878) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 02:45:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x8000000}, 0x0) [ 2068.979687][T22935] ? __pfx___alloc_pages+0x10/0x10 [ 2068.984818][T22935] ? __lock_acquire+0x1345/0x1fd0 [ 2068.989881][T22935] ? policy_nodemask+0x1ec/0x720 [ 2068.994850][T22935] alloc_pages_mpol+0x3de/0x650 [ 2068.999727][T22935] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2069.005124][T22935] ? __pmd_alloc+0x50b/0x630 [ 2069.009734][T22935] ? alloc_pages+0xee/0x170 [ 2069.014268][T22935] pte_alloc_one+0x88/0x5d0 [ 2069.018797][T22935] ? __pfx_pte_alloc_one+0x10/0x10 [ 2069.023935][T22935] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2069.029161][T22935] __pte_alloc+0x79/0x3a0 [ 2069.033523][T22935] ? __pfx___pte_alloc+0x10/0x10 [ 2069.038481][T22935] ? __pfx_validate_chain+0x10/0x10 [ 2069.043709][T22935] __handle_mm_fault+0x5e49/0x72d0 [ 2069.048876][T22935] ? __pfx___handle_mm_fault+0x10/0x10 [ 2069.054419][T22935] ? mt_find+0x226/0x850 [ 2069.058687][T22935] ? __pfx_lock_release+0x10/0x10 [ 2069.058912][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2069.063736][T22935] ? mt_find+0x62d/0x850 [ 2069.063766][T22935] ? mt_find+0x226/0x850 [ 2069.063811][T22935] ? find_vma+0x142/0x1c0 [ 2069.085813][T22935] ? __pfx_find_vma+0x10/0x10 [ 2069.090525][T22935] handle_mm_fault+0x3c1/0x8a0 [ 2069.095318][T22935] exc_page_fault+0x2ad/0x870 [ 2069.100017][T22935] asm_exc_page_fault+0x26/0x30 [ 2069.104882][T22935] RIP: 0033:0x7f810c82c551 [ 2069.109314][T22935] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 02:45:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$FITHAW(r0, 0xc0045878) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) ioctl$FITHAW(r0, 0xc0045878) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async) [ 2069.128937][T22935] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2069.135062][T22935] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2069.143049][T22935] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2069.151033][T22935] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2069.159018][T22935] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2069.167005][T22935] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2069.175015][T22935] [ 2069.178153][ C0] vkms_vblank_simulate: vblank timer overrun 02:45:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000034100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0xa}}, 0x0) [ 2069.194579][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2069.227388][T22935] memory: usage 307200kB, limit 307200kB, failcnt 51223 [ 2069.235209][T22935] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 02:45:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x9000000}, 0x0) [ 2069.243631][T22947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2069.274436][T22935] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2069.282928][T22935] Memory cgroup stats for /syz4: [ 2069.292172][T22935] cache 0 [ 2069.300158][T22935] rss 147456 [ 2069.311184][T22935] rss_huge 0 [ 2069.320148][T22935] shmem 0 [ 2069.333671][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x10}}, 0x0) [ 2069.347807][T22935] mapped_file 0 02:45:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000004800000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2069.381264][T22935] dirty 0 [ 2069.398426][T22935] writeback 0 [ 2069.414856][T22935] workingset_refault_anon 12757 02:45:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x64}}, 0x0) 02:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x38, 0x16, 0x0, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x1, 0xfd, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1f}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) [ 2069.431517][T22935] workingset_refault_file 333 [ 2069.436227][T22935] swap 393216 [ 2069.439516][T22935] swapcached 0 [ 2069.464974][T22935] pgpgin 285442 [ 2069.468504][T22935] pgpgout 285406 [ 2069.475716][T22935] pgfault 570896 02:45:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xa000000}, 0x0) [ 2069.493697][T22960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2069.495059][T22935] pgmajfault 11568 [ 2069.515329][T22935] inactive_anon 0 [ 2069.524677][T22935] active_anon 147456 [ 2069.536740][T22935] inactive_file 0 [ 2069.544915][T22935] active_file 0 [ 2069.557620][T22935] unevictable 0 [ 2069.561355][T22935] hierarchical_memory_limit 314572800 [ 2069.567288][T22935] hierarchical_memsw_limit 9223372036854771712 [ 2069.576813][T22935] total_cache 0 [ 2069.580470][T22935] total_rss 147456 [ 2069.583144][T22962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000034b00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2069.587353][T22935] total_rss_huge 0 [ 2069.603287][T22935] total_shmem 0 [ 2069.625452][T22935] total_mapped_file 0 [ 2069.632246][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2069.634856][T22935] total_dirty 0 [ 2069.649726][T22935] total_writeback 0 [ 2069.653934][T22935] total_workingset_refault_anon 12757 [ 2069.659918][T22935] total_workingset_refault_file 333 [ 2069.665686][T22935] total_swap 393216 [ 2069.669958][T22935] total_swapcached 0 [ 2069.674444][T22935] total_pgpgin 285442 [ 2069.678654][T22935] total_pgpgout 285406 [ 2069.683139][T22935] total_pgfault 570896 [ 2069.684782][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x140}}, 0x0) [ 2069.690595][T22935] total_pgmajfault 11568 [ 2069.701079][T22935] total_inactive_anon 0 [ 2069.708231][T22935] total_active_anon 147456 [ 2069.713076][T22935] total_inactive_file 0 [ 2069.717775][T22935] total_active_file 0 [ 2069.722810][T22935] total_unevictable 0 [ 2069.726997][T22935] anon_cost 0 [ 2069.730474][T22935] file_cost 0 02:45:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000030012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2069.734782][T22935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22935,uid=0 [ 2069.751919][T22935] Memory cgroup out of memory: Killed process 22935 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x38, 0x16, 0x0, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x1, 0xfd, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1f}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 02:45:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xb000000}, 0x0) [ 2069.847645][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2069.882959][T22971] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2069.904867][T22971] CPU: 0 PID: 22971 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2069.915315][T22971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2069.925387][T22971] Call Trace: [ 2069.928682][T22971] [ 2069.931630][T22971] dump_stack_lvl+0x1e7/0x2e0 [ 2069.936341][T22971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2069.941564][T22971] ? __pfx__printk+0x10/0x10 [ 2069.946175][T22971] ? ___ratelimit+0x4c4/0x670 02:45:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getaddr={0x38, 0x16, 0x0, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x1, 0xfd, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1f}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) [ 2069.950882][T22971] ? __pfx____ratelimit+0x10/0x10 [ 2069.955938][T22971] dump_header+0xda/0x6a0 [ 2069.960315][T22971] oom_kill_process+0x3a7/0x930 [ 2069.965189][T22971] out_of_memory+0xf67/0x1320 [ 2069.969889][T22971] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2069.975536][T22971] ? __pfx___mutex_lock+0x10/0x10 [ 2069.980588][T22971] ? __pfx_out_of_memory+0x10/0x10 [ 2069.985728][T22971] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2069.991293][T22971] ? __pfx_lock_release+0x10/0x10 [ 2069.996337][T22971] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2070.002422][T22971] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2070.007663][T22971] ? mem_cgroup_iter+0x3e9/0x560 [ 2070.012634][T22971] try_charge_memcg+0xda2/0x18a0 [ 2070.017622][T22971] ? __pfx_try_charge_memcg+0x10/0x10 [ 2070.023018][T22971] ? percpu_ref_tryget+0x14/0x180 [ 2070.028088][T22971] charge_memcg+0xa2/0x160 [ 2070.032533][T22971] __mem_cgroup_charge+0x27/0x80 [ 2070.037492][T22971] __handle_mm_fault+0x5120/0x72d0 [ 2070.042651][T22971] ? __pfx___handle_mm_fault+0x10/0x10 [ 2070.048141][T22971] ? mt_find+0x226/0x850 [ 2070.052391][T22971] ? __pfx_lock_release+0x10/0x10 [ 2070.057438][T22971] ? mt_find+0x62d/0x850 [ 2070.061699][T22971] ? mt_find+0x226/0x850 [ 2070.065986][T22971] ? find_vma+0x142/0x1c0 [ 2070.070330][T22971] ? __pfx_find_vma+0x10/0x10 [ 2070.075030][T22971] handle_mm_fault+0x3c1/0x8a0 [ 2070.079812][T22971] exc_page_fault+0x2ad/0x870 [ 2070.084509][T22971] asm_exc_page_fault+0x26/0x30 [ 2070.089387][T22971] RIP: 0033:0x7f810c82c551 02:45:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0xfffffffffffffedb, 0x800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000300)=0x4) r3 = dup3(r1, r0, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000005c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1d}}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) [ 2070.093825][T22971] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2070.113455][T22971] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2070.119535][T22971] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2070.127516][T22971] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2070.135505][T22971] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2070.143492][T22971] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2070.151480][T22971] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2070.159470][T22971] [ 2070.162556][ C0] vkms_vblank_simulate: vblank timer overrun [ 2070.193809][T22971] memory: usage 307200kB, limit 307200kB, failcnt 51295 02:45:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0xfffffffffffffedb, 0x800) (async) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0xfffffffffffffedb, 0x800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000300)=0x4) r3 = dup3(r1, r0, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000005c0)) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1d}}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) 02:45:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000004c00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2070.210004][T14578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.233366][T20465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.242022][T22971] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2070.242204][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.259469][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.269527][T22971] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2070.293065][T22971] Memory cgroup stats for /syz4: [ 2070.293198][T22971] cache 0 [ 2070.301098][T22971] rss 147456 [ 2070.305703][T22971] rss_huge 0 02:45:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0xec0}}, 0x0) [ 2070.308965][T22971] shmem 0 [ 2070.324549][T22971] mapped_file 0 [ 2070.334235][T22971] dirty 0 [ 2070.337365][T22971] writeback 0 [ 2070.340798][T22971] workingset_refault_anon 12757 [ 2070.348392][T22971] workingset_refault_file 333 02:45:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xc000000}, 0x0) [ 2070.363060][T22971] swap 393216 [ 2070.370597][T22971] swapcached 0 [ 2070.381935][T22971] pgpgin 285464 [ 2070.390139][T22971] pgpgout 285428 [ 2070.402571][T22971] pgfault 570957 [ 2070.410572][T22971] pgmajfault 11568 02:45:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000025100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2070.435582][T22971] inactive_anon 0 [ 2070.446373][T22971] active_anon 147456 [ 2070.457067][T22971] inactive_file 0 [ 2070.466623][T22971] active_file 0 [ 2070.473855][T22971] unevictable 0 02:45:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0xfffffffffffffedb, 0x800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280), &(0x7f0000000300)=0x4) (async) r3 = dup3(r1, r0, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000005c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1d}}, @GTPA_LINK={0x8, 0x1, r9}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}}, 0x20000000) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) [ 2070.483981][T22971] hierarchical_memory_limit 314572800 [ 2070.494313][T22971] hierarchical_memsw_limit 9223372036854771712 02:45:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xd000000}, 0x0) [ 2070.532940][T22971] total_cache 0 [ 2070.541176][T22971] total_rss 147456 [ 2070.547954][T22971] total_rss_huge 0 [ 2070.553803][T22971] total_shmem 0 [ 2070.562096][T22971] total_mapped_file 0 [ 2070.574848][T22971] total_dirty 0 02:45:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x33fe0}}, 0x0) [ 2070.582236][T22971] total_writeback 0 [ 2070.589820][T22971] total_workingset_refault_anon 12757 [ 2070.605132][T22971] total_workingset_refault_file 333 [ 2070.611882][T22971] total_swap 393216 [ 2070.615871][T22971] total_swapcached 0 [ 2070.623931][T22971] total_pgpgin 285464 [ 2070.628070][T22971] total_pgpgout 285428 [ 2070.632954][T22971] total_pgfault 570957 [ 2070.637205][T22971] total_pgmajfault 11568 [ 2070.644306][T22971] total_inactive_anon 0 [ 2070.648658][T22971] total_active_anon 147456 [ 2070.655084][T22971] total_inactive_file 0 [ 2070.659497][T22971] total_active_file 0 [ 2070.664069][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000035100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = epoll_create(0x20) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r0, &(0x7f0000000000)={r4, r0, 0x2}) process_vm_readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000040)}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f00000015c0)=""/108, 0x6c}], 0x8, &(0x7f00000000c0)=[{&(0x7f00000016c0)=""/140, 0x8c}], 0x1, 0x0) [ 2070.691536][T22971] total_unevictable 0 [ 2070.700119][T22971] anon_cost 0 [ 2070.713595][T22971] file_cost 0 [ 2070.721970][T22971] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=22971,uid=0 02:45:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000000000b0012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xe000000}, 0x0) [ 2070.760392][T22971] Memory cgroup out of memory: Killed process 22971 (syz-executor.4) total-vm:54508kB, anon-rss:500kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x5f5e0ff}}, 0x0) [ 2070.885820][T23006] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2070.896272][T23006] CPU: 1 PID: 23006 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2070.906711][T23006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2070.916780][T23006] Call Trace: [ 2070.920077][T23006] [ 2070.923024][T23006] dump_stack_lvl+0x1e7/0x2e0 [ 2070.927741][T23006] ? __pfx_dump_stack_lvl+0x10/0x10 02:45:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x2}, 0x0) [ 2070.932967][T23006] ? __pfx__printk+0x10/0x10 [ 2070.937580][T23006] ? ___ratelimit+0x4c4/0x670 [ 2070.942287][T23006] ? __pfx____ratelimit+0x10/0x10 [ 2070.947346][T23006] dump_header+0xda/0x6a0 [ 2070.951705][T23006] oom_kill_process+0x3a7/0x930 [ 2070.956584][T23006] out_of_memory+0xf67/0x1320 [ 2070.961294][T23006] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2070.966952][T23006] ? __pfx___mutex_lock+0x10/0x10 [ 2070.972013][T23006] ? __pfx_out_of_memory+0x10/0x10 [ 2070.977166][T23006] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2070.982739][T23006] ? __pfx_lock_release+0x10/0x10 [ 2070.987793][T23006] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2070.993893][T23006] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2070.999117][T23006] ? mem_cgroup_iter+0x3e9/0x560 [ 2071.004086][T23006] try_charge_memcg+0xda2/0x18a0 [ 2071.009078][T23006] ? __pfx_try_charge_memcg+0x10/0x10 [ 2071.014475][T23006] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2071.020212][T23006] ? __pfx_lock_release+0x10/0x10 [ 2071.025256][T23006] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2071.031780][T23006] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2071.037516][T23006] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2071.043347][T23006] obj_cgroup_charge+0x389/0x630 [ 2071.048313][T23006] ? obj_cgroup_charge+0x121/0x630 [ 2071.053451][T23006] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2071.058932][T23006] ? kmem_cache_alloc+0x4f/0x340 [ 2071.063895][T23006] ? __pfx___might_resched+0x10/0x10 [ 2071.069205][T23006] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2071.075032][T23006] ? __anon_vma_prepare+0x68/0x410 [ 2071.080173][T23006] kmem_cache_alloc+0x202/0x340 [ 2071.085060][T23006] __anon_vma_prepare+0x68/0x410 [ 2071.090032][T23006] __handle_mm_fault+0x6090/0x72d0 [ 2071.095211][T23006] ? __pfx___handle_mm_fault+0x10/0x10 [ 2071.100704][T23006] ? mt_find+0x226/0x850 [ 2071.104968][T23006] ? __pfx_lock_release+0x10/0x10 [ 2071.110032][T23006] ? mt_find+0x62d/0x850 [ 2071.114304][T23006] ? mt_find+0x226/0x850 [ 2071.118591][T23006] ? find_vma+0x142/0x1c0 [ 2071.122935][T23006] ? __pfx_find_vma+0x10/0x10 [ 2071.127632][T23006] handle_mm_fault+0x3c1/0x8a0 [ 2071.132421][T23006] exc_page_fault+0x2ad/0x870 02:45:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x4}, 0x0) [ 2071.137122][T23006] asm_exc_page_fault+0x26/0x30 [ 2071.141990][T23006] RIP: 0033:0x7f810c82c551 [ 2071.146426][T23006] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2071.166055][T23006] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2071.172143][T23006] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 02:45:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xf000000}, 0x0) 02:45:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) getpid() (async) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = epoll_create(0x20) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r0, &(0x7f0000000000)={r4, r0, 0x2}) process_vm_readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000040)}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f00000015c0)=""/108, 0x6c}], 0x8, &(0x7f00000000c0)=[{&(0x7f00000016c0)=""/140, 0x8c}], 0x1, 0x0) [ 2071.180130][T23006] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2071.188118][T23006] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2071.196106][T23006] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2071.204097][T23006] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2071.212107][T23006] 02:45:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000035700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2071.259090][T23006] memory: usage 307200kB, limit 307200kB, failcnt 51366 [ 2071.266409][T23006] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2071.274578][T23006] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 [ 2071.282149][T23006] Memory cgroup stats for /syz4: [ 2071.282275][T23006] cache 0 [ 2071.290377][T23006] rss 147456 [ 2071.294155][T23006] rss_huge 0 [ 2071.298157][T23006] shmem 0 [ 2071.303672][T23006] mapped_file 0 [ 2071.307371][T23006] dirty 0 [ 2071.310589][T23006] writeback 0 [ 2071.316177][T23006] workingset_refault_anon 12757 [ 2071.321334][T23006] workingset_refault_file 333 [ 2071.326277][T23006] swap 393216 [ 2071.330166][T23006] swapcached 0 [ 2071.333893][T23006] pgpgin 285487 [ 2071.337570][T23006] pgpgout 285451 [ 2071.348760][T23006] pgfault 571016 [ 2071.354092][T23006] pgmajfault 11568 [ 2071.358898][T23006] inactive_anon 0 [ 2071.365579][T23006] active_anon 147456 [ 2071.371139][T23006] inactive_file 0 [ 2071.376356][T23006] active_file 0 [ 2071.379912][T23006] unevictable 0 [ 2071.389311][T23006] hierarchical_memory_limit 314572800 [ 2071.395976][T23006] hierarchical_memsw_limit 9223372036854771712 [ 2071.406817][T23006] total_cache 0 [ 2071.410403][T23006] total_rss 147456 [ 2071.414471][T23006] total_rss_huge 0 [ 2071.419633][T23006] total_shmem 0 [ 2071.429925][T23006] total_mapped_file 0 [ 2071.434960][T23006] total_dirty 0 [ 2071.438694][T23006] total_writeback 0 [ 2071.447241][T23006] total_workingset_refault_anon 12757 [ 2071.453831][T23006] total_workingset_refault_file 333 02:45:15 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = epoll_create(0x20) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r0, &(0x7f0000000000)={r4, r0, 0x2}) process_vm_readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000040)}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f00000015c0)=""/108, 0x6c}], 0x8, &(0x7f00000000c0)=[{&(0x7f00000016c0)=""/140, 0x8c}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) (async) getpid() (async) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) epoll_create(0x20) (async) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r0, &(0x7f0000000000)={r4, r0, 0x2}) (async) process_vm_readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f0000000040)}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f00000015c0)=""/108, 0x6c}], 0x8, &(0x7f00000000c0)=[{&(0x7f00000016c0)=""/140, 0x8c}], 0x1, 0x0) (async) [ 2071.460530][T23006] total_swap 393216 [ 2071.466690][T23006] total_swapcached 0 [ 2071.470919][T23006] total_pgpgin 285487 [ 2071.475341][T23006] total_pgpgout 285451 [ 2071.479543][T23006] total_pgfault 571016 [ 2071.483974][T23006] total_pgmajfault 11568 [ 2071.489645][T23006] total_inactive_anon 0 [ 2071.494017][T23006] total_active_anon 147456 [ 2071.498701][T23006] total_inactive_file 0 [ 2071.509638][T23006] total_active_file 0 [ 2071.518505][T23006] total_unevictable 0 [ 2071.528901][T23006] anon_cost 0 [ 2071.539976][T23006] file_cost 0 02:45:15 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x5}, 0x0) 02:45:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x10000000}, 0x0) [ 2071.551570][T23006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23006,uid=0 [ 2071.583952][T23006] Memory cgroup out of memory: Killed process 23006 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000015900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000000000c0012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2071.808106][T23039] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2071.818939][T23039] CPU: 0 PID: 23039 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2071.829381][T23039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2071.839449][T23039] Call Trace: [ 2071.842739][T23039] [ 2071.845686][T23039] dump_stack_lvl+0x1e7/0x2e0 [ 2071.850393][T23039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2071.855622][T23039] ? __pfx__printk+0x10/0x10 [ 2071.860230][T23039] ? ___ratelimit+0x4c4/0x670 [ 2071.864923][T23039] ? __pfx____ratelimit+0x10/0x10 [ 2071.869971][T23039] dump_header+0xda/0x6a0 [ 2071.874334][T23039] oom_kill_process+0x3a7/0x930 [ 2071.879218][T23039] out_of_memory+0xf67/0x1320 [ 2071.883921][T23039] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2071.889574][T23039] ? __pfx___mutex_lock+0x10/0x10 [ 2071.894623][T23039] ? __pfx_out_of_memory+0x10/0x10 [ 2071.899773][T23039] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2071.905338][T23039] ? __pfx_lock_release+0x10/0x10 [ 2071.910383][T23039] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2071.916474][T23039] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2071.921691][T23039] ? mem_cgroup_iter+0x3e9/0x560 [ 2071.926650][T23039] try_charge_memcg+0xda2/0x18a0 [ 2071.931608][T23039] ? __pfx_try_charge_memcg+0x10/0x10 [ 2071.936974][T23039] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2071.942685][T23039] ? __pfx_lock_release+0x10/0x10 [ 2071.947713][T23039] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2071.953700][T23039] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2071.959409][T23039] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2071.965210][T23039] obj_cgroup_charge+0x389/0x630 [ 2071.970151][T23039] ? obj_cgroup_charge+0x121/0x630 [ 2071.975263][T23039] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2071.980726][T23039] ? kmem_cache_alloc+0x4f/0x340 [ 2071.985667][T23039] ? __pfx___might_resched+0x10/0x10 [ 2071.990948][T23039] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2071.996754][T23039] ? __anon_vma_prepare+0x68/0x410 [ 2072.001860][T23039] kmem_cache_alloc+0x202/0x340 [ 2072.006705][T23039] __anon_vma_prepare+0x68/0x410 [ 2072.011643][T23039] __handle_mm_fault+0x6090/0x72d0 [ 2072.016771][T23039] ? __pfx___handle_mm_fault+0x10/0x10 [ 2072.022238][T23039] ? mt_find+0x226/0x850 [ 2072.026477][T23039] ? __pfx_lock_release+0x10/0x10 [ 2072.031509][T23039] ? mt_find+0x62d/0x850 [ 2072.035748][T23039] ? mt_find+0x226/0x850 [ 2072.039999][T23039] ? find_vma+0x142/0x1c0 [ 2072.044334][T23039] ? __pfx_find_vma+0x10/0x10 [ 2072.049010][T23039] handle_mm_fault+0x3c1/0x8a0 [ 2072.053777][T23039] exc_page_fault+0x2ad/0x870 [ 2072.058453][T23039] asm_exc_page_fault+0x26/0x30 [ 2072.063302][T23039] RIP: 0033:0x7f810c82c551 [ 2072.067709][T23039] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2072.087327][T23039] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2072.093391][T23039] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2072.101355][T23039] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2072.109317][T23039] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2072.117282][T23039] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2072.125246][T23039] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2072.133244][T23039] [ 2072.136431][ C0] vkms_vblank_simulate: vblank timer overrun 02:45:15 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_delroute={0x64, 0x19, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x20, 0x1, 0xfd, 0x3, 0xff, 0x8}, [@RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0x8, 0x38, 0x1, 0x0, 0xfff, [@dev={0xfe, 0x80, '\x00', 0x14}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local]}}}, @RTA_TABLE={0x8, 0xf, 0x7fff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x45) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000025900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2072.164072][T23039] memory: usage 307200kB, limit 307200kB, failcnt 51453 [ 2072.171139][T23039] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2072.201885][T23039] kmem: usage 307056kB, limit 9007199254740988kB, failcnt 0 02:45:15 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x7}, 0x0) 02:45:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x11000000}, 0x0) [ 2072.220274][T23039] Memory cgroup stats for /syz4: [ 2072.220379][T23039] cache 0 [ 2072.229452][T23039] rss 131072 [ 2072.232919][T23039] rss_huge 0 [ 2072.236242][T23039] shmem 0 [ 2072.239318][T23039] mapped_file 0 [ 2072.243264][T23039] dirty 0 [ 2072.246334][T23039] writeback 0 [ 2072.249766][T23039] workingset_refault_anon 12757 [ 2072.254843][T23039] workingset_refault_file 333 [ 2072.260516][T23039] swap 393216 [ 2072.280323][T23039] swapcached 0 [ 2072.284504][T23039] pgpgin 285505 [ 2072.288157][T23039] pgpgout 285473 [ 2072.296842][T23039] pgfault 571067 [ 2072.300576][T23039] pgmajfault 11568 [ 2072.304906][T23039] inactive_anon 0 [ 2072.308702][T23039] active_anon 131072 [ 2072.312971][T23039] inactive_file 0 [ 2072.316793][T23039] active_file 0 [ 2072.324180][T23039] unevictable 0 [ 2072.329579][T23039] hierarchical_memory_limit 314572800 [ 2072.338524][T23039] hierarchical_memsw_limit 9223372036854771712 [ 2072.346296][T23039] total_cache 0 [ 2072.350067][T23039] total_rss 131072 [ 2072.354448][T23039] total_rss_huge 0 [ 2072.359200][T23039] total_shmem 0 [ 2072.366159][T23039] total_mapped_file 0 [ 2072.370310][T23039] total_dirty 0 02:45:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_delroute={0x64, 0x19, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x20, 0x1, 0xfd, 0x3, 0xff, 0x8}, [@RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0x8, 0x38, 0x1, 0x0, 0xfff, [@dev={0xfe, 0x80, '\x00', 0x14}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local]}}}, @RTA_TABLE={0x8, 0xf, 0x7fff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x45) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_delroute={0x64, 0x19, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x20, 0x1, 0xfd, 0x3, 0xff, 0x8}, [@RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0x8, 0x38, 0x1, 0x0, 0xfff, [@dev={0xfe, 0x80, '\x00', 0x14}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local]}}}, @RTA_TABLE={0x8, 0xf, 0x7fff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x45) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2072.377776][T23039] total_writeback 0 [ 2072.382086][T23039] total_workingset_refault_anon 12757 [ 2072.390024][T23039] total_workingset_refault_file 333 [ 2072.399333][T23039] total_swap 393216 [ 2072.404340][T23039] total_swapcached 0 [ 2072.420799][T23039] total_pgpgin 285505 [ 2072.434479][T23039] total_pgpgout 285473 [ 2072.447004][T23039] total_pgfault 571067 [ 2072.452848][T23039] total_pgmajfault 11568 [ 2072.468199][T23039] total_inactive_anon 0 [ 2072.478113][T23039] total_active_anon 131072 02:45:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000025b00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2072.487266][T23039] total_inactive_file 0 [ 2072.493868][T23039] total_active_file 0 [ 2072.498076][T23039] total_unevictable 0 02:45:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x12000000}, 0x0) [ 2072.537603][T23039] anon_cost 0 [ 2072.552211][T23039] file_cost 0 [ 2072.555699][T23039] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23039,uid=0 02:45:16 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x8}, 0x0) [ 2072.574981][T23039] Memory cgroup out of memory: Killed process 23039 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000002140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x18000000}, 0x0) [ 2072.709903][T23058] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2072.726117][T23058] CPU: 1 PID: 23058 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2072.736571][T23058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2072.746643][T23058] Call Trace: [ 2072.749940][T23058] [ 2072.752893][T23058] dump_stack_lvl+0x1e7/0x2e0 [ 2072.757603][T23058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2072.762831][T23058] ? __pfx__printk+0x10/0x10 [ 2072.767453][T23058] ? ___ratelimit+0x4c4/0x670 [ 2072.772135][T23058] ? __pfx____ratelimit+0x10/0x10 [ 2072.777171][T23058] dump_header+0xda/0x6a0 [ 2072.781532][T23058] oom_kill_process+0x3a7/0x930 [ 2072.786390][T23058] out_of_memory+0xf67/0x1320 [ 2072.791071][T23058] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2072.796704][T23058] ? __pfx___mutex_lock+0x10/0x10 [ 2072.801729][T23058] ? __pfx_out_of_memory+0x10/0x10 [ 2072.806844][T23058] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2072.812391][T23058] ? __pfx_lock_release+0x10/0x10 [ 2072.817416][T23058] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2072.823482][T23058] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2072.828676][T23058] ? mem_cgroup_iter+0x3e9/0x560 [ 2072.833613][T23058] try_charge_memcg+0xda2/0x18a0 [ 2072.838545][T23058] ? xfs_iwalk_ag_recs+0x520/0x840 [ 2072.843670][T23058] ? __pfx_try_charge_memcg+0x10/0x10 [ 2072.849040][T23058] ? percpu_ref_tryget+0x14/0x180 [ 2072.854074][T23058] charge_memcg+0xa2/0x160 [ 2072.858490][T23058] __mem_cgroup_charge+0x27/0x80 [ 2072.863427][T23058] folio_prealloc+0x52/0x170 [ 2072.868013][T23058] do_wp_page+0x1222/0x4c90 [ 2072.872524][T23058] ? __pfx_do_wp_page+0x10/0x10 [ 2072.877374][T23058] ? __pfx_lock_acquire+0x10/0x10 [ 2072.882403][T23058] ? do_raw_spin_lock+0x14e/0x370 [ 2072.887430][T23058] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2072.892631][T23058] __handle_mm_fault+0x26ad/0x72d0 [ 2072.897769][T23058] ? reacquire_held_locks+0x3eb/0x690 [ 2072.903143][T23058] ? __pfx___handle_mm_fault+0x10/0x10 [ 2072.908625][T23058] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2072.914353][T23058] ? mtree_range_walk+0x6fd/0x8e0 [ 2072.919372][T23058] ? lock_vma_under_rcu+0x18a/0x730 [ 2072.924578][T23058] ? __pfx_lock_release+0x10/0x10 [ 2072.929610][T23058] ? lock_vma_under_rcu+0x2f9/0x730 [ 2072.934887][T23058] ? lock_vma_under_rcu+0x18a/0x730 [ 2072.940085][T23058] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2072.945631][T23058] handle_mm_fault+0x3c1/0x8a0 [ 2072.950403][T23058] exc_page_fault+0x456/0x870 [ 2072.955084][T23058] asm_exc_page_fault+0x26/0x30 [ 2072.959950][T23058] RIP: 0033:0x7f810c839c40 [ 2072.964371][T23058] Code: 89 1c 24 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 89 c5 e9 7f fe ff ff 0f 1f 84 00 00 00 00 00 <43> 89 2c 8e e9 a5 fe ff ff 0f 1f 80 00 00 00 00 48 39 c3 74 99 48 [ 2072.983982][T23058] RSP: 002b:00007f810cacfa60 EFLAGS: 00010246 [ 2072.990050][T23058] RAX: 00000000845c9453 RBX: 00007f810c9ac018 RCX: 000000000000000c [ 2072.998017][T23058] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 000000000001eb8a [ 2073.005981][T23058] RBP: 00000000845c9453 R08: 0000001b32120000 R09: 0000000000001453 [ 2073.013946][T23058] R10: 00000000845c9457 R11: 0000000000000246 R12: 000000000000000c [ 2073.021910][T23058] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff845c9fda [ 2073.029880][T23058] ? apparmor_socket_create+0x10a/0x150 [ 2073.035443][T23058] 02:45:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_delroute={0x64, 0x19, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x20, 0x1, 0xfd, 0x3, 0xff, 0x8}, [@RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0x8, 0x38, 0x1, 0x0, 0xfff, [@dev={0xfe, 0x80, '\x00', 0x14}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local]}}}, @RTA_TABLE={0x8, 0xf, 0x7fff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x45) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2073.059393][T23058] memory: usage 307200kB, limit 307200kB, failcnt 51530 [ 2073.077311][T23058] memory+swap: usage 307584kB, limit 9007199254740988kB, failcnt 0 [ 2073.085477][T23058] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 2073.093004][T23058] Memory cgroup stats for /syz4: [ 2073.093127][T23058] cache 0 [ 2073.102506][T23058] rss 131072 02:45:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000005d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2073.111637][T23058] rss_huge 0 [ 2073.114866][T23058] shmem 0 [ 2073.117810][T23058] mapped_file 0 [ 2073.121284][T23058] dirty 0 [ 2073.124370][T23058] writeback 0 [ 2073.127673][T23058] workingset_refault_anon 12757 [ 2073.137005][T23058] workingset_refault_file 333 [ 2073.142782][T23058] swap 393216 [ 2073.146088][T23058] swapcached 0 [ 2073.149467][T23058] pgpgin 285527 [ 2073.155185][T23058] pgpgout 285495 [ 2073.158752][T23058] pgfault 571126 [ 2073.162602][T23058] pgmajfault 11568 [ 2073.166393][T23058] inactive_anon 0 [ 2073.170759][T23058] active_anon 131072 [ 2073.177387][T23058] inactive_file 0 [ 2073.181037][T23058] active_file 0 [ 2073.184805][T23058] unevictable 0 [ 2073.188288][T23058] hierarchical_memory_limit 314572800 02:45:16 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0xa}, 0x0) [ 2073.218927][T23058] hierarchical_memsw_limit 9223372036854771712 [ 2073.233971][T23058] total_cache 0 02:45:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x20000000}, 0x0) [ 2073.271811][T23058] total_rss 131072 [ 2073.279764][T23058] total_rss_huge 0 [ 2073.290383][T23058] total_shmem 0 [ 2073.296431][T23058] total_mapped_file 0 [ 2073.300660][T23058] total_dirty 0 [ 2073.309435][T23058] total_writeback 0 [ 2073.318064][T23058] total_workingset_refault_anon 12757 [ 2073.335574][T23058] total_workingset_refault_file 333 [ 2073.340920][T23058] total_swap 393216 [ 2073.346390][T23058] total_swapcached 0 [ 2073.350560][T23058] total_pgpgin 285527 [ 2073.359368][T23058] total_pgpgout 285495 [ 2073.364943][T23058] total_pgfault 571126 02:45:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000841) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r7, @ANYBLOB="01040c0001006d616376746170001400028008000500a75126bcd0684a045ed3fdfaddd4bc9339a9e85cba89df97ca7433af1ea6c720e4c4fe2dfb0f7435788493bdd90400378eb9a6e6f4ff15f87d65a74d11", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_newroute={0xa8, 0x18, 0x400, 0x70bd29, 0x25dfdbff, {0x1c, 0x10, 0x20, 0x3, 0xff, 0x1, 0xc8, 0x8, 0x600}, [@RTA_NEWDST={0x84, 0x13, [{0x1, 0x0, 0x1}, {0x7}, {0xfffff, 0x0, 0x1}, {0x20}, {0x7}, {}, {0x8}, {0xd}, {0x7ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x6}, {0x6d, 0x0, 0x1}, {0x3}, {0x8000}, {0x3}, {0x2474}, {0x3, 0x0, 0x1}, {0x3}, {0x20, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x410}, {0x9}, {0x52dc, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x800}, {0x7, 0x0, 0x1}, {0xfff, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0xac, 0x0, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 02:45:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000035d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2073.369105][T23058] total_pgmajfault 11568 [ 2073.378177][T23058] total_inactive_anon 0 [ 2073.425043][T23058] total_active_anon 131072 [ 2073.436598][T23058] total_inactive_file 0 [ 2073.444278][T23058] total_active_file 0 [ 2073.448539][T23058] total_unevictable 0 [ 2073.453956][T23058] anon_cost 0 [ 2073.457468][T23058] file_cost 0 02:45:17 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x18}, 0x0) 02:45:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000003140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2073.475299][T23058] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23058,uid=0 [ 2073.494981][T23058] Memory cgroup out of memory: Killed process 23058 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:45:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x21000000}, 0x0) 02:45:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000841) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r7, @ANYBLOB="01040c0001006d616376746170001400028008000500a75126bcd0684a045ed3fdfaddd4bc9339a9e85cba89df97ca7433af1ea6c720e4c4fe2dfb0f7435788493bdd90400378eb9a6e6f4ff15f87d65a74d11", @ANYRES32=r8], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_newroute={0xa8, 0x18, 0x400, 0x70bd29, 0x25dfdbff, {0x1c, 0x10, 0x20, 0x3, 0xff, 0x1, 0xc8, 0x8, 0x600}, [@RTA_NEWDST={0x84, 0x13, [{0x1, 0x0, 0x1}, {0x7}, {0xfffff, 0x0, 0x1}, {0x20}, {0x7}, {}, {0x8}, {0xd}, {0x7ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x6}, {0x6d, 0x0, 0x1}, {0x3}, {0x8000}, {0x3}, {0x2474}, {0x3, 0x0, 0x1}, {0x3}, {0x20, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x410}, {0x9}, {0x52dc, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x800}, {0x7, 0x0, 0x1}, {0xfff, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0xac, 0x0, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 2073.700049][T23077] __nla_validate_parse: 27 callbacks suppressed [ 2073.700067][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000006000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:17 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x39}, 0x0) 02:45:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x25000000}, 0x0) [ 2073.841064][T23081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2073.908030][T23085] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2073.921749][T23087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2073.935899][T23078] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2073.954019][T23078] CPU: 1 PID: 23078 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2073.964454][T23078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2073.974514][T23078] Call Trace: [ 2073.977788][T23078] [ 2073.980711][T23078] dump_stack_lvl+0x1e7/0x2e0 [ 2073.985393][T23078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2073.990586][T23078] ? __pfx__printk+0x10/0x10 [ 2073.995170][T23078] ? ___ratelimit+0x4c4/0x670 [ 2073.999846][T23078] ? __pfx____ratelimit+0x10/0x10 [ 2074.004868][T23078] dump_header+0xda/0x6a0 [ 2074.009202][T23078] oom_kill_process+0x3a7/0x930 [ 2074.014072][T23078] out_of_memory+0xf67/0x1320 [ 2074.018748][T23078] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2074.024382][T23078] ? __pfx___mutex_lock+0x10/0x10 [ 2074.029409][T23078] ? __pfx_out_of_memory+0x10/0x10 [ 2074.034522][T23078] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2074.040060][T23078] ? __pfx_lock_release+0x10/0x10 [ 2074.045082][T23078] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2074.051146][T23078] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2074.056340][T23078] ? mem_cgroup_iter+0x3e9/0x560 [ 2074.061278][T23078] try_charge_memcg+0xda2/0x18a0 [ 2074.066211][T23078] ? mark_lock+0x9a/0x350 [ 2074.070547][T23078] ? __pfx_try_charge_memcg+0x10/0x10 [ 2074.075934][T23078] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2074.082081][T23078] charge_memcg+0xa2/0x160 [ 2074.086498][T23078] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2074.092558][T23078] __read_swap_cache_async+0x480/0x8b0 [ 2074.098012][T23078] ? mark_lock+0x9a/0x350 [ 2074.102342][T23078] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2074.108330][T23078] swap_cluster_readahead+0x67c/0x810 [ 2074.113707][T23078] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2074.119599][T23078] ? __pfx_lock_release+0x10/0x10 [ 2074.124624][T23078] ? xas_descend+0x37e/0x470 [ 2074.129219][T23078] swapin_readahead+0x1ea/0x1070 [ 2074.134150][T23078] ? filemap_get_entry+0x127/0x4e0 [ 2074.139267][T23078] ? __pfx_swapin_readahead+0x10/0x10 [ 2074.144647][T23078] ? __filemap_get_folio+0x935/0xbc0 [ 2074.149933][T23078] ? swap_cache_get_folio+0x9f/0x570 [ 2074.155218][T23078] do_swap_page+0x8ab/0x3da0 [ 2074.159805][T23078] ? __pte_offset_map+0x2c4/0x380 [ 2074.164827][T23078] ? __pfx_lock_acquire+0x10/0x10 [ 2074.169849][T23078] ? do_swap_page+0x154/0x3da0 [ 2074.174607][T23078] ? __pfx_do_swap_page+0x10/0x10 [ 2074.179623][T23078] ? pte_offset_map_nolock+0x137/0x1f0 [ 2074.185093][T23078] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2074.190919][T23078] ? __lock_acquire+0x1345/0x1fd0 [ 2074.195965][T23078] __handle_mm_fault+0x15e8/0x72d0 [ 2074.201094][T23078] ? reacquire_held_locks+0x3eb/0x690 [ 2074.206461][T23078] ? __pfx___handle_mm_fault+0x10/0x10 [ 2074.211926][T23078] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2074.217650][T23078] ? mtree_range_walk+0x6fd/0x8e0 [ 2074.222669][T23078] ? lock_vma_under_rcu+0x18a/0x730 [ 2074.227863][T23078] ? __pfx_lock_release+0x10/0x10 [ 2074.232886][T23078] ? lock_vma_under_rcu+0x2f9/0x730 [ 2074.238095][T23078] ? lock_vma_under_rcu+0x18a/0x730 [ 2074.243290][T23078] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2074.248831][T23078] handle_mm_fault+0x3c1/0x8a0 [ 2074.253596][T23078] exc_page_fault+0x456/0x870 [ 2074.258279][T23078] asm_exc_page_fault+0x26/0x30 [ 2074.263126][T23078] RIP: 0033:0x7f810c839ac7 [ 2074.267535][T23078] Code: 25 ff 0f 00 00 09 c5 80 3d 06 bc c9 00 00 0f 85 6f ff ff ff 44 0f b6 6c 24 0f 44 8d 55 04 89 e8 41 89 c1 41 81 e1 ff 1f 00 00 <43> 8b 14 8e 39 d5 0f 84 5e ff ff ff 85 d2 0f 84 65 01 00 00 83 c0 [ 2074.287138][T23078] RSP: 002b:00007f810cacfa60 EFLAGS: 00010202 [ 2074.293201][T23078] RAX: 0000000081df47a1 RBX: 00007f810c9ac018 RCX: 000000000000000c [ 2074.301162][T23078] RDX: ffffffff81df476b RSI: 0000000080000000 RDI: 0000000000002c6c [ 2074.309135][T23078] RBP: 0000000081df47a1 R08: 0000001b32120000 R09: 00000000000007a1 [ 2074.317098][T23078] R10: 0000000081df47a5 R11: 0000000000000293 R12: 000000000000000c [ 2074.325061][T23078] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff81df476b [ 2074.333036][T23078] ? __might_fault+0x9b/0x120 [ 2074.337724][T23078] ? __might_fault+0x9b/0x120 [ 2074.342410][T23078] [ 2074.349260][T20465] net_ratelimit: 3 callbacks suppressed [ 2074.349274][T20465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.367065][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.380190][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.393441][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:18 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000026100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2074.408624][T23078] memory: usage 307200kB, limit 307200kB, failcnt 51617 [ 2074.415973][T23078] memory+swap: usage 307660kB, limit 9007199254740988kB, failcnt 0 [ 2074.425365][T23078] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 2074.438327][T23091] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2074.460246][T23078] Memory cgroup stats for /syz4: [ 2074.460384][T23078] cache 0 [ 2074.469135][T23078] rss 40960 [ 2074.475077][T23078] rss_huge 0 [ 2074.478580][T23078] shmem 0 [ 2074.482873][T23078] mapped_file 0 [ 2074.486653][T23078] dirty 0 [ 2074.489904][T23078] writeback 0 [ 2074.494009][T23078] workingset_refault_anon 12773 [ 2074.499132][T23078] workingset_refault_file 333 [ 2074.505363][T23078] swap 499712 [ 2074.508959][T23078] swapcached 4096 [ 2074.513408][T23078] pgpgin 285568 [ 2074.518358][T23078] pgpgout 285557 [ 2074.524559][T23078] pgfault 571214 [ 2074.532388][T23078] pgmajfault 11583 [ 2074.539367][T23078] inactive_anon 4096 02:45:18 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x64}, 0x0) [ 2074.559568][T23078] active_anon 28672 [ 2074.568115][T23078] inactive_file 0 [ 2074.572661][T23078] active_file 0 [ 2074.576329][T23078] unevictable 0 02:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2f000000}, 0x0) [ 2074.609146][T23078] hierarchical_memory_limit 314572800 [ 2074.621219][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2074.647601][T23078] hierarchical_memsw_limit 9223372036854771712 [ 2074.654700][T23078] total_cache 0 02:45:18 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8e}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000841) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r7, @ANYBLOB="01040c0001006d616376746170001400028008000500a75126bcd0684a045ed3fdfaddd4bc9339a9e85cba89df97ca7433af1ea6c720e4c4fe2dfb0f7435788493bdd90400378eb9a6e6f4ff15f87d65a74d11", @ANYRES32=r8], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_newroute={0xa8, 0x18, 0x400, 0x70bd29, 0x25dfdbff, {0x1c, 0x10, 0x20, 0x3, 0xff, 0x1, 0xc8, 0x8, 0x600}, [@RTA_NEWDST={0x84, 0x13, [{0x1, 0x0, 0x1}, {0x7}, {0xfffff, 0x0, 0x1}, {0x20}, {0x7}, {}, {0x8}, {0xd}, {0x7ff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x6}, {0x6d, 0x0, 0x1}, {0x3}, {0x8000}, {0x3}, {0x2474}, {0x3, 0x0, 0x1}, {0x3}, {0x20, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0x410}, {0x9}, {0x52dc, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x800}, {0x7, 0x0, 0x1}, {0xfff, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0xac, 0x0, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 2074.659443][T23078] total_rss 40960 [ 2074.676095][T23078] total_rss_huge 0 [ 2074.684419][T23078] total_shmem 0 [ 2074.689546][T23078] total_mapped_file 0 [ 2074.696165][T23078] total_dirty 0 [ 2074.699778][T23078] total_writeback 0 [ 2074.704254][T23078] total_workingset_refault_anon 12773 02:45:18 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000006300000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2074.718305][T23078] total_workingset_refault_file 333 [ 2074.728130][T23078] total_swap 499712 [ 2074.729514][T23097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2074.739967][T23078] total_swapcached 4096 [ 2074.746742][T23078] total_pgpgin 285568 [ 2074.757360][T23078] total_pgpgout 285557 [ 2074.763760][T23078] total_pgfault 571214 [ 2074.769159][T23078] total_pgmajfault 11583 [ 2074.774179][T23078] total_inactive_anon 4096 [ 2074.778739][T23078] total_active_anon 28672 [ 2074.784673][T23078] total_inactive_file 0 [ 2074.789012][T23078] total_active_file 0 [ 2074.793615][T23078] total_unevictable 0 [ 2074.797806][T23078] anon_cost 0 [ 2074.801261][T23078] file_cost 0 02:45:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000004140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:18 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0xa00}, 0x0) [ 2074.805378][T23078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23078,uid=0 [ 2074.830772][T23078] Memory cgroup out of memory: Killed process 23078 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:18 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x6400}, 0x0) [ 2074.914047][T23102] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2074.923713][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:18 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYBLOB="2a34eac67bcc5e4d49b8dd1cfde620d33d546c595decdbd56499b6751af3a2568ef75a205e6664b1d1fef0d7381d9c3ef63833073758f5e716f965c0e0"], 0x3c}, 0x1, 0x0, 0x0, 0x44004017}, 0x0) 02:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x3a000000}, 0x0) 02:45:18 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0xff7f}, 0x0) 02:45:18 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000006400000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:18 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYBLOB="2a34eac67bcc5e4d49b8dd1cfde620d33d546c595decdbd56499b6751af3a2568ef75a205e6664b1d1fef0d7381d9c3ef63833073758f5e716f965c0e0"], 0x3c}, 0x1, 0x0, 0x0, 0x44004017}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYBLOB="2a34eac67bcc5e4d49b8dd1cfde620d33d546c595decdbd56499b6751af3a2568ef75a205e6664b1d1fef0d7381d9c3ef63833073758f5e716f965c0e0"], 0x3c}, 0x1, 0x0, 0x0, 0x44004017}, 0x0) [ 2075.056820][T23114] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x40000000}, 0x0) 02:45:18 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0xffffff1f}, 0x0) [ 2075.178503][T23108] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2075.201158][T23108] CPU: 1 PID: 23108 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2075.211623][T23108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2075.221699][T23108] Call Trace: [ 2075.224999][T23108] [ 2075.227943][T23108] dump_stack_lvl+0x1e7/0x2e0 [ 2075.232651][T23108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2075.237927][T23108] ? __pfx__printk+0x10/0x10 [ 2075.242531][T23108] ? ___ratelimit+0x4c4/0x670 [ 2075.247225][T23108] ? __pfx____ratelimit+0x10/0x10 [ 2075.252276][T23108] dump_header+0xda/0x6a0 [ 2075.256632][T23108] oom_kill_process+0x3a7/0x930 [ 2075.261511][T23108] out_of_memory+0xf67/0x1320 [ 2075.266224][T23108] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2075.271882][T23108] ? __pfx___mutex_lock+0x10/0x10 [ 2075.276930][T23108] ? __pfx_out_of_memory+0x10/0x10 [ 2075.282067][T23108] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2075.287640][T23108] ? __pfx_lock_release+0x10/0x10 [ 2075.292692][T23108] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2075.298792][T23108] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2075.304012][T23108] ? mem_cgroup_iter+0x3e9/0x560 [ 2075.308969][T23108] try_charge_memcg+0xda2/0x18a0 [ 2075.313919][T23108] ? mark_lock+0x9a/0x350 [ 2075.318284][T23108] ? __pfx_try_charge_memcg+0x10/0x10 [ 2075.323691][T23108] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2075.329842][T23108] charge_memcg+0xa2/0x160 [ 2075.334265][T23108] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2075.340333][T23108] __read_swap_cache_async+0x480/0x8b0 [ 2075.345792][T23108] ? mark_lock+0x9a/0x350 [ 2075.350128][T23108] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2075.356122][T23108] swap_cluster_readahead+0x67c/0x810 [ 2075.361518][T23108] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2075.367416][T23108] ? __pfx_lock_release+0x10/0x10 [ 2075.372444][T23108] ? xas_descend+0x37e/0x470 [ 2075.377037][T23108] swapin_readahead+0x1ea/0x1070 [ 2075.381973][T23108] ? filemap_get_entry+0x127/0x4e0 [ 2075.387115][T23108] ? __pfx_swapin_readahead+0x10/0x10 [ 2075.392498][T23108] ? __filemap_get_folio+0x935/0xbc0 [ 2075.397784][T23108] ? swap_cache_get_folio+0x9f/0x570 [ 2075.403071][T23108] do_swap_page+0x8ab/0x3da0 [ 2075.407674][T23108] ? __pte_offset_map+0x2c4/0x380 [ 2075.412710][T23108] ? __pfx_lock_acquire+0x10/0x10 [ 2075.417740][T23108] ? do_swap_page+0x154/0x3da0 [ 2075.422517][T23108] ? __pfx_do_swap_page+0x10/0x10 [ 2075.427546][T23108] ? pte_offset_map_nolock+0x137/0x1f0 [ 2075.433004][T23108] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2075.438802][T23108] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2075.444789][T23108] __handle_mm_fault+0x15e8/0x72d0 [ 2075.449925][T23108] ? reacquire_held_locks+0x3eb/0x690 [ 2075.455299][T23108] ? __pfx___handle_mm_fault+0x10/0x10 [ 2075.460780][T23108] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2075.466552][T23108] ? mtree_range_walk+0x6fd/0x8e0 [ 2075.471584][T23108] ? lock_vma_under_rcu+0x18a/0x730 [ 2075.476782][T23108] ? __pfx_lock_release+0x10/0x10 [ 2075.481813][T23108] ? lock_vma_under_rcu+0x2f9/0x730 [ 2075.487031][T23108] ? lock_vma_under_rcu+0x18a/0x730 [ 2075.492247][T23108] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2075.497798][T23108] handle_mm_fault+0x3c1/0x8a0 [ 2075.502570][T23108] exc_page_fault+0x456/0x870 [ 2075.507256][T23108] asm_exc_page_fault+0x26/0x30 [ 2075.512116][T23108] RIP: 0033:0x7f810c839ac7 [ 2075.516529][T23108] Code: 25 ff 0f 00 00 09 c5 80 3d 06 bc c9 00 00 0f 85 6f ff ff ff 44 0f b6 6c 24 0f 44 8d 55 04 89 e8 41 89 c1 41 81 e1 ff 1f 00 00 <43> 8b 14 8e 39 d5 0f 84 5e ff ff ff 85 d2 0f 84 65 01 00 00 83 c0 [ 2075.536131][T23108] RSP: 002b:00007f810cacfa60 EFLAGS: 00010202 [ 2075.542212][T23108] RAX: 00000000820efed9 RBX: 00007f810c9ac018 RCX: 0000000000000005 [ 2075.550177][T23108] RDX: ffffffff820ef8a2 RSI: 0000000080000000 RDI: 0000000000006d14 [ 2075.558159][T23108] RBP: 00000000820efed9 R08: 0000001b32120000 R09: 0000000000001ed9 [ 2075.566131][T23108] R10: 00000000820efedd R11: 0000000000000246 R12: 0000000000000005 02:45:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000586500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1000000000000000}, 0x0) [ 2075.574101][T23108] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff820ef8a2 [ 2075.582065][T23108] ? __fget_files+0x352/0x470 [ 2075.586756][T23108] ? __fget_files+0x352/0x470 [ 2075.591440][T23108] [ 2075.597700][ T6566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.613463][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.634804][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.643012][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x48000000}, 0x0) 02:45:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYBLOB="2a34eac67bcc5e4d49b8dd1cfde620d33d546c595decdbd56499b6751af3a2568ef75a205e6664b1d1fef0d7381d9c3ef63833073758f5e716f965c0e0"], 0x3c}, 0x1, 0x0, 0x0, 0x44004017}, 0x0) [ 2075.681634][T23108] memory: usage 307180kB, limit 307200kB, failcnt 51745 [ 2075.717053][T23108] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 02:45:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x2}, 0x0) [ 2075.752808][T23108] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0 [ 2075.782710][T23108] Memory cgroup stats for /syz4: [ 2075.782850][T23108] cache 8192 [ 2075.796106][T23108] rss 69632 [ 2075.799327][T23108] rss_huge 0 02:45:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000036700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2075.806137][T23108] shmem 8192 [ 2075.811095][T23108] mapped_file 8192 [ 2075.815297][T23108] dirty 0 [ 2075.818412][T23108] writeback 0 [ 2075.822093][T23108] workingset_refault_anon 12815 [ 2075.827132][T23108] workingset_refault_file 333 [ 2075.832016][T23108] swap 466944 [ 2075.835477][T23108] swapcached 4096 [ 2075.839334][T23108] pgpgin 285641 02:45:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x600, r1}, [@IFLA_XDP={0x54}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_CARRIER={0x5, 0x8}]}, 0x88}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_getaddr={0x80, 0x16, 0x20, 0x70bd28, 0x25dfdbfd, {0xa, 0x40, 0x50, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7fffffff, 0x6, 0x165}}, @IFA_CACHEINFO={0x14, 0x6, {0x200, 0x3, 0x7fffffff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x538}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r3, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) [ 2075.865548][T23108] pgpgout 285622 [ 2075.869245][T23108] pgfault 571354 [ 2075.875181][T23108] pgmajfault 11635 [ 2075.879046][T23108] inactive_anon 16384 [ 2075.887815][T23108] active_anon 61440 [ 2075.892243][T23108] inactive_file 0 [ 2075.896013][T23108] active_file 0 [ 2075.899623][T23108] unevictable 0 [ 2075.904318][T23108] hierarchical_memory_limit 314572800 [ 2075.909851][T23108] hierarchical_memsw_limit 9223372036854771712 02:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4c000000}, 0x0) [ 2075.917399][T23108] total_cache 8192 [ 2075.923497][T23108] total_rss 69632 [ 2075.930469][T23108] total_rss_huge 0 [ 2075.939093][T23108] total_shmem 8192 [ 2075.945868][T23108] total_mapped_file 8192 [ 2075.950265][T23108] total_dirty 0 [ 2075.958583][T23108] total_writeback 0 [ 2075.962850][T23108] total_workingset_refault_anon 12815 [ 2075.968666][T23108] total_workingset_refault_file 333 [ 2075.974433][T23108] total_swap 466944 [ 2075.978387][T23108] total_swapcached 4096 [ 2075.983251][T23108] total_pgpgin 285641 [ 2075.987376][T23108] total_pgpgout 285622 [ 2075.998957][T23108] total_pgfault 571354 [ 2076.012741][T23108] total_pgmajfault 11635 02:45:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x3}, 0x0) [ 2076.022832][T23108] total_inactive_anon 16384 [ 2076.027602][T23108] total_active_anon 61440 [ 2076.032187][T23108] total_inactive_file 0 [ 2076.036519][T23108] total_active_file 0 [ 2076.040907][T23108] total_unevictable 0 [ 2076.045144][T23108] anon_cost 0 [ 2076.048651][T23108] file_cost 0 [ 2076.052943][T23108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23108,uid=0 02:45:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000006800000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2076.080506][T23141] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 2076.080541][T23108] Memory cgroup out of memory: Killed process 23108 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2076.099396][T23141] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 02:45:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x600, r1}, [@IFLA_XDP={0x54}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_CARRIER={0x5, 0x8}]}, 0x88}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_getaddr={0x80, 0x16, 0x20, 0x70bd28, 0x25dfdbfd, {0xa, 0x40, 0x50, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7fffffff, 0x6, 0x165}}, @IFA_CACHEINFO={0x14, 0x6, {0x200, 0x3, 0x7fffffff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x538}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r3, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) 02:45:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000005140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x60000000}, 0x0) [ 2076.248915][T23149] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2076.259254][T23149] CPU: 0 PID: 23149 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2076.269695][T23149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2076.279768][T23149] Call Trace: [ 2076.283065][T23149] [ 2076.286009][T23149] dump_stack_lvl+0x1e7/0x2e0 [ 2076.290713][T23149] ? __pfx_dump_stack_lvl+0x10/0x10 02:45:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x4}, 0x0) [ 2076.295938][T23149] ? __pfx__printk+0x10/0x10 [ 2076.300547][T23149] ? ___ratelimit+0x4c4/0x670 [ 2076.305253][T23149] ? __pfx____ratelimit+0x10/0x10 [ 2076.310305][T23149] dump_header+0xda/0x6a0 [ 2076.314668][T23149] oom_kill_process+0x3a7/0x930 [ 2076.319550][T23149] out_of_memory+0xf67/0x1320 [ 2076.324258][T23149] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2076.329918][T23149] ? __pfx___mutex_lock+0x10/0x10 [ 2076.334977][T23149] ? __pfx_out_of_memory+0x10/0x10 [ 2076.340128][T23149] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2076.345691][T23149] ? __pfx_lock_release+0x10/0x10 [ 2076.350746][T23149] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2076.356845][T23149] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2076.362072][T23149] ? mem_cgroup_iter+0x3e9/0x560 [ 2076.367029][T23149] try_charge_memcg+0xda2/0x18a0 [ 2076.371984][T23149] ? __pfx_try_charge_memcg+0x10/0x10 [ 2076.377359][T23149] ? percpu_ref_tryget+0x14/0x180 [ 2076.382401][T23149] charge_memcg+0xa2/0x160 [ 2076.386823][T23149] __mem_cgroup_charge+0x27/0x80 [ 2076.391762][T23149] folio_prealloc+0x52/0x170 [ 2076.396351][T23149] do_wp_page+0x1222/0x4c90 [ 2076.400865][T23149] ? __pfx_do_wp_page+0x10/0x10 [ 2076.405716][T23149] ? __pfx_lock_acquire+0x10/0x10 [ 2076.410742][T23149] ? do_raw_spin_lock+0x14e/0x370 [ 2076.415769][T23149] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2076.420968][T23149] __handle_mm_fault+0x26ad/0x72d0 [ 2076.426096][T23149] ? reacquire_held_locks+0x3eb/0x690 [ 2076.431462][T23149] ? __pfx___handle_mm_fault+0x10/0x10 [ 2076.436925][T23149] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2076.442649][T23149] ? mtree_range_walk+0x6fd/0x8e0 [ 2076.447666][T23149] ? lock_vma_under_rcu+0x18a/0x730 [ 2076.452857][T23149] ? __pfx_lock_release+0x10/0x10 [ 2076.457878][T23149] ? lock_vma_under_rcu+0x2f9/0x730 [ 2076.463087][T23149] ? lock_vma_under_rcu+0x18a/0x730 [ 2076.468280][T23149] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2076.473821][T23149] handle_mm_fault+0x3c1/0x8a0 [ 2076.478588][T23149] exc_page_fault+0x456/0x870 [ 2076.483271][T23149] asm_exc_page_fault+0x26/0x30 [ 2076.488119][T23149] RIP: 0033:0x7f810c839c40 [ 2076.492529][T23149] Code: 89 1c 24 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 89 c5 e9 7f fe ff ff 0f 1f 84 00 00 00 00 00 <43> 89 2c 8e e9 a5 fe ff ff 0f 1f 80 00 00 00 00 48 39 c3 74 99 48 [ 2076.512130][T23149] RSP: 002b:00007f810cacfa60 EFLAGS: 00010246 [ 2076.518193][T23149] RAX: 00000000845cd2ff RBX: 00007f810c9ac018 RCX: 0000000000000010 [ 2076.526157][T23149] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000016dc0 [ 2076.534119][T23149] RBP: 00000000845cd2ff R08: 0000001b32120000 R09: 00000000000012ff [ 2076.542082][T23149] R10: 00000000845cd303 R11: 0000000000000246 R12: 0000000000000010 [ 2076.550045][T23149] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff845cda3d [ 2076.558013][T23149] ? end_current_label_crit_section+0x14d/0x180 [ 2076.564267][T23149] [ 2076.567383][ C0] vkms_vblank_simulate: vblank timer overrun 02:45:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000006900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2076.601247][T23149] memory: usage 307200kB, limit 307200kB, failcnt 51815 [ 2076.608501][T23149] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 2076.623046][T23149] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 2076.630542][T23149] Memory cgroup stats for /syz4: [ 2076.630673][T23149] cache 0 [ 2076.639724][T23149] rss 53248 [ 2076.643545][T23149] rss_huge 0 [ 2076.646990][T23149] shmem 0 [ 2076.650104][T23149] mapped_file 0 [ 2076.654188][T23149] dirty 0 [ 2076.657371][T23149] writeback 0 [ 2076.660849][T23149] workingset_refault_anon 12840 [ 2076.671813][T23149] workingset_refault_file 333 [ 2076.672635][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2076.684102][T23149] swap 446464 [ 2076.688669][T23149] swapcached 16384 [ 2076.695955][T23149] pgpgin 285682 02:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x64000000}, 0x0) 02:45:20 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x5}, 0x0) [ 2076.699675][T23149] pgpgout 285666 [ 2076.705192][T23149] pgfault 571433 [ 2076.709029][T23149] pgmajfault 11661 [ 2076.714680][T23149] inactive_anon 0 [ 2076.720193][T23149] active_anon 65536 [ 2076.724374][T23149] inactive_file 0 [ 2076.728180][T23149] active_file 0 [ 2076.772784][T23149] unevictable 0 [ 2076.780892][T23149] hierarchical_memory_limit 314572800 [ 2076.788036][T23149] hierarchical_memsw_limit 9223372036854771712 [ 2076.794367][T23149] total_cache 0 [ 2076.797947][T23149] total_rss 53248 [ 2076.801747][T23149] total_rss_huge 0 [ 2076.805597][T23149] total_shmem 0 [ 2076.809194][T23149] total_mapped_file 0 [ 2076.814248][T23149] total_dirty 0 [ 2076.817845][T23149] total_writeback 0 [ 2076.831120][T23149] total_workingset_refault_anon 12840 [ 2076.839355][T23149] total_workingset_refault_file 333 [ 2076.844719][T23149] total_swap 446464 [ 2076.848646][T23149] total_swapcached 16384 [ 2076.866698][T23149] total_pgpgin 285682 [ 2076.871179][T23149] total_pgpgout 285666 [ 2076.875631][T23149] total_pgfault 571433 02:45:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x600, r1}, [@IFLA_XDP={0x54}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_CARRIER={0x5, 0x8}]}, 0x88}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_getaddr={0x80, 0x16, 0x20, 0x70bd28, 0x25dfdbfd, {0xa, 0x40, 0x50, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7fffffff, 0x6, 0x165}}, @IFA_CACHEINFO={0x14, 0x6, {0x200, 0x3, 0x7fffffff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x538}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r3, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) [ 2076.917031][T23149] total_pgmajfault 11661 [ 2076.935113][T23149] total_inactive_anon 0 [ 2076.950512][T23149] total_active_anon 65536 02:45:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000036900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2076.969106][T23149] total_inactive_file 0 [ 2076.978719][T23149] total_active_file 0 [ 2077.007931][T23149] total_unevictable 0 02:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x65580000}, 0x0) [ 2077.027160][T23149] anon_cost 0 [ 2077.035581][T23149] file_cost 0 [ 2077.041268][T23149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23149,uid=0 [ 2077.058946][T23149] Memory cgroup out of memory: Killed process 23149 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:45:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000006140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:20 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x6}, 0x0) [ 2077.099249][T23166] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 2077.123711][T23166] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 02:45:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 02:45:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000026b00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x68000000}, 0x0) [ 2077.253237][T23174] syz-executor.4 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2077.291556][T23174] CPU: 0 PID: 23174 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2077.302011][T23174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2077.312073][T23174] Call Trace: [ 2077.315349][T23174] [ 2077.318276][T23174] dump_stack_lvl+0x1e7/0x2e0 [ 2077.322960][T23174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2077.328159][T23174] ? __pfx__printk+0x10/0x10 [ 2077.332744][T23174] ? ___ratelimit+0x4c4/0x670 [ 2077.337425][T23174] ? __pfx____ratelimit+0x10/0x10 [ 2077.342451][T23174] dump_header+0xda/0x6a0 [ 2077.346784][T23174] oom_kill_process+0x3a7/0x930 [ 2077.351645][T23174] out_of_memory+0xf67/0x1320 [ 2077.356336][T23174] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2077.361991][T23174] ? __pfx___mutex_lock+0x10/0x10 [ 2077.367018][T23174] ? __pfx_out_of_memory+0x10/0x10 [ 2077.372131][T23174] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2077.377696][T23174] ? __pfx_lock_release+0x10/0x10 [ 2077.382718][T23174] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2077.388781][T23174] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2077.393976][T23174] ? mem_cgroup_iter+0x3e9/0x560 [ 2077.398965][T23174] try_charge_memcg+0xda2/0x18a0 [ 2077.403968][T23174] ? __pfx_try_charge_memcg+0x10/0x10 [ 2077.409367][T23174] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2077.415095][T23174] ? __pfx_lock_release+0x10/0x10 [ 2077.420131][T23174] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2077.425843][T23174] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2077.431646][T23174] __memcg_kmem_charge_page+0xe1/0x250 [ 2077.437110][T23174] __alloc_pages+0x28b/0x680 [ 2077.441703][T23174] ? __pfx___alloc_pages+0x10/0x10 [ 2077.446812][T23174] ? __lock_acquire+0x1345/0x1fd0 [ 2077.451856][T23174] ? policy_nodemask+0x1ec/0x720 [ 2077.456812][T23174] alloc_pages_mpol+0x3de/0x650 [ 2077.461680][T23174] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2077.467050][T23174] ? __pmd_alloc+0x50b/0x630 [ 2077.471633][T23174] ? alloc_pages+0xee/0x170 [ 2077.476136][T23174] pte_alloc_one+0x88/0x5d0 [ 2077.480642][T23174] ? __pfx_pte_alloc_one+0x10/0x10 [ 2077.485752][T23174] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2077.490953][T23174] __pte_alloc+0x79/0x3a0 [ 2077.495284][T23174] ? __pfx___pte_alloc+0x10/0x10 [ 2077.500237][T23174] ? __pfx_validate_chain+0x10/0x10 [ 2077.505458][T23174] __handle_mm_fault+0x5e49/0x72d0 [ 2077.510592][T23174] ? __pfx___handle_mm_fault+0x10/0x10 [ 2077.516052][T23174] ? mt_find+0x226/0x850 [ 2077.520291][T23174] ? __pfx_lock_release+0x10/0x10 [ 2077.525324][T23174] ? mt_find+0x62d/0x850 [ 2077.529580][T23174] ? mt_find+0x226/0x850 [ 2077.533847][T23174] ? find_vma+0x142/0x1c0 [ 2077.538174][T23174] ? __pfx_find_vma+0x10/0x10 [ 2077.542852][T23174] handle_mm_fault+0x3c1/0x8a0 [ 2077.547625][T23174] exc_page_fault+0x2ad/0x870 [ 2077.552320][T23174] asm_exc_page_fault+0x26/0x30 [ 2077.557173][T23174] RIP: 0033:0x7f810c82c551 [ 2077.561593][T23174] Code: 48 8b 54 24 08 48 85 d2 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fa 01 0f 85 b3 01 00 00 48 8b 44 24 10 8b 54 24 18 <89> 10 e9 15 fd ff ff 48 8b 44 24 10 8b 10 48 8b 44 24 08 48 85 c0 [ 2077.581194][T23174] RSP: 002b:00007f810cacfaf0 EFLAGS: 00010246 [ 2077.587266][T23174] RAX: 0000000020000180 RBX: 0000000000000004 RCX: 0000000000000000 [ 2077.595231][T23174] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000555555634360 [ 2077.603198][T23174] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2077.611163][T23174] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c400060 [ 2077.619128][T23174] R13: fffffffffffffffe R14: 00007f810c400000 R15: 00007f810c400068 [ 2077.627108][T23174] [ 2077.630274][ C0] vkms_vblank_simulate: vblank timer overrun [ 2077.665687][T23174] memory: usage 307200kB, limit 307200kB, failcnt 51915 [ 2077.679867][T23174] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 2077.699976][T23174] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 02:45:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x7}, 0x0) 02:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) [ 2077.715664][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2077.725011][T23174] Memory cgroup stats for /syz4: [ 2077.725139][T23174] cache 0 [ 2077.748714][T23174] rss 81920 [ 2077.759354][T23174] rss_huge 0 02:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6c000000}, 0x0) [ 2077.767730][T23174] shmem 0 [ 2077.785030][T23174] mapped_file 0 [ 2077.790924][T23174] dirty 0 [ 2077.796545][T23174] writeback 0 [ 2077.802260][T23174] workingset_refault_anon 12856 [ 2077.808697][T23174] workingset_refault_file 333 [ 2077.814962][T23174] swap 458752 02:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) [ 2077.818395][T23174] swapcached 4096 [ 2077.822278][T23174] pgpgin 285725 [ 2077.849264][T23174] pgpgout 285705 [ 2077.856292][T23174] pgfault 571523 [ 2077.860813][T23174] pgmajfault 11677 02:45:21 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000006c00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2077.890674][T23174] inactive_anon 0 [ 2077.898857][T23174] active_anon 81920 [ 2077.905634][T23174] inactive_file 0 [ 2077.910116][T23174] active_file 0 [ 2077.914888][T23174] unevictable 0 [ 2077.918489][T23174] hierarchical_memory_limit 314572800 [ 2077.924185][T23174] hierarchical_memsw_limit 9223372036854771712 02:45:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x8}, 0x0) 02:45:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000000014001280c8450c0001005d7b1ed36170001400028008000500c14a3e771b68fae72673e29d", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x240408d1}, 0x0) [ 2077.953861][T23174] total_cache 0 [ 2077.964288][T23174] total_rss 81920 [ 2077.983447][T23174] total_rss_huge 0 [ 2077.995047][T23174] total_shmem 0 02:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x74000000}, 0x0) [ 2078.005686][T23174] total_mapped_file 0 [ 2078.033691][T23174] total_dirty 0 [ 2078.040523][T23174] total_writeback 0 [ 2078.051326][T23174] total_workingset_refault_anon 12856 [ 2078.058686][T23174] total_workingset_refault_file 333 [ 2078.064773][T23174] total_swap 458752 [ 2078.068786][T23174] total_swapcached 4096 [ 2078.073505][T23174] total_pgpgin 285725 [ 2078.077628][T23174] total_pgpgout 285705 02:45:21 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000006d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2078.082360][T23174] total_pgfault 571523 [ 2078.086651][T23174] total_pgmajfault 11677 [ 2078.101931][T23174] total_inactive_anon 0 [ 2078.107266][T23174] total_active_anon 81920 [ 2078.119647][T23174] total_inactive_file 0 [ 2078.126706][T23174] total_active_file 0 [ 2078.137750][T23174] total_unevictable 0 [ 2078.145474][T23174] anon_cost 0 [ 2078.153801][T23174] file_cost 0 [ 2078.158195][T23174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23174,uid=0 02:45:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x9}, 0x0) [ 2078.176543][T23174] Memory cgroup out of memory: Killed process 23174 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8912kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:45:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000000014001280c8450c0001005d7b1ed36170001400028008000500c14a3e771b68fae72673e29d", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x240408d1}, 0x0) 02:45:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x7a000000}, 0x0) 02:45:21 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000007140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000026d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000000014001280c8450c0001005d7b1ed36170001400028008000500c14a3e771b68fae72673e29d", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x240408d1}, 0x0) 02:45:22 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xa}, 0x0) 02:45:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x81000000}, 0x0) 02:45:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0x2a03}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000140)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x9, 0x1, {{0x17, 0x4, 0x2, 0x2b, 0x5c, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x48, 0x2, [{0x1, 0xe, "e5b9d927575f9d26566f6570"}, {0x5, 0x6, "74bf53c3"}, {0x6, 0xc, "384112658f24f2db80da"}, {0x2, 0x7, "a559b39737"}, {0x1, 0x3, "df"}, {0x0, 0x6, "a221c5c7"}, {0x6, 0x12, "4a6d74a727c997b123719aa57053676e"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800003c07fffffff000080014921006400650000a12f9078ffffffff7f00000144342e93ffffffff00000f3aac14143100001000ac141421000000087f0000010000098b0a010102000000fda41e0101fffff400000003000000070000000194040100"]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x16c4f703c286e8df, 0x40, 0x7ff, 0x1ff, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0xfa, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xc}, {[@ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6e42b171083529d9}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000540008002cbd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="010104007f0000010000000000000000000000000800000020000100", @ANYRES32=r9, @ANYBLOB="00010300000000000000000000000000000000001800000020000100", @ANYRES32=r10, @ANYBLOB="00030300fe8000000000000000000000000000bb0400000020000100", @ANYRES32=0x0, @ANYBLOB="01000400fc0000000000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="000002002001000000000000000000000000000186dd000020000100", @ANYRES32=r11, @ANYBLOB="01010200ac1414bb0000000000000000000000000000000020000100", @ANYRES32=r12, @ANYBLOB="0001048b7d56ec1300dc010000000000000000000000000011000000", @ANYRES32=r13, @ANYBLOB="00010000fe8000000000000000000000000000aa8edd0000"], 0x118}, 0x1, 0x0, 0x0, 0x8040}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r14, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r15], 0x3c}}, 0x0) [ 2078.593441][T23212] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 2078.606935][T23212] CPU: 1 PID: 23212 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2078.617369][T23212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2078.627423][T23212] Call Trace: [ 2078.630694][T23212] [ 2078.633637][T23212] dump_stack_lvl+0x1e7/0x2e0 [ 2078.638359][T23212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2078.643595][T23212] ? __pfx__printk+0x10/0x10 [ 2078.648199][T23212] ? ___ratelimit+0x4c4/0x670 [ 2078.652891][T23212] ? __pfx____ratelimit+0x10/0x10 [ 2078.657935][T23212] dump_header+0xda/0x6a0 [ 2078.662289][T23212] oom_kill_process+0x3a7/0x930 [ 2078.667175][T23212] out_of_memory+0xf67/0x1320 [ 2078.671892][T23212] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2078.677550][T23212] ? __pfx___mutex_lock+0x10/0x10 [ 2078.682611][T23212] ? __pfx_out_of_memory+0x10/0x10 [ 2078.687759][T23212] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2078.693334][T23212] ? __pfx_lock_release+0x10/0x10 [ 2078.698389][T23212] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2078.704489][T23212] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2078.709716][T23212] ? mem_cgroup_iter+0x3e9/0x560 [ 2078.714687][T23212] try_charge_memcg+0xda2/0x18a0 [ 2078.719695][T23212] ? __pfx_try_charge_memcg+0x10/0x10 [ 2078.725089][T23212] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2078.730838][T23212] ? __pfx_lock_release+0x10/0x10 [ 2078.735903][T23212] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2078.741927][T23212] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2078.747672][T23212] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2078.753507][T23212] obj_cgroup_charge+0x389/0x630 [ 2078.758480][T23212] ? obj_cgroup_charge+0x121/0x630 [ 2078.763624][T23212] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2078.769109][T23212] ? kmalloc_trace+0x4e/0x360 [ 2078.773822][T23212] ? __pfx___might_resched+0x10/0x10 [ 2078.779117][T23212] ? rcu_is_watching+0x15/0xb0 [ 2078.783889][T23212] ? trace_contention_end+0x3c/0x100 [ 2078.789205][T23212] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2078.795057][T23212] ? ipv6_add_dev+0x108/0x1290 [ 2078.799917][T23212] kmalloc_trace+0x216/0x360 [ 2078.804536][T23212] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2078.810556][T23212] ipv6_add_dev+0x108/0x1290 [ 2078.815176][T23212] addrconf_notify+0x6a7/0x1020 [ 2078.820023][T23212] notifier_call_chain+0x18f/0x3b0 [ 2078.825156][T23212] register_netdevice+0x151f/0x19c0 [ 2078.830399][T23212] ? __pfx_register_netdevice+0x10/0x10 [ 2078.835975][T23212] ? dev_addr_mod+0xbd/0x330 [ 2078.840610][T23212] macvlan_common_newlink+0x1189/0x1930 [ 2078.846184][T23212] ? __kmalloc_node+0x26b/0x4e0 [ 2078.851060][T23212] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 2078.856959][T23212] ? __pfx_tap_handle_frame+0x10/0x10 [ 2078.862368][T23212] ? lockdep_rtnl_is_held+0x26/0x40 [ 2078.867592][T23212] ? netdev_rx_handler_register+0x78/0xe0 [ 2078.873338][T23212] macvtap_newlink+0x154/0x1d0 [ 2078.878122][T23212] ? __pfx_macvtap_newlink+0x10/0x10 [ 2078.883418][T23212] rtnl_newlink+0x158f/0x20a0 [ 2078.888128][T23212] ? __pfx_rtnl_newlink+0x10/0x10 [ 2078.893164][T23212] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2078.898405][T23212] ? __mutex_lock+0x9a4/0xd70 [ 2078.903115][T23212] ? __mutex_lock+0x526/0xd70 [ 2078.907851][T23212] ? __pfx_rtnl_newlink+0x10/0x10 [ 2078.912903][T23212] rtnetlink_rcv_msg+0x885/0x1040 [ 2078.917962][T23212] ? rtnetlink_rcv_msg+0x208/0x1040 [ 2078.923194][T23212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2078.928691][T23212] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2078.934706][T23212] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2078.941077][T23212] ? __local_bh_enable_ip+0x168/0x200 [ 2078.946475][T23212] ? lockdep_hardirqs_on+0x98/0x140 [ 2078.951703][T23212] ? __local_bh_enable_ip+0x168/0x200 [ 2078.957101][T23212] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2078.962219][T23212] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2078.967980][T23212] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2078.973105][T23212] ? __dev_queue_xmit+0x15fd/0x3b10 [ 2078.978329][T23212] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2078.983458][T23212] ? ref_tracker_free+0x643/0x7e0 [ 2078.988519][T23212] netlink_rcv_skb+0x1e3/0x430 [ 2078.993306][T23212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2078.998787][T23212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2079.004114][T23212] ? netlink_deliver_tap+0x2e/0x1b0 [ 2079.009343][T23212] netlink_unicast+0x7ea/0x980 [ 2079.014135][T23212] ? __pfx_netlink_unicast+0x10/0x10 [ 2079.019436][T23212] ? __virt_addr_valid+0x44e/0x520 [ 2079.024555][T23212] ? __phys_addr_symbol+0x2f/0x70 [ 2079.029607][T23212] ? __check_object_size+0x4bb/0xa00 [ 2079.034906][T23212] ? bpf_lsm_netlink_send+0x9/0x10 [ 2079.040033][T23212] netlink_sendmsg+0xa3b/0xd70 [ 2079.044838][T23212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2079.050148][T23212] ? __import_iovec+0x552/0x890 [ 2079.055036][T23212] ? aa_sock_msg_perm+0x91/0x160 [ 2079.059993][T23212] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2079.065287][T23212] ? security_socket_sendmsg+0x87/0xb0 [ 2079.070768][T23212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2079.076045][T23212] __sock_sendmsg+0x221/0x270 [ 2079.080725][T23212] ____sys_sendmsg+0x525/0x7d0 [ 2079.085515][T23212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2079.090841][T23212] __sys_sendmsg+0x2b0/0x3a0 [ 2079.095462][T23212] ? __pfx___sys_sendmsg+0x10/0x10 [ 2079.100608][T23212] ? restore_fpregs_from_fpstate+0x100/0x250 [ 2079.106610][T23212] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2079.112987][T23212] ? do_syscall_64+0x108/0x240 [ 2079.117784][T23212] ? do_syscall_64+0xb4/0x240 [ 2079.122496][T23212] do_syscall_64+0xf9/0x240 [ 2079.127038][T23212] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2079.132957][T23212] RIP: 0033:0x7f810c87dda9 [ 2079.137403][T23212] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2079.157029][T23212] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2079.165474][T23212] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2079.173468][T23212] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 2079.181466][T23212] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2079.189457][T23212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2079.197444][T23212] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2079.205446][T23212] [ 2079.262523][T23212] memory: usage 307200kB, limit 307200kB, failcnt 52136 [ 2079.269517][T23212] memory+swap: usage 307696kB, limit 9007199254740988kB, failcnt 0 [ 2079.277490][T23212] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 2079.286622][T23212] Memory cgroup stats for /syz4: [ 2079.286966][T23212] cache 0 [ 2079.295316][T23212] rss 32768 [ 2079.298440][T23212] rss_huge 0 [ 2079.305294][T23212] shmem 0 [ 2079.308641][T23212] mapped_file 0 [ 2079.314214][T23212] dirty 0 [ 2079.317384][T23212] writeback 0 [ 2079.320837][T23212] workingset_refault_anon 12936 [ 2079.326093][T23212] workingset_refault_file 333 [ 2079.330844][T23212] swap 512000 [ 2079.334378][T23212] swapcached 4096 [ 2079.338037][T23212] pgpgin 285828 [ 2079.342402][T23212] pgpgout 285820 [ 2079.346470][T23212] pgfault 571731 [ 2079.350026][T23212] pgmajfault 11754 [ 2079.353923][T23212] inactive_anon 0 [ 2079.357980][T23212] active_anon 0 [ 2079.361680][T23212] inactive_file 0 [ 2079.365336][T23212] active_file 0 [ 2079.368829][T23212] unevictable 0 [ 2079.372633][T23212] hierarchical_memory_limit 314572800 [ 2079.378052][T23212] hierarchical_memsw_limit 9223372036854771712 [ 2079.384382][T23212] total_cache 0 [ 2079.388052][T23212] total_rss 32768 [ 2079.392877][T23212] total_rss_huge 0 [ 2079.396619][T23212] total_shmem 0 [ 2079.400079][T23212] total_mapped_file 0 [ 2079.404878][T23212] total_dirty 0 [ 2079.408352][T23212] total_writeback 0 [ 2079.412257][T23212] total_workingset_refault_anon 12936 [ 2079.417650][T23212] total_workingset_refault_file 333 [ 2079.422958][T23212] total_swap 512000 [ 2079.426766][T23212] total_swapcached 4096 [ 2079.430914][T23212] total_pgpgin 285828 [ 2079.435252][T23212] total_pgpgout 285820 [ 2079.439329][T23212] total_pgfault 571731 [ 2079.443581][T23212] total_pgmajfault 11754 [ 2079.449234][T23212] total_inactive_anon 0 [ 2079.453653][T23212] total_active_anon 0 [ 2079.457640][T23212] total_inactive_file 0 [ 2079.462609][T23212] total_active_file 0 [ 2079.466609][T23212] total_unevictable 0 [ 2079.470605][T23212] anon_cost 0 [ 2079.476076][T23212] file_cost 0 [ 2079.479383][T23212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23205,uid=0 [ 2079.496895][T23212] Memory cgroup out of memory: Killed process 23205 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000008140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2079.527976][T23218] __nla_validate_parse: 31 callbacks suppressed [ 2079.527995][T23218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000036d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2079.585398][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:23 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xb}, 0x0) [ 2079.697000][T23222] vxcan3: entered allmulticast mode 02:45:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x88470000}, 0x0) [ 2079.798179][T23225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0x2a03}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000140)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x9, 0x1, {{0x17, 0x4, 0x2, 0x2b, 0x5c, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x48, 0x2, [{0x1, 0xe, "e5b9d927575f9d26566f6570"}, {0x5, 0x6, "74bf53c3"}, {0x6, 0xc, "384112658f24f2db80da"}, {0x2, 0x7, "a559b39737"}, {0x1, 0x3, "df"}, {0x0, 0x6, "a221c5c7"}, {0x6, 0x12, "4a6d74a727c997b123719aa57053676e"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800003c07fffffff000080014921006400650000a12f9078ffffffff7f00000144342e93ffffffff00000f3aac14143100001000ac141421000000087f0000010000098b0a010102000000fda41e0101fffff400000003000000070000000194040100"]}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x16c4f703c286e8df, 0x40, 0x7ff, 0x1ff, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0xfa, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xc}, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 32) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6e42b171083529d9}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000540008002cbd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="010104007f0000010000000000000000000000000800000020000100", @ANYRES32=r9, @ANYBLOB="00010300000000000000000000000000000000001800000020000100", @ANYRES32=r10, @ANYBLOB="00030300fe8000000000000000000000000000bb0400000020000100", @ANYRES32=0x0, @ANYBLOB="01000400fc0000000000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="000002002001000000000000000000000000000186dd000020000100", @ANYRES32=r11, @ANYBLOB="01010200ac1414bb0000000000000000000000000000000020000100", @ANYRES32=r12, @ANYBLOB="0001048b7d56ec1300dc010000000000000000000000000011000000", @ANYRES32=r13, @ANYBLOB="00010000fe8000000000000000000000000000aa8edd0000"], 0x118}, 0x1, 0x0, 0x0, 0x8040}, 0x10) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r14, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r15], 0x3c}}, 0x0) [ 2079.867378][T23232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000006f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2079.960900][T23234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:23 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xc}, 0x0) 02:45:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x88480000}, 0x0) [ 2080.192226][T23238] vxcan3: entered allmulticast mode [ 2080.276149][ T5145] net_ratelimit: 3 callbacks suppressed [ 2080.276167][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0x2a03}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000140)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x9, 0x1, {{0x17, 0x4, 0x2, 0x2b, 0x5c, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x48, 0x2, [{0x1, 0xe, "e5b9d927575f9d26566f6570"}, {0x5, 0x6, "74bf53c3"}, {0x6, 0xc, "384112658f24f2db80da"}, {0x2, 0x7, "a559b39737"}, {0x1, 0x3, "df"}, {0x0, 0x6, "a221c5c7"}, {0x6, 0x12, "4a6d74a727c997b123719aa57053676e"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x40, 0x9, 0x1, {{0x17, 0x4, 0x2, 0x2b, 0x5c, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x48, 0x2, [{0x1, 0xe, "e5b9d927575f9d26566f6570"}, {0x5, 0x6, "74bf53c3"}, {0x6, 0xc, "384112658f24f2db80da"}, {0x2, 0x7, "a559b39737"}, {0x1, 0x3, "df"}, {0x0, 0x6, "a221c5c7"}, {0x6, 0x12, "4a6d74a727c997b123719aa57053676e"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800003c07fffffff000080014921006400650000a12f9078ffffffff7f00000144342e93ffffffff00000f3aac14143100001000ac141421000000087f0000010000098b0a010102000000fda41e0101fffff400000003000000070000000194040100"]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x16c4f703c286e8df, 0x40, 0x7ff, 0x1ff, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0xfa, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xc}, {[@ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000500)=0xc) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6e42b171083529d9}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000540008002cbd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="010104007f0000010000000000000000000000000800000020000100", @ANYRES32=r9, @ANYBLOB="00010300000000000000000000000000000000001800000020000100", @ANYRES32=r10, @ANYBLOB="00030300fe8000000000000000000000000000bb0400000020000100", @ANYRES32=0x0, @ANYBLOB="01000400fc0000000000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="000002002001000000000000000000000000000186dd000020000100", @ANYRES32=r11, @ANYBLOB="01010200ac1414bb0000000000000000000000000000000020000100", @ANYRES32=r12, @ANYBLOB="0001048b7d56ec1300dc010000000000000000000000000011000000", @ANYRES32=r13, @ANYBLOB="00010000fe8000000000000000000000000000aa8edd0000"], 0x118}, 0x1, 0x0, 0x0, 0x8040}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r14, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r15], 0x3c}}, 0x0) (async) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r14, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r15], 0x3c}}, 0x0) [ 2080.321989][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2080.388731][T23229] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2080.416890][T23229] CPU: 1 PID: 23229 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2080.427348][T23229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2080.437415][T23229] Call Trace: [ 2080.440712][T23229] [ 2080.443637][T23229] dump_stack_lvl+0x1e7/0x2e0 [ 2080.448315][T23229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2080.453528][T23229] ? __pfx__printk+0x10/0x10 [ 2080.458150][T23229] ? ___ratelimit+0x4c4/0x670 [ 2080.462855][T23229] ? __pfx____ratelimit+0x10/0x10 [ 2080.467909][T23229] dump_header+0xda/0x6a0 [ 2080.472279][T23229] oom_kill_process+0x3a7/0x930 [ 2080.477162][T23229] out_of_memory+0xf67/0x1320 [ 2080.481876][T23229] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2080.487538][T23229] ? __pfx___mutex_lock+0x10/0x10 [ 2080.492585][T23229] ? __pfx_out_of_memory+0x10/0x10 [ 2080.497715][T23229] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2080.503255][T23229] ? __pfx_lock_release+0x10/0x10 [ 2080.508289][T23229] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2080.514386][T23229] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2080.519610][T23229] ? mem_cgroup_iter+0x3e9/0x560 [ 2080.524575][T23229] try_charge_memcg+0xda2/0x18a0 [ 2080.529561][T23229] ? __pfx_try_charge_memcg+0x10/0x10 02:45:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000026f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2080.534954][T23229] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2080.540698][T23229] ? __pfx_lock_release+0x10/0x10 [ 2080.545755][T23229] ? memcg_account_kmem+0x1e7/0x210 [ 2080.550987][T23229] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2080.556814][T23229] __memcg_kmem_charge_page+0xe1/0x250 [ 2080.562284][T23229] memcg_charge_kernel_stack+0x304/0x550 [ 2080.567945][T23229] dup_task_struct+0x15d/0x7d0 [ 2080.572726][T23229] copy_process+0x5d5/0x3fc0 [ 2080.577333][T23229] ? __might_fault+0xa9/0x120 [ 2080.582015][T23229] ? __pfx_lock_release+0x10/0x10 [ 2080.587072][T23229] ? __pfx_copy_process+0x10/0x10 [ 2080.592106][T23229] ? __might_fault+0xc5/0x120 [ 2080.596779][T23229] ? __asan_memset+0x23/0x50 [ 2080.601378][T23229] kernel_clone+0x21d/0x8d0 [ 2080.605885][T23229] ? __pfx_kernel_clone+0x10/0x10 [ 2080.610915][T23229] __se_sys_clone3+0x2cb/0x350 [ 2080.615691][T23229] ? __pfx___se_sys_clone3+0x10/0x10 [ 2080.621029][T23229] ? do_syscall_64+0x108/0x240 [ 2080.625818][T23229] ? do_syscall_64+0xb4/0x240 [ 2080.630492][T23229] do_syscall_64+0xf9/0x240 [ 2080.635008][T23229] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2080.640917][T23229] RIP: 0033:0x7f810c8a9b99 [ 2080.645325][T23229] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2080.664922][T23229] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2080.673337][T23229] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2080.681340][T23229] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2080.689311][T23229] RBP: 00007f810bbff6c0 R08: 00007f810bbff6c0 R09: 00007f810cacfa47 [ 2080.697284][T23229] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2080.705270][T23229] R13: 000000000000006e R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2080.713278][T23229] [ 2080.721566][T23229] memory: usage 307200kB, limit 307200kB, failcnt 52921 [ 2080.728021][T23245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2080.731408][T23229] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 2080.746694][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.760021][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.772173][T23229] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2080.773292][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.787368][T23229] Memory cgroup stats for /syz4: [ 2080.787723][T23229] cache 0 [ 2080.798937][T23229] rss 20480 [ 2080.802433][T23229] rss_huge 0 [ 2080.807667][T23229] shmem 0 [ 2080.810689][T23229] mapped_file 0 [ 2080.817585][T23229] dirty 0 [ 2080.820909][T23229] writeback 0 [ 2080.825468][T23229] workingset_refault_anon 13244 [ 2080.830705][T23229] workingset_refault_file 333 02:45:24 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xd}, 0x0) 02:45:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x88a8ffff}, 0x0) [ 2080.837670][T23229] swap 491520 [ 2080.841053][T23229] swapcached 0 [ 2080.844991][T23229] pgpgin 286154 [ 2080.848546][T23229] pgpgout 286149 [ 2080.852624][T23229] pgfault 572223 [ 2080.856259][T23229] pgmajfault 12061 [ 2080.860066][T23229] inactive_anon 0 [ 2080.869096][T23249] vxcan3: entered allmulticast mode [ 2080.897146][T23229] active_anon 20480 [ 2080.907284][T23229] inactive_file 0 [ 2080.911071][T23229] active_file 0 [ 2080.930228][T23229] unevictable 0 [ 2080.938474][T23229] hierarchical_memory_limit 314572800 [ 2080.947542][T23229] hierarchical_memsw_limit 9223372036854771712 [ 2080.955086][T23254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2080.957624][T23229] total_cache 0 [ 2080.968173][T23229] total_rss 20480 [ 2080.975572][T23229] total_rss_huge 0 [ 2080.984986][T23229] total_shmem 0 [ 2080.988680][T23229] total_mapped_file 0 [ 2080.993371][T23229] total_dirty 0 02:45:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000000dba4c688aa651c4700000000000000a5979fcb952c389151eb7036fef51722", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f00000001c0)=@caif=@rfm={0x25, 0x7, "e033d88f11000e194d2b24b67904767f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="cdcc20f37e2cfc307db65c80b595165131a61514907279f46b4a28ff8ac37386", 0x20}, {&(0x7f0000000240)="f5ff65334482e0f2cc58ebef90b518140f0992a3c601c7bd40147e65a4d4bafbbd11accc8c4438c1aa0a11647f0e5dd3abcd0edac15a004cad43995817ff5539cce5384e28b7192f84658ee37a03bb5190b5e73a32e42b2d35d19ec601a31e0b3ba746f33a7a67f2eaea75ec82e1ce41e147b00d8ffe1234cdb38c784d48bd9c2c0b8084a0c5addd8a8e734a02dcf5a5e84a548432da454d2500577ec0f71391335c64f712ed082d329da87ea8802c46613b988c327cef4e56df49b039c4207e6d6a6c", 0xc3}, {&(0x7f0000000340)="0bfbc4072b45cc72ae5fe857a753fb15279bc1ac40784b73139e9d1f2d7dcb4f27f45d27a9e8c73d9ba02de5d59118a8c49cb905dde6d452a4f83ec1e2b0c7c1ae1a9f95212bac11d1d2857df3f1f0c0f4e1e517e3881615fcc829ff427ca86376e245dacba9dd3286425ee33816b1f87da619b895d8", 0x76}, {&(0x7f0000000140)="80f62888a6cf266f6d57d938e21f2fbd83f7", 0x12}], 0x4, &(0x7f0000000400)=[{0xc8, 0x115, 0x20, "f229c74e32dd49dd448680c80b613c468764d9b74dc70ac3be3f72b1f7f47cb7fa6cffa839081ee7e72b33fa88a7ecb128a9618999867b77565074d181082c897098477b26125619e5183c06e5a471f6b205b783dc527cb2e81580601b3ae9c0a78d1554d0b231caa29962eae09538584ce10228c51390489cf7ef5e968ae90feacab4369fdf5ad7b0149f784c470f4b03d82508b3a05d675902be48b35d6ad3317ed046c8179ddbbecb7da4ba7f035bf48f65d7"}], 0xc8}}], 0x1, 0x24064091) [ 2080.996969][T23229] total_writeback 0 [ 2081.000888][T23229] total_workingset_refault_anon 13244 [ 2081.007041][T23229] total_workingset_refault_file 333 [ 2081.021596][T23229] total_swap 491520 [ 2081.027729][T23229] total_swapcached 0 [ 2081.041398][T23229] total_pgpgin 286154 02:45:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000007100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2081.050966][T23229] total_pgpgout 286149 [ 2081.064688][T23229] total_pgfault 572223 [ 2081.078481][T23229] total_pgmajfault 12061 [ 2081.087645][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2081.096103][T23229] total_inactive_anon 0 02:45:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000000dba4c688aa651c4700000000000000a5979fcb952c389151eb7036fef51722", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) (async) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f00000001c0)=@caif=@rfm={0x25, 0x7, "e033d88f11000e194d2b24b67904767f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="cdcc20f37e2cfc307db65c80b595165131a61514907279f46b4a28ff8ac37386", 0x20}, {&(0x7f0000000240)="f5ff65334482e0f2cc58ebef90b518140f0992a3c601c7bd40147e65a4d4bafbbd11accc8c4438c1aa0a11647f0e5dd3abcd0edac15a004cad43995817ff5539cce5384e28b7192f84658ee37a03bb5190b5e73a32e42b2d35d19ec601a31e0b3ba746f33a7a67f2eaea75ec82e1ce41e147b00d8ffe1234cdb38c784d48bd9c2c0b8084a0c5addd8a8e734a02dcf5a5e84a548432da454d2500577ec0f71391335c64f712ed082d329da87ea8802c46613b988c327cef4e56df49b039c4207e6d6a6c", 0xc3}, {&(0x7f0000000340)="0bfbc4072b45cc72ae5fe857a753fb15279bc1ac40784b73139e9d1f2d7dcb4f27f45d27a9e8c73d9ba02de5d59118a8c49cb905dde6d452a4f83ec1e2b0c7c1ae1a9f95212bac11d1d2857df3f1f0c0f4e1e517e3881615fcc829ff427ca86376e245dacba9dd3286425ee33816b1f87da619b895d8", 0x76}, {&(0x7f0000000140)="80f62888a6cf266f6d57d938e21f2fbd83f7", 0x12}], 0x4, &(0x7f0000000400)=[{0xc8, 0x115, 0x20, "f229c74e32dd49dd448680c80b613c468764d9b74dc70ac3be3f72b1f7f47cb7fa6cffa839081ee7e72b33fa88a7ecb128a9618999867b77565074d181082c897098477b26125619e5183c06e5a471f6b205b783dc527cb2e81580601b3ae9c0a78d1554d0b231caa29962eae09538584ce10228c51390489cf7ef5e968ae90feacab4369fdf5ad7b0149f784c470f4b03d82508b3a05d675902be48b35d6ad3317ed046c8179ddbbecb7da4ba7f035bf48f65d7"}], 0xc8}}], 0x1, 0x24064091) [ 2081.101261][T23229] total_active_anon 20480 [ 2081.126552][T23229] total_inactive_file 0 [ 2081.137210][T23229] total_active_file 0 [ 2081.143632][T23229] total_unevictable 0 [ 2081.147637][T23229] anon_cost 0 [ 2081.150930][T23229] file_cost 0 02:45:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000000dba4c688aa651c4700000000000000a5979fcb952c389151eb7036fef51722", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) (async, rerun: 64) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f00000001c0)=@caif=@rfm={0x25, 0x7, "e033d88f11000e194d2b24b67904767f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="cdcc20f37e2cfc307db65c80b595165131a61514907279f46b4a28ff8ac37386", 0x20}, {&(0x7f0000000240)="f5ff65334482e0f2cc58ebef90b518140f0992a3c601c7bd40147e65a4d4bafbbd11accc8c4438c1aa0a11647f0e5dd3abcd0edac15a004cad43995817ff5539cce5384e28b7192f84658ee37a03bb5190b5e73a32e42b2d35d19ec601a31e0b3ba746f33a7a67f2eaea75ec82e1ce41e147b00d8ffe1234cdb38c784d48bd9c2c0b8084a0c5addd8a8e734a02dcf5a5e84a548432da454d2500577ec0f71391335c64f712ed082d329da87ea8802c46613b988c327cef4e56df49b039c4207e6d6a6c", 0xc3}, {&(0x7f0000000340)="0bfbc4072b45cc72ae5fe857a753fb15279bc1ac40784b73139e9d1f2d7dcb4f27f45d27a9e8c73d9ba02de5d59118a8c49cb905dde6d452a4f83ec1e2b0c7c1ae1a9f95212bac11d1d2857df3f1f0c0f4e1e517e3881615fcc829ff427ca86376e245dacba9dd3286425ee33816b1f87da619b895d8", 0x76}, {&(0x7f0000000140)="80f62888a6cf266f6d57d938e21f2fbd83f7", 0x12}], 0x4, &(0x7f0000000400)=[{0xc8, 0x115, 0x20, "f229c74e32dd49dd448680c80b613c468764d9b74dc70ac3be3f72b1f7f47cb7fa6cffa839081ee7e72b33fa88a7ecb128a9618999867b77565074d181082c897098477b26125619e5183c06e5a471f6b205b783dc527cb2e81580601b3ae9c0a78d1554d0b231caa29962eae09538584ce10228c51390489cf7ef5e968ae90feacab4369fdf5ad7b0149f784c470f4b03d82508b3a05d675902be48b35d6ad3317ed046c8179ddbbecb7da4ba7f035bf48f65d7"}], 0xc8}}], 0x1, 0x24064091) (rerun: 64) 02:45:24 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xe}, 0x0) [ 2081.169053][T23229] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23229,uid=0 [ 2081.204589][T23229] Memory cgroup out of memory: Killed process 23229 (syz-executor.4) total-vm:54640kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xbe2b0000}, 0x0) 02:45:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0xc0, 0x11, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x200, 0x1010}, [@IFLA_VF_PORTS={0xa0, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0xa1}, @IFLA_PORT_PROFILE={0x6, 0x2, '&\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b0ad9df9f8f2fe4345679d5e010341ea"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x6, 0x2, '%\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4ee710e52d80d80793606f60d943a768"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "087bb769dafd71c6616dad4eddb20a19"}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='.\x00', 0x0, 0x6521eb3997e3b519, r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) [ 2081.234211][T23263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2081.310410][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000017100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000009140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:25 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xf}, 0x0) 02:45:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xc33d0000}, 0x0) 02:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0xc0, 0x11, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x200, 0x1010}, [@IFLA_VF_PORTS={0xa0, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0xa1}, @IFLA_PORT_PROFILE={0x6, 0x2, '&\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b0ad9df9f8f2fe4345679d5e010341ea"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x6, 0x2, '%\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4ee710e52d80d80793606f60d943a768"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "087bb769dafd71c6616dad4eddb20a19"}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='.\x00', 0x0, 0x6521eb3997e3b519, r0}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 02:45:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000037100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:25 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x10}, 0x0) 02:45:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xf0ffffff}, 0x0) 02:45:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0xc0, 0x11, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x200, 0x1010}, [@IFLA_VF_PORTS={0xa0, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0xa1}, @IFLA_PORT_PROFILE={0x6, 0x2, '&\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b0ad9df9f8f2fe4345679d5e010341ea"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x6, 0x2, '%\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4ee710e52d80d80793606f60d943a768"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "087bb769dafd71c6616dad4eddb20a19"}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='.\x00', 0x0, 0x6521eb3997e3b519, r0}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 02:45:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000037300000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:25 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x11}, 0x0) 02:45:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xff7f0000}, 0x0) 02:45:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000007400000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2082.356783][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:26 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x12}, 0x0) 02:45:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xffffa888}, 0x0) 02:45:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000007500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:26 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x18}, 0x0) 02:45:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xffffff7f}, 0x0) 02:45:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000027500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x13, 0x2702) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)="230317"}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 02:45:26 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x21}, 0x0) [ 2083.120432][T23278] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 02:45:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xfffffff0}, 0x0) [ 2083.164519][T23278] CPU: 1 PID: 23278 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2083.174986][T23278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2083.185063][T23278] Call Trace: [ 2083.188366][T23278] [ 2083.191322][T23278] dump_stack_lvl+0x1e7/0x2e0 [ 2083.196033][T23278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2083.201258][T23278] ? __pfx__printk+0x10/0x10 [ 2083.205870][T23278] ? ___ratelimit+0x4c4/0x670 [ 2083.210576][T23278] ? __pfx____ratelimit+0x10/0x10 [ 2083.215625][T23278] dump_header+0xda/0x6a0 [ 2083.219985][T23278] oom_kill_process+0x3a7/0x930 [ 2083.224866][T23278] out_of_memory+0xf67/0x1320 [ 2083.229589][T23278] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2083.235240][T23278] ? __pfx___mutex_lock+0x10/0x10 [ 2083.240285][T23278] ? __pfx_out_of_memory+0x10/0x10 [ 2083.245451][T23278] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2083.251022][T23278] ? __pfx_lock_release+0x10/0x10 [ 2083.256066][T23278] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2083.262136][T23278] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2083.267405][T23278] ? mem_cgroup_iter+0x3e9/0x560 [ 2083.272362][T23278] try_charge_memcg+0xda2/0x18a0 [ 2083.277305][T23278] ? mark_lock+0x9a/0x350 [ 2083.281651][T23278] ? __pfx_try_charge_memcg+0x10/0x10 [ 2083.287069][T23278] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2083.293223][T23278] charge_memcg+0xa2/0x160 [ 2083.297648][T23278] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2083.303730][T23278] __read_swap_cache_async+0x480/0x8b0 [ 2083.309203][T23278] ? mark_lock+0x9a/0x350 [ 2083.313543][T23278] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2083.319532][T23278] ? blk_start_plug+0x6f/0x1b0 [ 2083.324302][T23278] swap_cluster_readahead+0x398/0x810 [ 2083.329684][T23278] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2083.335579][T23278] ? __pfx_lock_release+0x10/0x10 [ 2083.340618][T23278] ? xas_descend+0x37e/0x470 [ 2083.345215][T23278] swapin_readahead+0x1ea/0x1070 [ 2083.350149][T23278] ? filemap_get_entry+0x127/0x4e0 [ 2083.355270][T23278] ? __pfx_swapin_readahead+0x10/0x10 [ 2083.360649][T23278] ? __filemap_get_folio+0x935/0xbc0 [ 2083.365934][T23278] ? swap_cache_get_folio+0x9f/0x570 [ 2083.371220][T23278] do_swap_page+0x8ab/0x3da0 [ 2083.375809][T23278] ? __pte_offset_map+0x2c4/0x380 [ 2083.380834][T23278] ? do_swap_page+0x154/0x3da0 [ 2083.385594][T23278] ? __pfx_do_swap_page+0x10/0x10 [ 2083.390613][T23278] ? pte_offset_map_nolock+0x137/0x1f0 [ 2083.396072][T23278] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2083.401874][T23278] ? __pfx_validate_chain+0x10/0x10 [ 2083.407077][T23278] __handle_mm_fault+0x15e8/0x72d0 [ 2083.412206][T23278] ? __pfx___handle_mm_fault+0x10/0x10 [ 2083.417667][T23278] ? mt_find+0x226/0x850 [ 2083.421923][T23278] ? __pfx_lock_release+0x10/0x10 [ 2083.427003][T23278] ? mt_find+0x62d/0x850 [ 2083.431271][T23278] ? mt_find+0x226/0x850 [ 2083.435539][T23278] ? find_vma+0x142/0x1c0 [ 2083.439878][T23278] ? __pfx_find_vma+0x10/0x10 [ 2083.444554][T23278] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2083.450558][T23278] handle_mm_fault+0x3c1/0x8a0 [ 2083.455357][T23278] exc_page_fault+0x2ad/0x870 [ 2083.460045][T23278] asm_exc_page_fault+0x26/0x30 [ 2083.464909][T23278] RIP: 0010:__get_user_8+0x11/0x20 [ 2083.470025][T23278] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2083.489644][T23278] RSP: 0018:ffffc90003567d78 EFLAGS: 00050202 [ 2083.495715][T23278] RAX: 0000555555634da8 RBX: ffff8880a9a8d0b8 RCX: ffffc90003567c03 [ 2083.503684][T23278] RDX: 0000000000000000 RSI: ffffffff8baac760 RDI: ffffffff8bfe6820 [ 2083.511652][T23278] RBP: ffffc90003567ec0 R08: ffffffff8f85576f R09: 1ffffffff1f0aaed [ 2083.519618][T23278] R10: dffffc0000000000 R11: fffffbfff1f0aaee R12: ffffc90003567d80 [ 2083.527584][T23278] R13: ffffc90003567fd8 R14: dffffc0000000000 R15: ffff8880a9a8bb80 [ 2083.535566][T23278] __rseq_handle_notify_resume+0x158/0x1490 [ 2083.541482][T23278] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2083.547833][T23278] ? irqentry_exit_to_user_mode+0x52/0x280 [ 2083.553643][T23278] irqentry_exit_to_user_mode+0xbb/0x280 [ 2083.559278][T23278] exc_page_fault+0x587/0x870 [ 2083.563955][T23278] asm_exc_page_fault+0x26/0x30 [ 2083.568803][T23278] RIP: 0033:0x7f810c839ac7 [ 2083.573211][T23278] Code: 25 ff 0f 00 00 09 c5 80 3d 06 bc c9 00 00 0f 85 6f ff ff ff 44 0f b6 6c 24 0f 44 8d 55 04 89 e8 41 89 c1 41 81 e1 ff 1f 00 00 <43> 8b 14 8e 39 d5 0f 84 5e ff ff ff 85 d2 0f 84 65 01 00 00 83 c0 [ 2083.592811][T23278] RSP: 002b:00007f810cacfa60 EFLAGS: 00010206 [ 2083.598873][T23278] RAX: 0000000081d3b0f5 RBX: 00007f810c9ac018 RCX: 000000000000015b [ 2083.606836][T23278] RDX: ffffffff81d3b58c RSI: 0000000080000000 RDI: 0000000000015a5d [ 2083.614799][T23278] RBP: 0000000081d3b0f5 R08: 0000001b32120000 R09: 00000000000010f5 [ 2083.622766][T23278] R10: 0000000081d3b0f9 R11: 0000000000000246 R12: 000000000000015b [ 2083.630731][T23278] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff81d3b58c [ 2083.638696][T23278] ? do_shrink_slab+0xaac/0x1140 [ 2083.643645][T23278] ? do_shrink_slab+0xaac/0x1140 [ 2083.648587][T23278] [ 2083.662484][T23327] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 2083.667034][T23278] memory: usage 307200kB, limit 307200kB, failcnt 54391 [ 2083.680245][T23278] memory+swap: usage 307680kB, limit 9007199254740988kB, failcnt 0 [ 2083.690179][T23278] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 2083.697875][T23278] Memory cgroup stats for /syz4: [ 2083.698307][T23278] cache 0 02:45:27 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x25}, 0x0) [ 2083.712986][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.719584][T23278] rss 28672 [ 2083.726009][T23278] rss_huge 0 [ 2083.729533][T23278] shmem 0 [ 2083.753808][T23278] mapped_file 0 [ 2083.757451][T23278] dirty 0 [ 2083.760502][T23278] writeback 0 [ 2083.824194][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.844945][T23278] workingset_refault_anon 14109 [ 2083.851928][T23278] workingset_refault_file 333 [ 2083.856917][T23278] swap 503808 [ 2083.860447][T23278] swapcached 8192 [ 2083.865359][T23278] pgpgin 287066 [ 2083.869095][T23278] pgpgout 287057 02:45:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000037500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2083.873681][T23278] pgfault 573524 [ 2083.877485][T23278] pgmajfault 12944 [ 2083.893435][T23278] inactive_anon 12288 [ 2083.897619][T23278] active_anon 24576 [ 2083.905729][T23278] inactive_file 0 [ 2083.909553][T23278] active_file 0 [ 2083.914695][T23278] unevictable 0 [ 2083.918388][T23278] hierarchical_memory_limit 314572800 [ 2083.928722][T23278] hierarchical_memsw_limit 9223372036854771712 [ 2083.938243][T23278] total_cache 0 [ 2083.947210][T23278] total_rss 28672 [ 2083.956310][T23278] total_rss_huge 0 [ 2083.961160][T23278] total_shmem 0 [ 2083.970099][T23278] total_mapped_file 0 [ 2083.975729][T23278] total_dirty 0 [ 2083.979378][T23278] total_writeback 0 [ 2083.985840][T23278] total_workingset_refault_anon 14109 [ 2083.991754][T23278] total_workingset_refault_file 333 [ 2084.012204][T23278] total_swap 503808 [ 2084.020620][T23278] total_swapcached 8192 02:45:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x100000000000000}, 0x0) 02:45:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x13, 0x2702) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)="230317"}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x13, 0x2702) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)="230317"}) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async) [ 2084.030000][T23278] total_pgpgin 287066 [ 2084.039220][T23278] total_pgpgout 287057 [ 2084.044530][T23278] total_pgfault 573524 [ 2084.048743][T23278] total_pgmajfault 12944 [ 2084.053837][T23278] total_inactive_anon 12288 [ 2084.058467][T23278] total_active_anon 24576 [ 2084.068727][T23278] total_inactive_file 0 [ 2084.075273][T23278] total_active_file 0 02:45:27 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x2f}, 0x0) [ 2084.079408][T23278] total_unevictable 0 [ 2084.089579][T23278] anon_cost 0 [ 2084.093355][T23278] file_cost 0 [ 2084.096778][T23278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23278,uid=0 [ 2084.121337][T23338] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 02:45:27 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000000a140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2084.152698][T23278] Memory cgroup out of memory: Killed process 23278 (syz-executor.4) total-vm:54508kB, anon-rss:516kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:45:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x13, 0x2702) (rerun: 32) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)="230317"}) (async) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) [ 2084.200228][T23342] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 02:45:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000007700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x200000000000000}, 0x0) 02:45:28 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x3a}, 0x0) [ 2084.386934][T23349] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 02:45:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 02:45:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000037700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x300000000000000}, 0x0) [ 2084.580870][T23357] __nla_validate_parse: 26 callbacks suppressed [ 2084.580891][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async) [ 2084.670504][T23361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:28 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x48}, 0x0) [ 2084.761236][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000037800000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x400000000000000}, 0x0) 02:45:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) [ 2084.901549][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:28 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x4c}, 0x0) [ 2085.037755][T23373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000027900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone3(&(0x7f0000000400)={0x40000400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140), {0x15}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000300)=""/249, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r1}}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@RTM_NEWNSID={0x24, 0x58, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r3, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) 02:45:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x500000000000000}, 0x0) [ 2085.200549][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:28 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x60}, 0x0) [ 2085.306862][T23382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000037900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x600000000000000}, 0x0) [ 2085.493752][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2085.607302][T23389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:29 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x64}, 0x0) [ 2085.674639][T23392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000007a00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2085.790635][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x700000000000000}, 0x0) [ 2085.848141][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:29 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x68}, 0x0) 02:45:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000027b00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x800000000000000}, 0x0) 02:45:29 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x6c}, 0x0) 02:45:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000007d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x900000000000000}, 0x0) 02:45:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000027d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:30 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x74}, 0x0) 02:45:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xa00000000000000}, 0x0) [ 2086.846439][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2086.903070][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000037d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:30 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x7a}, 0x0) 02:45:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xb00000000000000}, 0x0) 02:45:30 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000000b140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xc00000000000000}, 0x0) 02:45:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000007f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:31 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x300}, 0x0) 02:45:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xd00000000000000}, 0x0) 02:45:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000037f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2087.869945][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:31 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x500}, 0x0) 02:45:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xe00000000000000}, 0x0) 02:45:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000008100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:31 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x600}, 0x0) [ 2088.272964][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000018300000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xf00000000000000}, 0x0) [ 2089.014096][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone3(&(0x7f0000000400)={0x40000400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140), {0x15}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000300)=""/249, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r1}}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@RTM_NEWNSID={0x24, 0x58, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r3, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) 02:45:32 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x700}, 0x0) 02:45:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000028300000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x1000000000000000}, 0x0) 02:45:32 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x900}, 0x0) 02:45:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000038300000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x1100000000000000}, 0x0) 02:45:33 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xa00}, 0x0) 02:45:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000008500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x1200000000000000}, 0x0) [ 2089.620468][T23467] __nla_validate_parse: 20 callbacks suppressed [ 2089.620486][T23467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:33 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xb00}, 0x0) [ 2089.729234][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000018500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x1800000000000000}, 0x0) [ 2089.870249][T23473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:33 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xc00}, 0x0) [ 2089.949534][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) [ 2090.002739][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2090.040210][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000008700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2090.109545][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:33 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xd00}, 0x0) 02:45:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2100000000000000}, 0x0) [ 2090.275896][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000018700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2090.358337][T23485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xe00}, 0x0) [ 2090.494409][T23489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2090.587015][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2500000000000000}, 0x0) 02:45:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000028700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xf00}, 0x0) 02:45:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000000c140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x2f00000000000000}, 0x0) [ 2090.839726][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000478800000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x3a00000000000000}, 0x0) 02:45:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x1100}, 0x0) [ 2091.075358][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000488800000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4000000000000000}, 0x0) 02:45:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x1200}, 0x0) 02:45:35 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400ffffa88800000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2092.116415][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r2 = syz_clone3(&(0x7f0000000400)={0x40000400, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000140), {0x15}, &(0x7f00000001c0)=""/186, 0xba, &(0x7f0000000300)=""/249, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r1}}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@RTM_NEWNSID={0x24, 0x58, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r3, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) 02:45:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4800000000000000}, 0x0) 02:45:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x1800}, 0x0) 02:45:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000008900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0) 02:45:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000038900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2092.983301][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x2100}, 0x0) 02:45:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6000000000000000}, 0x0) 02:45:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000008d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2093.158786][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:36 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x2500}, 0x0) 02:45:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6400000000000000}, 0x0) 02:45:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000008f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:37 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x2f00}, 0x0) 02:45:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6558000000000000}, 0x0) 02:45:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000018f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:37 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x2fb7}, 0x0) 02:45:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6800000000000000}, 0x0) 02:45:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000028f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x6c00000000000000}, 0x0) 02:45:37 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x3a00}, 0x0) 02:45:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000038f00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2094.189268][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x7400000000000000}, 0x0) 02:45:37 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000000d140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:38 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x4788}, 0x0) 02:45:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000029500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x7a00000000000000}, 0x0) 02:45:38 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x4800}, 0x0) 02:45:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000039500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x8100000000000000}, 0x0) [ 2094.717821][T23573] __nla_validate_parse: 21 callbacks suppressed [ 2094.717840][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:38 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x4888}, 0x0) [ 2094.789909][T23577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000029700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x8847000000000000}, 0x0) [ 2094.917555][T23579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2095.083841][T23583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2095.252763][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2096.025528][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="296e05bf9b9273b71efb83646351c3331eaedf916b1f97cf094d6045ffe30b2f3c2bab6d04fc35b8", 0x28, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltclass={0x2c, 0x29, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {0x7, 0x2}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x43, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r5, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) 02:45:39 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x4c00}, 0x0) 02:45:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x8848000000000000}, 0x0) 02:45:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000009900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2096.263126][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2096.338397][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x5865}, 0x0) 02:45:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x88a8ffff00000000}, 0x0) [ 2096.443009][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:40 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000009b00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2096.560718][T23592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="296e05bf9b9273b71efb83646351c3331eaedf916b1f97cf094d6045ffe30b2f3c2bab6d04fc35b8", 0x28, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltclass={0x2c, 0x29, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {0x7, 0x2}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x43, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r5, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) [ 2096.608639][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x6000}, 0x0) 02:45:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xbe2b000000000000}, 0x0) [ 2096.770559][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:40 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000009d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2096.871901][T23600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="296e05bf9b9273b71efb83646351c3331eaedf916b1f97cf094d6045ffe30b2f3c2bab6d04fc35b8", 0x28, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltclass={0x2c, 0x29, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff2}, {0x7, 0x2}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x43, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r5, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) 02:45:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x6400}, 0x0) 02:45:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xc33d000000000000}, 0x0) 02:45:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:40 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000029d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:40 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x6558}, 0x0) 02:45:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xf0ffffff00000000}, 0x0) 02:45:41 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000000e140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2097.320381][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000039d00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:41 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x6800}, 0x0) 02:45:41 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xff7f000000000000}, 0x0) 02:45:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000a100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:41 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x6c00}, 0x0) 02:45:41 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x5b8, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x40, 0x2, 0x4, 0x100000, 0x8001, {}, {0x2, 0x8, 0x5, 0xd0, 0xaa, 0x3f, "f63812ad"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x8, 0x3, {&(0x7f0000000040)}}, {0x5, 0x0, {&(0x7f00000000c0)}, 0x5}]}, 0x8}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c8) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@overlay={0xffffffff, 0x3, 0x4, 0x1, 0x3, {0x77359400}, {0x2, 0x2, 0x0, 0x7, 0x0, 0x80, "e237e299"}, 0x0, 0x3, {}, 0x9, 0x0, r0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400008000000000007f52b1ec", @ANYRES32=r1, @ANYBLOB="0104000000000000140003400c00000500000000000000000200000000000000", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xffffff7f00000000}, 0x0) [ 2097.864321][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:41 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x5b8, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x40, 0x2, 0x4, 0x100000, 0x8001, {}, {0x2, 0x8, 0x5, 0xd0, 0xaa, 0x3f, "f63812ad"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x8, 0x3, {&(0x7f0000000040)}}, {0x5, 0x0, {&(0x7f00000000c0)}, 0x5}]}, 0x8}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c8) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@overlay={0xffffffff, 0x3, 0x4, 0x1, 0x3, {0x77359400}, {0x2, 0x2, 0x0, 0x7, 0x0, 0x80, "e237e299"}, 0x0, 0x3, {}, 0x9, 0x0, r0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400008000000000007f52b1ec", @ANYRES32=r1, @ANYBLOB="0104000000000000140003400c00000500000000000000000200000000000000", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000001a100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:41 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x7400}, 0x0) 02:45:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xffffffff00000000}, 0x0) 02:45:41 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x5b8, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x40, 0x2, 0x4, 0x100000, 0x8001, {}, {0x2, 0x8, 0x5, 0xd0, 0xaa, 0x3f, "f63812ad"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x8, 0x3, {&(0x7f0000000040)}}, {0x5, 0x0, {&(0x7f00000000c0)}, 0x5}]}, 0x8}) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c8) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000300)=@overlay={0xffffffff, 0x3, 0x4, 0x1, 0x3, {0x77359400}, {0x2, 0x2, 0x0, 0x7, 0x0, 0x80, "e237e299"}, 0x0, 0x3, {}, 0x9, 0x0, r0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400008000000000007f52b1ec", @ANYRES32=r1, @ANYBLOB="0104000000000000140003400c00000500000000000000000200000000000000", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000002a100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:41 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x7a00}, 0x0) 02:45:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2}, 0x0) 02:45:42 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2098.349663][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x3}, 0x0) 02:45:42 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x8100}, 0x0) 02:45:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000a900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4}, 0x0) 02:45:42 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x5}, 0x0) 02:45:42 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x8847}, 0x0) 02:45:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000002a900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6}, 0x0) 02:45:42 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x7}, 0x0) 02:45:42 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x8848}, 0x0) [ 2099.065447][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000003a900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2099.220599][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.227462][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 02:45:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x8}, 0x0) [ 2099.419461][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:44 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000000f140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r1], 0x3c}}, 0x0) 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x9}, 0x0) 02:45:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xb72f}, 0x0) 02:45:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000ab00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xa}, 0x0) [ 2100.463369][T23697] __nla_validate_parse: 29 callbacks suppressed [ 2100.463389][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2100.466504][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xb}, 0x0) 02:45:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0xff7f}, 0x0) [ 2100.557108][T23698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2100.589257][T23703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r1], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r1], 0x3c}}, 0x0) (async) 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xc}, 0x0) 02:45:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000001ad00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2100.709240][T23710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xd}, 0x0) 02:45:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x1000000}, 0x0) 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xe}, 0x0) [ 2100.801595][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2100.861666][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xf}, 0x0) 02:45:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r1], 0x3c}}, 0x0) [ 2100.908048][T23719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x10}, 0x0) 02:45:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000003ad00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2101.021002][T23724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x11}, 0x0) 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x12}, 0x0) 02:45:44 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x2000000}, 0x0) [ 2101.184817][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:45:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x18}, 0x0) 02:45:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x100, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6b2c75cffdb22c97}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x38) socket(0x1a, 0x800, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010005ed0fca8f150ed4b146fb4dc8e65c9410304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 02:45:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000003b100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2101.319314][T23740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 02:45:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x21}, 0x0) 02:45:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x100, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6b2c75cffdb22c97}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x38) socket(0x1a, 0x800, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010005ed0fca8f150ed4b146fb4dc8e65c9410304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x100, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6b2c75cffdb22c97}, 0x40000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x38) (async) socket(0x1a, 0x800, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010005ed0fca8f150ed4b146fb4dc8e65c9410304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async) 02:45:45 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x3000000}, 0x0) 02:45:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x25}, 0x0) 02:45:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x100, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6b2c75cffdb22c97}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x100, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6b2c75cffdb22c97}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x38) socket(0x1a, 0x800, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010005ed0fca8f150ed4b146fb4dc8e65c9410304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010005ed0fca8f150ed4b146fb4dc8e65c9410304000000000000000000000300", @ANYRES32=r2, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 02:45:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000000b300000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2f}, 0x0) [ 2101.550088][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:45 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x4000000}, 0x0) [ 2102.101924][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.377477][T23708] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 2102.390436][T23708] CPU: 0 PID: 23708 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2102.400877][T23708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2102.410929][T23708] Call Trace: [ 2102.414206][T23708] [ 2102.417131][T23708] dump_stack_lvl+0x1e7/0x2e0 [ 2102.421820][T23708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2102.427019][T23708] ? __pfx__printk+0x10/0x10 [ 2102.431607][T23708] ? ___ratelimit+0x4c4/0x670 [ 2102.436286][T23708] ? __pfx____ratelimit+0x10/0x10 [ 2102.441312][T23708] dump_header+0xda/0x6a0 [ 2102.445653][T23708] oom_kill_process+0x3a7/0x930 [ 2102.450515][T23708] out_of_memory+0xf67/0x1320 [ 2102.455195][T23708] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2102.460828][T23708] ? __pfx___mutex_lock+0x10/0x10 [ 2102.465875][T23708] ? __pfx_out_of_memory+0x10/0x10 [ 2102.470990][T23708] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2102.476541][T23708] ? __pfx_lock_release+0x10/0x10 [ 2102.481567][T23708] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2102.487639][T23708] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2102.492844][T23708] ? mem_cgroup_iter+0x3e9/0x560 [ 2102.497849][T23708] try_charge_memcg+0xda2/0x18a0 [ 2102.502810][T23708] ? __pfx_try_charge_memcg+0x10/0x10 [ 2102.508180][T23708] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2102.513896][T23708] ? __pfx_lock_release+0x10/0x10 [ 2102.518924][T23708] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2102.524920][T23708] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2102.530634][T23708] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2102.536436][T23708] obj_cgroup_charge+0x389/0x630 [ 2102.541380][T23708] ? obj_cgroup_charge+0x121/0x630 [ 2102.546500][T23708] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2102.551966][T23708] ? kmalloc_trace+0x4e/0x360 [ 2102.556639][T23708] ? __pfx___might_resched+0x10/0x10 [ 2102.561924][T23708] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2102.567735][T23708] ? ipv6_add_dev+0x5bd/0x1290 [ 2102.572497][T23708] kmalloc_trace+0x216/0x360 [ 2102.577085][T23708] ? ipv6_add_dev+0x55c/0x1290 [ 2102.581850][T23708] ipv6_add_dev+0x5bd/0x1290 [ 2102.586449][T23708] addrconf_notify+0x6a7/0x1020 [ 2102.591303][T23708] notifier_call_chain+0x18f/0x3b0 [ 2102.596433][T23708] register_netdevice+0x151f/0x19c0 [ 2102.601657][T23708] ? __pfx_register_netdevice+0x10/0x10 [ 2102.607207][T23708] ? dev_addr_mod+0xbd/0x330 [ 2102.611814][T23708] macvlan_common_newlink+0x1189/0x1930 [ 2102.617357][T23708] ? __kmalloc_node+0x26b/0x4e0 [ 2102.622214][T23708] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 2102.628101][T23708] ? __pfx_tap_handle_frame+0x10/0x10 [ 2102.633474][T23708] ? lockdep_rtnl_is_held+0x26/0x40 [ 2102.638676][T23708] ? netdev_rx_handler_register+0x78/0xe0 [ 2102.644397][T23708] macvtap_newlink+0x154/0x1d0 [ 2102.649163][T23708] ? __pfx_macvtap_newlink+0x10/0x10 [ 2102.654447][T23708] rtnl_newlink+0x158f/0x20a0 [ 2102.659119][T23708] ? __kernel_text_address+0xd/0x40 [ 2102.664372][T23708] ? __pfx_rtnl_newlink+0x10/0x10 [ 2102.669393][T23708] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2102.675285][T23708] ? rcu_is_watching+0x15/0xb0 [ 2102.680051][T23708] ? trace_contention_end+0x3c/0x100 [ 2102.685330][T23708] ? __mutex_lock+0x2ee/0xd70 [ 2102.690015][T23708] ? rcu_read_unlock+0x8c/0xa0 [ 2102.694803][T23708] ? __pfx_rtnl_newlink+0x10/0x10 [ 2102.699838][T23708] rtnetlink_rcv_msg+0x885/0x1040 [ 2102.704870][T23708] ? rtnetlink_rcv_msg+0x208/0x1040 [ 2102.710071][T23708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2102.715537][T23708] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2102.721523][T23708] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2102.727856][T23708] ? __local_bh_enable_ip+0x168/0x200 [ 2102.733230][T23708] ? lockdep_hardirqs_on+0x98/0x140 [ 2102.738427][T23708] ? __local_bh_enable_ip+0x168/0x200 [ 2102.743805][T23708] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2102.748913][T23708] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2102.754639][T23708] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2102.759748][T23708] ? __dev_queue_xmit+0x15fd/0x3b10 [ 2102.764955][T23708] ? __dev_queue_xmit+0x2c4/0x3b10 [ 2102.770068][T23708] ? ref_tracker_free+0x643/0x7e0 [ 2102.775097][T23708] netlink_rcv_skb+0x1e3/0x430 [ 2102.779868][T23708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2102.785329][T23708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2102.790633][T23708] ? netlink_deliver_tap+0x2e/0x1b0 [ 2102.795839][T23708] netlink_unicast+0x7ea/0x980 [ 2102.800611][T23708] ? __pfx_netlink_unicast+0x10/0x10 [ 2102.805896][T23708] ? __virt_addr_valid+0x44e/0x520 [ 2102.811009][T23708] ? __phys_addr_symbol+0x2f/0x70 [ 2102.816036][T23708] ? __check_object_size+0x4bb/0xa00 [ 2102.821337][T23708] ? bpf_lsm_netlink_send+0x9/0x10 [ 2102.826450][T23708] netlink_sendmsg+0xa3b/0xd70 [ 2102.831219][T23708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2102.836500][T23708] ? __import_iovec+0x552/0x890 [ 2102.841351][T23708] ? aa_sock_msg_perm+0x91/0x160 [ 2102.846294][T23708] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2102.851580][T23708] ? security_socket_sendmsg+0x87/0xb0 [ 2102.857036][T23708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2102.862316][T23708] __sock_sendmsg+0x221/0x270 [ 2102.866996][T23708] ____sys_sendmsg+0x525/0x7d0 [ 2102.871770][T23708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2102.877063][T23708] __sys_sendmsg+0x2b0/0x3a0 [ 2102.881653][T23708] ? __pfx___sys_sendmsg+0x10/0x10 [ 2102.886828][T23708] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2102.892823][T23708] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2102.899154][T23708] ? exc_page_fault+0x587/0x870 [ 2102.904017][T23708] ? do_syscall_64+0xb4/0x240 [ 2102.908698][T23708] do_syscall_64+0xf9/0x240 [ 2102.913203][T23708] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2102.919100][T23708] RIP: 0033:0x7f810c87dda9 [ 2102.923510][T23708] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2102.943113][T23708] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2102.951598][T23708] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2102.959668][T23708] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 2102.967631][T23708] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2102.975597][T23708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2102.983564][T23708] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2102.991563][T23708] [ 2102.994699][ C0] vkms_vblank_simulate: vblank timer overrun [ 2103.016866][T22009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2103.026997][T23708] memory: usage 307200kB, limit 307200kB, failcnt 72084 [ 2103.035015][T23708] memory+swap: usage 307728kB, limit 9007199254740988kB, failcnt 0 [ 2103.043014][T23708] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 2103.052350][T23708] Memory cgroup stats for /syz4: [ 2103.052499][T23708] cache 0 [ 2103.060386][T23708] rss 0 [ 2103.068426][T23708] rss_huge 0 [ 2103.071698][T23708] shmem 0 [ 2103.074818][T23708] mapped_file 0 [ 2103.078294][T23708] dirty 0 [ 2103.081267][T23708] writeback 0 [ 2103.085160][T23708] workingset_refault_anon 27147 [ 2103.090034][T23708] workingset_refault_file 333 [ 2103.094808][T23708] swap 540672 [ 2103.098322][T23708] swapcached 4096 [ 2103.104305][T23708] pgpgin 300536 [ 2103.107814][T23708] pgpgout 300535 [ 2103.111375][T23708] pgfault 591561 [ 2103.122816][T23708] pgmajfault 26210 [ 2103.126568][T23708] inactive_anon 0 [ 2103.130212][T23708] active_anon 0 [ 2103.137739][T23708] inactive_file 0 [ 2103.141401][T23708] active_file 0 [ 2103.147719][T23708] unevictable 0 [ 2103.151192][T23708] hierarchical_memory_limit 314572800 [ 2103.160172][T23708] hierarchical_memsw_limit 9223372036854771712 [ 2103.168816][T23708] total_cache 0 [ 2103.175788][T23708] total_rss 0 [ 2103.179099][T23708] total_rss_huge 0 [ 2103.185344][T23708] total_shmem 0 [ 2103.188832][T23708] total_mapped_file 0 [ 2103.196478][T23708] total_dirty 0 [ 2103.199964][T23708] total_writeback 0 [ 2103.208877][T23708] total_workingset_refault_anon 27147 [ 2103.218032][T23708] total_workingset_refault_file 333 [ 2103.228053][T23708] total_swap 540672 [ 2103.235397][T23708] total_swapcached 4096 [ 2103.239578][T23708] total_pgpgin 300536 [ 2103.246461][T23708] total_pgpgout 300535 [ 2103.250555][T23708] total_pgfault 591561 [ 2103.258276][T23708] total_pgmajfault 26210 [ 2103.264804][T23708] total_inactive_anon 0 [ 2103.268984][T23708] total_active_anon 0 [ 2103.276551][T23708] total_inactive_file 0 [ 2103.280729][T23708] total_active_file 0 [ 2103.287181][T23708] total_unevictable 0 [ 2103.291192][T23708] anon_cost 0 [ 2103.298060][T23708] file_cost 0 [ 2103.301373][T23708] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23702,uid=0 [ 2103.326715][T23708] Memory cgroup out of memory: Killed process 23702 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 02:45:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000010140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x3a}, 0x0) 02:45:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="22043ccf", @ANYRES32, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000001240)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r6, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRES64], 0x200}, {&(0x7f0000001100)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYBLOB="0400290014007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d2008a8008004200", @ANYRES32=0xffffffffffffffff, @ANYRESOCT], 0x3b0}, {&(0x7f0000000d40)=ANY=[@ANYBLOB="6c01001b4971e6a35656afe75d074b437887acc9122b08edd78735e40b661dd47fc0f8970eff8cd61b868901800000000000009db7bd4dad9ca28eb6424af33a078751df7756e14f14e985f9ba15ed68113473eaefae72d7912631fa71dd450114002500000000000000c4d1cbe918706519000108006d00000000000200000000000000000000a10927264953a08d20cc514eaf5e2c", @ANYRES8=r5, @ANYRES64=r5], 0x16c}], 0x4}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000003c0)=r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000027c0)={0x0, 0x0}, &(0x7f0000002800)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000000180)="467f2f8c1dd8d1963ddf01dc7510fa0d8e74b5da8c16b2044a4f6dab0ff23cecd4ece80e75d576d9c6104fc2ed5538ebfb00b022caa0a3856b808e9bafa92a7defa4c018ee0955db6a62376b5567445bc4e27c655e7f2fd111c545bde865d0dc61d135c7cc744f784993bc5523b825fee499e54c18c798657853f564b4090105388d335ce98b8317d133c555c6b525848f76a8f97c883a8b", 0x98}, {&(0x7f0000002d00)="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", 0x143}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="9b2d975559f00a6cb6f4fb81a3286b0afd38ce6d41b98815f85b1ae0b62f94a00ea03ae0f5748cc55e875154a0769498e629ad1eff12666f2058831ef3e9363f64a302c75068e60c264f640fecc8227e0953f5605c56e93823fa5b8a659eebef3c4f6e27b369ed467b05f2c5844867c5c077d72659787dc97c6c887c0ff1f4d5d30aad80bb4bb2782a40d56ce5a86da4f981a6fe667f1c3881224befa19d8a7671b6c41dfe3982920f66c1769355a558ce206172c9626b15fddc4710bf27c7ccf6df20c4934a56b0622fba9bea0724a0a5c78fec69c12144a6f19ca65d1590ac2cfb41402669030e152ac7f0846c60e3", 0xf0}, {&(0x7f0000001440)="98f702d5fe6d8578a57cc4d4da5b87b04fc6c0e33f3dab142713b239d029f12cf395d7815a9e9ff4c3b35e0b969dec5639731e3d6d362ed80738861d5517fe12d5c9ff0e92ce9a6646787bce2df8f7c6434868da38b859c3cc7cbb3867d76242617ca5402c6cd98f196e4869466a46e607550a1f7cc9b18e86719fcf0cb4dd7132b82fc4ba0ef68b37a49d7946f4a06db85d23b7111ed65aab21938f0d230bb87c6344e4ca4cef39ea9f86dae2a4d3df11221fcaf2a98b25c1a87e69a26701fc98ca5c1cf6cc5d71d274092f260a", 0xce}, {&(0x7f0000001540)="2cf8cceb631e33424bc853e33f2541a0f4ff7fc73024b81ae2798fcd54f8fffed43715f5788a0c277d70017797317056375bbaac017e87b9215b456899d9e400ba06d32c820c9dad0c0e267bc09b85afe18a0574d381b307b5bc916aaf860c017beadc30100dba61aff579bc6ba1d48d51995bf11b51dcee6596a2e3546c04607eb785f43400b6799c47687e39e17392354c928bde853a2aa2abacd3946fb79c51", 0xa1}, {&(0x7f0000001600)}, {&(0x7f0000001640)="3242da53677f39b327c1dd1f18d7e39244b6063fddacefbe67a745f52342604a2bad3935606fa2bf6ccbc492d769a2f44e9457d3f4b026d209e54a500b19b0fe26b3c104e33699333c680b57eeec05168b5f936ea6f1d528b001b8a398fbbe22f51bdccfef9de2f16f1aa9c14858eb9b4233409d27eeeda6fdeba778a90705909dc2501d884ffbf7667df06f9717c379aec508e7722e5c4e6f8fbaedc913c3f41a0fc7b41489fa4bae63261bd109c91c5cd5d3db1c5be15f18f9383a68a38e1d9e0fd95c36323f7275c39c2e8222acb317773fa2a6b7ace1faf654a7711be241605ac67902c32304fc6254b5f37aaca5333d7122c406c9313a52188cd036f2ac4edcdc7cd5c4c1624d74d3e1b097152b0e914d70f153d5732746ff4a5546b0eacacbd35b56dcbec58866b5d8c3bda9a6c3a67c662e5735e508d5a6fc4b312d6f7009ccbeaa56f3884fae2677bce5a9ca6c6e1d086f2a1da18846878820a07a8b872b2ea022846308e1e0c673b28e86f6c7939522c3900a9a4f92d1bae01fb396bcd6c34dc132a76a0941d071c49841ef30239d33c15c2f0c198548e319223d84212c2eaa4e742bf418ccabb0ba26849568243fedbee09e9c78a62f127eef3c0c682528b71b429c82541879ff6a8c5ca8ff179ea7b12f313d46add892a60d2fd4318879b739d728021955b001a9efa29c63bca02e13dba824bf02368037ff175ab14263ede25f8b7913c4588c6051eafa620a6e472b5cd1c3de375003f1be5176da030b09db922762c4c0a2f066a7229e50606db7afc3e11e433febaa0cc47423430a0efa7f0fcbc71b546731dbd16b58121cb69f531a0e8fdad7c11d97243fdc0c46c28487a8de44626666a0600432bf418e6a0c4c1242caaf26d5e9b512d9b2a400c9f591654f77661325a9248313012b13a9b8fee705b0505491dc8b759667a3f22881695b8f6b7525dd37cf1e38c8e3b59bd59c239cdcf5d16f43ab79497ab145f32e8ba0d10db62168786a6a8b7f40a8c24fa608e89a6dfb902207701df96b503427f7ac2798ba371c70a96a86dd99396febe695259792d3437a146ce4bdac2a70b5b80d275687e51e0789011c732f851d7f48c4bfa4724cffc030ee6e88093b67a5796acf46877b66d3269e7268ee1aa5b1c1887421591867140b49e883f917da707ad3c7de8197f4de24b969a860b52cd2004941051a34e13768cd7eb935ee988c64157c5b04adb971b4ad4f4d6d5ab7b3d75d1c058b62b1bce610effd8a15e9c1e90bd7ca3065fe99a75fb99c582066f74dc64b574c0c1071da52f2840af8d2540ef170555f76cb4ec1343f03d6c0fa97ac87fc18b1fdadfed74aaac0f41256be59ff2b7ebcbc4422d2326f100e4667b7bf963b20a087dc48971d01475504f584824d73f2db3e6d55bb48604d1d0983f68326b9401d031a3692e7eea80ac8e3bd5f118a3e633e84fda199014de1eb172f9556aa9ffcb7f89df7c60e8498583d39c2e54613bceb4b694c8c976e9fa8e318d5aba716f3600d0ce05573a3f167d2df89ea8b8e77091a1004aee54b409a45ed4b22f786e0b7182cde3b131beac4a20f328bc255ca72c0418952c7e0c3a435c4e835d95b9354b1aa2f05242a5178649346ffc0e0c62d52176309af405ef8cc9984cb291a091c0f0a5d1c82fda7671be607188e66acb43deb4246aa04a1c198256e1d814a2c2093637201114c4a984482408acc5f7f189d0e020a0aeb4e5e1ea2d09bcadba491a5f934abe41410d73cf91c0e0da134c63101ccab1e2c5bffbcf36c87fec3466c1af8ca52b0033f468aed5113912e65fb3aea54cbb0d15ea59d7fe1fced7f0fd3812f77ea14b392d51aa2cf676460c1642f620782464e2c5ba7e342aa7fb40f4d0e53d96a8602bed4cfdac5fc43624e10d0b77767320cdc6053b875ae811d62ba842e7ce86b9175b150fdfb73797e6cfebfa22dfaaf43a00744ebd4f12f35a1c932f030f8dbd11c2a49af2fb87c60d7f928d749a16e1244f72a261bbb2119f92d425e604c8ca9573968466d4ca9aab2fdfb33c4c6c4e2b3d3391b2f481ea89a8deca5b9c0ffe0f33a4dfc3beb7885f7e5924710c24f7fa6024c1cdf5c9057c130d4831ef2089400382008ada865fa40a22b4d59ee473d3477ce89c068665aad44370c53bf3029242d53cbe5dcdd5e3911badc2d0a5586c33ade36744e2c432b13f91235fe8ba4e4b463f67f0d7aaa3b53f55462e7fa22f9f98cd9380b8804e89dadc78008ca9c5322e02a31b59c5af27da2ca9c39b7a30b42cb53007f3d61666846629e65103dd5c01eb3caffede55be6b825c87e354d7d8de0e554a5137635649bb6693b7e489bde4106d01b05ec21ec327f7dc8677b79ff431e5ad6ce70c0e406092dbc455f7916d6b310a6499823133e460c4697cd439c26b46964d38962cb29d96fd7e2aea756e36ca7f19de81b5bcf76f881a1c28429fe363214470cdaa990c14d34eca0f70b95921b9f3d56851348388cce32678dccd1a5d3d7c36e1750ad8969dbecefa44f5dd5a14ece130eea307952fec3d1eabc53c1e86626097fcc752ddd3f56a01f08bc1ec140aeab5bc921fc1d3fead9030257339149e81f3ce14d29ff46fb0bf936f3a9e846acbcca199e79739e34259b0f164cb23078e3c70d756d1c4c3df7ea962f1c6792ada35ca1539b2d4e376ee2723fffafb87ffdb8dd162f0fdc32c7229730b04db906d5db65c7a339af8aaba443c183b04fd0153a2f400ce903cb264f49d9081b9e391c80919c7d7060c921bfcdcf4c6292c4ab53a742bb2e78d80d7e949a2228e3e34088216d57d41f1a82b6eb41b75dd6263eb14e4c006ed352bdedced82deeae741e050281da63bb4731982231b14e3cb93784c771a884197789a0f6133ef27c82756c128371502ebe9fc2de6b8c1ec0f769a1fb90e93a51deb70b38b98ead61eb1eef111485ef2cbefda26c249c7b51986fdc304c40ee26d4ea11240a05dcf74429c1672ea61847833082c8bfb3114ea05a010226f238a3c85953eedafb288f8eb1f582e9a37772d30031c8cca46b94d5d9b656b48999b9f21b234568be0d2a62ba51ad3178170afe2bc1af7069bbd5beee72882c47ab034bddcd846df2384da9c392dcf9dc46a1a7d6681a9cda8758ffa085c7f43ae2819d9ee1de80994b507820910bcc0a3a64c5559b5e79efc83b5919a524d8d6935367b560f7f111d362c3472be4cec9c8d54ecbbc31ed3304bd1e35030b0bae97a81ac1486ed5425897d5dc4ac20d7eef1ce7bb26c7aa7da3c506e44096ecf34932dd65f6a64a127ebca812c47171886adb1463e00a6eeba2f46dc6c87fd361badcccb50837ff403cb9a71d832469d90e218d62b7e3c9dddc9f665b796ff1988205362780e09d6101e062af44317b78f1fc75b216a6b0c3614f980d7e6aafc6e2cd12f208eee78de4193f31a2d852d1c98492f61e7a79fa07f64a9e9c9fd731be1215f762b55858af689289081102a0e5e028e7ece4d01f22b03171d0084a16288398916d9737046d35fb5c41d96222891af0801121de3051ca4d30fea73bdce66c2ce8eccb0fc7a8ce10347e6cc711861dfe0bf8227aa260a377fd776bf1b8cc93fb9e14963908d13ed99fc69f897c0f61cada8e17ba37d51c4228848d7d3cf6c72a654fc1e9d36086068e06aeeec11264b49350375da7e9a4fb5a611171e05cbc980231b9375c9a171272c84959371d010d65d83ae94d7df5f02be4f5cdeef386aa2d58cb21bc5a5f15d26efde141c640a4f906eb6cbc21f94903abd51ab5cacfb481ebcf355d244d6e871e93f09ff3a1cbb45f2d8a62df7c891c62ef1841f79d6ea41a287f55f14b1f0b06cb45f079424298bf21686aa750c2938b2f043b43ae3a7bd6c7dff9aeb16226f3baacc188fb84c9593a3ba398420fb2b2f562fcdb7c3513c57adfeb5bb3859ede301f52e6e498ee985c34ca9d66bd83bdabb37314d2facc8f6615b3f00a660ada71483759736a64b9b171c160d0de5f67bada6cfdacffabb90eb006884d3dd4335197b7a1bc1dc6c4c9b0b20eba9fabb2de8481147919158b4249310aacec273e2fda3ab5aa8854331eec3c19b84d157ed4f8f1df37c356d3ad7d41e452d23aeef273bc0bda42d1f50249c582604455695bf02a73a3a69a9f50feea78ca0c0e741c5d8590de33948b59bbd75292133607f2f4aa7bc056d3ec5e6dc61b869a0c40cbc8276285ff2687e4065cf457a7997bf763c8f5af69c2785d83694a090007c506a7f537b9615022868b414947bee190a3818f8f9aee8cb740c720bcd874b28a05c62b806d72538e3f74e7e1a552213db561de64fbdcfaa3f0b5e4332fefc695bf4b99533db9e7b060853763217b3712248770bbf205d8fbf0b6def65c2c1f38cadc6386ed2c11cd973f02d0d57d3b7b6f2d7d24cda50991d39158801fee1e177aef0a9e1385123806e4a9d482a963922fe8a7ceb1489deb6d26bd7af35813b408510752aa12516d8ee5525e267b56c76b2f6a84363f9292ded5a94b88ef4a04571c038e2737f7d2fdf8e78f74246d1fe6fcb94129e1644ec2b555ef6404dc80612911ac88252e0ed5abeabc0bb27f010dbabcae0db257f2a9a061bc0a2a15965c382a099aa86faee419a463940dabdce0bc71c5eb3a4c2057e4af8fb8cfdd74814274305a4f4db942a3a79d45f4d6a1a346bec9ef118c7c0e95663301b159ed83a5da20a7939b1b0b5a5d34f5c37af59afa8f478db98faf905933e9c6476ff1bee60f6c3fbc5e1237934f21060edf149ac6b8e0bc01f28bac839ab655745b6b9bc11362bcbb3d66c69e2ebf3ea3acc9caed04dc99df14794db9d4b43b8c83d4db67421b3815024e5c2e878e5853bfce8f744fb45256cc601e946d9f9bfaaea85f23d027a1fc045b4390e464eb33a22988d8317da83dc3391b2e02937c9b629dfa20b264ca7e14823afecf0e3c7a83b1785209496fdef9dc8b178f3d8f46a07175cac596f0dfa85a3b6e22c2005f93718787abceaf3448c0accf926e6fa382c83a654c50f880c5a5db2f3641a3efd6cf682bbd35862e3cac2609be2d375235a26acba943c9169870836a8abdda9a2c50514c9b8a8a6a0cf99e75a56734fd88809d8f3248a8dedc163ad2a37aa7a7d812734d76aa5bcc739fda58502895b899e4dbc6472552108f32ff94643f0877b211cd79260f3eb65e2e1caad25dae04396b1564414296809075fe851df530729fa75c4b2334201111f2053a25e4bb778b89abf2fb3de16323639f2165431dd7761ed5dd479dccab8dd7ec9b110453094b1c1893764402bb75c91ec502853cdf2e9285a2ee64ad676981a9f879c366502e8c0280a5b35cc14c87c2de75b6b8e50e0ca1e04efbd682718630e5baabb14b63eb8e8a15d306a60745b8935f0693dcc368c5f4a776315dce885b311f9b467f6f38f97ad8465ab53d115711c5cae0b654425c2679b7f620084211e42794e8f03189897b553533fa18f11343d83974e0da693d0e551e82f4ff33fbea615b4a851c5954e77dd0f9a985b64281f5961c6c5a3d2a9a8f3737df8c9ec765c766f0626436b7a899cea3dad26a8979dec82129fad366a5abcffb263021ce326ee43d9f645d8e6bb862f07e234986545b2bf39a8c265063d2b73fd4eecfe63ad7bbb7794311e0e93f0459091254761b5b50a7ffd316091d700f241734c283f27a3d11c0b409fac7bd277aafb6c5b03187d116251fbe005234f70928216b1c2f7d11b1678e6d307107f0f8dadeb4171549a5de5374ecc3bf08be11c9e0", 0x1000}, {&(0x7f0000002640)="27dba2f67abd88775971f446e009872a3f5b15ca30e88b02c447255392c829e74e54118128c90d22bd6a969e7b44b034a627f47c61b810354a056a7bbac5c1a6b247ddf6a815ce895f4d9f489adb63322c044a20558585121d04ff3555acbf01ae2ce8520fc508d4de584dd05010085123a1011db3b68252322338afd471df2ee013c5aaaa976399ed54add73c6bf372ad168c15b2d7ab0416132e641dfda1d77cf1e48c7e68ec978925c7ce06ed644b79e0326a8a108b06f97eba", 0xbb}], 0x9, &(0x7f0000002e80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYBLOB="79e8c4a1015b8ef60f59e6cfc1c24c6295ded29152ac69450a5e744fd97216c432bfcbcd25d3aafd474ab3a4f79060074e5f7b4e480ca01082c6d8798d399e3b33a45884596461c86e8e6d1e7b58336c3e2cdfaa2ab8a6e808605175cf9b3a2dc75f849d40bcfe01eef17c46e1fe187f395adc463ec68cff46bfb3703bfce01278014d2e4304bfee944ebe7396791b9a96752a7cb7220ab4c437f10a26c90a31f724fdf82f58478ee2de38ce45430dbe7b20ee46a123f4c84f3e", @ANYRES16=r7, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x20048000}, 0x4000000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r12 = getgid() setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x5, 0x6fe, [0x0, 0x20001340, 0x2000161c, 0x2000164c], 0x0, &(0x7f0000000340), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x2b, 0x6000, 'hsr0\x00', 'veth1_macvtap\x00', 'sit0\x00', 'veth1_to_bond\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0xff], 0xb6, 0xfe, 0x176, [@ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xff000000, 0x40, 0x0, 0x18, 0x0, 0x4e24, 0x4e22, 0x4e21, 0x4e20}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"3fcd5f0bcb2cc969e0ab437ea8f6da7298df51d10ac815bc856065659643"}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x200, 0x81, 0x9, 0x0, 0x0, "46fc4524c0ba29c87f5a21e6d48d659744f8cbaae257b51ea8dffbd06fc29e6d47a47c8c01866b7435e88f8b633fce4f62dcd50c5f859e864bcae58bcf7ded70"}}}}, {0x3, 0x0, 0x60, 'vxcan1\x00', 'wg1\x00', 'geneve1\x00', 'ipvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff], 0xee, 0xee, 0x136, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x32}, [0x0, 0xffffff00, 0xff000000, 0xff], 0x4e24, 0x2f, 0x4, 0x4e23, 0x8, 0x2}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x6}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x52, 0x6006, 'veth0_vlan\x00', 'wg0\x00', 'geneve0\x00', 'vlan0\x00', @empty, [0x0, 0x0, 0xd996d06439a2a33a, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff], 0xa6, 0xee, 0x11e, [@realm={{'realm\x00', 0x0, 0x10}, {{0x4, 0x80000000, 0x1}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"ffd2188a6289213a65ce1eb5a3cde0244c0e09d769e7b4260d760bffc129"}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x5, 0xb, 0x200, 'ip_vti0\x00', 'veth0_virt_wifi\x00', 'dummy0\x00', 'bridge_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, [0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff], 0xee, 0xee, 0x11e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x2}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x7fffffffffffffff}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x9, 0x0, 0x8809, 'vlan1\x00', 'veth1_macvtap\x00', 'bridge0\x00', 'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, [0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0xff], 0xae, 0x126, 0x156, [@owner={{'owner\x00', 0x0, 0x18}, {{r9, r11, r12}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x8000, 0x400, 0x0, 0x0, "8d02c3a5db27edb6f23f8d7b555f8718eef4b68ec6974dcdb3e09c7ee12bee31be64ae83d4ac76c0a092ca8e70706b6c5f246d2e1358778521c71bf832702051"}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xdf}}}}]}]}, 0x776) sendto$inet(r4, &(0x7f0000000000)="28c8938a850ac2548831d937881fd7f7c0ab72a5", 0x14, 0x4004, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="7b150455eb303aa6d8471005ef20a2fbaeb73260ce37a283565d44508aa3dfaee79b2f803cfdcd4401381f0ac5c9f1877f1c72eba0cbd212dd420ab3bf3b519da7b4b33184717de280451f9284a51e4d2daba60daea11b7e1e5500b87475fe01c5867da97bf3711876c8c78346eb714380921bbfa176b40bceb2c10a421a637ab241f486483adaa9b5335227e94371c43d56891f2d22f4d44bb9dc33063574bafb0ff99384e77bd6169a8f0116d3492e57189f021683ae2e5959e49324ce218b95ee8bebf64370db560c28a833d73e05d112e43ab8275b76e0477911e37b2bab5ef345", 0xe3}, {&(0x7f00000006c0)="afe38c51f6bb2226215e78408103a10c67c5be8de8e708adafaa8b4c670c027e232bb5ed5fda84bb6c20871e0cdc63d962662500e4532949d17034fdb6081dbd6db43940d4322ed90273f1b1af45064235eeddebc88f2fa45862ce37bd4413b9e53febfec1bfb53e7c548c48a116d105459bd11e529154a64b053586d690ff4ede67881b278ea1132b27fabb3ed6a3f95762404a85d1d3e1fdcf9aa0709c8a5de8e1869f7fc2018170bb67bff42193fc06fea94024cf1915a09e284103ecb7250dcaa3c0e1c41910b68193bc4f6e33", 0xcf}, {&(0x7f0000000640)="e357b0056d39b1c0684042958c95e37dda6fbdd3648d04afe7178f6f99cd483ddb8ab1e7f0498d43ddbc9c9750e6736801cfccb147016e15d4ed9df293d32991424e0c1884b14ecba63795be4449c8d61249c4ab625971018c150b6958cf1c8404ddb0c293e0220688d3e156fd280b2154950299", 0x74}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="fd", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x0, &(0x7f0000000b80)=[{&(0x7f00000002c0)="8797d22c611c6ada66d0e0ae6738a94c26c5b0853f5e5d82395cad8bd4c9daee9ab6b0b6946fd28d7adaf6b14fb174afedd39a42957c69af255020c54aafc59a99b0ed7246d57b6c24c2f29a4fd6129b71435ad381472eadd8641f140004563dd2262c25fb9006a5fd"}, {&(0x7f0000000480)="e3721dd176431dfeb340ce6b0f0141a656e82f53a37b897fc7245bc94a21a9253ab400f803fba4bebe61d373c3cbf9c1fde301d4c1bad9a7cdcb109a67ffa6413b0c2967000822f70d61f5be1b397ca8a6a3e68ff391aa2e9f93447bd9caa8dfc6"}, {&(0x7f0000000200)="221550a7eec7823218a300231d4264e1fbb9330a930a43e54f86518168c0830889b20d0a467d"}, {&(0x7f0000000340)}, {&(0x7f00000007c0)="53e418f25d302acf05b3e3eadf0ff4fdcae06c6d5d3ef485b95f7da907cda8a41349a55af9a3b06226ea321edd2445d1b0db453c30ce4b04d8f3e96f36a0e7ef3d3463dc1062304b942534ef0642645256309c016ccaf4fec77203b4c94b2055adba310a066bc9a1f50d64c6021d12604b33dcf0b52ab17374ca4f1b47b8db795ec15e27688deba6"}, {&(0x7f0000000880)="25b79d2e5e56914c84caf5559a21436f7a31e5b05631a3d090d5b5f449abaa9d03b1f6ca885de35b012f3aea93f6f9148820c2856eca22169af9c81ca40d895a8492f0e798eb9e270ca3a5d377e4eebfbc9001923b694b07487baa4629df77e6592ad94e73c9b0c03d54dadc928b5d1bceac65138de64a11d224ea06c2909579cc5e22604189200aaec881bc41df64059c4049fa043cf861ef1974760ed4a12c55d27821196d21e423022d7aee167f3c570bc35f5098face7d464dec58170f89f0517eef2e80ab04ffe63376b784b4e70ddcb5d86bb2919924983ef7561b324d6a"}, {&(0x7f0000000e00)="878e560757d0b6f008ff528f9d22b0a8e729252277a665e046e24757caf53e6a2a2ad2704cfa03cf8122353d0776d762790d1b2be535b8679b6f9daf943d237f002d433f42d32f897690d9577567d10acb8cb4202d285b60e524fc9e12f5042469e0e7f48cdd16c7cfe4dcf46a85d4963e811af1ca882c249b9b40b70add3926cdf06a440a442069058bb2eaaa25239a4c56cb8581f72d81a95d9bf782ce52a64e9a10b112da47e2142385549505dacb06e46fb0fd3f72b05cd424e0df66e828c002c31f8304691c64d656d345f9d39c3e5cd103e0dc36370ef95a658cde5d44c8101c025830545732d55606f14288074313999e613010027c"}, {&(0x7f0000001f80)="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"}, {&(0x7f0000000a80)="bae3d6d5bea11224a5b1301ffcf1af3eb1e0dbf02a6f326528dd44f77fe9258f4448cb9e16175f84e87dd592bcbaf3652ef4e378970e1fe21f09f5486c48d03cafd75e02d70efa3f43fb5b95c7884589c77ac6c611e1784fb9bf06ee5886d3eb0b960313b93968998bfac92e58598f51332106dcc3b82657beb5cc82fa9e68c022819e8217d03dc96e46a59a32d7db1cf601db0199746bed7104cb0bd57edbe558d89276ffb0a84faeae7cde4e29747bc8b0243e5820394e0aa48a45093f53dcea7516f30149fdc05bf1638398f4eb16a3b31b514a2cd9499fc9739fee266725ccb0f509fed79ad7683a79542ebed775"}], 0x0, &(0x7f0000000c40)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x40}}, @ip_ttl={{0x0, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x400}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r13, @loopback, @multicast1}}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x301}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x91}}, @ip_tos_int={{0x0, 0x0, 0x1, 0xe5d}}]}}], 0x37, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@bridge_newneigh={0x5c, 0x1c, 0x8, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, r13, 0x0, 0x3, 0x1}, [@NDA_NH_ID={0x8, 0xd, 0x8000}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_NH_ID={0x8, 0xd, 0x4}, @NDA_VNI={0x8, 0x7, 0x1}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 02:45:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000001b300000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:47 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x5000000}, 0x0) 02:45:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x48}, 0x0) 02:45:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4c}, 0x0) 02:45:47 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x6000000}, 0x0) [ 2103.708607][T23775] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2103.709855][T23778] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 2103.725234][T23775] CPU: 0 PID: 23775 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2103.739657][T23775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2103.749729][T23775] Call Trace: [ 2103.753023][T23775] 02:45:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000002b500000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2103.755969][T23775] dump_stack_lvl+0x1e7/0x2e0 [ 2103.760679][T23775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2103.765906][T23775] ? __pfx__printk+0x10/0x10 [ 2103.770519][T23775] ? ___ratelimit+0x4c4/0x670 [ 2103.775228][T23775] ? __pfx____ratelimit+0x10/0x10 [ 2103.780279][T23775] dump_header+0xda/0x6a0 [ 2103.784641][T23775] oom_kill_process+0x3a7/0x930 [ 2103.789525][T23775] out_of_memory+0xf67/0x1320 [ 2103.794242][T23775] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2103.799899][T23775] ? __pfx___mutex_lock+0x10/0x10 [ 2103.804952][T23775] ? __pfx_out_of_memory+0x10/0x10 [ 2103.810097][T23775] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2103.815669][T23775] ? __pfx_lock_release+0x10/0x10 [ 2103.820723][T23775] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2103.826822][T23775] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2103.832022][T23775] ? mem_cgroup_iter+0x3e9/0x560 [ 2103.836962][T23775] try_charge_memcg+0xda2/0x18a0 [ 2103.841894][T23775] ? mark_lock+0x9a/0x350 [ 2103.846233][T23775] ? __pfx_try_charge_memcg+0x10/0x10 [ 2103.851624][T23775] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2103.857776][T23775] charge_memcg+0xa2/0x160 [ 2103.862193][T23775] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2103.868255][T23775] __read_swap_cache_async+0x480/0x8b0 [ 2103.873712][T23775] ? mark_lock+0x9a/0x350 [ 2103.878043][T23775] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2103.884028][T23775] swap_cluster_readahead+0x67c/0x810 [ 2103.889430][T23775] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2103.895322][T23775] ? __pfx_lock_release+0x10/0x10 [ 2103.900347][T23775] ? xas_descend+0x37e/0x470 [ 2103.904960][T23775] swapin_readahead+0x1ea/0x1070 [ 2103.909905][T23775] ? filemap_get_entry+0x127/0x4e0 [ 2103.915027][T23775] ? __pfx_swapin_readahead+0x10/0x10 [ 2103.920410][T23775] ? __filemap_get_folio+0x935/0xbc0 [ 2103.925711][T23775] ? swap_cache_get_folio+0x9f/0x570 [ 2103.931004][T23775] do_swap_page+0x8ab/0x3da0 [ 2103.935599][T23775] ? __pte_offset_map+0x2c4/0x380 [ 2103.940631][T23775] ? do_swap_page+0x154/0x3da0 [ 2103.945387][T23775] ? __pfx_do_swap_page+0x10/0x10 [ 2103.950404][T23775] ? pte_offset_map_nolock+0x137/0x1f0 [ 2103.955875][T23775] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2103.961700][T23775] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2103.966911][T23775] __handle_mm_fault+0x15e8/0x72d0 [ 2103.972048][T23775] ? reacquire_held_locks+0x3eb/0x690 [ 2103.977427][T23775] ? __pfx___handle_mm_fault+0x10/0x10 [ 2103.982893][T23775] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2103.988619][T23775] ? mtree_range_walk+0x6fd/0x8e0 [ 2103.993638][T23775] ? lock_vma_under_rcu+0x18a/0x730 [ 2103.998832][T23775] ? __pfx_lock_release+0x10/0x10 [ 2104.003853][T23775] ? lock_vma_under_rcu+0x2f9/0x730 [ 2104.009066][T23775] ? lock_vma_under_rcu+0x18a/0x730 [ 2104.014264][T23775] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2104.019805][T23775] handle_mm_fault+0x3c1/0x8a0 [ 2104.024572][T23775] exc_page_fault+0x456/0x870 [ 2104.029261][T23775] asm_exc_page_fault+0x26/0x30 [ 2104.034115][T23775] RIP: 0033:0x7f810c88708e [ 2104.038524][T23775] Code: 00 48 8d 3d 3c b6 06 00 e8 6f 57 fb ff 48 8d 3d 68 b5 06 00 31 c0 e8 a1 f8 ff ff 90 55 53 48 83 ec 08 48 85 ff 74 45 48 89 fb <48> 8b 3d b3 e6 c4 00 be 10 00 00 00 48 8d 6f 0e 48 83 c7 10 e8 79 [ 2104.058126][T23775] RSP: 002b:00007f810cacf9d0 EFLAGS: 00010206 [ 2104.064190][T23775] RAX: 00007f810d5019d0 RBX: 00007f810d5016c0 RCX: 00007f810c87de67 [ 2104.072174][T23775] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f810d5016c0 [ 2104.080139][T23775] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 2104.088099][T23775] R10: 0000000000021000 R11: 0000000000000206 R12: 00007f810cacfc90 [ 2104.096063][T23775] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 2104.104043][T23775] 02:45:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x60}, 0x0) [ 2104.107225][ C0] vkms_vblank_simulate: vblank timer overrun [ 2104.126055][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.178150][T23775] memory: usage 307200kB, limit 307200kB, failcnt 72648 02:45:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x64}, 0x0) [ 2104.238445][T23775] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 2104.256262][T23775] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2104.469974][T23775] Memory cgroup stats for /syz4: [ 2104.470119][T23775] cache 0 [ 2104.478693][T23775] rss 12288 [ 2104.492611][T23775] rss_huge 0 [ 2104.496424][T23775] shmem 0 [ 2104.499674][T23775] mapped_file 0 [ 2104.504407][T23775] dirty 0 [ 2104.507610][T23775] writeback 0 [ 2104.511138][T23775] workingset_refault_anon 27300 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x68}, 0x0) [ 2104.516910][T23775] workingset_refault_file 333 [ 2104.522617][T23775] swap 479232 [ 2104.538028][T23775] swapcached 0 [ 2104.546235][T23775] pgpgin 300699 [ 2104.556366][T23775] pgpgout 300696 [ 2104.564609][T23775] pgfault 591805 [ 2104.576395][T23775] pgmajfault 26356 [ 2104.584827][T23775] inactive_anon 12288 [ 2104.594656][T23775] active_anon 0 [ 2104.598441][T23775] inactive_file 0 [ 2104.608099][T23775] active_file 0 [ 2104.615263][T23775] unevictable 0 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6c}, 0x0) [ 2104.625270][T23775] hierarchical_memory_limit 314572800 [ 2104.639653][T23775] hierarchical_memsw_limit 9223372036854771712 [ 2104.653535][T23775] total_cache 0 [ 2104.663116][T23775] total_rss 12288 [ 2104.670426][T23775] total_rss_huge 0 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x74}, 0x0) [ 2104.678363][T23775] total_shmem 0 [ 2104.690196][T23775] total_mapped_file 0 [ 2104.700159][T23775] total_dirty 0 [ 2104.706854][T23775] total_writeback 0 [ 2104.718839][T23775] total_workingset_refault_anon 27300 [ 2104.731536][T23775] total_workingset_refault_file 333 [ 2104.745620][T23775] total_swap 479232 [ 2104.754315][T23775] total_swapcached 0 [ 2104.764633][T23775] total_pgpgin 300699 [ 2104.773514][T23775] total_pgpgout 300696 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x7a}, 0x0) [ 2104.782877][T23775] total_pgfault 591805 [ 2104.787752][T23775] total_pgmajfault 26356 [ 2104.806582][T23775] total_inactive_anon 12288 [ 2104.811329][T23775] total_active_anon 0 [ 2104.816292][T23775] total_inactive_file 0 [ 2104.824254][T23775] total_active_file 0 [ 2104.828528][T23775] total_unevictable 0 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x300}, 0x0) [ 2104.836330][T23775] anon_cost 0 [ 2104.839993][T23775] file_cost 0 [ 2104.846358][T23775] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23775,uid=0 [ 2104.862476][T23775] Memory cgroup out of memory: Killed process 23775 (syz-executor.4) total-vm:54508kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x500}, 0x0) 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x600}, 0x0) 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x700}, 0x0) 02:45:48 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000011140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x900}, 0x0) [ 2105.146267][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2105.224253][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:45:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xa00}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xb00}, 0x0) [ 2105.342408][T23778] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.350752][T23778] bridge0: port 1(bridge_slave_0) entered disabled state 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xc00}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xd00}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xe00}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xf00}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x1100}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x1200}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x1800}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2000}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2100}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2500}, 0x0) 02:45:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2bbe}, 0x0) [ 2106.279239][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.425644][T23809] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2106.426875][T23778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2106.437214][T23809] CPU: 1 PID: 23809 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2106.437239][T23809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2106.437251][T23809] Call Trace: [ 2106.437260][T23809] [ 2106.437268][T23809] dump_stack_lvl+0x1e7/0x2e0 [ 2106.475919][T23809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2106.481127][T23809] ? __pfx__printk+0x10/0x10 [ 2106.485719][T23809] ? ___ratelimit+0x4c4/0x670 [ 2106.490398][T23809] ? __pfx____ratelimit+0x10/0x10 [ 2106.495424][T23809] dump_header+0xda/0x6a0 [ 2106.499755][T23809] oom_kill_process+0x3a7/0x930 [ 2106.504606][T23809] out_of_memory+0xf67/0x1320 [ 2106.509287][T23809] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2106.514919][T23809] ? __pfx___mutex_lock+0x10/0x10 [ 2106.519968][T23809] ? __pfx_out_of_memory+0x10/0x10 [ 2106.525101][T23809] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2106.530654][T23809] ? __pfx_lock_release+0x10/0x10 [ 2106.535685][T23809] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2106.541756][T23809] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2106.546956][T23809] ? mem_cgroup_iter+0x3e9/0x560 [ 2106.551898][T23809] try_charge_memcg+0xda2/0x18a0 [ 2106.556831][T23809] ? mark_lock+0x9a/0x350 [ 2106.561170][T23809] ? __pfx_try_charge_memcg+0x10/0x10 [ 2106.566559][T23809] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2106.572707][T23809] charge_memcg+0xa2/0x160 [ 2106.577124][T23809] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2106.583191][T23809] __read_swap_cache_async+0x480/0x8b0 [ 2106.588647][T23809] ? mark_lock+0x9a/0x350 [ 2106.592981][T23809] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2106.598963][T23809] ? blk_start_plug+0x6f/0x1b0 [ 2106.603725][T23809] swap_cluster_readahead+0x398/0x810 [ 2106.609101][T23809] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2106.614992][T23809] ? __pfx_lock_release+0x10/0x10 [ 2106.620014][T23809] ? xas_descend+0x37e/0x470 [ 2106.624607][T23809] swapin_readahead+0x1ea/0x1070 [ 2106.629539][T23809] ? filemap_get_entry+0x127/0x4e0 [ 2106.634658][T23809] ? __pfx_swapin_readahead+0x10/0x10 [ 2106.640033][T23809] ? __filemap_get_folio+0x935/0xbc0 [ 2106.645319][T23809] ? swap_cache_get_folio+0x9f/0x570 [ 2106.650604][T23809] do_swap_page+0x8ab/0x3da0 [ 2106.655191][T23809] ? __pte_offset_map+0x2c4/0x380 [ 2106.660216][T23809] ? do_swap_page+0x154/0x3da0 [ 2106.664975][T23809] ? __pfx_do_swap_page+0x10/0x10 [ 2106.669995][T23809] ? pte_offset_map_nolock+0x137/0x1f0 [ 2106.675452][T23809] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2106.681260][T23809] __handle_mm_fault+0x15e8/0x72d0 [ 2106.686392][T23809] ? reacquire_held_locks+0x3eb/0x690 [ 2106.691760][T23809] ? __pfx___handle_mm_fault+0x10/0x10 [ 2106.697221][T23809] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2106.702945][T23809] ? mtree_range_walk+0x6fd/0x8e0 [ 2106.707963][T23809] ? lock_vma_under_rcu+0x18a/0x730 [ 2106.713156][T23809] ? __pfx_lock_release+0x10/0x10 [ 2106.718173][T23809] ? lock_vma_under_rcu+0x2f9/0x730 [ 2106.723384][T23809] ? lock_vma_under_rcu+0x18a/0x730 [ 2106.728574][T23809] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2106.734119][T23809] handle_mm_fault+0x3c1/0x8a0 [ 2106.738886][T23809] exc_page_fault+0x456/0x870 [ 2106.743566][T23809] asm_exc_page_fault+0x26/0x30 [ 2106.748411][T23809] RIP: 0033:0x7f810c852bf8 [ 2106.752820][T23809] Code: 83 f0 08 00 00 31 c0 64 8a 04 25 11 06 00 00 84 c0 0f 85 5b 02 00 00 48 8d 54 24 56 4c 89 e6 48 89 df 4c 89 e9 4c 8d 4c 24 57 83 f4 ff ff 41 ba 08 00 00 00 31 d2 4c 89 fe 41 89 c0 bf 02 00 [ 2106.772418][T23809] RSP: 002b:00007f810cacf9f0 EFLAGS: 00010246 [ 2106.778479][T23809] RAX: 0000000000000000 RBX: 00007f810d5016c0 RCX: 00007f810d4e1000 [ 2106.786451][T23809] RDX: 00007f810cacfa46 RSI: 00007f810cacfc90 RDI: 00007f810d5016c0 [ 2106.794418][T23809] RBP: 0000000000000000 R08: 0000000000020240 R09: 00007f810cacfa47 [ 2106.802385][T23809] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f810cacfc90 [ 2106.810349][T23809] R13: 00007f810d4e1000 R14: 00007f810d5016c0 R15: 00007f810cacfa48 [ 2106.818330][T23809] [ 2106.855057][T23809] memory: usage 307200kB, limit 307200kB, failcnt 73593 [ 2106.864357][T23809] memory+swap: usage 307672kB, limit 9007199254740988kB, failcnt 0 [ 2106.876749][T23809] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2106.886818][T23809] Memory cgroup stats for /syz4: [ 2106.886936][T23809] cache 0 [ 2106.891757][T23778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2106.898025][T23809] rss 12288 [ 2106.906101][T23809] rss_huge 0 [ 2106.909428][T23809] shmem 0 [ 2106.912980][T23809] mapped_file 0 [ 2106.916584][T23809] dirty 0 [ 2106.919655][T23809] writeback 0 [ 2106.923512][T23809] workingset_refault_anon 27650 [ 2106.928499][T23809] workingset_refault_file 333 [ 2106.933760][T23809] swap 483328 [ 2106.937178][T23809] swapcached 0 [ 2106.940678][T23809] pgpgin 301061 [ 2106.948789][T23809] pgpgout 301058 [ 2106.952793][T23809] pgfault 592370 [ 2106.956490][T23809] pgmajfault 26703 [ 2106.960336][T23809] inactive_anon 8192 [ 2106.964836][T23809] active_anon 4096 [ 2106.968699][T23809] inactive_file 0 [ 2106.972948][T23809] active_file 0 [ 2106.976614][T23809] unevictable 0 [ 2106.980248][T23809] hierarchical_memory_limit 314572800 [ 2106.986372][T23809] hierarchical_memsw_limit 9223372036854771712 [ 2106.994231][T23809] total_cache 0 [ 2106.997828][T23809] total_rss 12288 [ 2107.008682][T23809] total_rss_huge 0 [ 2107.012774][T23809] total_shmem 0 [ 2107.016358][T23809] total_mapped_file 0 [ 2107.020448][T23809] total_dirty 0 [ 2107.029413][T23809] total_writeback 0 [ 2107.033709][T23809] total_workingset_refault_anon 27650 [ 2107.039196][T23809] total_workingset_refault_file 333 [ 2107.045128][T23809] total_swap 483328 [ 2107.049066][T23809] total_swapcached 0 [ 2107.056450][T23809] total_pgpgin 301061 [ 2107.060518][T23809] total_pgpgout 301058 [ 2107.065640][T23809] total_pgfault 592370 [ 2107.069894][T23809] total_pgmajfault 26703 [ 2107.074555][T23809] total_inactive_anon 8192 [ 2107.079149][T23809] total_active_anon 4096 [ 2107.083811][T23809] total_inactive_file 0 [ 2107.088148][T23809] total_active_file 0 [ 2107.092800][T23809] total_unevictable 0 [ 2107.098412][T23809] anon_cost 0 [ 2107.102119][T23809] file_cost 0 [ 2107.105584][T23809] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23809,uid=0 [ 2107.121986][T23809] Memory cgroup out of memory: Killed process 23809 (syz-executor.4) total-vm:54508kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2107.309717][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.465027][T23778] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.475363][ T1140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.483473][T23778] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.492465][T23778] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.506956][T23778] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.201697][T23089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2108.367223][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2109.492027][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.518499][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2111.221954][T23089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2111.561200][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.591360][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2113.633717][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.271294][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.670566][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2115.715214][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2116.765474][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.068968][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.301707][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2117.799870][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2118.833315][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2119.879323][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.342039][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.911322][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.963472][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.013678][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.392109][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2124.061054][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2125.079151][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.111801][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.430595][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.673692][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.153124][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2128.195518][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2129.249164][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2129.465528][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2130.272176][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2130.869723][T23778] macvtap1715: left allmulticast mode [ 2130.876274][T23778] macvtap1717: left promiscuous mode [ 2130.881633][T23778] macvtap1717: left allmulticast mode [ 2130.897064][T23778] macvtap1718: left allmulticast mode [ 2130.917588][T23778] macvtap1719: left promiscuous mode [ 2130.923304][T23778] macvtap1719: left allmulticast mode [ 2130.939612][T23778] macvtap1720: left promiscuous mode [ 2130.959907][T23778] macvtap1721: left allmulticast mode [ 2130.979022][T23778] macvtap1722: left promiscuous mode [ 2130.985503][T23778] macvtap1722: left allmulticast mode [ 2131.014174][T23778] macvtap1724: left promiscuous mode [ 2131.030272][T23778] macvtap1725: left allmulticast mode [ 2131.046472][T23778] macvtap1726: left promiscuous mode [ 2131.052037][T23778] macvtap1726: left allmulticast mode [ 2131.084121][T23778] macvtap1728: left promiscuous mode [ 2131.104047][T23778] macvtap1729: left allmulticast mode [ 2131.128458][T23778] macvtap1731: left promiscuous mode [ 2131.149563][T23778] erspan0: left allmulticast mode [ 2131.154988][T23778] macvtap1732: left allmulticast mode [ 2131.321239][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.361986][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2132.502958][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:46:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2f00}, 0x0) 02:46:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000012140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="22043ccf", @ANYRES32, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000001240)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r6, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRES64], 0x200}, {&(0x7f0000001100)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYBLOB="0400290014007100fcc9000000000000000000000000000000001400560020010000000000000000000000000000d2008a8008004200", @ANYRES32=0xffffffffffffffff, @ANYRESOCT], 0x3b0}, {&(0x7f0000000d40)=ANY=[@ANYBLOB="6c01001b4971e6a35656afe75d074b437887acc9122b08edd78735e40b661dd47fc0f8970eff8cd61b868901800000000000009db7bd4dad9ca28eb6424af33a078751df7756e14f14e985f9ba15ed68113473eaefae72d7912631fa71dd450114002500000000000000c4d1cbe918706519000108006d00000000000200000000000000000000a10927264953a08d20cc514eaf5e2c", @ANYRES8=r5, @ANYRES64=r5], 0x16c}], 0x4}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000003c0)=r8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000027c0)={0x0, 0x0}, &(0x7f0000002800)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000000180)="467f2f8c1dd8d1963ddf01dc7510fa0d8e74b5da8c16b2044a4f6dab0ff23cecd4ece80e75d576d9c6104fc2ed5538ebfb00b022caa0a3856b808e9bafa92a7defa4c018ee0955db6a62376b5567445bc4e27c655e7f2fd111c545bde865d0dc61d135c7cc744f784993bc5523b825fee499e54c18c798657853f564b4090105388d335ce98b8317d133c555c6b525848f76a8f97c883a8b", 0x98}, {&(0x7f0000002d00)="eda2bbedf645fc8e16dd6c8744d13b2ee1d7315bfc28f4e463bbcaa8a033821a3cdf8173bb6bfb0a1717f916af6c9cc0a4e0ceed5ef0bb3f928ed1d23b8025560fa0c1b5f4a9d526000000000000ccb77a0b1db6db32b954db6adecf48f98280cbd143385fd7e27b9f90ea6270ed6eed239445235747cbf5cf16f759c592cd3b810d98849a37ae153312d6c85672ed06fa2b3886728e4bff0ba82d322c55c24122ca12728ac08fdda1602c2fdfed6f3e2584c92d94ff22f383c7e1648524d5cb643f6384a6c27f5ba4d5edc18e55b5fa8425ed990b5ad7207aef6cbbbcf14f8291420fb579930ea75232a4fb6fb2ffe46ac796bf96f1287275a32110f85432f4324554ed7c985969a39bc7e2e94cb6674cf5b02014539552702ec167811218d0a3f5ccb61f4601a73f327c605fe9fca15eec838b5f3f7bb8943c1de2fed7794e04b3ab", 0x143}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="9b2d975559f00a6cb6f4fb81a3286b0afd38ce6d41b98815f85b1ae0b62f94a00ea03ae0f5748cc55e875154a0769498e629ad1eff12666f2058831ef3e9363f64a302c75068e60c264f640fecc8227e0953f5605c56e93823fa5b8a659eebef3c4f6e27b369ed467b05f2c5844867c5c077d72659787dc97c6c887c0ff1f4d5d30aad80bb4bb2782a40d56ce5a86da4f981a6fe667f1c3881224befa19d8a7671b6c41dfe3982920f66c1769355a558ce206172c9626b15fddc4710bf27c7ccf6df20c4934a56b0622fba9bea0724a0a5c78fec69c12144a6f19ca65d1590ac2cfb41402669030e152ac7f0846c60e3", 0xf0}, {&(0x7f0000001440)="98f702d5fe6d8578a57cc4d4da5b87b04fc6c0e33f3dab142713b239d029f12cf395d7815a9e9ff4c3b35e0b969dec5639731e3d6d362ed80738861d5517fe12d5c9ff0e92ce9a6646787bce2df8f7c6434868da38b859c3cc7cbb3867d76242617ca5402c6cd98f196e4869466a46e607550a1f7cc9b18e86719fcf0cb4dd7132b82fc4ba0ef68b37a49d7946f4a06db85d23b7111ed65aab21938f0d230bb87c6344e4ca4cef39ea9f86dae2a4d3df11221fcaf2a98b25c1a87e69a26701fc98ca5c1cf6cc5d71d274092f260a", 0xce}, {&(0x7f0000001540)="2cf8cceb631e33424bc853e33f2541a0f4ff7fc73024b81ae2798fcd54f8fffed43715f5788a0c277d70017797317056375bbaac017e87b9215b456899d9e400ba06d32c820c9dad0c0e267bc09b85afe18a0574d381b307b5bc916aaf860c017beadc30100dba61aff579bc6ba1d48d51995bf11b51dcee6596a2e3546c04607eb785f43400b6799c47687e39e17392354c928bde853a2aa2abacd3946fb79c51", 0xa1}, {&(0x7f0000001600)}, {&(0x7f0000001640)="3242da53677f39b327c1dd1f18d7e39244b6063fddacefbe67a745f52342604a2bad3935606fa2bf6ccbc492d769a2f44e9457d3f4b026d209e54a500b19b0fe26b3c104e33699333c680b57eeec05168b5f936ea6f1d528b001b8a398fbbe22f51bdccfef9de2f16f1aa9c14858eb9b4233409d27eeeda6fdeba778a90705909dc2501d884ffbf7667df06f9717c379aec508e7722e5c4e6f8fbaedc913c3f41a0fc7b41489fa4bae63261bd109c91c5cd5d3db1c5be15f18f9383a68a38e1d9e0fd95c36323f7275c39c2e8222acb317773fa2a6b7ace1faf654a7711be241605ac67902c32304fc6254b5f37aaca5333d7122c406c9313a52188cd036f2ac4edcdc7cd5c4c1624d74d3e1b097152b0e914d70f153d5732746ff4a5546b0eacacbd35b56dcbec58866b5d8c3bda9a6c3a67c662e5735e508d5a6fc4b312d6f7009ccbeaa56f3884fae2677bce5a9ca6c6e1d086f2a1da18846878820a07a8b872b2ea022846308e1e0c673b28e86f6c7939522c3900a9a4f92d1bae01fb396bcd6c34dc132a76a0941d071c49841ef30239d33c15c2f0c198548e319223d84212c2eaa4e742bf418ccabb0ba26849568243fedbee09e9c78a62f127eef3c0c682528b71b429c82541879ff6a8c5ca8ff179ea7b12f313d46add892a60d2fd4318879b739d728021955b001a9efa29c63bca02e13dba824bf02368037ff175ab14263ede25f8b7913c4588c6051eafa620a6e472b5cd1c3de375003f1be5176da030b09db922762c4c0a2f066a7229e50606db7afc3e11e433febaa0cc47423430a0efa7f0fcbc71b546731dbd16b58121cb69f531a0e8fdad7c11d97243fdc0c46c28487a8de44626666a0600432bf418e6a0c4c1242caaf26d5e9b512d9b2a400c9f591654f77661325a9248313012b13a9b8fee705b0505491dc8b759667a3f22881695b8f6b7525dd37cf1e38c8e3b59bd59c239cdcf5d16f43ab79497ab145f32e8ba0d10db62168786a6a8b7f40a8c24fa608e89a6dfb902207701df96b503427f7ac2798ba371c70a96a86dd99396febe695259792d3437a146ce4bdac2a70b5b80d275687e51e0789011c732f851d7f48c4bfa4724cffc030ee6e88093b67a5796acf46877b66d3269e7268ee1aa5b1c1887421591867140b49e883f917da707ad3c7de8197f4de24b969a860b52cd2004941051a34e13768cd7eb935ee988c64157c5b04adb971b4ad4f4d6d5ab7b3d75d1c058b62b1bce610effd8a15e9c1e90bd7ca3065fe99a75fb99c582066f74dc64b574c0c1071da52f2840af8d2540ef170555f76cb4ec1343f03d6c0fa97ac87fc18b1fdadfed74aaac0f41256be59ff2b7ebcbc4422d2326f100e4667b7bf963b20a087dc48971d01475504f584824d73f2db3e6d55bb48604d1d0983f68326b9401d031a3692e7eea80ac8e3bd5f118a3e633e84fda199014de1eb172f9556aa9ffcb7f89df7c60e8498583d39c2e54613bceb4b694c8c976e9fa8e318d5aba716f3600d0ce05573a3f167d2df89ea8b8e77091a1004aee54b409a45ed4b22f786e0b7182cde3b131beac4a20f328bc255ca72c0418952c7e0c3a435c4e835d95b9354b1aa2f05242a5178649346ffc0e0c62d52176309af405ef8cc9984cb291a091c0f0a5d1c82fda7671be607188e66acb43deb4246aa04a1c198256e1d814a2c2093637201114c4a984482408acc5f7f189d0e020a0aeb4e5e1ea2d09bcadba491a5f934abe41410d73cf91c0e0da134c63101ccab1e2c5bffbcf36c87fec3466c1af8ca52b0033f468aed5113912e65fb3aea54cbb0d15ea59d7fe1fced7f0fd3812f77ea14b392d51aa2cf676460c1642f620782464e2c5ba7e342aa7fb40f4d0e53d96a8602bed4cfdac5fc43624e10d0b77767320cdc6053b875ae811d62ba842e7ce86b9175b150fdfb73797e6cfebfa22dfaaf43a00744ebd4f12f35a1c932f030f8dbd11c2a49af2fb87c60d7f928d749a16e1244f72a261bbb2119f92d425e604c8ca9573968466d4ca9aab2fdfb33c4c6c4e2b3d3391b2f481ea89a8deca5b9c0ffe0f33a4dfc3beb7885f7e5924710c24f7fa6024c1cdf5c9057c130d4831ef2089400382008ada865fa40a22b4d59ee473d3477ce89c068665aad44370c53bf3029242d53cbe5dcdd5e3911badc2d0a5586c33ade36744e2c432b13f91235fe8ba4e4b463f67f0d7aaa3b53f55462e7fa22f9f98cd9380b8804e89dadc78008ca9c5322e02a31b59c5af27da2ca9c39b7a30b42cb53007f3d61666846629e65103dd5c01eb3caffede55be6b825c87e354d7d8de0e554a5137635649bb6693b7e489bde4106d01b05ec21ec327f7dc8677b79ff431e5ad6ce70c0e406092dbc455f7916d6b310a6499823133e460c4697cd439c26b46964d38962cb29d96fd7e2aea756e36ca7f19de81b5bcf76f881a1c28429fe363214470cdaa990c14d34eca0f70b95921b9f3d56851348388cce32678dccd1a5d3d7c36e1750ad8969dbecefa44f5dd5a14ece130eea307952fec3d1eabc53c1e86626097fcc752ddd3f56a01f08bc1ec140aeab5bc921fc1d3fead9030257339149e81f3ce14d29ff46fb0bf936f3a9e846acbcca199e79739e34259b0f164cb23078e3c70d756d1c4c3df7ea962f1c6792ada35ca1539b2d4e376ee2723fffafb87ffdb8dd162f0fdc32c7229730b04db906d5db65c7a339af8aaba443c183b04fd0153a2f400ce903cb264f49d9081b9e391c80919c7d7060c921bfcdcf4c6292c4ab53a742bb2e78d80d7e949a2228e3e34088216d57d41f1a82b6eb41b75dd6263eb14e4c006ed352bdedced82deeae741e050281da63bb4731982231b14e3cb93784c771a884197789a0f6133ef27c82756c128371502ebe9fc2de6b8c1ec0f769a1fb90e93a51deb70b38b98ead61eb1eef111485ef2cbefda26c249c7b51986fdc304c40ee26d4ea11240a05dcf74429c1672ea61847833082c8bfb3114ea05a010226f238a3c85953eedafb288f8eb1f582e9a37772d30031c8cca46b94d5d9b656b48999b9f21b234568be0d2a62ba51ad3178170afe2bc1af7069bbd5beee72882c47ab034bddcd846df2384da9c392dcf9dc46a1a7d6681a9cda8758ffa085c7f43ae2819d9ee1de80994b507820910bcc0a3a64c5559b5e79efc83b5919a524d8d6935367b560f7f111d362c3472be4cec9c8d54ecbbc31ed3304bd1e35030b0bae97a81ac1486ed5425897d5dc4ac20d7eef1ce7bb26c7aa7da3c506e44096ecf34932dd65f6a64a127ebca812c47171886adb1463e00a6eeba2f46dc6c87fd361badcccb50837ff403cb9a71d832469d90e218d62b7e3c9dddc9f665b796ff1988205362780e09d6101e062af44317b78f1fc75b216a6b0c3614f980d7e6aafc6e2cd12f208eee78de4193f31a2d852d1c98492f61e7a79fa07f64a9e9c9fd731be1215f762b55858af689289081102a0e5e028e7ece4d01f22b03171d0084a16288398916d9737046d35fb5c41d96222891af0801121de3051ca4d30fea73bdce66c2ce8eccb0fc7a8ce10347e6cc711861dfe0bf8227aa260a377fd776bf1b8cc93fb9e14963908d13ed99fc69f897c0f61cada8e17ba37d51c4228848d7d3cf6c72a654fc1e9d36086068e06aeeec11264b49350375da7e9a4fb5a611171e05cbc980231b9375c9a171272c84959371d010d65d83ae94d7df5f02be4f5cdeef386aa2d58cb21bc5a5f15d26efde141c640a4f906eb6cbc21f94903abd51ab5cacfb481ebcf355d244d6e871e93f09ff3a1cbb45f2d8a62df7c891c62ef1841f79d6ea41a287f55f14b1f0b06cb45f079424298bf21686aa750c2938b2f043b43ae3a7bd6c7dff9aeb16226f3baacc188fb84c9593a3ba398420fb2b2f562fcdb7c3513c57adfeb5bb3859ede301f52e6e498ee985c34ca9d66bd83bdabb37314d2facc8f6615b3f00a660ada71483759736a64b9b171c160d0de5f67bada6cfdacffabb90eb006884d3dd4335197b7a1bc1dc6c4c9b0b20eba9fabb2de8481147919158b4249310aacec273e2fda3ab5aa8854331eec3c19b84d157ed4f8f1df37c356d3ad7d41e452d23aeef273bc0bda42d1f50249c582604455695bf02a73a3a69a9f50feea78ca0c0e741c5d8590de33948b59bbd75292133607f2f4aa7bc056d3ec5e6dc61b869a0c40cbc8276285ff2687e4065cf457a7997bf763c8f5af69c2785d83694a090007c506a7f537b9615022868b414947bee190a3818f8f9aee8cb740c720bcd874b28a05c62b806d72538e3f74e7e1a552213db561de64fbdcfaa3f0b5e4332fefc695bf4b99533db9e7b060853763217b3712248770bbf205d8fbf0b6def65c2c1f38cadc6386ed2c11cd973f02d0d57d3b7b6f2d7d24cda50991d39158801fee1e177aef0a9e1385123806e4a9d482a963922fe8a7ceb1489deb6d26bd7af35813b408510752aa12516d8ee5525e267b56c76b2f6a84363f9292ded5a94b88ef4a04571c038e2737f7d2fdf8e78f74246d1fe6fcb94129e1644ec2b555ef6404dc80612911ac88252e0ed5abeabc0bb27f010dbabcae0db257f2a9a061bc0a2a15965c382a099aa86faee419a463940dabdce0bc71c5eb3a4c2057e4af8fb8cfdd74814274305a4f4db942a3a79d45f4d6a1a346bec9ef118c7c0e95663301b159ed83a5da20a7939b1b0b5a5d34f5c37af59afa8f478db98faf905933e9c6476ff1bee60f6c3fbc5e1237934f21060edf149ac6b8e0bc01f28bac839ab655745b6b9bc11362bcbb3d66c69e2ebf3ea3acc9caed04dc99df14794db9d4b43b8c83d4db67421b3815024e5c2e878e5853bfce8f744fb45256cc601e946d9f9bfaaea85f23d027a1fc045b4390e464eb33a22988d8317da83dc3391b2e02937c9b629dfa20b264ca7e14823afecf0e3c7a83b1785209496fdef9dc8b178f3d8f46a07175cac596f0dfa85a3b6e22c2005f93718787abceaf3448c0accf926e6fa382c83a654c50f880c5a5db2f3641a3efd6cf682bbd35862e3cac2609be2d375235a26acba943c9169870836a8abdda9a2c50514c9b8a8a6a0cf99e75a56734fd88809d8f3248a8dedc163ad2a37aa7a7d812734d76aa5bcc739fda58502895b899e4dbc6472552108f32ff94643f0877b211cd79260f3eb65e2e1caad25dae04396b1564414296809075fe851df530729fa75c4b2334201111f2053a25e4bb778b89abf2fb3de16323639f2165431dd7761ed5dd479dccab8dd7ec9b110453094b1c1893764402bb75c91ec502853cdf2e9285a2ee64ad676981a9f879c366502e8c0280a5b35cc14c87c2de75b6b8e50e0ca1e04efbd682718630e5baabb14b63eb8e8a15d306a60745b8935f0693dcc368c5f4a776315dce885b311f9b467f6f38f97ad8465ab53d115711c5cae0b654425c2679b7f620084211e42794e8f03189897b553533fa18f11343d83974e0da693d0e551e82f4ff33fbea615b4a851c5954e77dd0f9a985b64281f5961c6c5a3d2a9a8f3737df8c9ec765c766f0626436b7a899cea3dad26a8979dec82129fad366a5abcffb263021ce326ee43d9f645d8e6bb862f07e234986545b2bf39a8c265063d2b73fd4eecfe63ad7bbb7794311e0e93f0459091254761b5b50a7ffd316091d700f241734c283f27a3d11c0b409fac7bd277aafb6c5b03187d116251fbe005234f70928216b1c2f7d11b1678e6d307107f0f8dadeb4171549a5de5374ecc3bf08be11c9e0", 0x1000}, {&(0x7f0000002640)="27dba2f67abd88775971f446e009872a3f5b15ca30e88b02c447255392c829e74e54118128c90d22bd6a969e7b44b034a627f47c61b810354a056a7bbac5c1a6b247ddf6a815ce895f4d9f489adb63322c044a20558585121d04ff3555acbf01ae2ce8520fc508d4de584dd05010085123a1011db3b68252322338afd471df2ee013c5aaaa976399ed54add73c6bf372ad168c15b2d7ab0416132e641dfda1d77cf1e48c7e68ec978925c7ce06ed644b79e0326a8a108b06f97eba", 0xbb}], 0x9, &(0x7f0000002e80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYBLOB="79e8c4a1015b8ef60f59e6cfc1c24c6295ded29152ac69450a5e744fd97216c432bfcbcd25d3aafd474ab3a4f79060074e5f7b4e480ca01082c6d8798d399e3b33a45884596461c86e8e6d1e7b58336c3e2cdfaa2ab8a6e808605175cf9b3a2dc75f849d40bcfe01eef17c46e1fe187f395adc463ec68cff46bfb3703bfce01278014d2e4304bfee944ebe7396791b9a96752a7cb7220ab4c437f10a26c90a31f724fdf82f58478ee2de38ce45430dbe7b20ee46a123f4c84f3e", @ANYRES16=r7, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x20048000}, 0x4000000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r12 = getgid() setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x5, 0x6fe, [0x0, 0x20001340, 0x2000161c, 0x2000164c], 0x0, &(0x7f0000000340), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x2b, 0x6000, 'hsr0\x00', 'veth1_macvtap\x00', 'sit0\x00', 'veth1_to_bond\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0xff], 0xb6, 0xfe, 0x176, [@ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xff000000, 0x40, 0x0, 0x18, 0x0, 0x4e24, 0x4e22, 0x4e21, 0x4e20}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"3fcd5f0bcb2cc969e0ab437ea8f6da7298df51d10ac815bc856065659643"}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x200, 0x81, 0x9, 0x0, 0x0, "46fc4524c0ba29c87f5a21e6d48d659744f8cbaae257b51ea8dffbd06fc29e6d47a47c8c01866b7435e88f8b633fce4f62dcd50c5f859e864bcae58bcf7ded70"}}}}, {0x3, 0x0, 0x60, 'vxcan1\x00', 'wg1\x00', 'geneve1\x00', 'ipvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0xff], 0xee, 0xee, 0x136, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x32}, [0x0, 0xffffff00, 0xff000000, 0xff], 0x4e24, 0x2f, 0x4, 0x4e23, 0x8, 0x2}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x6}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x52, 0x6006, 'veth0_vlan\x00', 'wg0\x00', 'geneve0\x00', 'vlan0\x00', @empty, [0x0, 0x0, 0xd996d06439a2a33a, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0x0, 0xff], 0xa6, 0xee, 0x11e, [@realm={{'realm\x00', 0x0, 0x10}, {{0x4, 0x80000000, 0x1}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"ffd2188a6289213a65ce1eb5a3cde0244c0e09d769e7b4260d760bffc129"}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x5, 0xb, 0x200, 'ip_vti0\x00', 'veth0_virt_wifi\x00', 'dummy0\x00', 'bridge_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, [0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff], 0xee, 0xee, 0x11e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x2}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x7fffffffffffffff}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}, {0x9, 0x0, 0x8809, 'vlan1\x00', 'veth1_macvtap\x00', 'bridge0\x00', 'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, [0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0xff], 0xae, 0x126, 0x156, [@owner={{'owner\x00', 0x0, 0x18}, {{r9, r11, r12}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x8000, 0x400, 0x0, 0x0, "8d02c3a5db27edb6f23f8d7b555f8718eef4b68ec6974dcdb3e09c7ee12bee31be64ae83d4ac76c0a092ca8e70706b6c5f246d2e1358778521c71bf832702051"}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xdf}}}}]}]}, 0x776) sendto$inet(r4, &(0x7f0000000000)="28c8938a850ac2548831d937881fd7f7c0ab72a5", 0x14, 0x4004, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="7b150455eb303aa6d8471005ef20a2fbaeb73260ce37a283565d44508aa3dfaee79b2f803cfdcd4401381f0ac5c9f1877f1c72eba0cbd212dd420ab3bf3b519da7b4b33184717de280451f9284a51e4d2daba60daea11b7e1e5500b87475fe01c5867da97bf3711876c8c78346eb714380921bbfa176b40bceb2c10a421a637ab241f486483adaa9b5335227e94371c43d56891f2d22f4d44bb9dc33063574bafb0ff99384e77bd6169a8f0116d3492e57189f021683ae2e5959e49324ce218b95ee8bebf64370db560c28a833d73e05d112e43ab8275b76e0477911e37b2bab5ef345", 0xe3}, {&(0x7f00000006c0)="afe38c51f6bb2226215e78408103a10c67c5be8de8e708adafaa8b4c670c027e232bb5ed5fda84bb6c20871e0cdc63d962662500e4532949d17034fdb6081dbd6db43940d4322ed90273f1b1af45064235eeddebc88f2fa45862ce37bd4413b9e53febfec1bfb53e7c548c48a116d105459bd11e529154a64b053586d690ff4ede67881b278ea1132b27fabb3ed6a3f95762404a85d1d3e1fdcf9aa0709c8a5de8e1869f7fc2018170bb67bff42193fc06fea94024cf1915a09e284103ecb7250dcaa3c0e1c41910b68193bc4f6e33", 0xcf}, {&(0x7f0000000640)="e357b0056d39b1c0684042958c95e37dda6fbdd3648d04afe7178f6f99cd483ddb8ab1e7f0498d43ddbc9c9750e6736801cfccb147016e15d4ed9df293d32991424e0c1884b14ecba63795be4449c8d61249c4ab625971018c150b6958cf1c8404ddb0c293e0220688d3e156fd280b2154950299", 0x74}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="fd", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x0, &(0x7f0000000b80)=[{&(0x7f00000002c0)="8797d22c611c6ada66d0e0ae6738a94c26c5b0853f5e5d82395cad8bd4c9daee9ab6b0b6946fd28d7adaf6b14fb174afedd39a42957c69af255020c54aafc59a99b0ed7246d57b6c24c2f29a4fd6129b71435ad381472eadd8641f140004563dd2262c25fb9006a5fd"}, {&(0x7f0000000480)="e3721dd176431dfeb340ce6b0f0141a656e82f53a37b897fc7245bc94a21a9253ab400f803fba4bebe61d373c3cbf9c1fde301d4c1bad9a7cdcb109a67ffa6413b0c2967000822f70d61f5be1b397ca8a6a3e68ff391aa2e9f93447bd9caa8dfc6"}, {&(0x7f0000000200)="221550a7eec7823218a300231d4264e1fbb9330a930a43e54f86518168c0830889b20d0a467d"}, {&(0x7f0000000340)}, {&(0x7f00000007c0)="53e418f25d302acf05b3e3eadf0ff4fdcae06c6d5d3ef485b95f7da907cda8a41349a55af9a3b06226ea321edd2445d1b0db453c30ce4b04d8f3e96f36a0e7ef3d3463dc1062304b942534ef0642645256309c016ccaf4fec77203b4c94b2055adba310a066bc9a1f50d64c6021d12604b33dcf0b52ab17374ca4f1b47b8db795ec15e27688deba6"}, {&(0x7f0000000880)="25b79d2e5e56914c84caf5559a21436f7a31e5b05631a3d090d5b5f449abaa9d03b1f6ca885de35b012f3aea93f6f9148820c2856eca22169af9c81ca40d895a8492f0e798eb9e270ca3a5d377e4eebfbc9001923b694b07487baa4629df77e6592ad94e73c9b0c03d54dadc928b5d1bceac65138de64a11d224ea06c2909579cc5e22604189200aaec881bc41df64059c4049fa043cf861ef1974760ed4a12c55d27821196d21e423022d7aee167f3c570bc35f5098face7d464dec58170f89f0517eef2e80ab04ffe63376b784b4e70ddcb5d86bb2919924983ef7561b324d6a"}, {&(0x7f0000000e00)="878e560757d0b6f008ff528f9d22b0a8e729252277a665e046e24757caf53e6a2a2ad2704cfa03cf8122353d0776d762790d1b2be535b8679b6f9daf943d237f002d433f42d32f897690d9577567d10acb8cb4202d285b60e524fc9e12f5042469e0e7f48cdd16c7cfe4dcf46a85d4963e811af1ca882c249b9b40b70add3926cdf06a440a442069058bb2eaaa25239a4c56cb8581f72d81a95d9bf782ce52a64e9a10b112da47e2142385549505dacb06e46fb0fd3f72b05cd424e0df66e828c002c31f8304691c64d656d345f9d39c3e5cd103e0dc36370ef95a658cde5d44c8101c025830545732d55606f14288074313999e613010027c"}, {&(0x7f0000001f80)="c61cd1b2a24b1ffff7628dc4b0b599dc54372d4e0cd033b101fb801817f332716dc2678159c26e625245f26ab83accb68d6adc2da75f8daf80ae2b4e64a75725434adb2ab9a9a91d97b029b62e0d735278df5d792dbb5f4d45ad9cd17e83f5a05a927a3156ff69a4d657d9ced5af7417e6cad17d822a3f0f5d19c9bc925dc601ab08b432eccfcd9fbcbfddc746de0abbe9ef8e905871c1fa1ac0396914af28b59ca0f0abf82fb1ccb4bce1c177a37224184554c07171b1aaabdaf7ebef9d7e0ae685ed73b6a50b7c53a313e9944a94e070e1f924920c0a0c9a2e4b93fbdcbdb0fe1e474666ee1c0e57bab9c9c36b152811f1f1ea2b1222ee26423616e8c74f236514a3ca90631d4766e3ed52e2e07104df1017d6ef9bac0e196bd89c9851e1eeaecd5847bb2eb557b42e756e2f962f8a7c3022b71a5390eca99f314a81c8c3bd070c590bae52648d95b325e3d3188e6402f82246dc4b43cdb6d6a87fd1615bddd722d9e50783c2b61dfc9ea5d1d11393c20a3b615a7c21e04b3c381fb11c073e0d2434fca8549a8b0960e94bdfc89acd78836b2d4008fbb2d474277937e48e9ff80d6f8ebe9bb003ce4a4aaffaee079e1d6daabb38ac50def40f1dc7e67441841a1d69bda158663d88c1a2c6cfcc91e890bb1c2bf4d197d60480c8af84d5029fbda908c715fc511551ba97501eadc668d521b9949c31739e05853b63275f6397f663983f843cc434c96d244a396e1ce4283fdfaaae00141b86d894492606c0506bc838d8d8b2ba301283873d73ef2527e8826a97a38d319534ea66846889fbbb68d975eac83755e81cfdf76320d8cfb4ff90139d1e47f0c6bda6b6a14e3bb65581d3abc591fb4a3b30439b58356b3daf150571e5b63b34c4b29d15b599034380562a8c9523c9de73263da7f1597ed395a8ea52dc5b35041b3a35af4df236edde1753ad24d7e9259363fe2a5587aa36077e56879c491de9f5b16a1bc933ef8e6230979f01baa1512736cedef3775a8b274feb9bebe7e168c357517e352495ce3df145ed09fbc1705396e1480e8e8f90eb8e4b396038d6f76bd68a24ab0047636208c5cdb2c34efe285ae747b20699847bdd4b2409b135e76f0fc05914e7b779036a16b3964fba7c68be9ac12993bbe7303165eccae5e2be555e5d168319309f234530c9d086bf9c894fedb429ef7db10cad59c4a1fdea267c2b5313df2b6ffb34c8a35aa4013c8e56a9abf89882bf40966599a99b603e0963a708e033aa1659ec7d6e4c2d146c92e8f3280c444cc88ebfb178e2a7e9b4b58713578829b91d3bdaa102f5002fc0c399ce60188266819befd73a9989701bb7db6a0b7efcb7e2870d2a573c8e200cd406f24f10ec9a4683516d6cf9fa7ddc829d646eed900f7e99994b83e84340826c7123409c5dfdbf6346c05d732e12f67445c7bd5b7ff21c2e89f9fedaf7fbe8d9c5b5203a1e9a08e580d0b381055f142cf33878af2d26471d9e984608c66217736f31b18728e079a009be8641a767e69180e8864946fe955aa4da392c02c736f70f0ff6ad3530e0987545ffc46502fa5da20e8b51db895215a870459949ddc11fefe9509e4c4e47542474a84d08a41557152f3ef41f9f4310ab5e9e72824d1b6f1be62f465323d03d426ee705f0bb4601c7d359ac74cd4784f6992663aadf3e9dd2840bbba80188d13a6bb59f144820868140850266be1dd61dc283ff2b84ba56e71f0564b367f4929c139b3df2ca54d086a40705a9f0ddc7d97bfa021dc35b50a8da0b5f470ee31442839e604479449da7a7d38e8e94ea9d7a996e824b183889d743f213e2292924addf809a2414e4de8b30d0e96d0e296a16186fb43ca7b03b63c1166b2688b26f6c8a3332f0a7cadacbc0b0e6acbeaeb6914fac903c68d83928623095d7d68f81e9f0149964d8bea1cd9a33a2ad7d9343a13a13b187b40122b889553e57750dcdf2f3954f4b7ec4312eb042648603c74abe3a273e9dc3207d15b0f06787da877341114b6957640c70ce79fdb26084c3f4837237b88cb057cf51b487839bf27f5432505dc7609505bbc92597ebe618fdbc9adec559a050d677302c381e8426feb33cb66c1e606a8e1efdf0ff380fcac1e10f0a60c9525e5c3dc4aeb04c51727e9d78525ea2ebd279e363ff6334186449beb544799f8f043cde6c08bf55f41030da75b433f7f266cf14f4e3c1efcac5b1374e041c0eba30e9ebd1da41bd84b3917ad783126a3118294d9fd1afa77ba5214cbbf072767372143cfe0b5c0de36b21f577efc2daa233dd1d01e5bdaf88f404187ae7cb0c954db28456eed4523cb662141355bc19109ce1f45a303883659f93ab6639fc5bb262f23363e0376b45ffa3d108457ccea68455a1669cf937651d342c4e7b3d4d318d5c1b80c42732e2401c383983369dbb860ef9dedd05630dee0827c577eaa6a422b4f4a419c3e4392e6c2230432ccefeb6a8eca66e2057bec736aa11db28ee6b7cd9a9042c37525cdf08044ff7105084986023111d5a251999f775379eb509812a6f4b686ebb0c36a13684296be48de7af8bbe1ef10a261411e74d9cf8b45f7cadbdb733f9477556bf574e4aea420ed80f016f8fd8e0eaad627b6af6d2852f2d8d69d228aa31f6b55eb964cf5950b6efb810bbe3d19aeba2ce099c8fe5720df2dbbdb461f3f9a0d9b118b1f8fa82ef21792c3db427d741606520792c8309f8c0c1d744b5719c5f0b180e0036996cec037d3dbdf413c6e329f4b53520b5d5b9377fbe7d039631d10df49e1e1c6315a226ef2f2ab5b466d4af7684be734d35be51bca8c682331b5dd81abcfa1b5bc735256954e3a5e77e49e700792b5d5781c9911e33bd9c97d5a832453b78bb5d45805377eca72301df97d61fd38c7687af9c00db67b2d899a1f61899ee29c69566169f86e53970005aa125335dd162eec585debd26bcea570f8f4d12c52404091615c90acbbba73332563f18a06658aab3946d354dc51d4024325d2cfff3bc54747002a670ccd28cdf495bff1c6fa848f8e0bb2c967cc3a3278efbd2a87e51c2dd6473c1efb19823e2c3658ae866b614093c1f0a64fd18f5e55bf5f2dff8fc3fed3b10ea0f7616651817042d64c9f0a910df5e17b93bc95021aa4f4be92c25e28f78ec149dbf63c046b9c5120c1905e76faaefd97386198906a28b128a98132f66465a33b003f7bbb780fc6bc6223417b77997189db7c3dc53c3498bd28170d926284ee7bf9a5a95ce3bc667718af4f8aa760db0936d6c4a34c1d8f3570d0fac246a220ed5458fdefcaee420c1b4a1b03c0a38547b8a5234e493d091558d148fbcc33b86aacd2a0bafcd5784bdd7ff2df88291a3b4d0e8de868e36471cf05d69fb382ccd595ee378663ecc54a23792725df59a72f1d93b8d9815ea928345da8dd5df9046eab56ecec93ba0e320457705225911317923aadf983983bcd83351f823e24c2179f4d6f9e093bd705cd6ca816f1bc879bc3821475ccd75bd913323415fff976ed39d0d633cc37958e7781297f08153a9c9feb35c601f6bddc4051387d790241c1628adf0cb6708ab8cb71b1c27260732776674941ac2980b6bfcbba004baf6d4d691ca8ac07db7ffc1f23746935da70d64c3308b67db2f64858eed0a9ad1663cdb4821d21fe4385cb1cb5a446b7627cbd55879aa3bd4c9a11bdc0f68e562748d372071d07ecb9449bcb3e596594ee26f44466400b4e11393fc783445ad4cfa7d4bd7d2c7765dad0ad393770d06fb14947f32f8846f7ed7ba7d68ccf888fd7c80ab62d9952ebe494863e634a012b49db602d50c7d5d164e6507244f8e1aec64ddec2056dc36d852242331de058c901899e69734fb2b3dbfbd64192b3ff271c139468ec40091b7cc922c3a7b1b211b2c2deb974135f2389622d7383beffc6443435b61229620c6aa53447a191dc4f69b88192f1d934cc159e8a488f60958381117a88ecc8cab1ff0fcd45ca5cb8062d2b0109fe1eb340fc8a02ce6d5c6bf7f7244cdc78477452cee3c7e8a755cb48aaadac2f4d22875aaf7c2f4c5fac18ac6aad7cecd13302b38408fc34ff4c7e27d7a1144fbfdc593c75766cb2d8c0bbea735a2099edc333b7a48841df171debbbbfd8debb82206884e510517e3409c78280ae9d90e10f433549f986f1e180902c151f70afe97bd29fe4f9fd67775f0644e3b48842de0bc4bb59a0b3c07524710ac8f19add4ffdc6a6c1f6f14809ad93db95d71f8c90f9b39f79161f4f68c89348de3b312821c5d167c4a50d807c751fbb16116e359660a71931bb6674e3e5d490e95bc660541bbcfa382838695733cff1017147cf028fe260932b6be6f0a652520b2ce4fcad5285a21dd8130f79d05cb17d1a54e1e031eafae68b0193e7dc54813293b438023e597b00ab24192124cedd8a7c00270e59e8f7e55837a10e221e792f8223e43612ef3c443ab8c7ef0f881d85250a20f85be424bc7185902731f6966b499663a2a430f6bdece120afb0caf22f7d9d60c8a41ebc1ab02d07227ab139ff4e04153b94cc9fcf5ba757f87fe6b774f88187cce1589bd480c52bc0dce3e47be7f8ee82e949e5e489784714c00940a2adbf17f9b753a1876f3028c8ea0d5514ddda4f04e7e1911b20fcac1ee1586b00d8f16eb184a1b5fc4ad360ca8da06996864ebf0d7c421bff922dbb7dc5949adeb81ddbde2779321c7a5b4659b00cc18a9feacb1eb533be5c796d0e9aefdd7e65af95d14cb66e027b309bcab13bf20f745bd3d8f53f65645d03fe9542d79298b56849d661643ab41034e2c5bafd6438861c1f02003315fe966fa0c701a3a5af9aaa0b00ad00c4ee3c01808324a705b548963f084fbbace0aecf3fe2ec8329fdbab8261eab16f70fda85d588867b0975afcbacda93400ebe3839fc8cb33b271be77c3ad5583e485098cb80a6946697ce6889383164162dde0241339dfc8cb7674eac81e6b1b6a0ee7e36689f54f08bb91971593138624c48b1e8ed6422906c9df3b27ecb5e581d2b9aa212de3caf1d6d7a8178dada942496bfe9b24acfc0d2941e1ec92ccac2379bccb362a2effed05d9c79856dd994de3b390dc264f3ed8b92a8aa2c7bc4c254bcc47bc8c5c72e28abb9a6d7c7972e1e32a778c1183fd0f71820e2816a39ac48971fc388e27b17687be48bc8ade21e6e72dc48ae4a098afe75b9ddeb1191e293b929f256916d63f5b0cc7fa6b85332a2e2b65f110a53816882df9d881f4a2aa6836bb05317cf31045c917ee0285cf481f7aafeaef6bd555893e1bfe2ab347c47e4166feb0aaec1b4569e0b6060e8477a8c9b51837fb62c842cf372aa309d483ada4f87d15adfe31312b0d500348af2ad5edb5f6718501ff2ab36a6e211e5471e56f8eef01feed3da6bec07c7aa502af7ec87320a0b5e235682660c0945bc3320091785157317b3b54e8c16fd5c0614b82c1544fa7762e93f72fb4b818f153d4665aa69368b5f0132a07072e93153b6637fddc127d7b71f993974ab05994c48e40a8d7ae98ba5e03a8dae7fa19ee67bb848394d8ef6b81fa24734026796c55b508afd379ef7fa064c79159498f9d6c5a0f0228700f1714ad25b505240f36ec1351e235219d2365590ecdea3767d4eaf9f03876a4595ff61d9c9c4db45519c97a8a23c9dc459e4219deeaff0b1f2ee4a7aee53b736fcae44615f00a90c0d61bd25a69e1bd4b826bbd1ccb3227af9fc3a28e9a97f7acdde09e0dddad6f3ab5b71f277e4a0e7ed835985a276d3817561e4055690f56ba35b15ffb1e816dd2fe8a87b90a807e89e71e"}, {&(0x7f0000000a80)="bae3d6d5bea11224a5b1301ffcf1af3eb1e0dbf02a6f326528dd44f77fe9258f4448cb9e16175f84e87dd592bcbaf3652ef4e378970e1fe21f09f5486c48d03cafd75e02d70efa3f43fb5b95c7884589c77ac6c611e1784fb9bf06ee5886d3eb0b960313b93968998bfac92e58598f51332106dcc3b82657beb5cc82fa9e68c022819e8217d03dc96e46a59a32d7db1cf601db0199746bed7104cb0bd57edbe558d89276ffb0a84faeae7cde4e29747bc8b0243e5820394e0aa48a45093f53dcea7516f30149fdc05bf1638398f4eb16a3b31b514a2cd9499fc9739fee266725ccb0f509fed79ad7683a79542ebed775"}], 0x0, &(0x7f0000000c40)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x40}}, @ip_ttl={{0x0, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x400}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r13, @loopback, @multicast1}}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x301}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x91}}, @ip_tos_int={{0x0, 0x0, 0x1, 0xe5d}}]}}], 0x37, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@bridge_newneigh={0x5c, 0x1c, 0x8, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, r13, 0x0, 0x3, 0x1}, [@NDA_NH_ID={0x8, 0xd, 0x8000}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_NH_ID={0x8, 0xd, 0x4}, @NDA_VNI={0x8, 0x7, 0x1}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) [ 2133.408019][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:46:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x3a00}, 0x0) 02:46:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x3dc3}, 0x0) 02:46:17 executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000040000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x7000000}, 0x0) [ 2133.642870][ T5110] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2133.698886][ T5110] CPU: 0 PID: 5110 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2133.709268][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2133.719343][ T5110] Call Trace: [ 2133.722642][ T5110] [ 2133.725587][ T5110] dump_stack_lvl+0x1e7/0x2e0 [ 2133.730292][ T5110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2133.735510][ T5110] ? __pfx__printk+0x10/0x10 [ 2133.740116][ T5110] ? ___ratelimit+0x4c4/0x670 [ 2133.744813][ T5110] ? __pfx____ratelimit+0x10/0x10 [ 2133.749859][ T5110] dump_header+0xda/0x6a0 [ 2133.754216][ T5110] oom_kill_process+0x3a7/0x930 [ 2133.759098][ T5110] out_of_memory+0xf67/0x1320 [ 2133.763799][ T5110] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2133.769445][ T5110] ? __pfx___mutex_lock+0x10/0x10 [ 2133.774491][ T5110] ? __pfx_out_of_memory+0x10/0x10 [ 2133.779632][ T5110] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2133.785193][ T5110] ? __pfx_lock_release+0x10/0x10 [ 2133.790234][ T5110] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2133.796333][ T5110] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2133.801551][ T5110] ? mem_cgroup_iter+0x3e9/0x560 [ 2133.806513][ T5110] try_charge_memcg+0xda2/0x18a0 [ 2133.811467][ T5110] ? mark_lock+0x9a/0x350 [ 2133.815839][ T5110] ? __pfx_try_charge_memcg+0x10/0x10 [ 2133.821257][ T5110] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2133.827443][ T5110] charge_memcg+0xa2/0x160 [ 2133.831882][ T5110] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2133.837966][ T5110] __read_swap_cache_async+0x480/0x8b0 [ 2133.843449][ T5110] ? mark_lock+0x9a/0x350 [ 2133.847800][ T5110] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2133.853813][ T5110] swap_cluster_readahead+0x67c/0x810 [ 2133.859216][ T5110] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2133.865129][ T5110] ? __pfx_lock_release+0x10/0x10 [ 2133.870173][ T5110] ? xas_descend+0x37e/0x470 [ 2133.874790][ T5110] swapin_readahead+0x1ea/0x1070 [ 2133.879751][ T5110] ? filemap_get_entry+0x127/0x4e0 [ 2133.884896][ T5110] ? __pfx_swapin_readahead+0x10/0x10 [ 2133.890295][ T5110] ? __filemap_get_folio+0x935/0xbc0 [ 2133.895603][ T5110] ? swap_cache_get_folio+0x9f/0x570 [ 2133.900907][ T5110] do_swap_page+0x8ab/0x3da0 [ 2133.905537][ T5110] ? __pte_offset_map+0x2c4/0x380 [ 2133.910586][ T5110] ? do_swap_page+0x154/0x3da0 [ 2133.915363][ T5110] ? __pfx_do_swap_page+0x10/0x10 [ 2133.920400][ T5110] ? pte_offset_map_nolock+0x137/0x1f0 [ 2133.925877][ T5110] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2133.931701][ T5110] ? __pfx_validate_chain+0x10/0x10 [ 2133.936942][ T5110] __handle_mm_fault+0x15e8/0x72d0 [ 2133.942106][ T5110] ? __pfx___handle_mm_fault+0x10/0x10 [ 2133.947591][ T5110] ? mt_find+0x226/0x850 [ 2133.951849][ T5110] ? __pfx_lock_release+0x10/0x10 [ 2133.956912][ T5110] ? mt_find+0x62d/0x850 [ 2133.961181][ T5110] ? mt_find+0x226/0x850 [ 2133.965469][ T5110] ? find_vma+0x142/0x1c0 [ 2133.969821][ T5110] ? __pfx_find_vma+0x10/0x10 [ 2133.974510][ T5110] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2133.980514][ T5110] handle_mm_fault+0x3c1/0x8a0 [ 2133.985309][ T5110] exc_page_fault+0x2ad/0x870 [ 2133.990014][ T5110] asm_exc_page_fault+0x26/0x30 [ 2133.994883][ T5110] RIP: 0010:__get_user_8+0x11/0x20 02:46:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000002b700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4000}, 0x0) [ 2134.000012][ T5110] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2134.019636][ T5110] RSP: 0018:ffffc9000407fd98 EFLAGS: 00050202 [ 2134.025728][ T5110] RAX: 0000555555634da8 RBX: ffff88802fb61538 RCX: ffffc9000407fc03 [ 2134.033718][ T5110] RDX: 0000000000000000 RSI: ffffffff8baac760 RDI: ffffffff8bfe6820 [ 2134.041708][ T5110] RBP: ffffc9000407fec8 R08: ffffffff8f85576f R09: 1ffffffff1f0aaed [ 2134.049703][ T5110] R10: dffffc0000000000 R11: fffffbfff1f0aaee R12: ffffc9000407fda0 [ 2134.057714][ T5110] R13: ffffc9000407ffd8 R14: dffffc0000000000 R15: ffff88802fb60000 [ 2134.065724][ T5110] __rseq_handle_notify_resume+0x158/0x1490 [ 2134.071674][ T5110] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2134.078041][ T5110] ? syscall_exit_to_user_mode+0xa2/0x370 [ 2134.083793][ T5110] syscall_exit_to_user_mode+0x113/0x370 [ 2134.089460][ T5110] do_syscall_64+0x108/0x240 [ 2134.094086][ T5110] entry_SYSCALL_64_after_hwframe+0x6f/0x77 02:46:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4788}, 0x0) [ 2134.099999][ T5110] RIP: 0033:0x7f810c8a91b5 [ 2134.104427][ T5110] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 2134.124055][ T5110] RSP: 002b:00007f810cacfcf0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2134.132493][ T5110] RAX: 0000000000000000 RBX: 0000000000003ed6 RCX: 00007f810c8a91b5 [ 2134.140481][ T5110] RDX: 00007f810cacfd30 RSI: 0000000000000000 RDI: 0000000000000000 [ 2134.148480][ T5110] RBP: 00007f810cacfdbc R08: 0000000000000000 R09: 00007ffeb976a0b0 [ 2134.156468][ T5110] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 2134.164453][ T5110] R13: 0000000000208db4 R14: 0000000000208db4 R15: 0000000000000000 [ 2134.172455][ T5110] [ 2134.175563][ C0] vkms_vblank_simulate: vblank timer overrun [ 2134.242493][ T5110] memory: usage 307200kB, limit 307200kB, failcnt 73784 [ 2134.259753][ T5110] memory+swap: usage 307684kB, limit 9007199254740988kB, failcnt 0 [ 2134.280158][ T5110] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 2134.303558][ T5110] Memory cgroup stats for /syz4: [ 2134.303693][ T5110] cache 0 [ 2134.321774][ T5110] rss 0 [ 2134.331761][ T5110] rss_huge 0 [ 2134.335456][ T5110] shmem 0 [ 2134.338447][ T5110] mapped_file 0 [ 2134.351696][ T5110] dirty 0 [ 2134.354714][ T5110] writeback 0 [ 2134.361918][ T5110] workingset_refault_anon 27704 [ 2134.378415][ T5110] workingset_refault_file 333 [ 2134.383572][ T5110] swap 495616 [ 2134.386910][ T5110] swapcached 0 [ 2134.400542][ T5110] pgpgin 301136 [ 2134.408319][ T5110] pgpgout 301136 [ 2134.420431][ T5110] pgfault 592487 [ 2134.431936][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2134.436946][ T5110] pgmajfault 26765 [ 2134.459135][ T5110] inactive_anon 0 [ 2134.468325][ T5110] active_anon 0 [ 2134.479623][ T5110] inactive_file 0 [ 2134.487814][ T5110] active_file 0 [ 2134.497992][ T5110] unevictable 0 [ 2134.508145][ T5110] hierarchical_memory_limit 314572800 [ 2134.513968][ T5110] hierarchical_memsw_limit 9223372036854771712 [ 2134.530874][ T5110] total_cache 0 [ 2134.539496][ T5110] total_rss 0 [ 2134.551758][ T5110] total_rss_huge 0 [ 2134.556122][ T5110] total_shmem 0 [ 2134.559596][ T5110] total_mapped_file 0 [ 2134.571560][ T5110] total_dirty 0 [ 2134.575048][ T5110] total_writeback 0 [ 2134.589427][ T5110] total_workingset_refault_anon 27704 [ 2134.599271][ T5110] total_workingset_refault_file 333 [ 2134.609639][ T5110] total_swap 495616 [ 2134.619342][ T5110] total_swapcached 0 [ 2134.631543][ T5110] total_pgpgin 301136 [ 2134.635626][ T5110] total_pgpgout 301136 [ 2134.639980][ T5110] total_pgfault 592487 [ 2134.656456][ T5110] total_pgmajfault 26765 [ 2134.661893][ T5110] total_inactive_anon 0 [ 2134.666065][ T5110] total_active_anon 0 [ 2134.680721][ T5110] total_inactive_file 0 [ 2134.690506][ T5110] total_active_file 0 [ 2134.700617][ T5110] total_unevictable 0 [ 2134.705110][ T5110] anon_cost 0 [ 2134.711932][ T5110] file_cost 0 [ 2134.715243][ T5110] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23840,uid=0 02:46:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4800}, 0x0) [ 2134.771768][ T5110] Memory cgroup out of memory: Killed process 23840 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000017140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4888}, 0x0) 02:46:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4c00}, 0x0) 02:46:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x5865}, 0x0) [ 2135.143786][T23855] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2135.161542][T23855] CPU: 0 PID: 23855 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2135.171989][T23855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2135.182060][T23855] Call Trace: [ 2135.185356][T23855] [ 2135.188302][T23855] dump_stack_lvl+0x1e7/0x2e0 [ 2135.193013][T23855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2135.198233][T23855] ? __pfx__printk+0x10/0x10 [ 2135.202841][T23855] ? ___ratelimit+0x4c4/0x670 [ 2135.207536][T23855] ? __pfx____ratelimit+0x10/0x10 [ 2135.212581][T23855] dump_header+0xda/0x6a0 [ 2135.216935][T23855] oom_kill_process+0x3a7/0x930 [ 2135.221813][T23855] out_of_memory+0xf67/0x1320 [ 2135.226512][T23855] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2135.232166][T23855] ? __pfx___mutex_lock+0x10/0x10 [ 2135.237220][T23855] ? __pfx_out_of_memory+0x10/0x10 [ 2135.242368][T23855] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2135.247930][T23855] ? __pfx_lock_release+0x10/0x10 [ 2135.252978][T23855] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2135.259067][T23855] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2135.264287][T23855] ? mem_cgroup_iter+0x3e9/0x560 [ 2135.269253][T23855] try_charge_memcg+0xda2/0x18a0 [ 2135.274206][T23855] ? mark_lock+0x9a/0x350 [ 2135.278579][T23855] ? __pfx_try_charge_memcg+0x10/0x10 [ 2135.283994][T23855] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2135.290159][T23855] charge_memcg+0xa2/0x160 02:46:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6000}, 0x0) 02:46:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6400}, 0x0) [ 2135.294598][T23855] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2135.300687][T23855] __read_swap_cache_async+0x480/0x8b0 [ 2135.306168][T23855] ? mark_lock+0x9a/0x350 [ 2135.310525][T23855] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2135.316550][T23855] swap_cluster_readahead+0x67c/0x810 [ 2135.321965][T23855] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2135.327891][T23855] ? __pfx_lock_release+0x10/0x10 [ 2135.332940][T23855] ? xas_descend+0x37e/0x470 [ 2135.337560][T23855] swapin_readahead+0x1ea/0x1070 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6558}, 0x0) [ 2135.342523][T23855] ? filemap_get_entry+0x127/0x4e0 [ 2135.347670][T23855] ? __pfx_swapin_readahead+0x10/0x10 [ 2135.353066][T23855] ? __filemap_get_folio+0x935/0xbc0 [ 2135.358372][T23855] ? swap_cache_get_folio+0x9f/0x570 [ 2135.363688][T23855] do_swap_page+0x8ab/0x3da0 [ 2135.368312][T23855] ? __pte_offset_map+0x2c4/0x380 [ 2135.373377][T23855] ? do_swap_page+0x154/0x3da0 [ 2135.378164][T23855] ? __pfx_do_swap_page+0x10/0x10 [ 2135.383218][T23855] ? pte_offset_map_nolock+0x137/0x1f0 [ 2135.388708][T23855] ? __pfx_pte_offset_map_nolock+0x10/0x10 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6800}, 0x0) [ 2135.394546][T23855] ? __pfx_validate_chain+0x10/0x10 [ 2135.399776][T23855] __handle_mm_fault+0x15e8/0x72d0 [ 2135.404946][T23855] ? __pfx___handle_mm_fault+0x10/0x10 [ 2135.410450][T23855] ? mt_find+0x226/0x850 [ 2135.414716][T23855] ? __pfx_lock_release+0x10/0x10 [ 2135.419778][T23855] ? mt_find+0x62d/0x850 [ 2135.424043][T23855] ? mt_find+0x226/0x850 [ 2135.428336][T23855] ? find_vma+0x142/0x1c0 [ 2135.432684][T23855] ? __pfx_find_vma+0x10/0x10 [ 2135.437385][T23855] ? lockdep_hardirqs_on_prepare+0x43c/0x780 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6c00}, 0x0) [ 2135.443402][T23855] handle_mm_fault+0x3c1/0x8a0 [ 2135.448196][T23855] exc_page_fault+0x2ad/0x870 [ 2135.452913][T23855] asm_exc_page_fault+0x26/0x30 [ 2135.457787][T23855] RIP: 0010:__get_user_8+0x11/0x20 [ 2135.462928][T23855] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 2135.479587][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x7400}, 0x0) [ 2135.482533][T23855] RSP: 0000:ffffc90003d6fd78 EFLAGS: 00050202 [ 2135.482556][T23855] RAX: 0000555555634da8 RBX: ffff8880321fee78 RCX: ffffc90003d6fc03 [ 2135.482570][T23855] RDX: 0000000000000000 RSI: ffffffff8baac760 RDI: ffffffff8bfe6820 [ 2135.512654][T23855] RBP: ffffc90003d6fec0 R08: ffffffff8f85576f R09: 1ffffffff1f0aaed [ 2135.520652][T23855] R10: dffffc0000000000 R11: fffffbfff1f0aaee R12: ffffc90003d6fd80 [ 2135.528639][T23855] R13: ffffc90003d6ffd8 R14: dffffc0000000000 R15: ffff8880321fd940 [ 2135.536654][T23855] __rseq_handle_notify_resume+0x158/0x1490 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x7a00}, 0x0) [ 2135.542599][T23855] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 2135.548976][T23855] ? irqentry_exit_to_user_mode+0x52/0x280 [ 2135.554815][T23855] irqentry_exit_to_user_mode+0xbb/0x280 [ 2135.560480][T23855] exc_page_fault+0x587/0x870 [ 2135.565187][T23855] asm_exc_page_fault+0x26/0x30 [ 2135.570065][T23855] RIP: 0033:0x7f810c88708e [ 2135.574497][T23855] Code: 00 48 8d 3d 3c b6 06 00 e8 6f 57 fb ff 48 8d 3d 68 b5 06 00 31 c0 e8 a1 f8 ff ff 90 55 53 48 83 ec 08 48 85 ff 74 45 48 89 fb <48> 8b 3d b3 e6 c4 00 be 10 00 00 00 48 8d 6f 0e 48 83 c7 10 e8 79 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x8100}, 0x0) [ 2135.594115][T23855] RSP: 002b:00007f810cacf9d0 EFLAGS: 00010206 [ 2135.600209][T23855] RAX: 00007f810d5019d0 RBX: 00007f810d5016c0 RCX: 00007f810c87de67 [ 2135.608199][T23855] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f810d5016c0 [ 2135.616193][T23855] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 2135.624183][T23855] R10: 0000000000021000 R11: 0000000000000206 R12: 00007f810cacfc90 [ 2135.632175][T23855] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 2135.640184][T23855] [ 2135.643274][ C0] vkms_vblank_simulate: vblank timer overrun [ 2135.654654][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2135.663515][T23855] memory: usage 307200kB, limit 307200kB, failcnt 73937 [ 2135.670512][T23855] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 2135.679039][T23855] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 2135.688307][T23855] Memory cgroup stats for /syz4: [ 2135.688441][T23855] cache 0 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x8847}, 0x0) [ 2135.696794][T23855] rss 8192 [ 2135.699833][T23855] rss_huge 0 [ 2135.703528][T23855] shmem 0 [ 2135.706480][T23855] mapped_file 0 [ 2135.709938][T23855] dirty 0 [ 2135.719780][T23855] writeback 0 [ 2135.723454][T23855] workingset_refault_anon 27747 [ 2135.728317][T23855] workingset_refault_file 333 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x8848}, 0x0) [ 2135.753005][T23855] swap 483328 [ 2135.756327][T23855] swapcached 0 [ 2135.759709][T23855] pgpgin 301195 [ 2135.800101][T23855] pgpgout 301193 [ 2135.805477][T23855] pgfault 592589 [ 2135.817096][T23855] pgmajfault 26812 [ 2135.837977][T23855] inactive_anon 0 [ 2135.846568][T23855] active_anon 8192 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xbe2b}, 0x0) [ 2135.861696][T23855] inactive_file 0 [ 2135.865852][T23855] active_file 0 [ 2135.882641][T23855] unevictable 0 [ 2135.893468][T23855] hierarchical_memory_limit 314572800 [ 2135.899028][T23855] hierarchical_memsw_limit 9223372036854771712 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xc33d}, 0x0) [ 2135.917576][T23855] total_cache 0 [ 2135.925569][T23855] total_rss 8192 [ 2135.933231][T23855] total_rss_huge 0 [ 2135.941814][T23855] total_shmem 0 [ 2135.954332][T23855] total_mapped_file 0 [ 2135.958675][T23855] total_dirty 0 [ 2135.971195][T23855] total_writeback 0 [ 2135.976145][T23855] total_workingset_refault_anon 27747 [ 2136.001542][T23855] total_workingset_refault_file 333 [ 2136.014735][T23855] total_swap 483328 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xff7f}, 0x0) [ 2136.031530][T23855] total_swapcached 0 [ 2136.035588][T23855] total_pgpgin 301195 [ 2136.039734][T23855] total_pgpgout 301193 [ 2136.051542][T23855] total_pgfault 592589 [ 2136.057977][T23855] total_pgmajfault 26812 [ 2136.068102][T23855] total_inactive_anon 0 [ 2136.089460][T23855] total_active_anon 8192 [ 2136.096405][T23855] total_inactive_file 0 [ 2136.109445][T23855] total_active_file 0 [ 2136.113640][T23855] total_unevictable 0 [ 2136.118112][T23855] anon_cost 0 [ 2136.127313][T23855] file_cost 0 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x1000000}, 0x0) [ 2136.134165][T23855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23855,uid=0 [ 2136.159564][T23855] Memory cgroup out of memory: Killed process 23855 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2000000}, 0x0) [ 2136.265191][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:46:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x3000000}, 0x0) 02:46:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4000000}, 0x0) [ 2136.510278][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:46:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000018140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x5000000}, 0x0) [ 2136.746857][ T5110] syz-executor.4 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=0 [ 2136.767350][ T5103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2136.776534][ T5103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2136.784499][ T5103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2136.794214][ T5103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2136.803926][ T5103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2136.812055][ T5103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2136.862561][ T5110] CPU: 0 PID: 5110 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2136.872933][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2136.883010][ T5110] Call Trace: [ 2136.886302][ T5110] [ 2136.889245][ T5110] dump_stack_lvl+0x1e7/0x2e0 [ 2136.893957][ T5110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2136.899193][ T5110] ? __pfx__printk+0x10/0x10 [ 2136.903801][ T5110] ? ___ratelimit+0x4c4/0x670 [ 2136.908501][ T5110] ? __pfx____ratelimit+0x10/0x10 [ 2136.913550][ T5110] dump_header+0xda/0x6a0 [ 2136.917909][ T5110] oom_kill_process+0x3a7/0x930 [ 2136.922809][ T5110] out_of_memory+0xf67/0x1320 [ 2136.927517][ T5110] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2136.933193][ T5110] ? __pfx___mutex_lock+0x10/0x10 [ 2136.938244][ T5110] ? __pfx_out_of_memory+0x10/0x10 [ 2136.943386][ T5110] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2136.948949][ T5110] ? __pfx_lock_release+0x10/0x10 [ 2136.953996][ T5110] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2136.960187][ T5110] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2136.965541][ T5110] ? mem_cgroup_iter+0x3e9/0x560 [ 2136.970524][ T5110] try_charge_memcg+0xda2/0x18a0 [ 2136.975515][ T5110] ? __pfx_try_charge_memcg+0x10/0x10 [ 2136.980910][ T5110] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2136.986651][ T5110] ? __pfx_lock_release+0x10/0x10 [ 2136.991719][ T5110] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2136.997458][ T5110] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2137.003372][ T5110] __memcg_kmem_charge_page+0xe1/0x250 [ 2137.008860][ T5110] __alloc_pages+0x28b/0x680 [ 2137.013479][ T5110] ? __pfx___alloc_pages+0x10/0x10 [ 2137.015501][ T5099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2137.018603][ T5110] ? policy_nodemask+0x1ec/0x720 [ 2137.018627][ T5110] ? validate_chain+0x11b/0x58e0 [ 2137.018648][ T5110] ? __lock_acquire+0x1345/0x1fd0 [ 2137.028462][ T5099] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2137.030650][ T5110] alloc_pages_mpol+0x3de/0x650 [ 2137.039460][ T5099] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2137.040567][ T5110] ? mas_wr_modify+0x73f/0x2830 [ 2137.049050][ T5099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2137.052345][ T5110] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2137.052377][ T5110] ? alloc_pages+0xee/0x170 [ 2137.061318][ T5099] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2137.064129][ T5110] pte_alloc_one+0x88/0x5d0 [ 2137.064158][ T5110] ? __pfx_pte_alloc_one+0x10/0x10 [ 2137.078426][ T5099] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2137.080926][ T5110] ? __pfx_mas_wr_modify+0x10/0x10 [ 2137.109611][ T5110] ? validate_chain+0x11b/0x58e0 [ 2137.114580][ T5110] ? deref_stack_reg+0x1c7/0x260 [ 2137.119559][ T5110] __pte_alloc+0x79/0x3a0 [ 2137.123927][ T5110] ? __pfx___pte_alloc+0x10/0x10 [ 2137.128900][ T5110] ? is_bpf_text_address+0x26/0x2b0 [ 2137.134163][ T5110] copy_page_range+0x391d/0x4240 [ 2137.139167][ T5110] ? mark_lock+0x9a/0x350 [ 2137.143550][ T5110] ? unwind_get_return_address+0x91/0xc0 [ 2137.149259][ T5110] ? __pfx_copy_page_range+0x10/0x10 [ 2137.154563][ T5110] ? mark_lock+0x9a/0x350 [ 2137.158922][ T5110] ? mas_wr_walk+0x58a/0x5d0 [ 2137.163523][ T5110] ? mas_wr_end_piv+0x271/0x8e0 [ 2137.168396][ T5110] ? mas_wr_store_entry+0x129/0x2c0 [ 2137.173616][ T5110] ? mas_store+0x577/0x670 [ 2137.178057][ T5110] ? __pfx_mas_store+0x10/0x10 [ 2137.182840][ T5110] ? up_write+0x1a9/0x580 [ 2137.187192][ T5110] ? __pfx_up_write+0x10/0x10 [ 2137.191887][ T5110] ? __asan_memset+0x23/0x50 [ 2137.196493][ T5110] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 2137.203278][ T5110] ? vma_interval_tree_insert_after+0x262/0x2c0 [ 2137.209557][ T5110] copy_mm+0x12f4/0x21b0 [ 2137.213844][ T5110] ? __pfx_copy_mm+0x10/0x10 [ 2137.218462][ T5110] ? __init_rwsem+0x122/0x160 [ 2137.223168][ T5110] ? copy_signal+0x548/0x670 [ 2137.227777][ T5110] copy_process+0x1d73/0x3fc0 [ 2137.232489][ T5110] ? copy_process+0x9c3/0x3fc0 [ 2137.237277][ T5110] ? __pfx_copy_process+0x10/0x10 [ 2137.242335][ T5110] kernel_clone+0x21d/0x8d0 [ 2137.246861][ T5110] ? __pfx_kernel_clone+0x10/0x10 [ 2137.251928][ T5110] __x64_sys_clone+0x258/0x2a0 [ 2137.256781][ T5110] ? __pfx___x64_sys_clone+0x10/0x10 [ 2137.262092][ T5110] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2137.268117][ T5110] ? exc_page_fault+0x587/0x870 [ 2137.272998][ T5110] ? do_syscall_64+0xb4/0x240 [ 2137.277706][ T5110] do_syscall_64+0xf9/0x240 [ 2137.282239][ T5110] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2137.288156][ T5110] RIP: 0033:0x7f810c87add3 [ 2137.292594][ T5110] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 2137.312231][ T5110] RSP: 002b:00007f810cacfc58 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2137.320668][ T5110] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f810c87add3 [ 2137.328673][ T5110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2137.336670][ T5110] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2137.344663][ T5110] R10: 0000555555634750 R11: 0000000000000246 R12: 0000000000000000 [ 2137.352664][ T5110] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 2137.360682][ T5110] [ 2137.363742][ C0] vkms_vblank_simulate: vblank timer overrun 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6000000}, 0x0) [ 2137.386534][ T5103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2137.396817][ T5103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2137.408511][ T5103] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2137.417788][ T5103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2137.434585][ T5103] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2137.457782][ T5110] memory: usage 307180kB, limit 307200kB, failcnt 74141 [ 2137.465711][ T5103] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2137.478914][ T5110] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 2137.489391][ T5110] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 2137.496829][ T5110] Memory cgroup stats for /syz4: [ 2137.497078][ T5110] cache 0 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x7000000}, 0x0) [ 2137.507357][ T5110] rss 61440 [ 2137.510491][ T5110] rss_huge 0 [ 2137.517303][ T5110] shmem 0 [ 2137.520271][ T5110] mapped_file 0 [ 2137.536787][ T5110] dirty 0 [ 2137.539763][ T5110] writeback 0 [ 2137.544919][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.595988][ T5110] workingset_refault_anon 27748 [ 2137.606178][ T5110] workingset_refault_file 333 [ 2137.611198][ T5110] swap 393216 [ 2137.629615][ T5110] swapcached 0 [ 2137.640997][ T5110] pgpgin 301208 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x8000000}, 0x0) [ 2137.645044][ T5110] pgpgout 301193 [ 2137.671329][ T5110] pgfault 592616 [ 2137.677382][ T5110] pgmajfault 26825 [ 2137.681193][ T5110] inactive_anon 8192 [ 2137.691566][ T5110] active_anon 53248 [ 2137.695403][ T5110] inactive_file 0 [ 2137.699044][ T5110] active_file 0 [ 2137.721620][ T5110] unevictable 0 [ 2137.725112][ T5110] hierarchical_memory_limit 314572800 [ 2137.730491][ T5110] hierarchical_memsw_limit 9223372036854771712 [ 2137.745908][ T5110] total_cache 0 [ 2137.749844][ T5110] total_rss 61440 [ 2137.755048][ T5110] total_rss_huge 0 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x9000000}, 0x0) [ 2137.774397][ T5110] total_shmem 0 [ 2137.791730][ T5110] total_mapped_file 0 [ 2137.795804][ T5110] total_dirty 0 [ 2137.799282][ T5110] total_writeback 0 [ 2137.812569][ T5110] total_workingset_refault_anon 27748 [ 2137.818579][ T5110] total_workingset_refault_file 333 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xa000000}, 0x0) [ 2137.840793][ T5110] total_swap 393216 [ 2137.853062][ T5110] total_swapcached 0 [ 2137.871676][ T5110] total_pgpgin 301208 [ 2137.875692][ T5110] total_pgpgout 301193 [ 2137.879781][ T5110] total_pgfault 592616 [ 2137.884258][ T5110] total_pgmajfault 26825 [ 2137.888557][ T5110] total_inactive_anon 8192 [ 2137.916165][ T5110] total_active_anon 53248 [ 2137.920652][ T5110] total_inactive_file 0 [ 2137.931637][ T5110] total_active_file 0 [ 2137.941162][ T5110] total_unevictable 0 [ 2137.945584][ T5110] anon_cost 0 [ 2137.948978][ T5110] file_cost 0 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xb000000}, 0x0) [ 2137.957583][ T5110] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=28380,uid=0 [ 2137.997845][ T5110] Memory cgroup out of memory: Killed process 28380 (syz-executor.4) total-vm:50668kB, anon-rss:392kB, file-rss:8320kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xc000000}, 0x0) [ 2138.128344][T23926] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2138.151779][T23926] CPU: 1 PID: 23926 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2138.162276][T23926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2138.172349][T23926] Call Trace: [ 2138.175638][T23926] [ 2138.178565][T23926] dump_stack_lvl+0x1e7/0x2e0 [ 2138.183251][T23926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2138.188460][T23926] ? __pfx__printk+0x10/0x10 [ 2138.193048][T23926] ? ___ratelimit+0x4c4/0x670 [ 2138.197729][T23926] ? __pfx____ratelimit+0x10/0x10 [ 2138.202751][T23926] dump_header+0xda/0x6a0 [ 2138.207083][T23926] oom_kill_process+0x3a7/0x930 [ 2138.211934][T23926] out_of_memory+0xf67/0x1320 [ 2138.216610][T23926] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2138.222240][T23926] ? __pfx___mutex_lock+0x10/0x10 [ 2138.227267][T23926] ? __pfx_out_of_memory+0x10/0x10 [ 2138.232385][T23926] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2138.237927][T23926] ? __pfx_lock_release+0x10/0x10 [ 2138.242952][T23926] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2138.249016][T23926] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2138.254209][T23926] ? mem_cgroup_iter+0x3e9/0x560 [ 2138.259163][T23926] try_charge_memcg+0xda2/0x18a0 [ 2138.264134][T23926] ? __pfx_try_charge_memcg+0x10/0x10 [ 2138.269527][T23926] ? percpu_ref_tryget+0x14/0x180 [ 2138.274575][T23926] charge_memcg+0xa2/0x160 [ 2138.278997][T23926] __mem_cgroup_charge+0x27/0x80 [ 2138.283939][T23926] folio_prealloc+0x52/0x170 [ 2138.288538][T23926] do_wp_page+0x1222/0x4c90 [ 2138.293073][T23926] ? __pfx_do_wp_page+0x10/0x10 [ 2138.297945][T23926] ? __pfx_lock_acquire+0x10/0x10 [ 2138.303039][T23926] ? do_raw_spin_lock+0x14e/0x370 [ 2138.308087][T23926] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2138.313296][T23926] __handle_mm_fault+0x26ad/0x72d0 [ 2138.318430][T23926] ? reacquire_held_locks+0x3eb/0x690 [ 2138.323799][T23926] ? __pfx___handle_mm_fault+0x10/0x10 [ 2138.329285][T23926] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2138.335027][T23926] ? mtree_range_walk+0x6fd/0x8e0 [ 2138.340065][T23926] ? lock_vma_under_rcu+0x18a/0x730 [ 2138.345270][T23926] ? __pfx_lock_release+0x10/0x10 [ 2138.350296][T23926] ? lock_vma_under_rcu+0x2f9/0x730 [ 2138.355518][T23926] ? lock_vma_under_rcu+0x18a/0x730 [ 2138.360713][T23926] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2138.366259][T23926] handle_mm_fault+0x3c1/0x8a0 [ 2138.371037][T23926] exc_page_fault+0x456/0x870 [ 2138.375717][T23926] asm_exc_page_fault+0x26/0x30 [ 2138.380568][T23926] RIP: 0033:0x7f810c839c40 [ 2138.384981][T23926] Code: 89 1c 24 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 89 c5 e9 7f fe ff ff 0f 1f 84 00 00 00 00 00 <43> 89 2c 8e e9 a5 fe ff ff 0f 1f 80 00 00 00 00 48 39 c3 74 99 48 [ 2138.404579][T23926] RSP: 002b:00007f810cacfa60 EFLAGS: 00010246 [ 2138.410643][T23926] RAX: 000000008933a913 RBX: 00007f810c9ac018 RCX: 0000000000000003 [ 2138.418645][T23926] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 00000000000168f7 02:46:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xd000000}, 0x0) [ 2138.426608][T23926] RBP: 000000008933a913 R08: 0000001b32120000 R09: 0000000000000913 [ 2138.434576][T23926] R10: 000000008933a917 R11: 0000000000000246 R12: 0000000000000003 [ 2138.442541][T23926] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff8933a1b7 [ 2138.450508][T23926] ? __sock_create+0x27/0x920 [ 2138.455198][T23926] [ 2138.471878][T23926] memory: usage 307180kB, limit 307200kB, failcnt 74208 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xe000000}, 0x0) 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xf000000}, 0x0) [ 2138.500469][T23926] memory+swap: usage 307476kB, limit 9007199254740988kB, failcnt 0 [ 2138.533122][T23926] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 2138.540484][T23926] Memory cgroup stats for /syz4: [ 2138.540622][T23926] cache 0 [ 2138.555058][T23926] rss 122880 [ 2138.558288][T23926] rss_huge 0 [ 2138.561666][T23926] shmem 0 [ 2138.564844][T23926] mapped_file 0 [ 2138.568324][T23926] dirty 0 [ 2138.571273][T23926] writeback 0 [ 2138.589050][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x10000000}, 0x0) [ 2138.607260][T23926] workingset_refault_anon 27748 [ 2138.615756][T23926] workingset_refault_file 333 [ 2138.620498][T23926] swap 303104 [ 2138.625568][T23926] swapcached 0 [ 2138.628991][T23926] pgpgin 301223 [ 2138.638224][T23926] pgpgout 301193 [ 2138.643068][T23926] pgfault 592654 [ 2138.646682][T23926] pgmajfault 26825 [ 2138.650417][T23926] inactive_anon 8192 [ 2138.658783][T23926] active_anon 114688 [ 2138.663180][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.663239][T23926] inactive_file 0 [ 2138.691483][T23926] active_file 0 [ 2138.694982][T23926] unevictable 0 [ 2138.698451][T23926] hierarchical_memory_limit 314572800 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x11000000}, 0x0) [ 2138.705032][T23926] hierarchical_memsw_limit 9223372036854771712 [ 2138.711212][T23926] total_cache 0 [ 2138.715985][T23926] total_rss 122880 [ 2138.719817][T23926] total_rss_huge 0 [ 2138.723681][T23926] total_shmem 0 [ 2138.727372][T23926] total_mapped_file 0 [ 2138.731363][T23926] total_dirty 0 [ 2138.739725][T23926] total_writeback 0 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x12000000}, 0x0) [ 2138.762893][T23926] total_workingset_refault_anon 27748 [ 2138.768817][T23926] total_workingset_refault_file 333 [ 2138.781563][T23926] total_swap 303104 [ 2138.790141][T23926] total_swapcached 0 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x18000000}, 0x0) [ 2138.814172][T23926] total_pgpgin 301223 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x20000000}, 0x0) [ 2138.838063][T23926] total_pgpgout 301193 [ 2138.858217][T23926] total_pgfault 592654 [ 2138.863620][T23926] total_pgmajfault 26825 [ 2138.868400][T23926] total_inactive_anon 8192 [ 2138.878986][T23926] total_active_anon 114688 [ 2138.883711][T23926] total_inactive_file 0 [ 2138.887966][T23926] total_active_file 0 [ 2138.897823][T23926] total_unevictable 0 [ 2138.902844][ T5103] Bluetooth: hci5: command 0x0409 tx timeout [ 2138.906414][T23926] anon_cost 0 [ 2138.914275][T23926] file_cost 0 [ 2138.917817][T23926] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23926,uid=0 02:46:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000021140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x21000000}, 0x0) [ 2138.935747][T23926] Memory cgroup out of memory: Killed process 23926 (syz-executor.4) total-vm:54508kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x25000000}, 0x0) 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2f000000}, 0x0) 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x3a000000}, 0x0) [ 2139.049924][T23947] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2139.060846][T23947] CPU: 0 PID: 23947 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2139.071311][T23947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2139.081382][T23947] Call Trace: [ 2139.084684][T23947] [ 2139.087632][T23947] dump_stack_lvl+0x1e7/0x2e0 [ 2139.092340][T23947] ? __pfx_dump_stack_lvl+0x10/0x10 02:46:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x40000000}, 0x0) [ 2139.097569][T23947] ? __pfx__printk+0x10/0x10 [ 2139.102190][T23947] ? ___ratelimit+0x4c4/0x670 [ 2139.106897][T23947] ? __pfx____ratelimit+0x10/0x10 [ 2139.111953][T23947] dump_header+0xda/0x6a0 [ 2139.116315][T23947] oom_kill_process+0x3a7/0x930 [ 2139.121196][T23947] out_of_memory+0xf67/0x1320 [ 2139.125896][T23947] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2139.131543][T23947] ? __pfx___mutex_lock+0x10/0x10 [ 2139.136600][T23947] ? __pfx_out_of_memory+0x10/0x10 [ 2139.141746][T23947] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2139.147321][T23947] ? __pfx_lock_release+0x10/0x10 [ 2139.152374][T23947] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2139.158482][T23947] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2139.163674][ T5103] Bluetooth: hci6: command 0x0409 tx timeout [ 2139.169655][T23947] ? mem_cgroup_iter+0x3e9/0x560 [ 2139.169688][T23947] try_charge_memcg+0xda2/0x18a0 [ 2139.179738][T23947] ? __pfx_try_charge_memcg+0x10/0x10 [ 2139.185112][T23947] ? percpu_ref_tryget+0x14/0x180 [ 2139.190148][T23947] charge_memcg+0xa2/0x160 [ 2139.194563][T23947] __mem_cgroup_charge+0x27/0x80 [ 2139.199500][T23947] folio_prealloc+0x52/0x170 [ 2139.204130][T23947] do_wp_page+0x1222/0x4c90 [ 2139.208647][T23947] ? __pfx_do_wp_page+0x10/0x10 [ 2139.213499][T23947] ? __pfx_lock_acquire+0x10/0x10 [ 2139.218527][T23947] ? do_raw_spin_lock+0x14e/0x370 [ 2139.223580][T23947] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2139.228777][T23947] __handle_mm_fault+0x26ad/0x72d0 [ 2139.233908][T23947] ? reacquire_held_locks+0x3eb/0x690 [ 2139.239270][T23947] ? __pfx___handle_mm_fault+0x10/0x10 [ 2139.244731][T23947] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2139.250458][T23947] ? mtree_range_walk+0x6fd/0x8e0 [ 2139.255480][T23947] ? lock_vma_under_rcu+0x18a/0x730 [ 2139.260676][T23947] ? __pfx_lock_release+0x10/0x10 [ 2139.265698][T23947] ? lock_vma_under_rcu+0x2f9/0x730 [ 2139.270915][T23947] ? lock_vma_under_rcu+0x18a/0x730 [ 2139.276111][T23947] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2139.281655][T23947] handle_mm_fault+0x3c1/0x8a0 [ 2139.286420][T23947] exc_page_fault+0x456/0x870 [ 2139.291096][T23947] asm_exc_page_fault+0x26/0x30 [ 2139.295943][T23947] RIP: 0033:0x7f810c839c40 [ 2139.300350][T23947] Code: 89 1c 24 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 89 c5 e9 7f fe ff ff 0f 1f 84 00 00 00 00 00 <43> 89 2c 8e e9 a5 fe ff ff 0f 1f 80 00 00 00 00 48 39 c3 74 99 48 [ 2139.319962][T23947] RSP: 002b:00007f810cacfa60 EFLAGS: 00010246 [ 2139.326024][T23947] RAX: 000000008933a913 RBX: 00007f810c9ac018 RCX: 0000000000000003 [ 2139.333985][T23947] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 00000000000168f7 [ 2139.341945][T23947] RBP: 000000008933a913 R08: 0000001b32120000 R09: 0000000000000913 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x48000000}, 0x0) [ 2139.349926][T23947] R10: 000000008933a917 R11: 0000000000000246 R12: 0000000000000003 [ 2139.357916][T23947] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff8933a1b7 [ 2139.365891][T23947] ? __sock_create+0x27/0x920 [ 2139.370582][T23947] [ 2139.373708][ C0] vkms_vblank_simulate: vblank timer overrun [ 2139.386415][T23947] memory: usage 307200kB, limit 307200kB, failcnt 74292 [ 2139.393553][T23947] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4c000000}, 0x0) [ 2139.414366][T23947] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 2139.425334][T23947] Memory cgroup stats for /syz4: [ 2139.425480][T23947] cache 0 [ 2139.437506][T23947] rss 102400 [ 2139.440732][T23947] rss_huge 0 [ 2139.448528][T23947] shmem 0 [ 2139.452858][T23947] mapped_file 0 [ 2139.456338][T23947] dirty 0 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x60000000}, 0x0) [ 2139.470171][T23947] writeback 0 [ 2139.474177][T23947] workingset_refault_anon 27748 [ 2139.479161][T23947] workingset_refault_file 333 [ 2139.485837][T23947] swap 303104 [ 2139.489252][T23947] swapcached 0 [ 2139.496844][T23947] pgpgin 301234 [ 2139.500328][T23947] pgpgout 301209 [ 2139.506387][T23947] pgfault 592694 [ 2139.509986][T23947] pgmajfault 26825 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x64000000}, 0x0) [ 2139.517214][T23947] inactive_anon 0 [ 2139.520907][T23947] active_anon 102400 [ 2139.525715][T23947] inactive_file 0 [ 2139.540480][T23947] active_file 0 [ 2139.544117][ T5103] Bluetooth: hci7: command 0x0409 tx timeout [ 2139.550440][T23947] unevictable 0 [ 2139.555748][T23947] hierarchical_memory_limit 314572800 [ 2139.561141][T23947] hierarchical_memsw_limit 9223372036854771712 [ 2139.569158][T23947] total_cache 0 [ 2139.574663][T23947] total_rss 102400 [ 2139.578400][T23947] total_rss_huge 0 [ 2139.587072][T23947] total_shmem 0 [ 2139.590555][T23947] total_mapped_file 0 [ 2139.599375][T23947] total_dirty 0 [ 2139.608258][T23947] total_writeback 0 [ 2139.612518][T23947] total_workingset_refault_anon 27748 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x65580000}, 0x0) [ 2139.617906][T23947] total_workingset_refault_file 333 [ 2139.625312][T23947] total_swap 303104 [ 2139.629140][T23947] total_swapcached 0 [ 2139.633630][T23947] total_pgpgin 301234 [ 2139.637659][T23947] total_pgpgout 301209 [ 2139.644418][T23947] total_pgfault 592694 [ 2139.648613][T23947] total_pgmajfault 26825 [ 2139.649145][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2139.654998][T23947] total_inactive_anon 0 [ 2139.665922][T23947] total_active_anon 102400 [ 2139.670387][T23947] total_inactive_file 0 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x68000000}, 0x0) [ 2139.699716][T23947] total_active_file 0 [ 2139.707693][T23947] total_unevictable 0 [ 2139.719915][T23947] anon_cost 0 [ 2139.723575][T23947] file_cost 0 [ 2139.726887][T23947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23947,uid=0 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6c000000}, 0x0) 02:46:23 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000025140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2139.747490][T23947] Memory cgroup out of memory: Killed process 23947 (syz-executor.4) total-vm:54508kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x74000000}, 0x0) [ 2139.851126][T23972] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2139.862240][T23972] CPU: 0 PID: 23972 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2139.872683][T23972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2139.882752][T23972] Call Trace: [ 2139.886029][T23972] [ 2139.888954][T23972] dump_stack_lvl+0x1e7/0x2e0 [ 2139.893636][T23972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2139.898829][T23972] ? __pfx__printk+0x10/0x10 [ 2139.903413][T23972] ? ___ratelimit+0x4c4/0x670 [ 2139.908091][T23972] ? __pfx____ratelimit+0x10/0x10 [ 2139.913113][T23972] dump_header+0xda/0x6a0 [ 2139.917446][T23972] oom_kill_process+0x3a7/0x930 [ 2139.922294][T23972] out_of_memory+0xf67/0x1320 [ 2139.926971][T23972] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2139.932603][T23972] ? __pfx___mutex_lock+0x10/0x10 [ 2139.937629][T23972] ? __pfx_out_of_memory+0x10/0x10 [ 2139.942741][T23972] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2139.948282][T23972] ? __pfx_lock_release+0x10/0x10 [ 2139.953303][T23972] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2139.959366][T23972] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2139.964560][T23972] ? mem_cgroup_iter+0x3e9/0x560 [ 2139.969495][T23972] try_charge_memcg+0xda2/0x18a0 [ 2139.974450][T23972] ? __pfx_try_charge_memcg+0x10/0x10 [ 2139.979819][T23972] ? percpu_ref_tryget+0x14/0x180 [ 2139.984859][T23972] charge_memcg+0xa2/0x160 [ 2139.989275][T23972] __mem_cgroup_charge+0x27/0x80 [ 2139.994211][T23972] folio_prealloc+0x52/0x170 [ 2139.998797][T23972] do_wp_page+0x1222/0x4c90 [ 2140.003308][T23972] ? __pfx_do_wp_page+0x10/0x10 [ 2140.008155][T23972] ? __pfx_lock_acquire+0x10/0x10 [ 2140.013214][T23972] ? do_raw_spin_lock+0x14e/0x370 [ 2140.018242][T23972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2140.024600][T23972] __handle_mm_fault+0x26ad/0x72d0 [ 2140.029726][T23972] ? reacquire_held_locks+0x3eb/0x690 [ 2140.035098][T23972] ? __pfx___handle_mm_fault+0x10/0x10 [ 2140.040559][T23972] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2140.046283][T23972] ? mtree_range_walk+0x6fd/0x8e0 [ 2140.051301][T23972] ? lock_vma_under_rcu+0x18a/0x730 [ 2140.056493][T23972] ? __pfx_lock_release+0x10/0x10 [ 2140.061518][T23972] ? lock_vma_under_rcu+0x2f9/0x730 [ 2140.066738][T23972] ? lock_vma_under_rcu+0x18a/0x730 [ 2140.071933][T23972] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2140.077474][T23972] handle_mm_fault+0x3c1/0x8a0 [ 2140.082240][T23972] exc_page_fault+0x456/0x870 [ 2140.086918][T23972] asm_exc_page_fault+0x26/0x30 [ 2140.091766][T23972] RIP: 0033:0x7f810c837543 [ 2140.096173][T23972] Code: 8b 4c 24 40 c6 40 20 01 89 48 24 8b 4c 24 4c 44 89 68 28 44 89 50 2c 89 48 78 40 88 7c 1a 04 8b 5c 24 44 4c 89 3d 2d 4a 17 00 <89> 98 80 00 00 00 0f 1f 80 00 00 00 00 48 8b 94 2c a0 01 00 00 48 [ 2140.115783][T23972] RSP: 002b:00007f810cacfb30 EFLAGS: 00010246 [ 2140.121877][T23972] RAX: 00007f810c9abf80 RBX: 0000000000000000 RCX: 0000000000000000 [ 2140.129864][T23972] RDX: 00007f810c9abff8 RSI: 00007f810c9abf88 RDI: 0000000000000000 [ 2140.137851][T23972] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f810c9abf8c [ 2140.145846][T23972] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f810c9abf80 [ 2140.153830][T23972] R13: 0000000000000f91 R14: 0000000000000000 R15: 00007f810c9abf80 [ 2140.161822][T23972] [ 2140.164896][ C0] vkms_vblank_simulate: vblank timer overrun 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x7a000000}, 0x0) 02:46:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x81000000}, 0x0) [ 2140.228993][T23972] memory: usage 307180kB, limit 307200kB, failcnt 74351 [ 2140.241634][T23972] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 2140.249660][T23972] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 2140.259575][T23972] Memory cgroup stats for /syz4: [ 2140.259712][T23972] cache 0 [ 2140.268076][T23972] rss 102400 [ 2140.272366][T23972] rss_huge 0 [ 2140.275586][T23972] shmem 0 [ 2140.278561][T23972] mapped_file 0 [ 2140.282074][T23972] dirty 0 [ 2140.285023][T23972] writeback 0 [ 2140.288340][T23972] workingset_refault_anon 27748 [ 2140.296579][T23972] workingset_refault_file 333 [ 2140.301277][T23972] swap 303104 [ 2140.304705][T23972] swapcached 0 [ 2140.308096][T23972] pgpgin 301250 [ 2140.311687][T23972] pgpgout 301225 [ 2140.315297][T23972] pgfault 592742 [ 2140.318886][T23972] pgmajfault 26825 [ 2140.322702][T23972] inactive_anon 0 [ 2140.327922][T23972] active_anon 102400 [ 2140.334833][T23972] inactive_file 0 [ 2140.338522][T23972] active_file 0 [ 2140.342144][T23972] unevictable 0 [ 2140.345618][T23972] hierarchical_memory_limit 314572800 [ 2140.356568][T23972] hierarchical_memsw_limit 9223372036854771712 [ 2140.362834][T23972] total_cache 0 [ 2140.366333][T23972] total_rss 102400 [ 2140.370066][T23972] total_rss_huge 0 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x88470000}, 0x0) [ 2140.381269][T23972] total_shmem 0 [ 2140.384812][T23972] total_mapped_file 0 [ 2140.389047][T23972] total_dirty 0 [ 2140.397910][T23972] total_writeback 0 [ 2140.403922][T23972] total_workingset_refault_anon 27748 [ 2140.409342][T23972] total_workingset_refault_file 333 [ 2140.424212][T23972] total_swap 303104 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x88480000}, 0x0) [ 2140.428287][T23972] total_swapcached 0 [ 2140.434518][T23972] total_pgpgin 301250 [ 2140.438524][T23972] total_pgpgout 301225 [ 2140.443370][T23972] total_pgfault 592742 [ 2140.447572][T23972] total_pgmajfault 26825 [ 2140.460988][T23972] total_inactive_anon 0 [ 2140.470611][T23972] total_active_anon 102400 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x88a8ffff}, 0x0) [ 2140.479123][T23972] total_inactive_file 0 [ 2140.484021][T23972] total_active_file 0 [ 2140.488713][T23972] total_unevictable 0 [ 2140.516884][T23972] anon_cost 0 [ 2140.520337][T23972] file_cost 0 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xbe2b0000}, 0x0) 02:46:24 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000002f140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2140.525657][T23972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23972,uid=0 [ 2140.548672][T23972] Memory cgroup out of memory: Killed process 23972 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xc33d0000}, 0x0) [ 2140.657202][T23988] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2140.674854][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2140.688389][T23988] CPU: 1 PID: 23988 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 2140.698855][T23988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2140.708933][T23988] Call Trace: [ 2140.712231][T23988] [ 2140.715177][T23988] dump_stack_lvl+0x1e7/0x2e0 [ 2140.719886][T23988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2140.725109][T23988] ? __pfx__printk+0x10/0x10 [ 2140.729724][T23988] ? ___ratelimit+0x4c4/0x670 [ 2140.734435][T23988] ? __pfx____ratelimit+0x10/0x10 [ 2140.739483][T23988] dump_header+0xda/0x6a0 [ 2140.743843][T23988] oom_kill_process+0x3a7/0x930 [ 2140.748726][T23988] out_of_memory+0xf67/0x1320 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xff7f0000}, 0x0) [ 2140.753438][T23988] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2140.759093][T23988] ? __pfx___mutex_lock+0x10/0x10 [ 2140.764148][T23988] ? __pfx_out_of_memory+0x10/0x10 [ 2140.769304][T23988] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2140.774873][T23988] ? __pfx_lock_release+0x10/0x10 [ 2140.779923][T23988] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2140.786019][T23988] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2140.791240][T23988] ? mem_cgroup_iter+0x3e9/0x560 [ 2140.796205][T23988] try_charge_memcg+0xda2/0x18a0 [ 2140.801191][T23988] ? __pfx_try_charge_memcg+0x10/0x10 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xffffa888}, 0x0) [ 2140.806583][T23988] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2140.812321][T23988] ? __pfx_lock_release+0x10/0x10 [ 2140.817372][T23988] ? memcg_account_kmem+0x1e7/0x210 [ 2140.822606][T23988] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2140.828430][T23988] __memcg_kmem_charge_page+0xe1/0x250 [ 2140.833909][T23988] memcg_charge_kernel_stack+0x28a/0x550 [ 2140.839568][T23988] dup_task_struct+0x15d/0x7d0 [ 2140.844360][T23988] copy_process+0x5d5/0x3fc0 [ 2140.848983][T23988] ? __might_fault+0xa9/0x120 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xffffff7f}, 0x0) 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 2140.853680][T23988] ? __pfx_lock_release+0x10/0x10 [ 2140.858746][T23988] ? __pfx_copy_process+0x10/0x10 [ 2140.863789][T23988] ? __might_fault+0xc5/0x120 [ 2140.868499][T23988] ? __asan_memset+0x23/0x50 [ 2140.873123][T23988] kernel_clone+0x21d/0x8d0 [ 2140.877672][T23988] ? __pfx_kernel_clone+0x10/0x10 [ 2140.882749][T23988] __se_sys_clone3+0x2cb/0x350 [ 2140.887540][T23988] ? __pfx___se_sys_clone3+0x10/0x10 [ 2140.892897][T23988] ? do_syscall_64+0x108/0x240 [ 2140.897695][T23988] ? do_syscall_64+0xb4/0x240 [ 2140.902401][T23988] do_syscall_64+0xf9/0x240 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 2140.906929][T23988] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2140.912846][T23988] RIP: 0033:0x7f810c8a9b99 [ 2140.917279][T23988] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2140.936907][T23988] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2140.945345][T23988] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 2140.953339][T23988] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2140.961332][T23988] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2140.969327][T23988] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2140.977322][T23988] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2140.985335][T23988] [ 2140.994628][ T5099] Bluetooth: hci5: command 0x041b tx timeout [ 2140.998418][T23988] memory: usage 307200kB, limit 307200kB, failcnt 74429 [ 2141.010182][T23988] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2141.040095][T23988] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x300000000000000}, 0x0) 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 2141.057392][T23988] Memory cgroup stats for /syz4: [ 2141.057517][T23988] cache 0 [ 2141.079531][T23988] rss 102400 [ 2141.085471][T23988] rss_huge 0 [ 2141.094127][T23988] shmem 0 [ 2141.101125][T23988] mapped_file 0 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 2141.108580][T23988] dirty 0 [ 2141.128843][T23988] writeback 0 [ 2141.135862][T23988] workingset_refault_anon 27748 [ 2141.141099][T23988] workingset_refault_file 333 [ 2141.147842][T23988] swap 303104 [ 2141.151223][T23988] swapcached 0 [ 2141.159610][T23988] pgpgin 301261 [ 2141.164617][T23988] pgpgout 301236 [ 2141.168277][T23988] pgfault 592782 [ 2141.176653][T23988] pgmajfault 26825 [ 2141.180497][T23988] inactive_anon 0 [ 2141.186175][T23988] active_anon 102400 [ 2141.190188][T23988] inactive_file 0 [ 2141.203267][T23988] active_file 0 [ 2141.206844][T23988] unevictable 0 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 2141.210393][T23988] hierarchical_memory_limit 314572800 [ 2141.218919][T23988] hierarchical_memsw_limit 9223372036854771712 [ 2141.225469][ T5099] Bluetooth: hci6: command 0x041b tx timeout [ 2141.231999][T23988] total_cache 0 [ 2141.235570][T23988] total_rss 102400 [ 2141.239398][T23988] total_rss_huge 0 [ 2141.243711][T23988] total_shmem 0 [ 2141.247261][T23988] total_mapped_file 0 [ 2141.251343][T23988] total_dirty 0 [ 2141.255483][T23988] total_writeback 0 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 2141.259396][T23988] total_workingset_refault_anon 27748 [ 2141.273213][T23988] total_workingset_refault_file 333 [ 2141.278539][T23988] total_swap 303104 [ 2141.283093][T23988] total_swapcached 0 [ 2141.297349][T23988] total_pgpgin 301261 02:46:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x800000000000000}, 0x0) [ 2141.311787][T23988] total_pgpgout 301236 [ 2141.321671][T23988] total_pgfault 592782 [ 2141.330596][T23988] total_pgmajfault 26825 [ 2141.340751][T23988] total_inactive_anon 0 [ 2141.345906][T23988] total_active_anon 102400 [ 2141.352096][T23988] total_inactive_file 0 [ 2141.356311][T23988] total_active_file 0 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 2141.370790][T23988] total_unevictable 0 [ 2141.384734][T23988] anon_cost 0 [ 2141.395344][T23988] file_cost 0 [ 2141.404533][T23988] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23988,uid=0 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xa00000000000000}, 0x0) 02:46:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000032140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2141.431243][T23988] Memory cgroup out of memory: Killed process 23988 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xb00000000000000}, 0x0) [ 2141.548717][T24022] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2141.559281][T24022] CPU: 1 PID: 24022 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2141.569734][T24022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2141.579788][T24022] Call Trace: [ 2141.583063][T24022] [ 2141.585989][T24022] dump_stack_lvl+0x1e7/0x2e0 [ 2141.590675][T24022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2141.595874][T24022] ? __pfx__printk+0x10/0x10 [ 2141.600457][T24022] ? ___ratelimit+0x4c4/0x670 [ 2141.605144][T24022] ? __pfx____ratelimit+0x10/0x10 [ 2141.610169][T24022] dump_header+0xda/0x6a0 [ 2141.614501][T24022] oom_kill_process+0x3a7/0x930 [ 2141.619364][T24022] out_of_memory+0xf67/0x1320 [ 2141.624041][T24022] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2141.629666][T24022] ? __pfx___mutex_lock+0x10/0x10 [ 2141.634697][T24022] ? __pfx_out_of_memory+0x10/0x10 [ 2141.639835][T24022] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2141.645398][T24022] ? __pfx_lock_release+0x10/0x10 [ 2141.650443][T24022] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2141.656517][T24022] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2141.661720][T24022] ? mem_cgroup_iter+0x3e9/0x560 [ 2141.666660][T24022] try_charge_memcg+0xda2/0x18a0 [ 2141.671622][T24022] ? __pfx_try_charge_memcg+0x10/0x10 [ 2141.677020][T24022] ? percpu_ref_tryget+0x14/0x180 [ 2141.682067][T24022] charge_memcg+0xa2/0x160 [ 2141.686482][T24022] __mem_cgroup_charge+0x27/0x80 [ 2141.691424][T24022] folio_prealloc+0x52/0x170 [ 2141.696015][T24022] do_wp_page+0x1222/0x4c90 [ 2141.700525][T24022] ? __pfx_do_wp_page+0x10/0x10 [ 2141.705378][T24022] ? __pfx_lock_acquire+0x10/0x10 [ 2141.710409][T24022] ? do_raw_spin_lock+0x14e/0x370 [ 2141.715436][T24022] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2141.721330][T24022] __handle_mm_fault+0x26ad/0x72d0 [ 2141.726459][T24022] ? reacquire_held_locks+0x3eb/0x690 [ 2141.731825][T24022] ? __pfx___handle_mm_fault+0x10/0x10 [ 2141.737288][T24022] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2141.743013][T24022] ? mtree_range_walk+0x6fd/0x8e0 [ 2141.748034][T24022] ? lock_vma_under_rcu+0x18a/0x730 [ 2141.753237][T24022] ? __pfx_lock_release+0x10/0x10 [ 2141.758265][T24022] ? lock_vma_under_rcu+0x2f9/0x730 [ 2141.763477][T24022] ? lock_vma_under_rcu+0x18a/0x730 [ 2141.768670][T24022] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2141.774218][T24022] handle_mm_fault+0x3c1/0x8a0 [ 2141.778984][T24022] exc_page_fault+0x456/0x870 [ 2141.783666][T24022] asm_exc_page_fault+0x26/0x30 [ 2141.788546][T24022] RIP: 0033:0x7f810c8375a7 [ 2141.792956][T24022] Code: 08 85 c9 0f 85 6c 0b 00 00 4c 89 4c 24 60 31 c0 b9 40 42 0f 00 ba 81 00 00 00 bf ca 00 00 00 c7 06 01 00 00 00 e8 e9 67 04 00 <83> 05 da 63 17 00 01 4c 8b 4c 24 60 80 bc 24 28 01 00 00 00 0f b6 [ 2141.812555][T24022] RSP: 002b:00007f810cacfb30 EFLAGS: 00010207 [ 2141.818616][T24022] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007f810c87dda9 [ 2141.826579][T24022] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f810c9abf88 [ 2141.834544][T24022] RBP: 0000000000000048 R08: 00007f810c9abf8c R09: 00007f810c9abf8c [ 2141.842508][T24022] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f810c9abf80 [ 2141.850477][T24022] R13: 0000000000000f91 R14: 0000000000000000 R15: 00007f810c9abf80 [ 2141.858453][T24022] [ 2141.865669][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.873875][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.882738][T24022] memory: usage 307200kB, limit 307200kB, failcnt 74534 [ 2141.889723][T24022] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xc00000000000000}, 0x0) [ 2141.891696][ T5099] Bluetooth: hci7: command 0x041b tx timeout [ 2141.904400][T24022] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 2141.915983][T24022] Memory cgroup stats for /syz4: [ 2141.916237][T24022] cache 0 [ 2141.924641][T24022] rss 102400 [ 2141.931110][T24022] rss_huge 0 [ 2141.934972][T24022] shmem 0 [ 2141.938088][T24022] mapped_file 0 [ 2141.946163][T24022] dirty 0 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xd00000000000000}, 0x0) [ 2141.949272][T24022] writeback 0 [ 2141.953419][T24022] workingset_refault_anon 27748 [ 2141.958458][T24022] workingset_refault_file 333 [ 2141.968012][T24022] swap 303104 [ 2141.974884][T24022] swapcached 0 [ 2141.978406][T24022] pgpgin 301271 [ 2141.992286][T24022] pgpgout 301246 [ 2141.995967][T24022] pgfault 592821 [ 2141.999611][T24022] pgmajfault 26825 [ 2142.009694][T24022] inactive_anon 0 [ 2142.014576][T24022] active_anon 81920 [ 2142.023911][T24022] inactive_file 0 [ 2142.027644][T24022] active_file 0 [ 2142.031211][T24022] unevictable 0 [ 2142.035130][T24022] hierarchical_memory_limit 314572800 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xe00000000000000}, 0x0) [ 2142.056513][T24022] hierarchical_memsw_limit 9223372036854771712 [ 2142.070669][T24022] total_cache 0 [ 2142.087879][T24022] total_rss 102400 [ 2142.092937][T24022] total_rss_huge 0 [ 2142.096769][T24022] total_shmem 0 [ 2142.100364][T24022] total_mapped_file 0 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 2142.109904][T24022] total_dirty 0 [ 2142.120804][T24022] total_writeback 0 [ 2142.129394][T24022] total_workingset_refault_anon 27748 [ 2142.139938][T24022] total_workingset_refault_file 333 [ 2142.148024][T24022] total_swap 303104 [ 2142.154094][T24022] total_swapcached 0 [ 2142.158054][T24022] total_pgpgin 301271 [ 2142.166652][T24022] total_pgpgout 301246 [ 2142.170845][T24022] total_pgfault 592821 [ 2142.176455][T24022] total_pgmajfault 26825 [ 2142.180791][T24022] total_inactive_anon 0 [ 2142.197872][T24022] total_active_anon 81920 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x1000000000000000}, 0x0) [ 2142.206937][T24022] total_inactive_file 0 [ 2142.211193][T24022] total_active_file 0 [ 2142.217085][T24022] total_unevictable 0 [ 2142.226103][T24022] anon_cost 0 [ 2142.230648][T24022] file_cost 0 [ 2142.235399][T24022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24022,uid=0 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x1100000000000000}, 0x0) 02:46:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000003a140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2142.257649][T24022] Memory cgroup out of memory: Killed process 24022 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x1200000000000000}, 0x0) [ 2142.396704][T24038] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2142.409537][T24038] CPU: 0 PID: 24038 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2142.419986][T24038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2142.430080][T24038] Call Trace: [ 2142.433378][T24038] [ 2142.436319][T24038] dump_stack_lvl+0x1e7/0x2e0 [ 2142.441025][T24038] ? __pfx_dump_stack_lvl+0x10/0x10 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x1800000000000000}, 0x0) 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2000000000000000}, 0x0) 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2100000000000000}, 0x0) [ 2142.446253][T24038] ? __pfx__printk+0x10/0x10 [ 2142.450866][T24038] ? ___ratelimit+0x4c4/0x670 [ 2142.455569][T24038] ? __pfx____ratelimit+0x10/0x10 [ 2142.460619][T24038] dump_header+0xda/0x6a0 [ 2142.464984][T24038] oom_kill_process+0x3a7/0x930 [ 2142.469865][T24038] out_of_memory+0xf67/0x1320 [ 2142.474567][T24038] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2142.480222][T24038] ? __pfx___mutex_lock+0x10/0x10 [ 2142.485280][T24038] ? __pfx_out_of_memory+0x10/0x10 [ 2142.490424][T24038] mem_cgroup_out_of_memory+0x263/0x3b0 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2500000000000000}, 0x0) [ 2142.495982][T24038] ? __pfx_lock_release+0x10/0x10 [ 2142.501037][T24038] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2142.507138][T24038] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2142.512365][T24038] ? mem_cgroup_iter+0x3e9/0x560 [ 2142.517334][T24038] try_charge_memcg+0xda2/0x18a0 [ 2142.522320][T24038] ? __pfx_try_charge_memcg+0x10/0x10 [ 2142.527718][T24038] ? percpu_ref_tryget+0x14/0x180 [ 2142.532788][T24038] charge_memcg+0xa2/0x160 [ 2142.537238][T24038] __mem_cgroup_charge+0x27/0x80 [ 2142.542202][T24038] folio_prealloc+0x52/0x170 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x2f00000000000000}, 0x0) 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x3a00000000000000}, 0x0) [ 2142.546816][T24038] do_wp_page+0x1222/0x4c90 [ 2142.551364][T24038] ? __pfx_do_wp_page+0x10/0x10 [ 2142.556242][T24038] ? __pfx_lock_acquire+0x10/0x10 [ 2142.561297][T24038] ? do_raw_spin_lock+0x14e/0x370 [ 2142.566366][T24038] __handle_mm_fault+0x26ad/0x72d0 [ 2142.571530][T24038] ? reacquire_held_locks+0x3eb/0x690 [ 2142.576922][T24038] ? __pfx___handle_mm_fault+0x10/0x10 [ 2142.582422][T24038] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2142.588185][T24038] ? mtree_range_walk+0x6fd/0x8e0 [ 2142.593233][T24038] ? lock_vma_under_rcu+0x18a/0x730 [ 2142.598456][T24038] ? __pfx_lock_release+0x10/0x10 [ 2142.603506][T24038] ? lock_vma_under_rcu+0x2f9/0x730 [ 2142.608746][T24038] ? lock_vma_under_rcu+0x18a/0x730 [ 2142.613966][T24038] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2142.619525][T24038] handle_mm_fault+0x3c1/0x8a0 [ 2142.624285][T24038] exc_page_fault+0x456/0x870 [ 2142.628960][T24038] asm_exc_page_fault+0x26/0x30 [ 2142.633802][T24038] RIP: 0033:0x7f810c8375a7 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4000000000000000}, 0x0) 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4800000000000000}, 0x0) [ 2142.638218][T24038] Code: 08 85 c9 0f 85 6c 0b 00 00 4c 89 4c 24 60 31 c0 b9 40 42 0f 00 ba 81 00 00 00 bf ca 00 00 00 c7 06 01 00 00 00 e8 e9 67 04 00 <83> 05 da 63 17 00 01 4c 8b 4c 24 60 80 bc 24 28 01 00 00 00 0f b6 [ 2142.657843][T24038] RSP: 002b:00007f810cacfb30 EFLAGS: 00010217 [ 2142.663932][T24038] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f810c87dda9 [ 2142.671920][T24038] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f810c9abf88 [ 2142.679916][T24038] RBP: 0000000000000048 R08: 00007f810c9abf8c R09: 00007f810c9abf8c [ 2142.687909][T24038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f810c9abf80 [ 2142.695897][T24038] R13: 0000000000000f91 R14: 0000000000000000 R15: 00007f810c9abf80 [ 2142.703905][T24038] [ 2142.707018][ C0] vkms_vblank_simulate: vblank timer overrun 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x4c00000000000000}, 0x0) [ 2142.747265][T24038] memory: usage 307184kB, limit 307200kB, failcnt 74640 [ 2142.770543][T24038] memory+swap: usage 307476kB, limit 9007199254740988kB, failcnt 0 [ 2142.779341][T24038] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 2142.793368][T24038] Memory cgroup stats for /syz4: [ 2142.793553][T24038] cache 0 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 2142.824964][T24038] rss 106496 [ 2142.828214][T24038] rss_huge 0 [ 2142.836262][T24038] shmem 0 [ 2142.839230][T24038] mapped_file 0 [ 2142.847172][T24038] dirty 0 [ 2142.850382][T24038] writeback 0 [ 2142.855209][T24038] workingset_refault_anon 27748 [ 2142.860076][T24038] workingset_refault_file 333 [ 2142.870072][T24038] swap 303104 [ 2142.874421][T24038] swapcached 0 [ 2142.877839][T24038] pgpgin 301284 [ 2142.881337][T24038] pgpgout 301258 [ 2142.890005][T24038] pgfault 592863 [ 2142.895492][T24038] pgmajfault 26825 [ 2142.899406][T24038] inactive_anon 0 [ 2142.908178][T24038] active_anon 106496 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6400000000000000}, 0x0) [ 2142.918590][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.930031][T24038] inactive_file 0 [ 2142.949618][T24038] active_file 0 [ 2142.953832][T24038] unevictable 0 [ 2142.957688][T24038] hierarchical_memory_limit 314572800 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6558000000000000}, 0x0) [ 2142.982180][T24038] hierarchical_memsw_limit 9223372036854771712 [ 2143.001453][T24038] total_cache 0 [ 2143.008578][T24038] total_rss 106496 [ 2143.018992][T24038] total_rss_huge 0 [ 2143.023888][T24038] total_shmem 0 [ 2143.027366][T24038] total_mapped_file 0 [ 2143.031358][T24038] total_dirty 0 [ 2143.040415][T24038] total_writeback 0 [ 2143.044855][T24038] total_workingset_refault_anon 27748 [ 2143.050296][T24038] total_workingset_refault_file 333 [ 2143.061719][ T5099] Bluetooth: hci5: command 0x040f tx timeout 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6800000000000000}, 0x0) 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x6c00000000000000}, 0x0) [ 2143.089678][T24038] total_swap 303104 [ 2143.098107][T24038] total_swapcached 0 [ 2143.118620][T24038] total_pgpgin 301284 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x7400000000000000}, 0x0) [ 2143.151660][T24038] total_pgpgout 301258 [ 2143.155823][T24038] total_pgfault 592863 [ 2143.159914][T24038] total_pgmajfault 26825 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x7a00000000000000}, 0x0) [ 2143.207194][T24038] total_inactive_anon 0 [ 2143.219448][T24038] total_active_anon 106496 [ 2143.235269][T24038] total_inactive_file 0 [ 2143.239494][T24038] total_active_file 0 [ 2143.251547][T24038] total_unevictable 0 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x8100000000000000}, 0x0) [ 2143.255584][T24038] anon_cost 0 [ 2143.259824][T24038] file_cost 0 [ 2143.271535][T24038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24038,uid=0 [ 2143.287606][T24038] Memory cgroup out of memory: Killed process 24038 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:26 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000041140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x8847000000000000}, 0x0) [ 2143.307632][ T5099] Bluetooth: hci6: command 0x040f tx timeout 02:46:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x8848000000000000}, 0x0) [ 2143.417902][T24078] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2143.432058][T24078] CPU: 0 PID: 24078 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2143.442509][T24078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2143.452583][T24078] Call Trace: [ 2143.455902][T24078] [ 2143.458855][T24078] dump_stack_lvl+0x1e7/0x2e0 [ 2143.463558][T24078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2143.468755][T24078] ? __pfx__printk+0x10/0x10 [ 2143.473338][T24078] ? ___ratelimit+0x4c4/0x670 [ 2143.478013][T24078] ? __pfx____ratelimit+0x10/0x10 [ 2143.483039][T24078] dump_header+0xda/0x6a0 [ 2143.487367][T24078] oom_kill_process+0x3a7/0x930 [ 2143.492229][T24078] out_of_memory+0xf67/0x1320 [ 2143.496903][T24078] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2143.502531][T24078] ? __pfx___mutex_lock+0x10/0x10 [ 2143.507571][T24078] ? __pfx_out_of_memory+0x10/0x10 [ 2143.512692][T24078] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2143.518244][T24078] ? __pfx_lock_release+0x10/0x10 [ 2143.523322][T24078] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2143.529391][T24078] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2143.534598][T24078] ? mem_cgroup_iter+0x3e9/0x560 [ 2143.539548][T24078] try_charge_memcg+0xda2/0x18a0 [ 2143.544597][T24078] ? __pfx_try_charge_memcg+0x10/0x10 [ 2143.549967][T24078] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2143.555686][T24078] ? __pfx_lock_release+0x10/0x10 [ 2143.560712][T24078] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2143.566693][T24078] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2143.572403][T24078] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2143.578205][T24078] obj_cgroup_charge+0x389/0x630 [ 2143.583142][T24078] ? obj_cgroup_charge+0x121/0x630 [ 2143.588266][T24078] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2143.593722][T24078] ? kmalloc_trace+0x4e/0x360 [ 2143.598393][T24078] ? __pfx___might_resched+0x10/0x10 [ 2143.603679][T24078] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2143.609485][T24078] ? copy_semundo+0xb5/0x240 [ 2143.614073][T24078] kmalloc_trace+0x216/0x360 [ 2143.618655][T24078] ? __asan_memcpy+0x40/0x70 [ 2143.623243][T24078] copy_semundo+0xb5/0x240 [ 2143.627656][T24078] copy_process+0x1bc3/0x3fc0 [ 2143.632333][T24078] ? copy_process+0x9c3/0x3fc0 [ 2143.637095][T24078] ? __pfx_copy_process+0x10/0x10 [ 2143.642112][T24078] ? __might_fault+0xc5/0x120 [ 2143.646784][T24078] ? __asan_memset+0x23/0x50 [ 2143.651373][T24078] kernel_clone+0x21d/0x8d0 [ 2143.655885][T24078] ? __pfx_kernel_clone+0x10/0x10 [ 2143.660917][T24078] __se_sys_clone3+0x2cb/0x350 [ 2143.665679][T24078] ? __pfx___se_sys_clone3+0x10/0x10 [ 2143.670978][T24078] ? do_syscall_64+0x108/0x240 [ 2143.675746][T24078] ? do_syscall_64+0xb4/0x240 [ 2143.680423][T24078] do_syscall_64+0xf9/0x240 [ 2143.684925][T24078] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2143.690815][T24078] RIP: 0033:0x7f810c8a9b99 [ 2143.695233][T24078] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2143.714838][T24078] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2143.723245][T24078] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2143.731210][T24078] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2143.739170][T24078] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2143.747131][T24078] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2143.755096][T24078] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2143.763074][T24078] 02:46:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) [ 2143.766107][ C0] vkms_vblank_simulate: vblank timer overrun [ 2143.803254][T24078] memory: usage 307176kB, limit 307200kB, failcnt 74734 [ 2143.810325][T24078] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 2143.820941][T24078] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 2143.830519][T24078] Memory cgroup stats for /syz4: [ 2143.830645][T24078] cache 0 [ 2143.844506][T24078] rss 102400 [ 2143.847822][T24078] rss_huge 0 02:46:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xbe2b000000000000}, 0x0) [ 2143.851124][T24078] shmem 0 [ 2143.854348][T24078] mapped_file 0 [ 2143.858175][T24078] dirty 0 [ 2143.861218][T24078] writeback 0 [ 2143.864988][T24078] workingset_refault_anon 27748 [ 2143.870008][T24078] workingset_refault_file 333 [ 2143.874881][T24078] swap 303104 [ 2143.878328][T24078] swapcached 0 [ 2143.881900][T24078] pgpgin 301295 [ 2143.885451][T24078] pgpgout 301270 [ 2143.889153][T24078] pgfault 592903 [ 2143.899085][T24078] pgmajfault 26825 [ 2143.903070][T24078] inactive_anon 0 [ 2143.906807][T24078] active_anon 81920 [ 2143.910695][T24078] inactive_file 0 [ 2143.925482][T24078] active_file 0 [ 2143.932771][T24078] unevictable 0 [ 2143.936282][T24078] hierarchical_memory_limit 314572800 [ 2143.944159][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:46:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xc33d000000000000}, 0x0) [ 2143.955545][T24078] hierarchical_memsw_limit 9223372036854771712 [ 2143.961442][ T5099] Bluetooth: hci7: command 0x040f tx timeout [ 2143.982420][T24078] total_cache 0 [ 2143.991099][T24078] total_rss 102400 [ 2143.995457][T24078] total_rss_huge 0 [ 2143.999931][T24078] total_shmem 0 02:46:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 2144.014967][T24078] total_mapped_file 0 [ 2144.022502][T24078] total_dirty 0 [ 2144.032750][T24078] total_writeback 0 [ 2144.042055][T24078] total_workingset_refault_anon 27748 [ 2144.051632][T24078] total_workingset_refault_file 333 [ 2144.056980][T24078] total_swap 303104 [ 2144.061313][T24078] total_swapcached 0 02:46:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xff7f000000000000}, 0x0) [ 2144.069149][T24078] total_pgpgin 301295 [ 2144.078090][T24078] total_pgpgout 301270 [ 2144.089726][T24078] total_pgfault 592903 [ 2144.094987][T24078] total_pgmajfault 26825 [ 2144.102247][T24078] total_inactive_anon 0 [ 2144.115896][T24078] total_active_anon 81920 [ 2144.120256][T24078] total_inactive_file 0 [ 2144.126544][T24078] total_active_file 0 [ 2144.130550][T24078] total_unevictable 0 [ 2144.134700][T24078] anon_cost 0 [ 2144.138025][T24078] file_cost 0 [ 2144.141315][T24078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24078,uid=0 02:46:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 02:46:27 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000048140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2144.156981][T24078] Memory cgroup out of memory: Killed process 24078 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2144.241521][T24096] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2144.253869][T24096] CPU: 1 PID: 24096 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2144.264327][T24096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2144.274395][T24096] Call Trace: [ 2144.277681][T24096] [ 2144.280619][T24096] dump_stack_lvl+0x1e7/0x2e0 [ 2144.285307][T24096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2144.290540][T24096] ? __pfx__printk+0x10/0x10 [ 2144.295127][T24096] ? ___ratelimit+0x4c4/0x670 [ 2144.299807][T24096] ? __pfx____ratelimit+0x10/0x10 [ 2144.304847][T24096] dump_header+0xda/0x6a0 [ 2144.309200][T24096] oom_kill_process+0x3a7/0x930 [ 2144.314050][T24096] out_of_memory+0xf67/0x1320 [ 2144.318734][T24096] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2144.324363][T24096] ? __pfx___mutex_lock+0x10/0x10 [ 2144.329390][T24096] ? __pfx_out_of_memory+0x10/0x10 [ 2144.334502][T24096] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2144.340063][T24096] ? __pfx_lock_release+0x10/0x10 [ 2144.345108][T24096] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2144.351179][T24096] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2144.356378][T24096] ? mem_cgroup_iter+0x3e9/0x560 [ 2144.361318][T24096] try_charge_memcg+0xda2/0x18a0 [ 2144.366278][T24096] ? __pfx_try_charge_memcg+0x10/0x10 [ 2144.371651][T24096] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2144.377370][T24096] ? __pfx_lock_release+0x10/0x10 [ 2144.382404][T24096] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2144.388394][T24096] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2144.394110][T24096] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2144.399912][T24096] obj_cgroup_charge+0x389/0x630 [ 2144.404851][T24096] ? obj_cgroup_charge+0x121/0x630 [ 2144.409977][T24096] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2144.415432][T24096] ? kmalloc_trace+0x4e/0x360 [ 2144.420107][T24096] ? __pfx___might_resched+0x10/0x10 [ 2144.425391][T24096] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2144.431201][T24096] ? copy_semundo+0xb5/0x240 [ 2144.435787][T24096] kmalloc_trace+0x216/0x360 [ 2144.440371][T24096] ? __asan_memcpy+0x40/0x70 [ 2144.444959][T24096] copy_semundo+0xb5/0x240 [ 2144.449373][T24096] copy_process+0x1bc3/0x3fc0 [ 2144.454053][T24096] ? copy_process+0x9c3/0x3fc0 [ 2144.458815][T24096] ? __pfx_copy_process+0x10/0x10 [ 2144.463834][T24096] ? __might_fault+0xc5/0x120 [ 2144.468506][T24096] ? __asan_memset+0x23/0x50 [ 2144.473107][T24096] kernel_clone+0x21d/0x8d0 [ 2144.477608][T24096] ? __pfx_kernel_clone+0x10/0x10 [ 2144.482639][T24096] __se_sys_clone3+0x2cb/0x350 [ 2144.487408][T24096] ? __pfx___se_sys_clone3+0x10/0x10 [ 2144.492711][T24096] ? do_syscall_64+0x108/0x240 [ 2144.497480][T24096] ? do_syscall_64+0xb4/0x240 [ 2144.502157][T24096] do_syscall_64+0xf9/0x240 [ 2144.506663][T24096] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2144.512553][T24096] RIP: 0033:0x7f810c8a9b99 [ 2144.516961][T24096] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2144.536573][T24096] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2144.544999][T24096] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2144.552972][T24096] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2144.560944][T24096] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2144.568913][T24096] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2144.576881][T24096] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2144.584871][T24096] 02:46:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 2144.591711][T24096] memory: usage 307196kB, limit 307200kB, failcnt 74825 [ 2144.610301][T24096] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 2144.618805][T24096] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 02:46:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) [ 2144.647603][T24096] Memory cgroup stats for /syz4: [ 2144.647745][T24096] cache 0 [ 2144.657860][T24096] rss 102400 [ 2144.661358][T24096] rss_huge 0 [ 2144.671029][T24096] shmem 0 [ 2144.676271][T24096] mapped_file 0 [ 2144.679855][T24096] dirty 0 [ 2144.688736][T24096] writeback 0 [ 2144.693582][T24096] workingset_refault_anon 27748 [ 2144.698557][T24096] workingset_refault_file 333 [ 2144.708611][T24096] swap 303104 [ 2144.715169][T24096] swapcached 0 [ 2144.718632][T24096] pgpgin 301305 [ 2144.726970][T24096] pgpgout 301280 [ 2144.730609][T24096] pgfault 592942 [ 2144.735785][T24096] pgmajfault 26825 [ 2144.739584][T24096] inactive_anon 0 [ 2144.746269][T24096] active_anon 102400 [ 2144.753510][T24096] inactive_file 0 [ 2144.757241][T24096] active_file 0 [ 2144.760782][T24096] unevictable 0 [ 2144.766939][T24096] hierarchical_memory_limit 314572800 [ 2144.776302][T24096] hierarchical_memsw_limit 9223372036854771712 [ 2144.784152][T24096] total_cache 0 [ 2144.787686][T24096] total_rss 102400 [ 2144.792034][T24096] total_rss_huge 0 [ 2144.795766][T24096] total_shmem 0 [ 2144.799232][T24096] total_mapped_file 0 [ 2144.803842][T24096] total_dirty 0 [ 2144.807350][T24096] total_writeback 0 [ 2144.811158][T24096] total_workingset_refault_anon 27748 [ 2144.817082][T24096] total_workingset_refault_file 333 [ 2144.824491][T24096] total_swap 303104 [ 2144.828335][T24096] total_swapcached 0 [ 2144.832754][T24096] total_pgpgin 301305 [ 2144.836758][T24096] total_pgpgout 301280 [ 2144.840864][T24096] total_pgfault 592942 [ 2144.846065][T24096] total_pgmajfault 26825 [ 2144.850332][T24096] total_inactive_anon 0 [ 2144.856981][T24096] total_active_anon 102400 [ 2144.864987][T24096] total_inactive_file 0 [ 2144.869180][T24096] total_active_file 0 [ 2144.875524][T24096] total_unevictable 0 [ 2144.880861][T24096] anon_cost 0 [ 2144.887731][T24096] file_cost 0 02:46:28 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000049140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2144.891047][T24096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24096,uid=0 [ 2144.906948][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.911872][T24096] Memory cgroup out of memory: Killed process 24096 (syz-executor.4) total-vm:54508kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2145.002764][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.027006][T24102] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2145.037640][T24102] CPU: 0 PID: 24102 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2145.048064][T24102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2145.058115][T24102] Call Trace: [ 2145.061379][T24102] [ 2145.064304][T24102] dump_stack_lvl+0x1e7/0x2e0 [ 2145.068975][T24102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2145.074163][T24102] ? __pfx__printk+0x10/0x10 [ 2145.078735][T24102] ? ___ratelimit+0x4c4/0x670 [ 2145.083399][T24102] ? __pfx____ratelimit+0x10/0x10 [ 2145.088420][T24102] dump_header+0xda/0x6a0 [ 2145.092768][T24102] oom_kill_process+0x3a7/0x930 [ 2145.097637][T24102] out_of_memory+0xf67/0x1320 [ 2145.102317][T24102] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2145.107949][T24102] ? __pfx___mutex_lock+0x10/0x10 [ 2145.113008][T24102] ? __pfx_out_of_memory+0x10/0x10 [ 2145.118122][T24102] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2145.123665][T24102] ? __pfx_lock_release+0x10/0x10 [ 2145.128696][T24102] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2145.134768][T24102] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2145.139961][T24102] ? mem_cgroup_iter+0x3e9/0x560 [ 2145.144899][T24102] try_charge_memcg+0xda2/0x18a0 [ 2145.149852][T24102] ? __pfx_try_charge_memcg+0x10/0x10 [ 2145.155227][T24102] ? percpu_ref_tryget+0x14/0x180 [ 2145.160261][T24102] charge_memcg+0xa2/0x160 [ 2145.164708][T24102] __mem_cgroup_charge+0x27/0x80 [ 2145.169648][T24102] folio_prealloc+0x52/0x170 [ 2145.174234][T24102] do_wp_page+0x1222/0x4c90 [ 2145.178745][T24102] ? __pfx_do_wp_page+0x10/0x10 [ 2145.183593][T24102] ? __pfx_lock_acquire+0x10/0x10 [ 2145.188620][T24102] ? do_raw_spin_lock+0x14e/0x370 [ 2145.193660][T24102] __handle_mm_fault+0x26ad/0x72d0 [ 2145.198798][T24102] ? reacquire_held_locks+0x3eb/0x690 [ 2145.204177][T24102] ? __pfx___handle_mm_fault+0x10/0x10 [ 2145.209648][T24102] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2145.215370][T24102] ? mtree_range_walk+0x6fd/0x8e0 [ 2145.220399][T24102] ? lock_vma_under_rcu+0x18a/0x730 [ 2145.225608][T24102] ? __pfx_lock_release+0x10/0x10 [ 2145.230634][T24102] ? lock_vma_under_rcu+0x2f9/0x730 [ 2145.235843][T24102] ? lock_vma_under_rcu+0x18a/0x730 [ 2145.241038][T24102] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2145.246596][T24102] handle_mm_fault+0x3c1/0x8a0 [ 2145.251390][T24102] exc_page_fault+0x456/0x870 [ 2145.256101][T24102] asm_exc_page_fault+0x26/0x30 [ 2145.260972][T24102] RIP: 0033:0x7f810c8375a7 [ 2145.265404][T24102] Code: 08 85 c9 0f 85 6c 0b 00 00 4c 89 4c 24 60 31 c0 b9 40 42 0f 00 ba 81 00 00 00 bf ca 00 00 00 c7 06 01 00 00 00 e8 e9 67 04 00 <83> 05 da 63 17 00 01 4c 8b 4c 24 60 80 bc 24 28 01 00 00 00 0f b6 [ 2145.285025][T24102] RSP: 002b:00007f810cacfb30 EFLAGS: 00010217 [ 2145.291114][T24102] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f810c87dda9 [ 2145.299105][T24102] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f810c9abf88 [ 2145.307107][T24102] RBP: 0000000000000048 R08: 00007f810c9abf8c R09: 00007f810c9abf8c [ 2145.315104][T24102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f810c9abf80 [ 2145.323101][T24102] R13: 0000000000000f91 R14: 0000000000000000 R15: 00007f810c9abf80 [ 2145.331108][T24102] [ 2145.334302][ C0] vkms_vblank_simulate: vblank timer overrun [ 2145.369864][ T5099] Bluetooth: hci5: command 0x0419 tx timeout [ 2145.392090][ T5099] Bluetooth: hci6: command 0x0419 tx timeout [ 2145.437968][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.447187][T24102] memory: usage 307200kB, limit 307200kB, failcnt 74941 [ 2145.471676][T24102] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2145.489674][T24102] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 2145.498132][T24102] Memory cgroup stats for /syz4: [ 2145.498273][T24102] cache 0 [ 2145.521569][T24102] rss 61440 [ 2145.524717][T24102] rss_huge 0 [ 2145.527925][T24102] shmem 0 [ 2145.530869][T24102] mapped_file 0 [ 2145.534446][T24102] dirty 0 [ 2145.537390][T24102] writeback 0 [ 2145.540706][T24102] workingset_refault_anon 27748 [ 2145.545767][T24102] workingset_refault_file 333 [ 2145.550460][T24102] swap 303104 [ 2145.553821][T24102] swapcached 0 [ 2145.557203][T24102] pgpgin 301305 [ 2145.560676][T24102] pgpgout 301290 [ 2145.564295][T24102] pgfault 592951 [ 2145.567849][T24102] pgmajfault 26825 [ 2145.571665][T24102] inactive_anon 0 [ 2145.575331][T24102] active_anon 61440 [ 2145.579146][T24102] inactive_file 0 [ 2145.582863][T24102] active_file 0 [ 2145.588779][T24102] unevictable 0 [ 2145.594590][T24102] hierarchical_memory_limit 314572800 [ 2145.601283][T24102] hierarchical_memsw_limit 9223372036854771712 [ 2145.616841][T24102] total_cache 0 [ 2145.620331][T24102] total_rss 61440 [ 2145.624402][T24102] total_rss_huge 0 [ 2145.628135][T24102] total_shmem 0 [ 2145.631705][T24102] total_mapped_file 0 [ 2145.635778][T24102] total_dirty 0 [ 2145.639253][T24102] total_writeback 0 [ 2145.643790][T24102] total_workingset_refault_anon 27748 [ 2145.654050][T24102] total_workingset_refault_file 333 [ 2145.659328][T24102] total_swap 303104 [ 2145.663774][T24102] total_swapcached 0 [ 2145.668354][T24102] total_pgpgin 301305 [ 2145.672880][T24102] total_pgpgout 301290 [ 2145.683668][T24102] total_pgfault 592951 [ 2145.687761][T24102] total_pgmajfault 26825 [ 2145.692533][T24102] total_inactive_anon 0 [ 2145.696851][T24102] total_active_anon 61440 [ 2145.702137][T24102] total_inactive_file 0 [ 2145.706536][T24102] total_active_file 0 [ 2145.710616][T24102] total_unevictable 0 [ 2145.716331][T24102] anon_cost 0 [ 2145.724872][T24102] file_cost 0 02:46:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000004c140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2145.733479][T24102] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24102,uid=0 [ 2145.749124][T24102] Memory cgroup out of memory: Killed process 24102 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2145.837226][T24108] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2145.852287][T24108] CPU: 1 PID: 24108 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2145.862741][T24108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2145.872821][T24108] Call Trace: [ 2145.876103][T24108] [ 2145.879026][T24108] dump_stack_lvl+0x1e7/0x2e0 [ 2145.883710][T24108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2145.888905][T24108] ? __pfx__printk+0x10/0x10 [ 2145.893484][T24108] ? ___ratelimit+0x4c4/0x670 [ 2145.898152][T24108] ? __pfx____ratelimit+0x10/0x10 [ 2145.903183][T24108] dump_header+0xda/0x6a0 [ 2145.907526][T24108] oom_kill_process+0x3a7/0x930 [ 2145.912372][T24108] out_of_memory+0xf67/0x1320 [ 2145.917040][T24108] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2145.922663][T24108] ? __pfx___mutex_lock+0x10/0x10 [ 2145.927703][T24108] ? __pfx_out_of_memory+0x10/0x10 [ 2145.932812][T24108] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2145.938356][T24108] ? __pfx_lock_release+0x10/0x10 [ 2145.943385][T24108] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2145.949438][T24108] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2145.954629][T24108] ? mem_cgroup_iter+0x3e9/0x560 [ 2145.959556][T24108] try_charge_memcg+0xda2/0x18a0 [ 2145.964495][T24108] ? __pfx_try_charge_memcg+0x10/0x10 [ 2145.969862][T24108] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2145.975580][T24108] ? __pfx_lock_release+0x10/0x10 [ 2145.980634][T24108] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2145.986616][T24108] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2145.992335][T24108] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2145.998144][T24108] obj_cgroup_charge+0x389/0x630 [ 2146.003078][T24108] ? obj_cgroup_charge+0x121/0x630 [ 2146.008201][T24108] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2146.013683][T24108] ? __pfx___might_resched+0x10/0x10 [ 2146.018962][T24108] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2146.024767][T24108] ? sock_alloc_inode+0x28/0xc0 [ 2146.029607][T24108] kmem_cache_alloc_lru+0x204/0x350 [ 2146.034797][T24108] sock_alloc_inode+0x28/0xc0 [ 2146.039463][T24108] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2146.044824][T24108] new_inode_pseudo+0x69/0x1e0 [ 2146.049573][T24108] __sock_create+0x123/0x920 [ 2146.054156][T24108] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2146.060040][T24108] __sys_socket+0x14f/0x3c0 [ 2146.064536][T24108] ? __pfx___sys_socket+0x10/0x10 [ 2146.069552][T24108] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2146.075875][T24108] ? do_syscall_64+0x108/0x240 [ 2146.080632][T24108] __x64_sys_socket+0x7a/0x90 [ 2146.085305][T24108] do_syscall_64+0xf9/0x240 [ 2146.089802][T24108] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2146.095694][T24108] RIP: 0033:0x7f810c87dda9 [ 2146.100098][T24108] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2146.119701][T24108] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2146.128105][T24108] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2146.136066][T24108] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2146.144036][T24108] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2146.152009][T24108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2146.159964][T24108] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2146.167950][T24108] [ 2146.173688][ T5099] Bluetooth: hci7: command 0x0419 tx timeout [ 2146.189265][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2146.197825][T24108] memory: usage 307200kB, limit 307200kB, failcnt 75039 [ 2146.204978][T24108] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2146.214313][T24108] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 2146.221831][T24108] Memory cgroup stats for /syz4: [ 2146.221970][T24108] cache 0 [ 2146.229885][T24108] rss 102400 [ 2146.233211][T24108] rss_huge 0 [ 2146.236423][T24108] shmem 0 [ 2146.239368][T24108] mapped_file 0 [ 2146.242893][T24108] dirty 0 [ 2146.245848][T24108] writeback 0 [ 2146.249141][T24108] workingset_refault_anon 27748 [ 2146.254072][T24108] workingset_refault_file 333 [ 2146.258773][T24108] swap 303104 [ 2146.262150][T24108] swapcached 0 [ 2146.265540][T24108] pgpgin 301327 [ 2146.269012][T24108] pgpgout 301302 [ 2146.272637][T24108] pgfault 593024 [ 2146.276202][T24108] pgmajfault 26825 [ 2146.279945][T24108] inactive_anon 0 [ 2146.286272][T24108] active_anon 90112 [ 2146.293793][T24108] inactive_file 0 [ 2146.298447][T24108] active_file 0 [ 2146.304607][T24108] unevictable 0 [ 2146.308153][T24108] hierarchical_memory_limit 314572800 [ 2146.315238][T24108] hierarchical_memsw_limit 9223372036854771712 [ 2146.325031][T24108] total_cache 0 [ 2146.328600][T24108] total_rss 102400 [ 2146.332483][T24108] total_rss_huge 0 [ 2146.336291][T24108] total_shmem 0 [ 2146.339828][T24108] total_mapped_file 0 [ 2146.344167][T24108] total_dirty 0 [ 2146.347723][T24108] total_writeback 0 [ 2146.354734][T24108] total_workingset_refault_anon 27748 [ 2146.360219][T24108] total_workingset_refault_file 333 [ 2146.366111][T24108] total_swap 303104 [ 2146.370047][T24108] total_swapcached 0 [ 2146.374323][T24108] total_pgpgin 301327 [ 2146.378597][T24108] total_pgpgout 301302 [ 2146.383455][T24108] total_pgfault 593024 [ 2146.387930][T24108] total_pgmajfault 26825 [ 2146.392538][T24108] total_inactive_anon 0 [ 2146.396807][T24108] total_active_anon 90112 [ 2146.401213][T24108] total_inactive_file 0 [ 2146.406410][T24108] total_active_file 0 [ 2146.410541][T24108] total_unevictable 0 [ 2146.415456][T24108] anon_cost 0 [ 2146.418900][T24108] file_cost 0 [ 2146.423728][T24108] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24107,uid=0 02:46:30 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000060140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2146.439655][T24108] Memory cgroup out of memory: Killed process 24107 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2146.546325][T24109] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2146.556843][T24109] CPU: 0 PID: 24109 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2146.567273][T24109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2146.577320][T24109] Call Trace: [ 2146.580591][T24109] [ 2146.583522][T24109] dump_stack_lvl+0x1e7/0x2e0 [ 2146.588215][T24109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2146.593407][T24109] ? __pfx__printk+0x10/0x10 [ 2146.597986][T24109] ? ___ratelimit+0x4c4/0x670 [ 2146.602671][T24109] ? __pfx____ratelimit+0x10/0x10 [ 2146.607706][T24109] dump_header+0xda/0x6a0 [ 2146.612052][T24109] oom_kill_process+0x3a7/0x930 [ 2146.616929][T24109] out_of_memory+0xf67/0x1320 [ 2146.621624][T24109] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2146.627253][T24109] ? __pfx___mutex_lock+0x10/0x10 [ 2146.632284][T24109] ? __pfx_out_of_memory+0x10/0x10 [ 2146.637408][T24109] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2146.642960][T24109] ? __pfx_lock_release+0x10/0x10 [ 2146.647985][T24109] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2146.654058][T24109] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2146.659258][T24109] ? mem_cgroup_iter+0x3e9/0x560 [ 2146.664226][T24109] try_charge_memcg+0xda2/0x18a0 [ 2146.669204][T24109] ? __pfx_try_charge_memcg+0x10/0x10 [ 2146.674590][T24109] ? percpu_ref_tryget+0x14/0x180 [ 2146.679650][T24109] charge_memcg+0xa2/0x160 [ 2146.684079][T24109] __mem_cgroup_charge+0x27/0x80 [ 2146.689020][T24109] folio_prealloc+0x52/0x170 [ 2146.693611][T24109] do_wp_page+0x1222/0x4c90 [ 2146.698140][T24109] ? __pfx_do_wp_page+0x10/0x10 [ 2146.703002][T24109] ? __pfx_lock_acquire+0x10/0x10 [ 2146.708032][T24109] ? do_raw_spin_lock+0x14e/0x370 [ 2146.713078][T24109] __handle_mm_fault+0x26ad/0x72d0 [ 2146.718214][T24109] ? reacquire_held_locks+0x3eb/0x690 [ 2146.723595][T24109] ? __pfx___handle_mm_fault+0x10/0x10 [ 2146.729089][T24109] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2146.734829][T24109] ? mtree_range_walk+0x6fd/0x8e0 [ 2146.739868][T24109] ? lock_vma_under_rcu+0x18a/0x730 [ 2146.745070][T24109] ? __pfx_lock_release+0x10/0x10 [ 2146.750095][T24109] ? lock_vma_under_rcu+0x2f9/0x730 [ 2146.755322][T24109] ? lock_vma_under_rcu+0x18a/0x730 [ 2146.760529][T24109] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2146.766081][T24109] handle_mm_fault+0x3c1/0x8a0 [ 2146.770861][T24109] exc_page_fault+0x456/0x870 [ 2146.775547][T24109] asm_exc_page_fault+0x26/0x30 [ 2146.780415][T24109] RIP: 0033:0x7f810c8375a7 [ 2146.784837][T24109] Code: 08 85 c9 0f 85 6c 0b 00 00 4c 89 4c 24 60 31 c0 b9 40 42 0f 00 ba 81 00 00 00 bf ca 00 00 00 c7 06 01 00 00 00 e8 e9 67 04 00 <83> 05 da 63 17 00 01 4c 8b 4c 24 60 80 bc 24 28 01 00 00 00 0f b6 [ 2146.804444][T24109] RSP: 002b:00007f810cacfb30 EFLAGS: 00010217 [ 2146.810509][T24109] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f810c87dda9 [ 2146.818483][T24109] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f810c9abf88 [ 2146.826453][T24109] RBP: 0000000000000048 R08: 00007f810c9abf8c R09: 00007f810c9abf8c [ 2146.834425][T24109] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f810c9abf80 [ 2146.842391][T24109] R13: 0000000000000f91 R14: 0000000000000000 R15: 00007f810c9abf80 [ 2146.850369][T24109] [ 2146.853519][ C0] vkms_vblank_simulate: vblank timer overrun [ 2146.870755][T24109] memory: usage 307200kB, limit 307200kB, failcnt 75137 [ 2146.878192][T24109] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2146.886826][T24109] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2146.894825][T24109] Memory cgroup stats for /syz4: [ 2146.894960][T24109] cache 0 [ 2146.903326][T24109] rss 106496 [ 2146.906566][T24109] rss_huge 0 [ 2146.909780][T24109] shmem 0 [ 2146.913872][T24109] mapped_file 0 [ 2146.917351][T24109] dirty 0 [ 2146.920331][T24109] writeback 0 [ 2146.924226][T24109] workingset_refault_anon 27748 [ 2146.929468][T24109] workingset_refault_file 333 [ 2146.935720][T24109] swap 303104 [ 2146.939077][T24109] swapcached 0 [ 2146.945227][T24109] pgpgin 301340 [ 2146.948723][T24109] pgpgout 301314 [ 2146.955843][T24109] pgfault 593066 [ 2146.959414][T24109] pgmajfault 26825 [ 2146.963741][T24109] inactive_anon 0 [ 2146.967390][T24109] active_anon 106496 [ 2146.971327][T24109] inactive_file 0 [ 2146.978183][T24109] active_file 0 [ 2146.982018][T24109] unevictable 0 [ 2146.985491][T24109] hierarchical_memory_limit 314572800 [ 2146.990896][T24109] hierarchical_memsw_limit 9223372036854771712 [ 2146.997697][T24109] total_cache 0 [ 2147.001179][T24109] total_rss 106496 [ 2147.005609][T24109] total_rss_huge 0 [ 2147.009484][T24109] total_shmem 0 [ 2147.013548][T24109] total_mapped_file 0 [ 2147.017554][T24109] total_dirty 0 [ 2147.021054][T24109] total_writeback 0 [ 2147.024940][T24109] total_workingset_refault_anon 27748 [ 2147.030569][T24109] total_workingset_refault_file 333 [ 2147.040386][T24109] total_swap 303104 [ 2147.044607][T24109] total_swapcached 0 [ 2147.048580][T24109] total_pgpgin 301340 [ 2147.053218][T24109] total_pgpgout 301314 [ 2147.057381][T24109] total_pgfault 593066 [ 2147.078935][T24109] total_pgmajfault 26825 [ 2147.091714][T24109] total_inactive_anon 0 [ 2147.095931][T24109] total_active_anon 106496 [ 2147.101650][T24109] total_inactive_file 0 [ 2147.105941][T24109] total_active_file 0 [ 2147.110008][T24109] total_unevictable 0 [ 2147.114090][T24109] anon_cost 0 [ 2147.117459][T24109] file_cost 0 [ 2147.120818][T24109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24109,uid=0 02:46:30 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000062140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2147.137713][T24109] Memory cgroup out of memory: Killed process 24109 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2147.165087][T24110] socket: no more sockets [ 2147.243235][T24111] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2147.249342][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2147.253790][T24111] CPU: 0 PID: 24111 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2147.271941][T24111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2147.282017][T24111] Call Trace: [ 2147.285306][T24111] [ 2147.288245][T24111] dump_stack_lvl+0x1e7/0x2e0 [ 2147.292923][T24111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2147.298116][T24111] ? __pfx__printk+0x10/0x10 [ 2147.302709][T24111] ? ___ratelimit+0x4c4/0x670 [ 2147.307417][T24111] ? __pfx____ratelimit+0x10/0x10 [ 2147.312450][T24111] dump_header+0xda/0x6a0 [ 2147.316775][T24111] oom_kill_process+0x3a7/0x930 [ 2147.321630][T24111] out_of_memory+0xf67/0x1320 [ 2147.326311][T24111] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2147.331933][T24111] ? __pfx___mutex_lock+0x10/0x10 [ 2147.336963][T24111] ? __pfx_out_of_memory+0x10/0x10 [ 2147.342105][T24111] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2147.347645][T24111] ? __pfx_lock_release+0x10/0x10 [ 2147.352676][T24111] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2147.358758][T24111] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2147.363953][T24111] ? mem_cgroup_iter+0x3e9/0x560 [ 2147.368893][T24111] try_charge_memcg+0xda2/0x18a0 [ 2147.373834][T24111] ? __pfx_try_charge_memcg+0x10/0x10 [ 2147.379197][T24111] ? percpu_ref_tryget+0x14/0x180 [ 2147.384221][T24111] charge_memcg+0xa2/0x160 [ 2147.388631][T24111] __mem_cgroup_charge+0x27/0x80 [ 2147.393562][T24111] folio_prealloc+0x52/0x170 [ 2147.398153][T24111] do_wp_page+0x1222/0x4c90 [ 2147.402697][T24111] ? __pfx_do_wp_page+0x10/0x10 [ 2147.407587][T24111] ? __pfx_lock_acquire+0x10/0x10 [ 2147.412637][T24111] ? do_raw_spin_lock+0x14e/0x370 [ 2147.417672][T24111] __handle_mm_fault+0x26ad/0x72d0 [ 2147.422797][T24111] ? reacquire_held_locks+0x3eb/0x690 [ 2147.428160][T24111] ? __pfx___handle_mm_fault+0x10/0x10 [ 2147.433618][T24111] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2147.439354][T24111] ? mtree_range_walk+0x6fd/0x8e0 [ 2147.444394][T24111] ? lock_vma_under_rcu+0x18a/0x730 [ 2147.449587][T24111] ? __pfx_lock_release+0x10/0x10 [ 2147.454617][T24111] ? lock_vma_under_rcu+0x2f9/0x730 [ 2147.459836][T24111] ? lock_vma_under_rcu+0x18a/0x730 [ 2147.465029][T24111] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2147.470567][T24111] handle_mm_fault+0x3c1/0x8a0 [ 2147.475336][T24111] exc_page_fault+0x456/0x870 [ 2147.480021][T24111] asm_exc_page_fault+0x26/0x30 [ 2147.484875][T24111] RIP: 0033:0x7f810c8375a7 [ 2147.489303][T24111] Code: 08 85 c9 0f 85 6c 0b 00 00 4c 89 4c 24 60 31 c0 b9 40 42 0f 00 ba 81 00 00 00 bf ca 00 00 00 c7 06 01 00 00 00 e8 e9 67 04 00 <83> 05 da 63 17 00 01 4c 8b 4c 24 60 80 bc 24 28 01 00 00 00 0f b6 [ 2147.508935][T24111] RSP: 002b:00007f810cacfb30 EFLAGS: 00010217 [ 2147.515016][T24111] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f810c87dda9 [ 2147.523000][T24111] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f810c9abf88 [ 2147.530965][T24111] RBP: 0000000000000048 R08: 00007f810c9abf8c R09: 00007f810c9abf8c [ 2147.538933][T24111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f810c9abf80 [ 2147.546899][T24111] R13: 0000000000000f91 R14: 0000000000000000 R15: 00007f810c9abf80 [ 2147.554902][T24111] [ 2147.558048][ C0] vkms_vblank_simulate: vblank timer overrun [ 2147.565407][T24111] memory: usage 307200kB, limit 307200kB, failcnt 75246 [ 2147.591597][T24111] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2147.600508][T24111] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2147.608533][T24111] Memory cgroup stats for /syz4: [ 2147.608664][T24111] cache 0 [ 2147.622479][T24111] rss 102400 [ 2147.625708][T24111] rss_huge 0 [ 2147.628936][T24111] shmem 0 [ 2147.635335][T24111] mapped_file 0 [ 2147.638815][T24111] dirty 0 [ 2147.642213][T24111] writeback 0 [ 2147.646552][T24111] workingset_refault_anon 27748 [ 2147.654720][T24111] workingset_refault_file 333 [ 2147.659663][T24111] swap 303104 [ 2147.665319][T24111] swapcached 0 [ 2147.668718][T24111] pgpgin 301351 [ 2147.676595][T24111] pgpgout 301326 [ 2147.680284][T24111] pgfault 593104 [ 2147.687186][T24111] pgmajfault 26825 [ 2147.691036][T24111] inactive_anon 0 [ 2147.698520][T24111] active_anon 102400 [ 2147.705129][T24111] inactive_file 0 [ 2147.708891][T24111] active_file 0 [ 2147.715888][T24111] unevictable 0 [ 2147.719509][T24111] hierarchical_memory_limit 314572800 [ 2147.727556][T24111] hierarchical_memsw_limit 9223372036854771712 [ 2147.737185][T24111] total_cache 0 [ 2147.740789][T24111] total_rss 102400 [ 2147.746833][T24111] total_rss_huge 0 [ 2147.750609][T24111] total_shmem 0 [ 2147.754553][T24111] total_mapped_file 0 [ 2147.758563][T24111] total_dirty 0 [ 2147.762381][T24111] total_writeback 0 [ 2147.766203][T24111] total_workingset_refault_anon 27748 [ 2147.772389][T24111] total_workingset_refault_file 333 [ 2147.777607][T24111] total_swap 303104 [ 2147.784351][T24111] total_swapcached 0 [ 2147.788307][T24111] total_pgpgin 301351 [ 2147.792753][T24111] total_pgpgout 301326 [ 2147.796841][T24111] total_pgfault 593104 [ 2147.800924][T24111] total_pgmajfault 26825 [ 2147.805484][T24111] total_inactive_anon 0 [ 2147.809890][T24111] total_active_anon 102400 [ 2147.814610][T24111] total_inactive_file 0 [ 2147.818984][T24111] total_active_file 0 [ 2147.823368][T24111] total_unevictable 0 [ 2147.828159][T24111] anon_cost 0 [ 2147.831731][T24111] file_cost 0 02:46:31 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000067140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2147.835189][T24111] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24111,uid=0 [ 2147.856090][T24111] Memory cgroup out of memory: Killed process 24111 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2147.942354][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2147.961203][T24113] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2147.971795][T24113] CPU: 0 PID: 24113 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2147.982235][T24113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2147.992299][T24113] Call Trace: [ 2147.995596][T24113] [ 2147.998519][T24113] dump_stack_lvl+0x1e7/0x2e0 [ 2148.003197][T24113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2148.008387][T24113] ? __pfx__printk+0x10/0x10 [ 2148.012963][T24113] ? ___ratelimit+0x4c4/0x670 [ 2148.017641][T24113] ? __pfx____ratelimit+0x10/0x10 [ 2148.022673][T24113] dump_header+0xda/0x6a0 [ 2148.027028][T24113] oom_kill_process+0x3a7/0x930 [ 2148.031891][T24113] out_of_memory+0xf67/0x1320 [ 2148.036575][T24113] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2148.042196][T24113] ? __pfx___mutex_lock+0x10/0x10 [ 2148.047218][T24113] ? __pfx_out_of_memory+0x10/0x10 [ 2148.052329][T24113] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2148.057877][T24113] ? __pfx_lock_release+0x10/0x10 [ 2148.062907][T24113] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2148.068968][T24113] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2148.074170][T24113] ? mem_cgroup_iter+0x3e9/0x560 [ 2148.079126][T24113] try_charge_memcg+0xda2/0x18a0 [ 2148.084072][T24113] ? __pfx_try_charge_memcg+0x10/0x10 [ 2148.089438][T24113] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2148.095146][T24113] ? __pfx_lock_release+0x10/0x10 [ 2148.100177][T24113] ? memcg_account_kmem+0x1e7/0x210 [ 2148.105378][T24113] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2148.111176][T24113] __memcg_kmem_charge_page+0xe1/0x250 [ 2148.116630][T24113] memcg_charge_kernel_stack+0x3f8/0x550 [ 2148.122265][T24113] dup_task_struct+0x15d/0x7d0 [ 2148.127045][T24113] copy_process+0x5d5/0x3fc0 [ 2148.131671][T24113] ? __might_fault+0xa9/0x120 [ 2148.136338][T24113] ? __pfx_lock_release+0x10/0x10 [ 2148.141359][T24113] ? __pfx_copy_process+0x10/0x10 [ 2148.146412][T24113] ? __might_fault+0xc5/0x120 [ 2148.151080][T24113] ? __asan_memset+0x23/0x50 [ 2148.155661][T24113] kernel_clone+0x21d/0x8d0 [ 2148.160159][T24113] ? __pfx_kernel_clone+0x10/0x10 [ 2148.165192][T24113] __se_sys_clone3+0x2cb/0x350 [ 2148.169944][T24113] ? __might_fault+0xa9/0x120 [ 2148.174625][T24113] ? __pfx___se_sys_clone3+0x10/0x10 [ 2148.179935][T24113] ? do_syscall_64+0x108/0x240 [ 2148.184691][T24113] ? do_syscall_64+0xb4/0x240 [ 2148.189367][T24113] do_syscall_64+0xf9/0x240 [ 2148.193870][T24113] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2148.199786][T24113] RIP: 0033:0x7f810c8a9b99 [ 2148.204191][T24113] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2148.223796][T24113] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2148.232222][T24113] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2148.240184][T24113] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2148.248143][T24113] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2148.256102][T24113] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2148.264069][T24113] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2148.272058][T24113] [ 2148.275189][ C0] vkms_vblank_simulate: vblank timer overrun [ 2148.286459][T24113] memory: usage 307200kB, limit 307200kB, failcnt 75329 [ 2148.289179][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2148.298229][T24113] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2148.309842][T24113] kmem: usage 307092kB, limit 9007199254740988kB, failcnt 0 [ 2148.317818][T24113] Memory cgroup stats for /syz4: [ 2148.317948][T24113] cache 0 [ 2148.326579][T24113] rss 102400 [ 2148.329882][T24113] rss_huge 0 [ 2148.333684][T24113] shmem 0 [ 2148.336761][T24113] mapped_file 0 [ 2148.340299][T24113] dirty 0 [ 2148.344835][T24113] writeback 0 [ 2148.348208][T24113] workingset_refault_anon 27748 [ 2148.353614][T24113] workingset_refault_file 333 [ 2148.358469][T24113] swap 303104 [ 2148.369146][T24113] swapcached 0 [ 2148.373106][T24113] pgpgin 301362 [ 2148.376665][T24113] pgpgout 301337 [ 2148.380347][T24113] pgfault 593145 [ 2148.388904][T24113] pgmajfault 26825 [ 2148.395516][T24113] inactive_anon 0 [ 2148.399183][T24113] active_anon 102400 [ 2148.408939][T24113] inactive_file 0 [ 2148.412810][T24113] active_file 0 [ 2148.416576][T24113] unevictable 0 [ 2148.420081][T24113] hierarchical_memory_limit 314572800 [ 2148.426578][T24113] hierarchical_memsw_limit 9223372036854771712 [ 2148.433832][T24113] total_cache 0 [ 2148.437345][T24113] total_rss 102400 [ 2148.441073][T24113] total_rss_huge 0 [ 2148.444873][T24113] total_shmem 0 [ 2148.448338][T24113] total_mapped_file 0 [ 2148.452596][T24113] total_dirty 0 [ 2148.456065][T24113] total_writeback 0 [ 2148.459880][T24113] total_workingset_refault_anon 27748 [ 2148.465779][T24113] total_workingset_refault_file 333 [ 2148.471034][T24113] total_swap 303104 [ 2148.475029][T24113] total_swapcached 0 [ 2148.478941][T24113] total_pgpgin 301362 [ 2148.482985][T24113] total_pgpgout 301337 [ 2148.487091][T24113] total_pgfault 593145 [ 2148.491172][T24113] total_pgmajfault 26825 [ 2148.495714][T24113] total_inactive_anon 0 [ 2148.499889][T24113] total_active_anon 102400 [ 2148.506933][T24113] total_inactive_file 0 [ 2148.511116][T24113] total_active_file 0 [ 2148.515288][T24113] total_unevictable 0 [ 2148.519334][T24113] anon_cost 0 [ 2148.522908][T24113] file_cost 0 [ 2148.526211][T24113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24113,uid=0 02:46:32 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000068140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2148.542011][T24113] Memory cgroup out of memory: Killed process 24113 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2148.641132][T24116] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2148.653720][T24116] CPU: 0 PID: 24116 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2148.664147][T24116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2148.674192][T24116] Call Trace: [ 2148.677460][T24116] [ 2148.680380][T24116] dump_stack_lvl+0x1e7/0x2e0 [ 2148.685050][T24116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2148.690231][T24116] ? __pfx__printk+0x10/0x10 [ 2148.694805][T24116] ? ___ratelimit+0x4c4/0x670 [ 2148.699470][T24116] ? __pfx____ratelimit+0x10/0x10 [ 2148.704484][T24116] dump_header+0xda/0x6a0 [ 2148.708804][T24116] oom_kill_process+0x3a7/0x930 [ 2148.713661][T24116] out_of_memory+0xf67/0x1320 [ 2148.718353][T24116] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2148.723990][T24116] ? __pfx___mutex_lock+0x10/0x10 [ 2148.729035][T24116] ? __pfx_out_of_memory+0x10/0x10 [ 2148.734170][T24116] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2148.739735][T24116] ? __pfx_lock_release+0x10/0x10 [ 2148.744766][T24116] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2148.750836][T24116] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2148.756034][T24116] ? mem_cgroup_iter+0x3e9/0x560 [ 2148.760974][T24116] try_charge_memcg+0xda2/0x18a0 [ 2148.765934][T24116] ? __pfx_try_charge_memcg+0x10/0x10 [ 2148.771314][T24116] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2148.777032][T24116] ? __pfx_lock_release+0x10/0x10 [ 2148.782064][T24116] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2148.788046][T24116] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2148.793759][T24116] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2148.799561][T24116] obj_cgroup_charge+0x389/0x630 [ 2148.804516][T24116] ? obj_cgroup_charge+0x121/0x630 [ 2148.809644][T24116] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2148.815107][T24116] ? kmalloc_trace+0x4e/0x360 [ 2148.819827][T24116] ? __pfx___might_resched+0x10/0x10 [ 2148.825147][T24116] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2148.830993][T24116] ? copy_semundo+0xb5/0x240 [ 2148.835591][T24116] kmalloc_trace+0x216/0x360 [ 2148.840184][T24116] ? __asan_memcpy+0x40/0x70 [ 2148.844777][T24116] copy_semundo+0xb5/0x240 [ 2148.849213][T24116] copy_process+0x1bc3/0x3fc0 [ 2148.853915][T24116] ? copy_process+0x9c3/0x3fc0 [ 2148.858702][T24116] ? __pfx_copy_process+0x10/0x10 [ 2148.863735][T24116] ? __might_fault+0xc5/0x120 [ 2148.868419][T24116] ? __asan_memset+0x23/0x50 [ 2148.873025][T24116] kernel_clone+0x21d/0x8d0 [ 2148.877538][T24116] ? __pfx_kernel_clone+0x10/0x10 [ 2148.882577][T24116] __se_sys_clone3+0x2cb/0x350 [ 2148.887344][T24116] ? __pfx___se_sys_clone3+0x10/0x10 [ 2148.892651][T24116] ? do_syscall_64+0x108/0x240 [ 2148.897417][T24116] ? do_syscall_64+0xb4/0x240 [ 2148.902094][T24116] do_syscall_64+0xf9/0x240 [ 2148.906596][T24116] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2148.912491][T24116] RIP: 0033:0x7f810c8a9b99 [ 2148.916902][T24116] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2148.936504][T24116] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2148.944913][T24116] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2148.952882][T24116] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2148.960843][T24116] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2148.968808][T24116] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2148.976775][T24116] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2148.984758][T24116] [ 2148.987899][ C0] vkms_vblank_simulate: vblank timer overrun [ 2149.001089][T24116] memory: usage 307200kB, limit 307200kB, failcnt 75398 [ 2149.008441][T24116] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2149.016963][T24116] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 2149.024860][T24116] Memory cgroup stats for /syz4: [ 2149.025000][T24116] cache 0 [ 2149.040036][T24116] rss 102400 [ 2149.043583][T24116] rss_huge 0 [ 2149.046798][T24116] shmem 0 [ 2149.049751][T24116] mapped_file 0 [ 2149.054005][T24116] dirty 0 [ 2149.056975][T24116] writeback 0 [ 2149.060286][T24116] workingset_refault_anon 27748 [ 2149.065754][T24116] workingset_refault_file 333 [ 2149.070486][T24116] swap 303104 [ 2149.075284][T24116] swapcached 0 [ 2149.079007][T24116] pgpgin 301372 [ 2149.083189][T24116] pgpgout 301347 [ 2149.086783][T24116] pgfault 593184 [ 2149.090358][T24116] pgmajfault 26825 [ 2149.094642][T24116] inactive_anon 0 [ 2149.098293][T24116] active_anon 102400 [ 2149.106461][T24116] inactive_file 0 [ 2149.110125][T24116] active_file 0 [ 2149.117048][T24116] unevictable 0 [ 2149.120568][T24116] hierarchical_memory_limit 314572800 [ 2149.126085][T24116] hierarchical_memsw_limit 9223372036854771712 [ 2149.132488][T24116] total_cache 0 [ 2149.135998][T24116] total_rss 102400 [ 2149.139732][T24116] total_rss_huge 0 [ 2149.147543][T24116] total_shmem 0 [ 2149.151028][T24116] total_mapped_file 0 [ 2149.155162][T24116] total_dirty 0 [ 2149.158660][T24116] total_writeback 0 [ 2149.162545][T24116] total_workingset_refault_anon 27748 [ 2149.167992][T24116] total_workingset_refault_file 333 [ 2149.173979][T24116] total_swap 303104 [ 2149.177877][T24116] total_swapcached 0 [ 2149.183061][T24116] total_pgpgin 301372 [ 2149.187212][T24116] total_pgpgout 301347 [ 2149.191373][T24116] total_pgfault 593184 [ 2149.196189][T24116] total_pgmajfault 26825 [ 2149.200509][T24116] total_inactive_anon 0 [ 2149.205373][T24116] total_active_anon 102400 [ 2149.209891][T24116] total_inactive_file 0 [ 2149.216578][T24116] total_active_file 0 [ 2149.220654][T24116] total_unevictable 0 [ 2149.229526][T24116] anon_cost 0 [ 2149.233545][T24116] file_cost 0 02:46:32 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000006c140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2149.237003][T24116] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24116,uid=0 [ 2149.253304][T24116] Memory cgroup out of memory: Killed process 24116 (syz-executor.4) total-vm:54508kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2149.322976][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.365978][T24118] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2149.379741][T24118] CPU: 0 PID: 24118 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2149.390196][T24118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2149.400247][T24118] Call Trace: [ 2149.403513][T24118] [ 2149.406429][T24118] dump_stack_lvl+0x1e7/0x2e0 [ 2149.411099][T24118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2149.416288][T24118] ? __pfx__printk+0x10/0x10 [ 2149.420861][T24118] ? ___ratelimit+0x4c4/0x670 [ 2149.425526][T24118] ? __pfx____ratelimit+0x10/0x10 [ 2149.430538][T24118] dump_header+0xda/0x6a0 [ 2149.434880][T24118] oom_kill_process+0x3a7/0x930 [ 2149.439763][T24118] out_of_memory+0xf67/0x1320 [ 2149.444447][T24118] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2149.450073][T24118] ? __pfx___mutex_lock+0x10/0x10 [ 2149.455091][T24118] ? __pfx_out_of_memory+0x10/0x10 [ 2149.460212][T24118] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2149.465769][T24118] ? __pfx_lock_release+0x10/0x10 [ 2149.470787][T24118] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2149.476857][T24118] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2149.482063][T24118] ? mem_cgroup_iter+0x3e9/0x560 [ 2149.487030][T24118] try_charge_memcg+0xda2/0x18a0 [ 2149.491998][T24118] ? __pfx_try_charge_memcg+0x10/0x10 [ 2149.497367][T24118] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2149.503074][T24118] ? __pfx_lock_release+0x10/0x10 [ 2149.508089][T24118] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2149.514064][T24118] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2149.519766][T24118] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2149.525560][T24118] obj_cgroup_charge+0x389/0x630 [ 2149.530488][T24118] ? obj_cgroup_charge+0x121/0x630 [ 2149.535594][T24118] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2149.541048][T24118] ? __pfx___might_resched+0x10/0x10 [ 2149.546325][T24118] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2149.552130][T24118] ? sock_alloc_inode+0x28/0xc0 [ 2149.556967][T24118] kmem_cache_alloc_lru+0x204/0x350 [ 2149.562154][T24118] sock_alloc_inode+0x28/0xc0 [ 2149.566818][T24118] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2149.572175][T24118] new_inode_pseudo+0x69/0x1e0 [ 2149.576925][T24118] __sock_create+0x123/0x920 [ 2149.581514][T24118] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2149.587422][T24118] __sys_socket+0x14f/0x3c0 [ 2149.591927][T24118] ? __pfx___sys_socket+0x10/0x10 [ 2149.596946][T24118] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2149.603265][T24118] ? do_syscall_64+0x108/0x240 [ 2149.608032][T24118] __x64_sys_socket+0x7a/0x90 [ 2149.612700][T24118] do_syscall_64+0xf9/0x240 [ 2149.617192][T24118] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2149.623072][T24118] RIP: 0033:0x7f810c87dda9 [ 2149.627479][T24118] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2149.647074][T24118] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2149.655476][T24118] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2149.663432][T24118] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2149.671391][T24118] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2149.679362][T24118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2149.687324][T24118] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2149.695299][T24118] [ 2149.698397][ C0] vkms_vblank_simulate: vblank timer overrun [ 2149.709940][T24118] memory: usage 307200kB, limit 307200kB, failcnt 75520 [ 2149.716975][T24118] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2149.725033][T24118] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2149.732816][T24118] Memory cgroup stats for /syz4: [ 2149.732962][T24118] cache 0 [ 2149.740884][T24118] rss 90112 [ 2149.744151][T24118] rss_huge 0 [ 2149.747381][T24118] shmem 0 [ 2149.750331][T24118] mapped_file 0 [ 2149.754141][T24118] dirty 0 [ 2149.757111][T24118] writeback 0 [ 2149.760401][T24118] workingset_refault_anon 27748 [ 2149.767110][T24118] workingset_refault_file 333 [ 2149.772005][T24118] swap 303104 [ 2149.775322][T24118] swapcached 0 [ 2149.778707][T24118] pgpgin 301379 [ 2149.782515][T24118] pgpgout 301357 [ 2149.786168][T24118] pgfault 593216 [ 2149.789729][T24118] pgmajfault 26825 [ 2149.793855][T24118] inactive_anon 0 [ 2149.797757][T24118] active_anon 90112 [ 2149.801667][T24118] inactive_file 0 [ 2149.805347][T24118] active_file 0 [ 2149.808819][T24118] unevictable 0 [ 2149.814717][T24118] hierarchical_memory_limit 314572800 [ 2149.820164][T24118] hierarchical_memsw_limit 9223372036854771712 [ 2149.826601][T24118] total_cache 0 [ 2149.830361][T24118] total_rss 90112 [ 2149.834282][T24118] total_rss_huge 0 [ 2149.838072][T24118] total_shmem 0 [ 2149.841831][T24118] total_mapped_file 0 [ 2149.845833][T24118] total_dirty 0 [ 2149.849305][T24118] total_writeback 0 [ 2149.853672][T24118] total_workingset_refault_anon 27748 [ 2149.859076][T24118] total_workingset_refault_file 333 [ 2149.864556][T24118] total_swap 303104 [ 2149.868387][T24118] total_swapcached 0 [ 2149.872653][T24118] total_pgpgin 301379 [ 2149.876649][T24118] total_pgpgout 301357 [ 2149.880719][T24118] total_pgfault 593216 [ 2149.885388][T24118] total_pgmajfault 26825 [ 2149.889678][T24118] total_inactive_anon 0 [ 2149.894307][T24118] total_active_anon 90112 [ 2149.899189][T24118] total_inactive_file 0 [ 2149.903782][T24118] total_active_file 0 [ 2149.907851][T24118] total_unevictable 0 [ 2149.918097][T24118] anon_cost 0 [ 2149.921621][T24118] file_cost 0 [ 2149.924919][T24118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24117,uid=0 [ 2149.940648][T24118] Memory cgroup out of memory: Killed process 24117 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:33 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000006f140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2149.969752][T24118] socket: no more sockets [ 2150.050533][T24119] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2150.060953][T24119] CPU: 0 PID: 24119 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2150.071405][T24119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2150.081463][T24119] Call Trace: [ 2150.084734][T24119] [ 2150.087658][T24119] dump_stack_lvl+0x1e7/0x2e0 [ 2150.092328][T24119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2150.097513][T24119] ? __pfx__printk+0x10/0x10 [ 2150.102095][T24119] ? ___ratelimit+0x4c4/0x670 [ 2150.106786][T24119] ? __pfx____ratelimit+0x10/0x10 [ 2150.111815][T24119] dump_header+0xda/0x6a0 [ 2150.116164][T24119] oom_kill_process+0x3a7/0x930 [ 2150.121030][T24119] out_of_memory+0xf67/0x1320 [ 2150.125702][T24119] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2150.131323][T24119] ? __pfx___mutex_lock+0x10/0x10 [ 2150.136349][T24119] ? __pfx_out_of_memory+0x10/0x10 [ 2150.141457][T24119] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2150.146985][T24119] ? __pfx_lock_release+0x10/0x10 [ 2150.151996][T24119] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2150.158055][T24119] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2150.163253][T24119] ? mem_cgroup_iter+0x3e9/0x560 [ 2150.168206][T24119] try_charge_memcg+0xda2/0x18a0 [ 2150.173159][T24119] ? __pfx_try_charge_memcg+0x10/0x10 [ 2150.178525][T24119] ? percpu_ref_tryget+0x14/0x180 [ 2150.183558][T24119] charge_memcg+0xa2/0x160 [ 2150.187971][T24119] __mem_cgroup_charge+0x27/0x80 [ 2150.192908][T24119] folio_prealloc+0x52/0x170 [ 2150.197493][T24119] do_wp_page+0x1222/0x4c90 [ 2150.202004][T24119] ? __pfx_do_wp_page+0x10/0x10 [ 2150.206859][T24119] ? __pfx_lock_acquire+0x10/0x10 [ 2150.211887][T24119] ? do_raw_spin_lock+0x14e/0x370 [ 2150.216914][T24119] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2150.223245][T24119] __handle_mm_fault+0x26ad/0x72d0 [ 2150.228377][T24119] ? reacquire_held_locks+0x3eb/0x690 [ 2150.233741][T24119] ? __pfx___handle_mm_fault+0x10/0x10 [ 2150.239218][T24119] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2150.244942][T24119] ? mtree_range_walk+0x6fd/0x8e0 [ 2150.249961][T24119] ? lock_vma_under_rcu+0x18a/0x730 [ 2150.255153][T24119] ? __pfx_lock_release+0x10/0x10 [ 2150.260170][T24119] ? lock_vma_under_rcu+0x2f9/0x730 [ 2150.265379][T24119] ? lock_vma_under_rcu+0x18a/0x730 [ 2150.270574][T24119] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2150.276117][T24119] handle_mm_fault+0x3c1/0x8a0 [ 2150.280882][T24119] exc_page_fault+0x456/0x870 [ 2150.285568][T24119] asm_exc_page_fault+0x26/0x30 [ 2150.290423][T24119] RIP: 0033:0x7f810c837543 [ 2150.294855][T24119] Code: 8b 4c 24 40 c6 40 20 01 89 48 24 8b 4c 24 4c 44 89 68 28 44 89 50 2c 89 48 78 40 88 7c 1a 04 8b 5c 24 44 4c 89 3d 2d 4a 17 00 <89> 98 80 00 00 00 0f 1f 80 00 00 00 00 48 8b 94 2c a0 01 00 00 48 [ 2150.314460][T24119] RSP: 002b:00007f810cacfb30 EFLAGS: 00010246 [ 2150.320539][T24119] RAX: 00007f810c9abf80 RBX: 0000000000000000 RCX: 0000000000000000 [ 2150.328504][T24119] RDX: 00007f810c9abff8 RSI: 00007f810c9abf88 RDI: 0000000000000000 [ 2150.336466][T24119] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f810c9abf8c [ 2150.344456][T24119] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f810c9abf80 [ 2150.352427][T24119] R13: 0000000000000f91 R14: 0000000000000000 R15: 00007f810c9abf80 [ 2150.360425][T24119] [ 2150.363565][ C0] vkms_vblank_simulate: vblank timer overrun [ 2150.452154][T24119] memory: usage 307200kB, limit 307200kB, failcnt 75616 [ 2150.459256][T24119] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2150.460855][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2150.482243][T24119] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2150.489573][T24119] Memory cgroup stats for /syz4: [ 2150.489696][T24119] cache 0 [ 2150.510386][T24119] rss 86016 [ 2150.515073][T24119] rss_huge 0 [ 2150.518301][T24119] shmem 0 [ 2150.521280][T24119] mapped_file 0 [ 2150.525322][T24119] dirty 0 [ 2150.528281][T24119] writeback 0 [ 2150.532009][T24119] workingset_refault_anon 27748 [ 2150.536902][T24119] workingset_refault_file 333 [ 2150.542136][T24119] swap 303104 [ 2150.545441][T24119] swapcached 0 [ 2150.548824][T24119] pgpgin 301390 [ 2150.553015][T24119] pgpgout 301369 [ 2150.556580][T24119] pgfault 593254 [ 2150.560147][T24119] pgmajfault 26825 [ 2150.567503][T24119] inactive_anon 0 [ 2150.571178][T24119] active_anon 86016 [ 2150.575053][T24119] inactive_file 0 [ 2150.578696][T24119] active_file 0 [ 2150.585951][T24119] unevictable 0 [ 2150.589494][T24119] hierarchical_memory_limit 314572800 [ 2150.595331][T24119] hierarchical_memsw_limit 9223372036854771712 [ 2150.601772][T24119] total_cache 0 [ 2150.605279][T24119] total_rss 86016 [ 2150.608912][T24119] total_rss_huge 0 [ 2150.612858][T24119] total_shmem 0 [ 2150.616537][T24119] total_mapped_file 0 [ 2150.620567][T24119] total_dirty 0 [ 2150.624564][T24119] total_writeback 0 [ 2150.628386][T24119] total_workingset_refault_anon 27748 [ 2150.634169][T24119] total_workingset_refault_file 333 [ 2150.639413][T24119] total_swap 303104 [ 2150.643475][T24119] total_swapcached 0 [ 2150.647392][T24119] total_pgpgin 301390 [ 2150.651920][T24119] total_pgpgout 301369 [ 2150.656044][T24119] total_pgfault 593254 [ 2150.660119][T24119] total_pgmajfault 26825 [ 2150.666926][T24119] total_inactive_anon 0 [ 2150.671132][T24119] total_active_anon 86016 [ 2150.677125][T24119] total_inactive_file 0 [ 2150.681312][T24119] total_active_file 0 [ 2150.687014][T24119] total_unevictable 0 [ 2150.691012][T24119] anon_cost 0 [ 2150.694754][T24119] file_cost 0 02:46:34 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000074140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2150.698056][T24119] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24119,uid=0 [ 2150.714251][T24119] Memory cgroup out of memory: Killed process 24119 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2150.790606][T24121] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2150.801871][T24121] CPU: 0 PID: 24121 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2150.812307][T24121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2150.822375][T24121] Call Trace: [ 2150.825657][T24121] [ 2150.828581][T24121] dump_stack_lvl+0x1e7/0x2e0 [ 2150.833266][T24121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2150.838462][T24121] ? __pfx__printk+0x10/0x10 [ 2150.843049][T24121] ? ___ratelimit+0x4c4/0x670 [ 2150.847725][T24121] ? __pfx____ratelimit+0x10/0x10 [ 2150.852753][T24121] dump_header+0xda/0x6a0 [ 2150.857106][T24121] oom_kill_process+0x3a7/0x930 [ 2150.861970][T24121] out_of_memory+0xf67/0x1320 [ 2150.866654][T24121] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2150.872291][T24121] ? __pfx___mutex_lock+0x10/0x10 [ 2150.877323][T24121] ? __pfx_out_of_memory+0x10/0x10 [ 2150.882440][T24121] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2150.887986][T24121] ? __pfx_lock_release+0x10/0x10 [ 2150.893007][T24121] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2150.899075][T24121] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2150.904274][T24121] ? mem_cgroup_iter+0x3e9/0x560 [ 2150.909212][T24121] try_charge_memcg+0xda2/0x18a0 [ 2150.914164][T24121] ? __pfx_try_charge_memcg+0x10/0x10 [ 2150.919528][T24121] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2150.925246][T24121] ? __pfx_lock_release+0x10/0x10 [ 2150.930280][T24121] ? memcg_account_kmem+0x1e7/0x210 [ 2150.935503][T24121] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2150.941321][T24121] __memcg_kmem_charge_page+0xe1/0x250 [ 2150.946793][T24121] memcg_charge_kernel_stack+0x28a/0x550 [ 2150.952450][T24121] dup_task_struct+0x40d/0x7d0 [ 2150.957226][T24121] copy_process+0x5d5/0x3fc0 [ 2150.961832][T24121] ? __might_fault+0xa9/0x120 [ 2150.966511][T24121] ? __pfx_lock_release+0x10/0x10 [ 2150.971541][T24121] ? __pfx_copy_process+0x10/0x10 [ 2150.976561][T24121] ? __might_fault+0xc5/0x120 [ 2150.981237][T24121] ? __asan_memset+0x23/0x50 [ 2150.985829][T24121] kernel_clone+0x21d/0x8d0 [ 2150.990333][T24121] ? __pfx_kernel_clone+0x10/0x10 [ 2150.995364][T24121] __se_sys_clone3+0x2cb/0x350 [ 2151.000122][T24121] ? __pfx___se_sys_clone3+0x10/0x10 [ 2151.005432][T24121] ? do_syscall_64+0x108/0x240 [ 2151.010222][T24121] ? do_syscall_64+0xb4/0x240 [ 2151.014895][T24121] do_syscall_64+0xf9/0x240 [ 2151.019396][T24121] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2151.025297][T24121] RIP: 0033:0x7f810c8a9b99 [ 2151.029707][T24121] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2151.049320][T24121] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2151.057729][T24121] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2151.065696][T24121] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2151.073667][T24121] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2151.081630][T24121] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2151.089593][T24121] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2151.097567][T24121] [ 2151.100631][ C0] vkms_vblank_simulate: vblank timer overrun [ 2151.115931][T24121] memory: usage 307200kB, limit 307200kB, failcnt 75688 [ 2151.123137][T24121] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2151.131539][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2151.140845][T24121] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 2151.149004][T24121] Memory cgroup stats for /syz4: [ 2151.149114][T24121] cache 0 [ 2151.157132][T24121] rss 102400 [ 2151.160355][T24121] rss_huge 0 [ 2151.164086][T24121] shmem 0 [ 2151.167034][T24121] mapped_file 0 [ 2151.170500][T24121] dirty 0 [ 2151.173591][T24121] writeback 0 [ 2151.176893][T24121] workingset_refault_anon 27748 [ 2151.181882][T24121] workingset_refault_file 333 [ 2151.186595][T24121] swap 303104 [ 2151.189894][T24121] swapcached 0 [ 2151.193386][T24121] pgpgin 301405 [ 2151.196865][T24121] pgpgout 301380 [ 2151.200417][T24121] pgfault 593302 [ 2151.204089][T24121] pgmajfault 26825 [ 2151.207830][T24121] inactive_anon 0 [ 2151.211570][T24121] active_anon 102400 [ 2151.215465][T24121] inactive_file 0 [ 2151.219124][T24121] active_file 0 [ 2151.223279][T24121] unevictable 0 [ 2151.226761][T24121] hierarchical_memory_limit 314572800 [ 2151.235814][T24121] hierarchical_memsw_limit 9223372036854771712 [ 2151.242233][T24121] total_cache 0 [ 2151.245701][T24121] total_rss 102400 [ 2151.249427][T24121] total_rss_huge 0 [ 2151.253481][T24121] total_shmem 0 [ 2151.256986][T24121] total_mapped_file 0 [ 2151.260974][T24121] total_dirty 0 [ 2151.264788][T24121] total_writeback 0 [ 2151.268610][T24121] total_workingset_refault_anon 27748 [ 2151.274226][T24121] total_workingset_refault_file 333 [ 2151.279441][T24121] total_swap 303104 [ 2151.283581][T24121] total_swapcached 0 [ 2151.287518][T24121] total_pgpgin 301405 [ 2151.293956][T24121] total_pgpgout 301380 [ 2151.298048][T24121] total_pgfault 593302 [ 2151.302414][T24121] total_pgmajfault 26825 [ 2151.306677][T24121] total_inactive_anon 0 [ 2151.310838][T24121] total_active_anon 102400 [ 2151.315731][T24121] total_inactive_file 0 [ 2151.319908][T24121] total_active_file 0 [ 2151.324214][T24121] total_unevictable 0 [ 2151.328212][T24121] anon_cost 0 [ 2151.332777][T24121] file_cost 0 02:46:35 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000007a140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2151.336115][T24121] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24121,uid=0 [ 2151.355185][T24121] Memory cgroup out of memory: Killed process 24121 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2151.466052][T24124] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2151.476718][T24124] CPU: 0 PID: 24124 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2151.478938][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2151.487143][T24124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2151.487162][T24124] Call Trace: [ 2151.487172][T24124] [ 2151.487182][T24124] dump_stack_lvl+0x1e7/0x2e0 [ 2151.516158][T24124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2151.521352][T24124] ? __pfx__printk+0x10/0x10 [ 2151.525931][T24124] ? ___ratelimit+0x4c4/0x670 [ 2151.530599][T24124] ? __pfx____ratelimit+0x10/0x10 [ 2151.535630][T24124] dump_header+0xda/0x6a0 [ 2151.539983][T24124] oom_kill_process+0x3a7/0x930 [ 2151.544828][T24124] out_of_memory+0xf67/0x1320 [ 2151.549495][T24124] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2151.555113][T24124] ? __pfx___mutex_lock+0x10/0x10 [ 2151.560129][T24124] ? __pfx_out_of_memory+0x10/0x10 [ 2151.565240][T24124] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2151.570772][T24124] ? __pfx_lock_release+0x10/0x10 [ 2151.575784][T24124] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2151.581851][T24124] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2151.587073][T24124] ? mem_cgroup_iter+0x3e9/0x560 [ 2151.592032][T24124] try_charge_memcg+0xda2/0x18a0 [ 2151.596968][T24124] ? __pfx_try_charge_memcg+0x10/0x10 [ 2151.602326][T24124] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2151.608027][T24124] ? __pfx_lock_release+0x10/0x10 [ 2151.613041][T24124] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2151.619009][T24124] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2151.624712][T24124] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2151.630499][T24124] obj_cgroup_charge+0x389/0x630 [ 2151.635444][T24124] ? obj_cgroup_charge+0x121/0x630 [ 2151.640581][T24124] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2151.646052][T24124] ? __pfx___might_resched+0x10/0x10 [ 2151.651331][T24124] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2151.657134][T24124] ? sock_alloc_inode+0x28/0xc0 [ 2151.661975][T24124] kmem_cache_alloc_lru+0x204/0x350 [ 2151.667162][T24124] sock_alloc_inode+0x28/0xc0 [ 2151.671826][T24124] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2151.677184][T24124] new_inode_pseudo+0x69/0x1e0 [ 2151.681947][T24124] __sock_create+0x123/0x920 [ 2151.686560][T24124] ? restore_fpregs_from_fpstate+0x100/0x250 [ 2151.692547][T24124] __sys_socket+0x14f/0x3c0 [ 2151.697041][T24124] ? __pfx___sys_socket+0x10/0x10 [ 2151.702055][T24124] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2151.708390][T24124] ? do_syscall_64+0x108/0x240 [ 2151.713149][T24124] __x64_sys_socket+0x7a/0x90 [ 2151.717815][T24124] do_syscall_64+0xf9/0x240 [ 2151.722310][T24124] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2151.728189][T24124] RIP: 0033:0x7f810c87dda9 [ 2151.732605][T24124] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2151.752228][T24124] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2151.760630][T24124] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2151.768586][T24124] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2151.776541][T24124] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2151.784512][T24124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2151.792487][T24124] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2151.800496][T24124] [ 2151.803610][ C0] vkms_vblank_simulate: vblank timer overrun [ 2151.815494][T24124] memory: usage 307200kB, limit 307200kB, failcnt 75790 [ 2151.822577][T24124] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2151.830514][T24124] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2151.837933][T24124] Memory cgroup stats for /syz4: [ 2151.838071][T24124] cache 0 [ 2151.846657][T24124] rss 102400 [ 2151.849878][T24124] rss_huge 0 [ 2151.853218][T24124] shmem 0 [ 2151.856172][T24124] mapped_file 0 [ 2151.859642][T24124] dirty 0 [ 2151.862799][T24124] writeback 0 [ 2151.866091][T24124] workingset_refault_anon 27748 [ 2151.871036][T24124] workingset_refault_file 333 [ 2151.876029][T24124] swap 303104 [ 2151.879346][T24124] swapcached 0 [ 2151.882899][T24124] pgpgin 301415 [ 2151.886408][T24124] pgpgout 301390 [ 2151.889973][T24124] pgfault 593341 [ 2151.893638][T24124] pgmajfault 26825 [ 2151.897373][T24124] inactive_anon 0 [ 2151.901024][T24124] active_anon 102400 [ 2151.905261][T24124] inactive_file 0 [ 2151.908924][T24124] active_file 0 [ 2151.912609][T24124] unevictable 0 [ 2151.916087][T24124] hierarchical_memory_limit 314572800 [ 2151.924989][T24124] hierarchical_memsw_limit 9223372036854771712 [ 2151.931164][T24124] total_cache 0 [ 2151.934925][T24124] total_rss 102400 [ 2151.938925][T24124] total_rss_huge 0 [ 2151.943010][T24124] total_shmem 0 [ 2151.946751][T24124] total_mapped_file 0 [ 2151.950747][T24124] total_dirty 0 [ 2151.954553][T24124] total_writeback 0 [ 2151.958386][T24124] total_workingset_refault_anon 27748 [ 2151.964254][T24124] total_workingset_refault_file 333 [ 2151.969508][T24124] total_swap 303104 [ 2151.973615][T24124] total_swapcached 0 [ 2151.977546][T24124] total_pgpgin 301415 [ 2151.984203][T24124] total_pgpgout 301390 [ 2151.988369][T24124] total_pgfault 593341 [ 2151.992954][T24124] total_pgmajfault 26825 [ 2151.997219][T24124] total_inactive_anon 0 [ 2152.001797][T24124] total_active_anon 102400 [ 2152.006348][T24124] total_inactive_file 0 [ 2152.010618][T24124] total_active_file 0 [ 2152.014899][T24124] total_unevictable 0 02:46:35 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000094140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2152.018930][T24124] anon_cost 0 [ 2152.022827][T24124] file_cost 0 [ 2152.026132][T24124] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24123,uid=0 [ 2152.043472][T24124] Memory cgroup out of memory: Killed process 24123 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2152.127688][T24125] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2152.138272][T24125] CPU: 0 PID: 24125 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2152.148700][T24125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2152.158749][T24125] Call Trace: [ 2152.162022][T24125] [ 2152.164943][T24125] dump_stack_lvl+0x1e7/0x2e0 [ 2152.169630][T24125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2152.174822][T24125] ? __pfx__printk+0x10/0x10 [ 2152.179400][T24125] ? ___ratelimit+0x4c4/0x670 [ 2152.184077][T24125] ? __pfx____ratelimit+0x10/0x10 [ 2152.189097][T24125] dump_header+0xda/0x6a0 [ 2152.193438][T24125] oom_kill_process+0x3a7/0x930 [ 2152.198309][T24125] out_of_memory+0xf67/0x1320 [ 2152.202990][T24125] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2152.208618][T24125] ? __pfx___mutex_lock+0x10/0x10 [ 2152.213642][T24125] ? __pfx_out_of_memory+0x10/0x10 [ 2152.218755][T24125] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2152.224295][T24125] ? __pfx_lock_release+0x10/0x10 [ 2152.229315][T24125] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2152.235378][T24125] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2152.240572][T24125] ? mem_cgroup_iter+0x3e9/0x560 [ 2152.245512][T24125] try_charge_memcg+0xda2/0x18a0 [ 2152.250458][T24125] ? __pfx_try_charge_memcg+0x10/0x10 [ 2152.255826][T24125] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2152.261547][T24125] ? __pfx_lock_release+0x10/0x10 [ 2152.266582][T24125] ? memcg_account_kmem+0x1e7/0x210 [ 2152.271787][T24125] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2152.277588][T24125] __memcg_kmem_charge_page+0xe1/0x250 [ 2152.283047][T24125] memcg_charge_kernel_stack+0x11c/0x550 [ 2152.288679][T24125] dup_task_struct+0x15d/0x7d0 [ 2152.293444][T24125] copy_process+0x5d5/0x3fc0 [ 2152.298039][T24125] ? __might_fault+0xa9/0x120 [ 2152.302715][T24125] ? __pfx_lock_release+0x10/0x10 [ 2152.307740][T24125] ? __pfx_copy_process+0x10/0x10 [ 2152.312757][T24125] ? __might_fault+0xc5/0x120 [ 2152.317427][T24125] ? __asan_memset+0x23/0x50 [ 2152.322015][T24125] kernel_clone+0x21d/0x8d0 [ 2152.326515][T24125] ? __pfx_kernel_clone+0x10/0x10 [ 2152.331545][T24125] __se_sys_clone3+0x2cb/0x350 [ 2152.336306][T24125] ? __pfx___se_sys_clone3+0x10/0x10 [ 2152.341621][T24125] ? do_syscall_64+0x108/0x240 [ 2152.346393][T24125] ? do_syscall_64+0xb4/0x240 [ 2152.351073][T24125] do_syscall_64+0xf9/0x240 [ 2152.355578][T24125] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2152.361476][T24125] RIP: 0033:0x7f810c8a9b99 [ 2152.365896][T24125] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2152.385495][T24125] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2152.393936][T24125] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2152.401901][T24125] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2152.409872][T24125] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2152.417837][T24125] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2152.425801][T24125] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2152.433775][T24125] [ 2152.437071][ C0] vkms_vblank_simulate: vblank timer overrun [ 2152.448014][T24125] memory: usage 307200kB, limit 307200kB, failcnt 75854 [ 2152.455130][T24125] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2152.464465][T24125] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 2152.472209][T24125] Memory cgroup stats for /syz4: [ 2152.472337][T24125] cache 0 [ 2152.480330][T24125] rss 102400 [ 2152.483709][T24125] rss_huge 0 [ 2152.487010][T24125] shmem 0 [ 2152.490039][T24125] mapped_file 0 [ 2152.493970][T24125] dirty 0 [ 2152.497267][T24125] writeback 0 [ 2152.500639][T24125] workingset_refault_anon 27748 [ 2152.506342][T24125] workingset_refault_file 333 [ 2152.511142][T24125] swap 303104 [ 2152.516461][T24125] swapcached 0 [ 2152.519138][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2152.519933][T24125] pgpgin 301427 [ 2152.532433][T24125] pgpgout 301402 [ 2152.536119][T24125] pgfault 593382 [ 2152.539768][T24125] pgmajfault 26825 [ 2152.544272][T24125] inactive_anon 0 [ 2152.547980][T24125] active_anon 81920 [ 2152.554333][T24125] inactive_file 0 [ 2152.558206][T24125] active_file 0 [ 2152.563173][T24125] unevictable 0 [ 2152.566651][T24125] hierarchical_memory_limit 314572800 [ 2152.572502][T24125] hierarchical_memsw_limit 9223372036854771712 [ 2152.578665][T24125] total_cache 0 [ 2152.582669][T24125] total_rss 102400 [ 2152.586441][T24125] total_rss_huge 0 [ 2152.590167][T24125] total_shmem 0 [ 2152.594335][T24125] total_mapped_file 0 [ 2152.598555][T24125] total_dirty 0 [ 2152.602400][T24125] total_writeback 0 [ 2152.606229][T24125] total_workingset_refault_anon 27748 [ 2152.612215][T24125] total_workingset_refault_file 333 [ 2152.617426][T24125] total_swap 303104 [ 2152.621277][T24125] total_swapcached 0 [ 2152.626041][T24125] total_pgpgin 301427 [ 2152.630059][T24125] total_pgpgout 301402 [ 2152.634685][T24125] total_pgfault 593382 [ 2152.638819][T24125] total_pgmajfault 26825 [ 2152.643582][T24125] total_inactive_anon 0 [ 2152.647751][T24125] total_active_anon 81920 [ 2152.652776][T24125] total_inactive_file 0 [ 2152.656962][T24125] total_active_file 0 [ 2152.660957][T24125] total_unevictable 0 [ 2152.668108][T24125] anon_cost 0 [ 2152.671802][T24125] file_cost 0 02:46:36 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="010400000000009d140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2152.675108][T24125] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24125,uid=0 [ 2152.691237][T24125] Memory cgroup out of memory: Killed process 24125 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2152.800724][T24126] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2152.811358][T24126] CPU: 0 PID: 24126 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2152.821794][T24126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2152.831842][T24126] Call Trace: [ 2152.835118][T24126] [ 2152.838042][T24126] dump_stack_lvl+0x1e7/0x2e0 [ 2152.842715][T24126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2152.847908][T24126] ? __pfx__printk+0x10/0x10 [ 2152.852485][T24126] ? ___ratelimit+0x4c4/0x670 [ 2152.857153][T24126] ? __pfx____ratelimit+0x10/0x10 [ 2152.862182][T24126] dump_header+0xda/0x6a0 [ 2152.866542][T24126] oom_kill_process+0x3a7/0x930 [ 2152.871427][T24126] out_of_memory+0xf67/0x1320 [ 2152.876121][T24126] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2152.881747][T24126] ? __pfx___mutex_lock+0x10/0x10 [ 2152.886777][T24126] ? __pfx_out_of_memory+0x10/0x10 [ 2152.891901][T24126] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2152.897434][T24126] ? __pfx_lock_release+0x10/0x10 [ 2152.902449][T24126] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2152.908508][T24126] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2152.913709][T24126] ? mem_cgroup_iter+0x3e9/0x560 [ 2152.918661][T24126] try_charge_memcg+0xda2/0x18a0 [ 2152.923615][T24126] ? __pfx_try_charge_memcg+0x10/0x10 [ 2152.928983][T24126] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2152.934696][T24126] ? __pfx_lock_release+0x10/0x10 [ 2152.939722][T24126] ? memcg_account_kmem+0x1e7/0x210 [ 2152.944960][T24126] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2152.950782][T24126] __memcg_kmem_charge_page+0xe1/0x250 [ 2152.956241][T24126] memcg_charge_kernel_stack+0x28a/0x550 [ 2152.961873][T24126] dup_task_struct+0x15d/0x7d0 [ 2152.966636][T24126] copy_process+0x5d5/0x3fc0 [ 2152.971232][T24126] ? __might_fault+0xa9/0x120 [ 2152.975911][T24126] ? __pfx_lock_release+0x10/0x10 [ 2152.980941][T24126] ? __pfx_copy_process+0x10/0x10 [ 2152.985959][T24126] ? __might_fault+0xc5/0x120 [ 2152.990633][T24126] ? __asan_memset+0x23/0x50 [ 2152.995229][T24126] kernel_clone+0x21d/0x8d0 [ 2152.999729][T24126] ? __pfx_kernel_clone+0x10/0x10 [ 2153.004768][T24126] __se_sys_clone3+0x2cb/0x350 [ 2153.009528][T24126] ? __pfx___se_sys_clone3+0x10/0x10 [ 2153.014839][T24126] ? do_syscall_64+0x108/0x240 [ 2153.019600][T24126] ? do_syscall_64+0xb4/0x240 [ 2153.024274][T24126] do_syscall_64+0xf9/0x240 [ 2153.028773][T24126] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2153.034664][T24126] RIP: 0033:0x7f810c8a9b99 [ 2153.039077][T24126] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2153.058674][T24126] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2153.067083][T24126] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2153.075050][T24126] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2153.083019][T24126] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2153.090983][T24126] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2153.098949][T24126] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2153.106926][T24126] [ 2153.110061][ C0] vkms_vblank_simulate: vblank timer overrun [ 2153.128868][T24126] memory: usage 307200kB, limit 307200kB, failcnt 75991 [ 2153.136013][T24126] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2153.145555][T24126] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 2153.153383][T24126] Memory cgroup stats for /syz4: [ 2153.153515][T24126] cache 0 [ 2153.161873][T24126] rss 102400 [ 2153.165168][T24126] rss_huge 0 [ 2153.168513][T24126] shmem 0 [ 2153.172240][T24126] mapped_file 0 [ 2153.176016][T24126] dirty 0 [ 2153.178964][T24126] writeback 0 [ 2153.182882][T24126] workingset_refault_anon 27748 [ 2153.187777][T24126] workingset_refault_file 333 [ 2153.193031][T24126] swap 303104 [ 2153.196335][T24126] swapcached 0 [ 2153.199712][T24126] pgpgin 301438 [ 2153.204041][T24126] pgpgout 301413 [ 2153.207609][T24126] pgfault 593421 [ 2153.211178][T24126] pgmajfault 26825 [ 2153.215583][T24126] inactive_anon 0 [ 2153.219271][T24126] active_anon 81920 [ 2153.224724][T24126] inactive_file 0 [ 2153.228392][T24126] active_file 0 [ 2153.233492][T24126] unevictable 0 [ 2153.237011][T24126] hierarchical_memory_limit 314572800 [ 2153.242943][T24126] hierarchical_memsw_limit 9223372036854771712 [ 2153.249115][T24126] total_cache 0 [ 2153.253004][T24126] total_rss 102400 [ 2153.256744][T24126] total_rss_huge 0 [ 2153.260479][T24126] total_shmem 0 [ 2153.292784][T24126] total_mapped_file 0 [ 2153.296803][T24126] total_dirty 0 [ 2153.300251][T24126] total_writeback 0 [ 2153.321494][T24126] total_workingset_refault_anon 27748 [ 2153.326986][T24126] total_workingset_refault_file 333 [ 2153.333594][T24126] total_swap 303104 [ 2153.337428][T24126] total_swapcached 0 [ 2153.341326][T24126] total_pgpgin 301438 [ 2153.346000][T24126] total_pgpgout 301413 [ 2153.350080][T24126] total_pgfault 593421 [ 2153.354576][T24126] total_pgmajfault 26825 [ 2153.358969][T24126] total_inactive_anon 0 [ 2153.363547][T24126] total_active_anon 81920 [ 2153.367973][T24126] total_inactive_file 0 [ 2153.372617][T24126] total_active_file 0 [ 2153.376707][T24126] total_unevictable 0 [ 2153.383193][T24126] anon_cost 0 [ 2153.386568][T24126] file_cost 0 02:46:37 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000000c5140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2153.389956][T24126] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24126,uid=0 [ 2153.406029][T24126] Memory cgroup out of memory: Killed process 24126 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2153.470149][T24128] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2153.484951][T24128] CPU: 1 PID: 24128 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2153.495399][T24128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2153.505458][T24128] Call Trace: [ 2153.508742][T24128] [ 2153.511676][T24128] dump_stack_lvl+0x1e7/0x2e0 [ 2153.516371][T24128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2153.521569][T24128] ? __pfx__printk+0x10/0x10 [ 2153.526160][T24128] ? ___ratelimit+0x4c4/0x670 [ 2153.530826][T24128] ? __pfx____ratelimit+0x10/0x10 [ 2153.535843][T24128] dump_header+0xda/0x6a0 [ 2153.540166][T24128] oom_kill_process+0x3a7/0x930 [ 2153.545026][T24128] out_of_memory+0xf67/0x1320 [ 2153.549719][T24128] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2153.555348][T24128] ? __pfx___mutex_lock+0x10/0x10 [ 2153.560366][T24128] ? __pfx_out_of_memory+0x10/0x10 [ 2153.565498][T24128] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2153.571056][T24128] ? __pfx_lock_release+0x10/0x10 [ 2153.576072][T24128] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2153.582146][T24128] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2153.587354][T24128] ? mem_cgroup_iter+0x3e9/0x560 [ 2153.592304][T24128] try_charge_memcg+0xda2/0x18a0 [ 2153.597260][T24128] ? __pfx_try_charge_memcg+0x10/0x10 [ 2153.602635][T24128] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2153.608359][T24128] ? __pfx_lock_release+0x10/0x10 [ 2153.613378][T24128] ? memcg_account_kmem+0x1e7/0x210 [ 2153.618572][T24128] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2153.624393][T24128] __memcg_kmem_charge_page+0xe1/0x250 [ 2153.629863][T24128] memcg_charge_kernel_stack+0x196/0x550 [ 2153.635487][T24128] dup_task_struct+0x15d/0x7d0 [ 2153.640240][T24128] copy_process+0x5d5/0x3fc0 [ 2153.644843][T24128] ? __might_fault+0xa9/0x120 [ 2153.649525][T24128] ? __pfx_lock_release+0x10/0x10 [ 2153.654544][T24128] ? __pfx_copy_process+0x10/0x10 [ 2153.659553][T24128] ? __might_fault+0xc5/0x120 [ 2153.664235][T24128] ? __asan_memset+0x23/0x50 [ 2153.668837][T24128] kernel_clone+0x21d/0x8d0 [ 2153.673350][T24128] ? __pfx_kernel_clone+0x10/0x10 [ 2153.678392][T24128] __se_sys_clone3+0x2cb/0x350 [ 2153.683165][T24128] ? __pfx___se_sys_clone3+0x10/0x10 [ 2153.688477][T24128] ? do_syscall_64+0x108/0x240 [ 2153.693243][T24128] ? do_syscall_64+0xb4/0x240 [ 2153.697913][T24128] do_syscall_64+0xf9/0x240 [ 2153.702434][T24128] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2153.708336][T24128] RIP: 0033:0x7f810c8a9b99 [ 2153.712741][T24128] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2153.732349][T24128] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2153.740772][T24128] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2153.748734][T24128] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2153.756693][T24128] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2153.764659][T24128] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2153.772642][T24128] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2153.780627][T24128] [ 2153.788833][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2153.799986][T24128] memory: usage 307200kB, limit 307200kB, failcnt 76039 [ 2153.807457][T24128] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2153.815514][T24128] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 2153.823256][T24128] Memory cgroup stats for /syz4: [ 2153.823360][T24128] cache 0 [ 2153.831263][T24128] rss 102400 [ 2153.835174][T24128] rss_huge 0 [ 2153.838437][T24128] shmem 0 [ 2153.846820][T24128] mapped_file 0 [ 2153.850305][T24128] dirty 0 [ 2153.853705][T24128] writeback 0 [ 2153.857010][T24128] workingset_refault_anon 27748 [ 2153.867756][T24128] workingset_refault_file 333 [ 2153.875058][T24128] swap 303104 [ 2153.878364][T24128] swapcached 0 [ 2153.888130][T24128] pgpgin 301448 [ 2153.893427][T24128] pgpgout 301423 [ 2153.898135][T24128] pgfault 593458 [ 2153.907472][T24128] pgmajfault 26825 [ 2153.911217][T24128] inactive_anon 0 [ 2153.915035][T24128] active_anon 102400 [ 2153.919183][T24128] inactive_file 0 [ 2153.928690][T24128] active_file 0 [ 2153.932353][T24128] unevictable 0 [ 2153.935909][T24128] hierarchical_memory_limit 314572800 [ 2153.941355][T24128] hierarchical_memsw_limit 9223372036854771712 [ 2153.950099][T24128] total_cache 0 [ 2153.959436][T24128] total_rss 102400 [ 2153.963535][T24128] total_rss_huge 0 [ 2153.969604][T24128] total_shmem 0 [ 2153.975593][T24128] total_mapped_file 0 [ 2153.980786][T24128] total_dirty 0 [ 2153.986450][T24128] total_writeback 0 [ 2153.990335][T24128] total_workingset_refault_anon 27748 [ 2153.997597][T24128] total_workingset_refault_file 333 [ 2154.004041][T24128] total_swap 303104 [ 2154.007994][T24128] total_swapcached 0 [ 2154.012578][T24128] total_pgpgin 301448 [ 2154.016645][T24128] total_pgpgout 301423 [ 2154.020814][T24128] total_pgfault 593458 [ 2154.025044][T24128] total_pgmajfault 26825 [ 2154.029631][T24128] total_inactive_anon 0 [ 2154.033941][T24128] total_active_anon 102400 [ 2154.038457][T24128] total_inactive_file 0 [ 2154.042957][T24128] total_active_file 0 [ 2154.047025][T24128] total_unevictable 0 [ 2154.051095][T24128] anon_cost 0 [ 2154.054640][T24128] file_cost 0 02:46:37 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000000001c0012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2154.058005][T24128] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24128,uid=0 [ 2154.073853][T24128] Memory cgroup out of memory: Killed process 24128 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2154.146135][T24130] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2154.157072][T24130] CPU: 0 PID: 24130 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2154.167496][T24130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2154.177539][T24130] Call Trace: [ 2154.180806][T24130] [ 2154.183724][T24130] dump_stack_lvl+0x1e7/0x2e0 [ 2154.188403][T24130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2154.193595][T24130] ? __pfx__printk+0x10/0x10 [ 2154.198199][T24130] ? ___ratelimit+0x4c4/0x670 [ 2154.202886][T24130] ? __pfx____ratelimit+0x10/0x10 [ 2154.207905][T24130] dump_header+0xda/0x6a0 [ 2154.212250][T24130] oom_kill_process+0x3a7/0x930 [ 2154.217150][T24130] out_of_memory+0xf67/0x1320 [ 2154.221865][T24130] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2154.227501][T24130] ? __pfx___mutex_lock+0x10/0x10 [ 2154.232521][T24130] ? __pfx_out_of_memory+0x10/0x10 [ 2154.237628][T24130] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2154.243165][T24130] ? __pfx_lock_release+0x10/0x10 [ 2154.248183][T24130] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2154.254243][T24130] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2154.259433][T24130] ? mem_cgroup_iter+0x3e9/0x560 [ 2154.264387][T24130] try_charge_memcg+0xda2/0x18a0 [ 2154.269351][T24130] ? __pfx_try_charge_memcg+0x10/0x10 [ 2154.274732][T24130] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2154.280448][T24130] ? __pfx_lock_release+0x10/0x10 [ 2154.285468][T24130] ? memcg_account_kmem+0x1e7/0x210 [ 2154.290658][T24130] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2154.296453][T24130] __memcg_kmem_charge_page+0xe1/0x250 [ 2154.301908][T24130] memcg_charge_kernel_stack+0x210/0x550 [ 2154.307537][T24130] dup_task_struct+0x15d/0x7d0 [ 2154.312305][T24130] copy_process+0x5d5/0x3fc0 [ 2154.316933][T24130] ? __might_fault+0xa9/0x120 [ 2154.321622][T24130] ? __pfx_lock_release+0x10/0x10 [ 2154.326648][T24130] ? __pfx_copy_process+0x10/0x10 [ 2154.331669][T24130] ? __might_fault+0xc5/0x120 [ 2154.336347][T24130] ? __asan_memset+0x23/0x50 [ 2154.340934][T24130] kernel_clone+0x21d/0x8d0 [ 2154.345433][T24130] ? __pfx_kernel_clone+0x10/0x10 [ 2154.350473][T24130] __se_sys_clone3+0x2cb/0x350 [ 2154.355244][T24130] ? __pfx___se_sys_clone3+0x10/0x10 [ 2154.360534][T24130] ? do_syscall_64+0x108/0x240 [ 2154.365306][T24130] ? do_syscall_64+0xb4/0x240 [ 2154.370003][T24130] do_syscall_64+0xf9/0x240 [ 2154.374510][T24130] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2154.380412][T24130] RIP: 0033:0x7f810c8a9b99 [ 2154.384818][T24130] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2154.404413][T24130] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2154.412829][T24130] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2154.420811][T24130] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2154.428784][T24130] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2154.436744][T24130] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2154.444710][T24130] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2154.452678][T24130] [ 2154.455788][ C0] vkms_vblank_simulate: vblank timer overrun [ 2154.473189][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.481551][T24130] memory: usage 307184kB, limit 307200kB, failcnt 76121 [ 2154.488541][T24130] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 2154.497015][T24130] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 2154.504962][T24130] Memory cgroup stats for /syz4: [ 2154.505093][T24130] cache 0 [ 2154.513093][T24130] rss 61440 [ 2154.516273][T24130] rss_huge 0 [ 2154.519515][T24130] shmem 0 [ 2154.522821][T24130] mapped_file 0 [ 2154.526299][T24130] dirty 0 [ 2154.529242][T24130] writeback 0 [ 2154.532663][T24130] workingset_refault_anon 27748 [ 2154.537555][T24130] workingset_refault_file 333 [ 2154.542443][T24130] swap 303104 [ 2154.545752][T24130] swapcached 0 [ 2154.549137][T24130] pgpgin 301448 [ 2154.553058][T24130] pgpgout 301433 [ 2154.556630][T24130] pgfault 593467 [ 2154.560182][T24130] pgmajfault 26825 [ 2154.564216][T24130] inactive_anon 0 [ 2154.567869][T24130] active_anon 61440 [ 2154.573898][T24130] inactive_file 0 [ 2154.577549][T24130] active_file 0 [ 2154.581013][T24130] unevictable 0 [ 2154.589026][T24130] hierarchical_memory_limit 314572800 [ 2154.594647][T24130] hierarchical_memsw_limit 9223372036854771712 [ 2154.600833][T24130] total_cache 0 [ 2154.610358][T24130] total_rss 61440 [ 2154.614511][T24130] total_rss_huge 0 [ 2154.618251][T24130] total_shmem 0 [ 2154.627362][T24130] total_mapped_file 0 [ 2154.631371][T24130] total_dirty 0 [ 2154.635146][T24130] total_writeback 0 [ 2154.639011][T24130] total_workingset_refault_anon 27748 [ 2154.650381][T24130] total_workingset_refault_file 333 [ 2154.655935][T24130] total_swap 303104 [ 2154.659774][T24130] total_swapcached 0 [ 2154.665817][T24130] total_pgpgin 301448 [ 2154.669857][T24130] total_pgpgout 301433 [ 2154.674376][T24130] total_pgfault 593467 [ 2154.678457][T24130] total_pgmajfault 26825 [ 2154.685357][T24130] total_inactive_anon 0 [ 2154.689541][T24130] total_active_anon 61440 [ 2154.694223][T24130] total_inactive_file 0 02:46:38 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000030012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2154.698396][T24130] total_active_file 0 [ 2154.703248][T24130] total_unevictable 0 [ 2154.707246][T24130] anon_cost 0 [ 2154.710894][T24130] file_cost 0 [ 2154.714552][T24130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24130,uid=0 [ 2154.730421][T24130] Memory cgroup out of memory: Killed process 24130 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2154.822441][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.837337][T24132] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2154.845765][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.859990][T24132] CPU: 0 PID: 24132 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2154.870441][T24132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2154.880506][T24132] Call Trace: [ 2154.883778][T24132] [ 2154.886722][T24132] dump_stack_lvl+0x1e7/0x2e0 [ 2154.891401][T24132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2154.896631][T24132] ? __pfx__printk+0x10/0x10 [ 2154.901208][T24132] ? ___ratelimit+0x4c4/0x670 [ 2154.905888][T24132] ? __pfx____ratelimit+0x10/0x10 [ 2154.910933][T24132] dump_header+0xda/0x6a0 [ 2154.915292][T24132] oom_kill_process+0x3a7/0x930 [ 2154.920191][T24132] out_of_memory+0xf67/0x1320 [ 2154.924860][T24132] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2154.930515][T24132] ? __pfx___mutex_lock+0x10/0x10 [ 2154.935539][T24132] ? __pfx_out_of_memory+0x10/0x10 [ 2154.940642][T24132] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2154.946173][T24132] ? __pfx_lock_release+0x10/0x10 [ 2154.951184][T24132] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2154.957239][T24132] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2154.962425][T24132] ? mem_cgroup_iter+0x3e9/0x560 [ 2154.967350][T24132] try_charge_memcg+0xda2/0x18a0 [ 2154.972286][T24132] ? __pfx_try_charge_memcg+0x10/0x10 [ 2154.977639][T24132] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2154.983342][T24132] ? __pfx_lock_release+0x10/0x10 [ 2154.988352][T24132] ? memcg_account_kmem+0x1e7/0x210 [ 2154.993544][T24132] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2154.999331][T24132] __memcg_kmem_charge_page+0xe1/0x250 [ 2155.004785][T24132] memcg_charge_kernel_stack+0x28a/0x550 [ 2155.010407][T24132] dup_task_struct+0x15d/0x7d0 [ 2155.015157][T24132] copy_process+0x5d5/0x3fc0 [ 2155.019749][T24132] ? __might_fault+0xa9/0x120 [ 2155.024414][T24132] ? __pfx_lock_release+0x10/0x10 [ 2155.029430][T24132] ? __pfx_copy_process+0x10/0x10 [ 2155.034438][T24132] ? __might_fault+0xc5/0x120 [ 2155.039100][T24132] ? __asan_memset+0x23/0x50 [ 2155.043678][T24132] kernel_clone+0x21d/0x8d0 [ 2155.048165][T24132] ? __pfx_kernel_clone+0x10/0x10 [ 2155.053204][T24132] __se_sys_clone3+0x2cb/0x350 [ 2155.057973][T24132] ? __might_fault+0xa9/0x120 [ 2155.063070][T24132] ? __pfx___se_sys_clone3+0x10/0x10 [ 2155.068351][T24132] ? do_syscall_64+0x108/0x240 [ 2155.073105][T24132] ? do_syscall_64+0xb4/0x240 [ 2155.077766][T24132] do_syscall_64+0xf9/0x240 [ 2155.082257][T24132] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2155.088136][T24132] RIP: 0033:0x7f810c8a9b99 [ 2155.092536][T24132] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2155.112125][T24132] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2155.120529][T24132] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2155.128487][T24132] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2155.136441][T24132] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2155.144407][T24132] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2155.152370][T24132] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2155.160338][T24132] [ 2155.163482][ C0] vkms_vblank_simulate: vblank timer overrun [ 2155.173235][T24132] memory: usage 307200kB, limit 307200kB, failcnt 76216 [ 2155.180354][T24132] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2155.188501][T24132] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 2155.196157][T24132] Memory cgroup stats for /syz4: [ 2155.196292][T24132] cache 0 [ 2155.204398][T24132] rss 86016 [ 2155.207650][T24132] rss_huge 0 [ 2155.210932][T24132] shmem 0 [ 2155.214042][T24132] mapped_file 0 [ 2155.217599][T24132] dirty 0 [ 2155.220633][T24132] writeback 0 [ 2155.225173][T24132] workingset_refault_anon 27748 [ 2155.246091][T24132] workingset_refault_file 333 [ 2155.250812][T24132] swap 303104 [ 2155.254649][T24132] swapcached 0 [ 2155.258106][T24132] pgpgin 301469 [ 2155.262251][T24132] pgpgout 301443 [ 2155.265842][T24132] pgfault 593528 [ 2155.269396][T24132] pgmajfault 26825 [ 2155.273659][T24132] inactive_anon 0 [ 2155.277340][T24132] active_anon 86016 [ 2155.281179][T24132] inactive_file 0 [ 2155.292879][T24132] active_file 0 [ 2155.296374][T24132] unevictable 0 [ 2155.299847][T24132] hierarchical_memory_limit 314572800 [ 2155.307038][T24132] hierarchical_memsw_limit 9223372036854771712 [ 2155.313555][T24132] total_cache 0 [ 2155.317029][T24132] total_rss 86016 [ 2155.320665][T24132] total_rss_huge 0 [ 2155.326406][T24132] total_shmem 0 [ 2155.329895][T24132] total_mapped_file 0 [ 2155.334307][T24132] total_dirty 0 [ 2155.337787][T24132] total_writeback 0 [ 2155.342133][T24132] total_workingset_refault_anon 27748 [ 2155.347527][T24132] total_workingset_refault_file 333 [ 2155.353137][T24132] total_swap 303104 [ 2155.356972][T24132] total_swapcached 0 [ 2155.360882][T24132] total_pgpgin 301469 [ 2155.365422][T24132] total_pgpgout 301443 [ 2155.369507][T24132] total_pgfault 593528 [ 2155.373980][T24132] total_pgmajfault 26825 [ 2155.378251][T24132] total_inactive_anon 0 [ 2155.382748][T24132] total_active_anon 86016 [ 2155.391593][T24132] total_inactive_file 0 [ 2155.395865][T24132] total_active_file 0 [ 2155.399925][T24132] total_unevictable 0 [ 2155.407891][T24132] anon_cost 0 [ 2155.411289][T24132] file_cost 0 [ 2155.415283][T24132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24132,uid=0 [ 2155.432168][T24132] Memory cgroup out of memory: Killed process 24132 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:39 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000040012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2155.509802][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.548221][T24135] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2155.562556][T24135] CPU: 0 PID: 24135 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2155.573010][T24135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2155.583074][T24135] Call Trace: [ 2155.586346][T24135] [ 2155.589268][T24135] dump_stack_lvl+0x1e7/0x2e0 [ 2155.593950][T24135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2155.599144][T24135] ? __pfx__printk+0x10/0x10 [ 2155.603724][T24135] ? ___ratelimit+0x4c4/0x670 [ 2155.608391][T24135] ? __pfx____ratelimit+0x10/0x10 [ 2155.613409][T24135] dump_header+0xda/0x6a0 [ 2155.617734][T24135] oom_kill_process+0x3a7/0x930 [ 2155.622598][T24135] out_of_memory+0xf67/0x1320 [ 2155.627298][T24135] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2155.632927][T24135] ? __pfx___mutex_lock+0x10/0x10 [ 2155.637963][T24135] ? __pfx_out_of_memory+0x10/0x10 [ 2155.643087][T24135] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2155.648631][T24135] ? __pfx_lock_release+0x10/0x10 [ 2155.653663][T24135] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2155.659744][T24135] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2155.664935][T24135] ? mem_cgroup_iter+0x3e9/0x560 [ 2155.669869][T24135] try_charge_memcg+0xda2/0x18a0 [ 2155.674841][T24135] ? __pfx_try_charge_memcg+0x10/0x10 [ 2155.680234][T24135] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2155.685948][T24135] ? __pfx_lock_release+0x10/0x10 [ 2155.690990][T24135] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2155.696976][T24135] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2155.702694][T24135] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2155.708497][T24135] obj_cgroup_charge+0x389/0x630 [ 2155.713432][T24135] ? obj_cgroup_charge+0x121/0x630 [ 2155.718542][T24135] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2155.724010][T24135] ? __pfx___might_resched+0x10/0x10 [ 2155.729308][T24135] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2155.735116][T24135] ? sock_alloc_inode+0x28/0xc0 [ 2155.739963][T24135] kmem_cache_alloc_lru+0x204/0x350 [ 2155.745156][T24135] sock_alloc_inode+0x28/0xc0 [ 2155.749825][T24135] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2155.755186][T24135] new_inode_pseudo+0x69/0x1e0 [ 2155.759943][T24135] __sock_create+0x123/0x920 [ 2155.764527][T24135] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2155.770414][T24135] __sys_socket+0x14f/0x3c0 [ 2155.774929][T24135] ? __pfx___sys_socket+0x10/0x10 [ 2155.779972][T24135] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2155.786294][T24135] ? do_syscall_64+0x108/0x240 [ 2155.791070][T24135] __x64_sys_socket+0x7a/0x90 [ 2155.795763][T24135] do_syscall_64+0xf9/0x240 [ 2155.800270][T24135] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2155.806243][T24135] RIP: 0033:0x7f810c87dda9 [ 2155.810671][T24135] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2155.830274][T24135] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2155.838685][T24135] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2155.846655][T24135] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2155.854613][T24135] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2155.862652][T24135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2155.870632][T24135] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2155.878661][T24135] [ 2155.879337][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2155.881692][ C0] vkms_vblank_simulate: vblank timer overrun [ 2155.888395][T24135] memory: usage 307200kB, limit 307200kB, failcnt 76303 [ 2155.924591][T24135] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2155.961523][T24135] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2155.968959][T24135] Memory cgroup stats for /syz4: [ 2155.969114][T24135] cache 0 [ 2155.980152][T24135] rss 102400 [ 2155.988337][T24135] rss_huge 0 [ 2155.998907][T24135] shmem 0 [ 2156.003315][T24135] mapped_file 0 [ 2156.006877][T24135] dirty 0 [ 2156.009898][T24135] writeback 0 [ 2156.013357][T24135] workingset_refault_anon 27748 [ 2156.018244][T24135] workingset_refault_file 333 [ 2156.023051][T24135] swap 303104 [ 2156.026348][T24135] swapcached 0 [ 2156.029729][T24135] pgpgin 301483 [ 2156.033686][T24135] pgpgout 301458 [ 2156.037593][T24135] pgfault 593577 [ 2156.041539][T24135] pgmajfault 26825 [ 2156.045275][T24135] inactive_anon 0 [ 2156.048918][T24135] active_anon 102400 [ 2156.052978][T24135] inactive_file 0 [ 2156.056637][T24135] active_file 0 [ 2156.060105][T24135] unevictable 0 [ 2156.065180][T24135] hierarchical_memory_limit 314572800 [ 2156.070611][T24135] hierarchical_memsw_limit 9223372036854771712 [ 2156.078426][T24135] total_cache 0 [ 2156.082145][T24135] total_rss 102400 [ 2156.085911][T24135] total_rss_huge 0 [ 2156.089643][T24135] total_shmem 0 [ 2156.093853][T24135] total_mapped_file 0 [ 2156.097860][T24135] total_dirty 0 [ 2156.101360][T24135] total_writeback 0 [ 2156.109790][T24135] total_workingset_refault_anon 27748 [ 2156.115582][T24135] total_workingset_refault_file 333 [ 2156.120842][T24135] total_swap 303104 [ 2156.125398][T24135] total_swapcached 0 [ 2156.129310][T24135] total_pgpgin 301483 [ 2156.134034][T24135] total_pgpgout 301458 [ 2156.138172][T24135] total_pgfault 593577 [ 2156.142789][T24135] total_pgmajfault 26825 [ 2156.147530][T24135] total_inactive_anon 0 [ 2156.152914][T24135] total_active_anon 102400 [ 2156.157363][T24135] total_inactive_file 0 [ 2156.163150][T24135] total_active_file 0 [ 2156.167162][T24135] total_unevictable 0 [ 2156.171191][T24135] anon_cost 0 [ 2156.175206][T24135] file_cost 0 02:46:39 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000000000b0012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2156.178525][T24135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24134,uid=0 [ 2156.194770][T24135] Memory cgroup out of memory: Killed process 24134 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2156.279257][T24136] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2156.292180][T24136] CPU: 1 PID: 24136 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2156.302624][T24136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2156.312693][T24136] Call Trace: [ 2156.315985][T24136] [ 2156.318920][T24136] dump_stack_lvl+0x1e7/0x2e0 [ 2156.323609][T24136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2156.328812][T24136] ? __pfx__printk+0x10/0x10 [ 2156.333402][T24136] ? ___ratelimit+0x4c4/0x670 [ 2156.338089][T24136] ? __pfx____ratelimit+0x10/0x10 [ 2156.343119][T24136] dump_header+0xda/0x6a0 [ 2156.347456][T24136] oom_kill_process+0x3a7/0x930 [ 2156.352313][T24136] out_of_memory+0xf67/0x1320 [ 2156.357003][T24136] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2156.362626][T24136] ? __pfx___mutex_lock+0x10/0x10 [ 2156.367645][T24136] ? __pfx_out_of_memory+0x10/0x10 [ 2156.372768][T24136] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2156.378321][T24136] ? __pfx_lock_release+0x10/0x10 [ 2156.383336][T24136] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2156.389393][T24136] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2156.394594][T24136] ? mem_cgroup_iter+0x3e9/0x560 [ 2156.399551][T24136] try_charge_memcg+0xda2/0x18a0 [ 2156.404512][T24136] ? __pfx_try_charge_memcg+0x10/0x10 [ 2156.409886][T24136] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2156.415609][T24136] ? __pfx_lock_release+0x10/0x10 [ 2156.420646][T24136] ? memcg_account_kmem+0x1e7/0x210 [ 2156.425843][T24136] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2156.431649][T24136] __memcg_kmem_charge_page+0xe1/0x250 [ 2156.437136][T24136] memcg_charge_kernel_stack+0x210/0x550 [ 2156.442782][T24136] dup_task_struct+0x15d/0x7d0 [ 2156.447541][T24136] copy_process+0x5d5/0x3fc0 [ 2156.452149][T24136] ? __might_fault+0xa9/0x120 [ 2156.456834][T24136] ? __pfx_lock_release+0x10/0x10 [ 2156.461861][T24136] ? __pfx_copy_process+0x10/0x10 [ 2156.466872][T24136] ? __might_fault+0xc5/0x120 [ 2156.471553][T24136] ? __asan_memset+0x23/0x50 [ 2156.476166][T24136] kernel_clone+0x21d/0x8d0 [ 2156.480677][T24136] ? __pfx_kernel_clone+0x10/0x10 [ 2156.485700][T24136] __se_sys_clone3+0x2cb/0x350 [ 2156.490454][T24136] ? __pfx___se_sys_clone3+0x10/0x10 [ 2156.495784][T24136] ? do_syscall_64+0x108/0x240 [ 2156.500565][T24136] ? do_syscall_64+0xb4/0x240 [ 2156.505236][T24136] do_syscall_64+0xf9/0x240 [ 2156.509747][T24136] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2156.515652][T24136] RIP: 0033:0x7f810c8a9b99 [ 2156.520079][T24136] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2156.539683][T24136] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2156.548095][T24136] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2156.556074][T24136] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2156.564078][T24136] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2156.572065][T24136] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2156.580055][T24136] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2156.588032][T24136] [ 2156.595232][T24136] memory: usage 307200kB, limit 307200kB, failcnt 76369 [ 2156.602257][T24136] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2156.610193][T24136] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 2156.617544][T24136] Memory cgroup stats for /syz4: [ 2156.617668][T24136] cache 0 [ 2156.625622][T24136] rss 102400 [ 2156.628825][T24136] rss_huge 0 [ 2156.632138][T24136] shmem 0 [ 2156.635093][T24136] mapped_file 0 [ 2156.638587][T24136] dirty 0 [ 2156.642057][T24136] writeback 0 [ 2156.645389][T24136] workingset_refault_anon 27748 [ 2156.650256][T24136] workingset_refault_file 333 [ 2156.656468][T24136] swap 303104 [ 2156.659778][T24136] swapcached 0 [ 2156.663606][T24136] pgpgin 301494 [ 2156.667102][T24136] pgpgout 301469 [ 2156.670677][T24136] pgfault 593620 [ 2156.674845][T24136] pgmajfault 26825 [ 2156.678585][T24136] inactive_anon 0 [ 2156.682718][T24136] active_anon 81920 [ 2156.686543][T24136] inactive_file 0 [ 2156.690180][T24136] active_file 0 [ 2156.694143][T24136] unevictable 0 [ 2156.697623][T24136] hierarchical_memory_limit 314572800 [ 2156.705479][T24136] hierarchical_memsw_limit 9223372036854771712 [ 2156.712056][T24136] total_cache 0 [ 2156.715539][T24136] total_rss 102400 [ 2156.719274][T24136] total_rss_huge 0 [ 2156.723589][T24136] total_shmem 0 [ 2156.727073][T24136] total_mapped_file 0 [ 2156.731073][T24136] total_dirty 0 [ 2156.735165][T24136] total_writeback 0 [ 2156.738991][T24136] total_workingset_refault_anon 27748 [ 2156.748590][T24136] total_workingset_refault_file 333 [ 2156.754276][T24136] total_swap 303104 [ 2156.759122][T24136] total_swapcached 0 [ 2156.763830][T24136] total_pgpgin 301494 [ 2156.767828][T24136] total_pgpgout 301469 [ 2156.772401][T24136] total_pgfault 593620 [ 2156.776492][T24136] total_pgmajfault 26825 [ 2156.780752][T24136] total_inactive_anon 0 [ 2156.785747][T24136] total_active_anon 81920 [ 2156.790108][T24136] total_inactive_file 0 [ 2156.794725][T24136] total_active_file 0 [ 2156.798724][T24136] total_unevictable 0 [ 2156.803253][T24136] anon_cost 0 [ 2156.806581][T24136] file_cost 0 [ 2156.809879][T24136] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24136,uid=0 02:46:40 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000000000c0012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2156.828041][T24136] Memory cgroup out of memory: Killed process 24136 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2156.918640][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.933892][T24139] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2156.944308][T24139] CPU: 1 PID: 24139 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2156.954736][T24139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2156.965144][T24139] Call Trace: [ 2156.968431][T24139] [ 2156.971351][T24139] dump_stack_lvl+0x1e7/0x2e0 [ 2156.976033][T24139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2156.981231][T24139] ? __pfx__printk+0x10/0x10 [ 2156.985821][T24139] ? ___ratelimit+0x4c4/0x670 [ 2156.990511][T24139] ? __pfx____ratelimit+0x10/0x10 [ 2156.995533][T24139] dump_header+0xda/0x6a0 [ 2156.999867][T24139] oom_kill_process+0x3a7/0x930 [ 2157.004725][T24139] out_of_memory+0xf67/0x1320 [ 2157.009421][T24139] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2157.015044][T24139] ? __pfx___mutex_lock+0x10/0x10 [ 2157.020066][T24139] ? __pfx_out_of_memory+0x10/0x10 [ 2157.025201][T24139] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2157.030755][T24139] ? __pfx_lock_release+0x10/0x10 [ 2157.035772][T24139] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2157.041848][T24139] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2157.047061][T24139] ? mem_cgroup_iter+0x3e9/0x560 [ 2157.051993][T24139] try_charge_memcg+0xda2/0x18a0 [ 2157.056930][T24139] ? __pfx_try_charge_memcg+0x10/0x10 [ 2157.062300][T24139] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2157.068031][T24139] ? __pfx_lock_release+0x10/0x10 [ 2157.073054][T24139] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2157.079031][T24139] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2157.084747][T24139] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2157.090564][T24139] obj_cgroup_charge+0x389/0x630 [ 2157.095495][T24139] ? obj_cgroup_charge+0x121/0x630 [ 2157.100597][T24139] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2157.106065][T24139] ? __pfx___might_resched+0x10/0x10 [ 2157.111366][T24139] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2157.117178][T24139] ? sock_alloc_inode+0x28/0xc0 [ 2157.122036][T24139] kmem_cache_alloc_lru+0x204/0x350 [ 2157.127248][T24139] sock_alloc_inode+0x28/0xc0 [ 2157.131930][T24139] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2157.137307][T24139] new_inode_pseudo+0x69/0x1e0 [ 2157.142080][T24139] __sock_create+0x123/0x920 [ 2157.146702][T24139] ? restore_fpregs_from_fpstate+0x100/0x250 [ 2157.152703][T24139] __sys_socket+0x14f/0x3c0 [ 2157.157216][T24139] ? __pfx___sys_socket+0x10/0x10 [ 2157.162595][T24139] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2157.168947][T24139] ? do_syscall_64+0x108/0x240 [ 2157.173724][T24139] __x64_sys_socket+0x7a/0x90 [ 2157.178392][T24139] do_syscall_64+0xf9/0x240 [ 2157.182916][T24139] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2157.188833][T24139] RIP: 0033:0x7f810c87dda9 [ 2157.193236][T24139] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2157.212846][T24139] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2157.221273][T24139] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2157.229232][T24139] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2157.237191][T24139] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2157.245164][T24139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2157.253142][T24139] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2157.261113][T24139] [ 2157.278283][T24139] memory: usage 307200kB, limit 307200kB, failcnt 76478 [ 2157.285380][T24139] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2157.293919][T24139] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2157.301315][T24139] Memory cgroup stats for /syz4: [ 2157.302009][T24139] cache 0 [ 2157.310000][T24139] rss 102400 [ 2157.313886][T24139] rss_huge 0 [ 2157.317205][T24139] shmem 0 [ 2157.320247][T24139] mapped_file 0 [ 2157.324449][T24139] dirty 0 [ 2157.327497][T24139] writeback 0 [ 2157.331000][T24139] workingset_refault_anon 27748 [ 2157.336278][T24139] workingset_refault_file 333 [ 2157.341047][T24139] swap 303104 [ 2157.344563][T24139] swapcached 0 [ 2157.348017][T24139] pgpgin 301504 [ 2157.351576][T24139] pgpgout 301479 [ 2157.355136][T24139] pgfault 593657 [ 2157.358692][T24139] pgmajfault 26825 [ 2157.362598][T24139] inactive_anon 0 [ 2157.366308][T24139] active_anon 102400 [ 2157.370278][T24139] inactive_file 0 [ 2157.377213][T24139] active_file 0 [ 2157.380822][T24139] unevictable 0 [ 2157.390415][T24139] hierarchical_memory_limit 314572800 [ 2157.395962][T24139] hierarchical_memsw_limit 9223372036854771712 [ 2157.402477][T24139] total_cache 0 [ 2157.406044][T24139] total_rss 102400 [ 2157.409910][T24139] total_rss_huge 0 [ 2157.413829][T24139] total_shmem 0 [ 2157.417396][T24139] total_mapped_file 0 [ 2157.421534][T24139] total_dirty 0 [ 2157.425086][T24139] total_writeback 0 [ 2157.428966][T24139] total_workingset_refault_anon 27748 [ 2157.434521][T24139] total_workingset_refault_file 333 [ 2157.439825][T24139] total_swap 303104 [ 2157.443819][T24139] total_swapcached 0 [ 2157.450766][T24139] total_pgpgin 301504 [ 2157.454929][T24139] total_pgpgout 301479 [ 2157.459540][T24139] total_pgfault 593657 [ 2157.463967][T24139] total_pgmajfault 26825 [ 2157.468337][T24139] total_inactive_anon 0 [ 2157.472689][T24139] total_active_anon 102400 [ 2157.478330][T24139] total_inactive_file 0 [ 2157.484797][T24139] total_active_file 0 [ 2157.488812][T24139] total_unevictable 0 [ 2157.492896][T24139] anon_cost 0 [ 2157.496361][T24139] file_cost 0 [ 2157.499661][T24139] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24138,uid=0 02:46:41 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="01040000000000001c0012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2157.515327][T24139] Memory cgroup out of memory: Killed process 24138 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2157.542809][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2157.544907][T24139] socket: no more sockets [ 2157.600864][T24140] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2157.613225][T24140] CPU: 1 PID: 24140 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2157.623657][T24140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2157.633709][T24140] Call Trace: [ 2157.637000][T24140] [ 2157.639917][T24140] dump_stack_lvl+0x1e7/0x2e0 [ 2157.644594][T24140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2157.649787][T24140] ? __pfx__printk+0x10/0x10 [ 2157.654374][T24140] ? ___ratelimit+0x4c4/0x670 [ 2157.659058][T24140] ? __pfx____ratelimit+0x10/0x10 [ 2157.664076][T24140] dump_header+0xda/0x6a0 [ 2157.668399][T24140] oom_kill_process+0x3a7/0x930 [ 2157.673255][T24140] out_of_memory+0xf67/0x1320 [ 2157.677944][T24140] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2157.683580][T24140] ? __pfx___mutex_lock+0x10/0x10 [ 2157.688600][T24140] ? __pfx_out_of_memory+0x10/0x10 [ 2157.693723][T24140] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2157.699274][T24140] ? __pfx_lock_release+0x10/0x10 [ 2157.704303][T24140] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2157.710386][T24140] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2157.715596][T24140] ? mem_cgroup_iter+0x3e9/0x560 [ 2157.720544][T24140] try_charge_memcg+0xda2/0x18a0 [ 2157.725481][T24140] ? __pfx_try_charge_memcg+0x10/0x10 [ 2157.730838][T24140] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2157.736551][T24140] ? __pfx_lock_release+0x10/0x10 [ 2157.741585][T24140] ? memcg_account_kmem+0x1e7/0x210 [ 2157.746778][T24140] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2157.752580][T24140] __memcg_kmem_charge_page+0xe1/0x250 [ 2157.758048][T24140] memcg_charge_kernel_stack+0x210/0x550 [ 2157.763673][T24140] dup_task_struct+0x15d/0x7d0 [ 2157.768426][T24140] copy_process+0x5d5/0x3fc0 [ 2157.773029][T24140] ? __might_fault+0xa9/0x120 [ 2157.777721][T24140] ? __pfx_lock_release+0x10/0x10 [ 2157.782757][T24140] ? __pfx_copy_process+0x10/0x10 [ 2157.787772][T24140] ? __might_fault+0xc5/0x120 [ 2157.792450][T24140] ? __asan_memset+0x23/0x50 [ 2157.797047][T24140] kernel_clone+0x21d/0x8d0 [ 2157.801546][T24140] ? __pfx_kernel_clone+0x10/0x10 [ 2157.806564][T24140] __se_sys_clone3+0x2cb/0x350 [ 2157.811315][T24140] ? __pfx___se_sys_clone3+0x10/0x10 [ 2157.816603][T24140] ? do_syscall_64+0x108/0x240 [ 2157.821357][T24140] ? do_syscall_64+0xb4/0x240 [ 2157.826030][T24140] do_syscall_64+0xf9/0x240 [ 2157.830521][T24140] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2157.836414][T24140] RIP: 0033:0x7f810c8a9b99 [ 2157.840836][T24140] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2157.860427][T24140] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2157.868829][T24140] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2157.876796][T24140] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2157.884776][T24140] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2157.892747][T24140] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2157.900717][T24140] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2157.908682][T24140] [ 2157.918197][T24140] memory: usage 307200kB, limit 307200kB, failcnt 76543 [ 2157.925298][T24140] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2157.933721][T24140] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 2157.941089][T24140] Memory cgroup stats for /syz4: [ 2157.941215][T24140] cache 0 [ 2157.949560][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2157.961442][T24140] rss 102400 [ 2157.964658][T24140] rss_huge 0 [ 2157.971003][T24140] shmem 0 [ 2157.974124][T24140] mapped_file 0 [ 2157.977620][T24140] dirty 0 [ 2157.980567][T24140] writeback 0 [ 2157.983988][T24140] workingset_refault_anon 27748 [ 2157.990136][T24140] workingset_refault_file 333 [ 2157.994935][T24140] swap 303104 [ 2157.998229][T24140] swapcached 0 [ 2158.004979][T24140] pgpgin 301516 [ 2158.008579][T24140] pgpgout 301490 [ 2158.012543][T24140] pgfault 593698 [ 2158.016105][T24140] pgmajfault 26825 [ 2158.019831][T24140] inactive_anon 0 [ 2158.026538][T24140] active_anon 102400 [ 2158.030455][T24140] inactive_file 0 [ 2158.034317][T24140] active_file 0 [ 2158.037789][T24140] unevictable 0 [ 2158.041261][T24140] hierarchical_memory_limit 314572800 [ 2158.047014][T24140] hierarchical_memsw_limit 9223372036854771712 [ 2158.053462][T24140] total_cache 0 [ 2158.056938][T24140] total_rss 102400 [ 2158.060671][T24140] total_rss_huge 0 [ 2158.064791][T24140] total_shmem 0 [ 2158.068264][T24140] total_mapped_file 0 [ 2158.072575][T24140] total_dirty 0 [ 2158.076053][T24140] total_writeback 0 [ 2158.079870][T24140] total_workingset_refault_anon 27748 [ 2158.085559][T24140] total_workingset_refault_file 333 [ 2158.091361][T24140] total_swap 303104 [ 2158.095753][T24140] total_swapcached 0 [ 2158.099670][T24140] total_pgpgin 301516 [ 2158.104026][T24140] total_pgpgout 301490 [ 2158.108108][T24140] total_pgfault 593698 [ 2158.112491][T24140] total_pgmajfault 26825 [ 2158.116750][T24140] total_inactive_anon 0 [ 2158.120922][T24140] total_active_anon 102400 [ 2158.125658][T24140] total_inactive_file 0 [ 2158.129871][T24140] total_active_file 0 [ 2158.136232][T24140] total_unevictable 0 [ 2158.144769][T24140] anon_cost 0 [ 2158.148084][T24140] file_cost 0 02:46:41 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140212800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2158.151460][T24140] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24140,uid=0 [ 2158.170388][T24140] Memory cgroup out of memory: Killed process 24140 (syz-executor.4) total-vm:54508kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2158.276166][T24142] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2158.286545][T24142] CPU: 0 PID: 24142 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2158.296970][T24142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2158.307013][T24142] Call Trace: [ 2158.310278][T24142] [ 2158.313195][T24142] dump_stack_lvl+0x1e7/0x2e0 [ 2158.317862][T24142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2158.323049][T24142] ? __pfx__printk+0x10/0x10 [ 2158.327621][T24142] ? ___ratelimit+0x4c4/0x670 [ 2158.332316][T24142] ? __pfx____ratelimit+0x10/0x10 [ 2158.337325][T24142] dump_header+0xda/0x6a0 [ 2158.341656][T24142] oom_kill_process+0x3a7/0x930 [ 2158.346531][T24142] out_of_memory+0xf67/0x1320 [ 2158.351220][T24142] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2158.356838][T24142] ? __pfx___mutex_lock+0x10/0x10 [ 2158.362232][T24142] ? __pfx_out_of_memory+0x10/0x10 [ 2158.367333][T24142] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2158.372864][T24142] ? __pfx_lock_release+0x10/0x10 [ 2158.377875][T24142] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2158.383931][T24142] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2158.389114][T24142] ? mem_cgroup_iter+0x3e9/0x560 [ 2158.394057][T24142] try_charge_memcg+0xda2/0x18a0 [ 2158.399038][T24142] ? nocow_flush_endio+0xf0/0x2b0 [ 2158.404129][T24142] ? __pfx_try_charge_memcg+0x10/0x10 [ 2158.409501][T24142] ? percpu_ref_tryget+0x14/0x180 [ 2158.414539][T24142] charge_memcg+0xa2/0x160 [ 2158.418955][T24142] __mem_cgroup_charge+0x27/0x80 [ 2158.423890][T24142] folio_prealloc+0x52/0x170 [ 2158.428476][T24142] do_wp_page+0x1222/0x4c90 [ 2158.432986][T24142] ? __pfx_do_wp_page+0x10/0x10 [ 2158.437833][T24142] ? __pfx_lock_acquire+0x10/0x10 [ 2158.442860][T24142] ? do_raw_spin_lock+0x14e/0x370 [ 2158.447897][T24142] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2158.454245][T24142] __handle_mm_fault+0x26ad/0x72d0 [ 2158.459728][T24142] ? reacquire_held_locks+0x3eb/0x690 [ 2158.465095][T24142] ? __pfx___handle_mm_fault+0x10/0x10 [ 2158.470555][T24142] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2158.476276][T24142] ? mtree_range_walk+0x6fd/0x8e0 [ 2158.481311][T24142] ? lock_vma_under_rcu+0x18a/0x730 [ 2158.486518][T24142] ? __pfx_lock_release+0x10/0x10 [ 2158.491545][T24142] ? lock_vma_under_rcu+0x2f9/0x730 [ 2158.496763][T24142] ? lock_vma_under_rcu+0x18a/0x730 [ 2158.501968][T24142] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2158.507524][T24142] handle_mm_fault+0x3c1/0x8a0 [ 2158.512297][T24142] exc_page_fault+0x456/0x870 [ 2158.516992][T24142] asm_exc_page_fault+0x26/0x30 [ 2158.521842][T24142] RIP: 0033:0x7f810c837543 [ 2158.526252][T24142] Code: 8b 4c 24 40 c6 40 20 01 89 48 24 8b 4c 24 4c 44 89 68 28 44 89 50 2c 89 48 78 40 88 7c 1a 04 8b 5c 24 44 4c 89 3d 2d 4a 17 00 <89> 98 80 00 00 00 0f 1f 80 00 00 00 00 48 8b 94 2c a0 01 00 00 48 [ 2158.545854][T24142] RSP: 002b:00007f810cacfb30 EFLAGS: 00010246 [ 2158.551922][T24142] RAX: 00007f810c9abf80 RBX: 0000000000000000 RCX: 0000000000000000 [ 2158.559889][T24142] RDX: 00007f810c9abff8 RSI: 00007f810c9abf88 RDI: 0000000000000000 [ 2158.567857][T24142] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f810c9abf8c [ 2158.575819][T24142] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f810c9abf80 [ 2158.583782][T24142] R13: 0000000000000f91 R14: 0000000000000000 R15: 00007f810c9abf80 [ 2158.591761][T24142] [ 2158.594879][ C0] vkms_vblank_simulate: vblank timer overrun [ 2158.610879][T24142] memory: usage 307200kB, limit 307200kB, failcnt 76655 [ 2158.618312][T24142] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2158.626721][T24142] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2158.634599][T24142] Memory cgroup stats for /syz4: [ 2158.634702][T24142] cache 0 [ 2158.642694][T24142] rss 61440 [ 2158.645823][T24142] rss_huge 0 [ 2158.649034][T24142] shmem 0 [ 2158.652219][T24142] mapped_file 0 [ 2158.655690][T24142] dirty 0 [ 2158.658637][T24142] writeback 0 [ 2158.664306][T24142] workingset_refault_anon 27748 [ 2158.669202][T24142] workingset_refault_file 333 [ 2158.674041][T24142] swap 303104 [ 2158.677337][T24142] swapcached 0 [ 2158.680725][T24142] pgpgin 301516 [ 2158.684387][T24142] pgpgout 301501 [ 2158.687982][T24142] pgfault 593707 [ 2158.692096][T24142] pgmajfault 26825 [ 2158.695826][T24142] inactive_anon 0 [ 2158.699470][T24142] active_anon 61440 [ 2158.704786][T24142] inactive_file 0 [ 2158.708441][T24142] active_file 0 [ 2158.715591][T24142] unevictable 0 [ 2158.719103][T24142] hierarchical_memory_limit 314572800 [ 2158.728797][T24142] hierarchical_memsw_limit 9223372036854771712 [ 2158.736523][T24142] total_cache 0 [ 2158.740004][T24142] total_rss 61440 [ 2158.744391][T24142] total_rss_huge 0 [ 2158.748125][T24142] total_shmem 0 [ 2158.752350][T24142] total_mapped_file 0 [ 2158.756413][T24142] total_dirty 0 [ 2158.759908][T24142] total_writeback 0 [ 2158.764266][T24142] total_workingset_refault_anon 27748 [ 2158.769714][T24142] total_workingset_refault_file 333 [ 2158.775335][T24142] total_swap 303104 [ 2158.779159][T24142] total_swapcached 0 [ 2158.783783][T24142] total_pgpgin 301516 [ 2158.787817][T24142] total_pgpgout 301501 [ 2158.792429][T24142] total_pgfault 593707 [ 2158.796510][T24142] total_pgmajfault 26825 [ 2158.800767][T24142] total_inactive_anon 0 [ 2158.805755][T24142] total_active_anon 61440 [ 2158.810133][T24142] total_inactive_file 0 [ 2158.815127][T24142] total_active_file 0 [ 2158.819154][T24142] total_unevictable 0 02:46:42 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140312800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2158.838250][T24142] anon_cost 0 [ 2158.842126][T24142] file_cost 0 [ 2158.845438][T24142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24142,uid=0 [ 2158.865723][T24142] Memory cgroup out of memory: Killed process 24142 (syz-executor.4) total-vm:54508kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2158.970520][T24144] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2158.981107][T24144] CPU: 0 PID: 24144 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2158.991533][T24144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2159.001590][T24144] Call Trace: [ 2159.004862][T24144] [ 2159.007785][T24144] dump_stack_lvl+0x1e7/0x2e0 [ 2159.012466][T24144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2159.017657][T24144] ? __pfx__printk+0x10/0x10 [ 2159.022232][T24144] ? ___ratelimit+0x4c4/0x670 [ 2159.026913][T24144] ? __pfx____ratelimit+0x10/0x10 [ 2159.031949][T24144] dump_header+0xda/0x6a0 [ 2159.036300][T24144] oom_kill_process+0x3a7/0x930 [ 2159.039246][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2159.041151][T24144] out_of_memory+0xf67/0x1320 [ 2159.053870][T24144] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2159.059494][T24144] ? __pfx___mutex_lock+0x10/0x10 [ 2159.064512][T24144] ? __pfx_out_of_memory+0x10/0x10 [ 2159.069618][T24144] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2159.075159][T24144] ? __pfx_lock_release+0x10/0x10 [ 2159.080174][T24144] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2159.086238][T24144] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2159.091439][T24144] ? mem_cgroup_iter+0x3e9/0x560 [ 2159.096388][T24144] try_charge_memcg+0xda2/0x18a0 [ 2159.101320][T24144] ? six_unlock_ip+0x100/0x3e0 [ 2159.106112][T24144] ? __pfx_try_charge_memcg+0x10/0x10 [ 2159.111482][T24144] ? percpu_ref_tryget+0x14/0x180 [ 2159.116511][T24144] charge_memcg+0xa2/0x160 [ 2159.120924][T24144] __mem_cgroup_charge+0x27/0x80 [ 2159.125853][T24144] folio_prealloc+0x52/0x170 [ 2159.130445][T24144] do_wp_page+0x1222/0x4c90 [ 2159.134961][T24144] ? __pfx_do_wp_page+0x10/0x10 [ 2159.139803][T24144] ? __pfx_lock_acquire+0x10/0x10 [ 2159.144819][T24144] ? do_raw_spin_lock+0x14e/0x370 [ 2159.149835][T24144] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2159.156156][T24144] __handle_mm_fault+0x26ad/0x72d0 [ 2159.161290][T24144] ? reacquire_held_locks+0x3eb/0x690 [ 2159.166652][T24144] ? __pfx___handle_mm_fault+0x10/0x10 [ 2159.172104][T24144] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2159.177816][T24144] ? mtree_range_walk+0x6fd/0x8e0 [ 2159.182836][T24144] ? lock_vma_under_rcu+0x18a/0x730 [ 2159.188035][T24144] ? __pfx_lock_release+0x10/0x10 [ 2159.193050][T24144] ? lock_vma_under_rcu+0x2f9/0x730 [ 2159.198245][T24144] ? lock_vma_under_rcu+0x18a/0x730 [ 2159.203445][T24144] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2159.208979][T24144] handle_mm_fault+0x3c1/0x8a0 [ 2159.213746][T24144] exc_page_fault+0x456/0x870 [ 2159.218422][T24144] asm_exc_page_fault+0x26/0x30 [ 2159.223265][T24144] RIP: 0033:0x7f810c837543 [ 2159.227671][T24144] Code: 8b 4c 24 40 c6 40 20 01 89 48 24 8b 4c 24 4c 44 89 68 28 44 89 50 2c 89 48 78 40 88 7c 1a 04 8b 5c 24 44 4c 89 3d 2d 4a 17 00 <89> 98 80 00 00 00 0f 1f 80 00 00 00 00 48 8b 94 2c a0 01 00 00 48 [ 2159.247276][T24144] RSP: 002b:00007f810cacfb30 EFLAGS: 00010246 [ 2159.253356][T24144] RAX: 00007f810c9abf80 RBX: 0000000000000000 RCX: 0000000000000000 [ 2159.261584][T24144] RDX: 00007f810c9abff8 RSI: 00007f810c9abf88 RDI: 0000000000000000 [ 2159.269562][T24144] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f810c9abf8c [ 2159.277524][T24144] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f810c9abf80 [ 2159.285483][T24144] R13: 0000000000000f91 R14: 0000000000000000 R15: 00007f810c9abf80 [ 2159.293455][T24144] [ 2159.296531][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.307894][T24144] memory: usage 307200kB, limit 307200kB, failcnt 76740 [ 2159.314918][T24144] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2159.323427][T24144] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2159.330738][T24144] Memory cgroup stats for /syz4: [ 2159.330876][T24144] cache 0 [ 2159.339095][T24144] rss 86016 [ 2159.342659][T24144] rss_huge 0 [ 2159.345884][T24144] shmem 0 [ 2159.348835][T24144] mapped_file 0 [ 2159.352431][T24144] dirty 0 [ 2159.355420][T24144] writeback 0 [ 2159.358718][T24144] workingset_refault_anon 27748 [ 2159.364003][T24144] workingset_refault_file 333 [ 2159.368740][T24144] swap 303104 [ 2159.372170][T24144] swapcached 0 [ 2159.375559][T24144] pgpgin 301533 [ 2159.379029][T24144] pgpgout 301511 [ 2159.383164][T24144] pgfault 593767 [ 2159.386760][T24144] pgmajfault 26825 [ 2159.390489][T24144] inactive_anon 0 [ 2159.394507][T24144] active_anon 86016 [ 2159.398340][T24144] inactive_file 0 [ 2159.402182][T24144] active_file 0 [ 2159.405653][T24144] unevictable 0 [ 2159.409144][T24144] hierarchical_memory_limit 314572800 [ 2159.416805][T24144] hierarchical_memsw_limit 9223372036854771712 [ 2159.423699][T24144] total_cache 0 [ 2159.427173][T24144] total_rss 86016 [ 2159.430811][T24144] total_rss_huge 0 [ 2159.437985][T24144] total_shmem 0 [ 2159.443636][T24144] total_mapped_file 0 [ 2159.447641][T24144] total_dirty 0 [ 2159.451125][T24144] total_writeback 0 [ 2159.457378][T24144] total_workingset_refault_anon 27748 [ 2159.463126][T24144] total_workingset_refault_file 333 [ 2159.468393][T24144] total_swap 303104 [ 2159.472632][T24144] total_swapcached 0 [ 2159.476537][T24144] total_pgpgin 301533 [ 2159.480535][T24144] total_pgpgout 301511 [ 2159.485164][T24144] total_pgfault 593767 [ 2159.489256][T24144] total_pgmajfault 26825 [ 2159.493818][T24144] total_inactive_anon 0 [ 2159.497985][T24144] total_active_anon 86016 [ 2159.502969][T24144] total_inactive_file 0 [ 2159.507175][T24144] total_active_file 0 [ 2159.511173][T24144] total_unevictable 0 [ 2159.515781][T24144] anon_cost 0 [ 2159.519124][T24144] file_cost 0 02:46:43 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140412800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2159.527362][T24144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24144,uid=0 [ 2159.543418][T24144] Memory cgroup out of memory: Killed process 24144 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2159.628155][T24147] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2159.648613][T24147] CPU: 0 PID: 24147 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2159.659062][T24147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2159.669108][T24147] Call Trace: [ 2159.672381][T24147] [ 2159.675319][T24147] dump_stack_lvl+0x1e7/0x2e0 [ 2159.679996][T24147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2159.685187][T24147] ? __pfx__printk+0x10/0x10 [ 2159.689771][T24147] ? ___ratelimit+0x4c4/0x670 [ 2159.694440][T24147] ? __pfx____ratelimit+0x10/0x10 [ 2159.699459][T24147] dump_header+0xda/0x6a0 [ 2159.703805][T24147] oom_kill_process+0x3a7/0x930 [ 2159.708693][T24147] out_of_memory+0xf67/0x1320 [ 2159.713407][T24147] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2159.719058][T24147] ? __pfx___mutex_lock+0x10/0x10 [ 2159.724083][T24147] ? __pfx_out_of_memory+0x10/0x10 [ 2159.729194][T24147] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2159.734733][T24147] ? __pfx_lock_release+0x10/0x10 [ 2159.739751][T24147] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2159.745809][T24147] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2159.750999][T24147] ? mem_cgroup_iter+0x3e9/0x560 [ 2159.755946][T24147] try_charge_memcg+0xda2/0x18a0 [ 2159.760938][T24147] ? __pfx_try_charge_memcg+0x10/0x10 [ 2159.766306][T24147] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2159.772023][T24147] ? __pfx_lock_release+0x10/0x10 [ 2159.777044][T24147] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2159.783019][T24147] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2159.788736][T24147] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2159.794529][T24147] obj_cgroup_charge+0x389/0x630 [ 2159.799462][T24147] ? obj_cgroup_charge+0x121/0x630 [ 2159.804582][T24147] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2159.810076][T24147] ? __pfx___might_resched+0x10/0x10 [ 2159.815394][T24147] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2159.821227][T24147] ? sock_alloc_inode+0x28/0xc0 [ 2159.826074][T24147] kmem_cache_alloc_lru+0x204/0x350 [ 2159.831271][T24147] sock_alloc_inode+0x28/0xc0 [ 2159.835942][T24147] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2159.841308][T24147] new_inode_pseudo+0x69/0x1e0 [ 2159.846062][T24147] __sock_create+0x123/0x920 [ 2159.850647][T24147] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2159.856565][T24147] __sys_socket+0x14f/0x3c0 [ 2159.861526][T24147] ? __pfx___sys_socket+0x10/0x10 [ 2159.866545][T24147] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2159.872867][T24147] ? do_syscall_64+0x108/0x240 [ 2159.877624][T24147] __x64_sys_socket+0x7a/0x90 [ 2159.882302][T24147] do_syscall_64+0xf9/0x240 [ 2159.886802][T24147] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2159.892691][T24147] RIP: 0033:0x7f810c87dda9 [ 2159.897092][T24147] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2159.916703][T24147] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2159.925118][T24147] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2159.933096][T24147] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2159.941075][T24147] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2159.949040][T24147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2159.957014][T24147] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2159.965005][T24147] [ 2159.968122][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.982663][T24147] memory: usage 307200kB, limit 307200kB, failcnt 76853 [ 2159.989675][T24147] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2159.997857][T24147] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2160.005646][T24147] Memory cgroup stats for /syz4: [ 2160.005782][T24147] cache 0 [ 2160.014090][T24147] rss 61440 [ 2160.017228][T24147] rss_huge 0 [ 2160.020472][T24147] shmem 0 [ 2160.023728][T24147] mapped_file 0 [ 2160.027205][T24147] dirty 0 [ 2160.030158][T24147] writeback 0 [ 2160.034129][T24147] workingset_refault_anon 27748 [ 2160.039318][T24147] workingset_refault_file 333 [ 2160.044366][T24147] swap 303104 [ 2160.047748][T24147] swapcached 0 [ 2160.051186][T24147] pgpgin 301538 [ 2160.055027][T24147] pgpgout 301523 [ 2160.058655][T24147] pgfault 593785 [ 2160.062806][T24147] pgmajfault 26825 [ 2160.066675][T24147] inactive_anon 0 [ 2160.070416][T24147] active_anon 61440 [ 2160.074763][T24147] inactive_file 0 [ 2160.078476][T24147] active_file 0 [ 2160.083492][T24147] unevictable 0 [ 2160.087093][T24147] hierarchical_memory_limit 314572800 [ 2160.095699][T24147] hierarchical_memsw_limit 9223372036854771712 [ 2160.102999][T24147] total_cache 0 [ 2160.106562][T24147] total_rss 61440 [ 2160.110270][T24147] total_rss_huge 0 [ 2160.114506][T24147] total_shmem 0 [ 2160.118061][T24147] total_mapped_file 0 [ 2160.122604][T24147] total_dirty 0 [ 2160.126152][T24147] total_writeback 0 [ 2160.130047][T24147] total_workingset_refault_anon 27748 [ 2160.131612][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2160.135890][T24147] total_workingset_refault_file 333 [ 2160.150069][T24147] total_swap 303104 [ 2160.154241][T24147] total_swapcached 0 [ 2160.158151][T24147] total_pgpgin 301538 [ 2160.162313][T24147] total_pgpgout 301523 [ 2160.166406][T24147] total_pgfault 593785 [ 2160.170520][T24147] total_pgmajfault 26825 [ 2160.174867][T24147] total_inactive_anon 0 [ 2160.179034][T24147] total_active_anon 61440 [ 2160.183715][T24147] total_inactive_file 0 [ 2160.187912][T24147] total_active_file 0 [ 2160.193134][T24147] total_unevictable 0 [ 2160.197139][T24147] anon_cost 0 [ 2160.200434][T24147] file_cost 0 [ 2160.204765][T24147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24146,uid=0 [ 2160.220751][T24147] Memory cgroup out of memory: Killed process 24146 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:43 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140512800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2160.258625][T24147] socket: no more sockets [ 2160.370448][T24149] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2160.380814][T24149] CPU: 0 PID: 24149 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2160.391243][T24149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2160.401290][T24149] Call Trace: [ 2160.404559][T24149] [ 2160.407476][T24149] dump_stack_lvl+0x1e7/0x2e0 [ 2160.412146][T24149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2160.417330][T24149] ? __pfx__printk+0x10/0x10 [ 2160.421905][T24149] ? ___ratelimit+0x4c4/0x670 [ 2160.426568][T24149] ? __pfx____ratelimit+0x10/0x10 [ 2160.431597][T24149] dump_header+0xda/0x6a0 [ 2160.435967][T24149] oom_kill_process+0x3a7/0x930 [ 2160.440834][T24149] out_of_memory+0xf67/0x1320 [ 2160.445548][T24149] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2160.451174][T24149] ? __pfx___mutex_lock+0x10/0x10 [ 2160.456191][T24149] ? __pfx_out_of_memory+0x10/0x10 [ 2160.461295][T24149] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2160.466826][T24149] ? __pfx_lock_release+0x10/0x10 [ 2160.471857][T24149] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2160.477911][T24149] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2160.483113][T24149] ? mem_cgroup_iter+0x3e9/0x560 [ 2160.488062][T24149] try_charge_memcg+0xda2/0x18a0 [ 2160.493000][T24149] ? __pfx_try_charge_memcg+0x10/0x10 [ 2160.498359][T24149] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2160.504077][T24149] ? __pfx_lock_release+0x10/0x10 [ 2160.509101][T24149] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2160.515077][T24149] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2160.520786][T24149] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2160.526598][T24149] obj_cgroup_charge+0x389/0x630 [ 2160.531555][T24149] ? obj_cgroup_charge+0x121/0x630 [ 2160.536698][T24149] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2160.542180][T24149] ? __pfx___might_resched+0x10/0x10 [ 2160.547482][T24149] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2160.553310][T24149] ? sock_alloc_inode+0x28/0xc0 [ 2160.558159][T24149] kmem_cache_alloc_lru+0x204/0x350 [ 2160.563347][T24149] sock_alloc_inode+0x28/0xc0 [ 2160.568011][T24149] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2160.573369][T24149] new_inode_pseudo+0x69/0x1e0 [ 2160.578128][T24149] __sock_create+0x123/0x920 [ 2160.582728][T24149] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 2160.588647][T24149] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2160.594570][T24149] __sys_socket+0x14f/0x3c0 [ 2160.599117][T24149] ? __pfx___sys_socket+0x10/0x10 [ 2160.604173][T24149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2160.610537][T24149] ? do_syscall_64+0x108/0x240 [ 2160.615336][T24149] __x64_sys_socket+0x7a/0x90 [ 2160.620043][T24149] do_syscall_64+0xf9/0x240 [ 2160.624574][T24149] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2160.630530][T24149] RIP: 0033:0x7f810c87dda9 [ 2160.634944][T24149] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2160.654561][T24149] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2160.662962][T24149] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2160.670930][T24149] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2160.678885][T24149] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2160.686855][T24149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2160.694840][T24149] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2160.702824][T24149] [ 2160.705937][ C0] vkms_vblank_simulate: vblank timer overrun [ 2160.725099][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.737127][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.746450][T23839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2160.767082][T24149] memory: usage 307200kB, limit 307200kB, failcnt 76995 [ 2160.776225][T24149] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2160.784413][T24149] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2160.792258][T24149] Memory cgroup stats for /syz4: [ 2160.792376][T24149] cache 0 [ 2160.800908][T24149] rss 86016 [ 2160.810070][T24149] rss_huge 0 [ 2160.813507][T24149] shmem 0 [ 2160.816459][T24149] mapped_file 0 [ 2160.819930][T24149] dirty 0 [ 2160.837228][T24149] writeback 0 [ 2160.840544][T24149] workingset_refault_anon 27748 [ 2160.845631][T24149] workingset_refault_file 333 [ 2160.850330][T24149] swap 303104 [ 2160.854710][T24149] swapcached 0 [ 2160.858120][T24149] pgpgin 301558 [ 2160.861673][T24149] pgpgout 301537 [ 2160.865238][T24149] pgfault 593848 [ 2160.868788][T24149] pgmajfault 26825 [ 2160.872609][T24149] inactive_anon 0 [ 2160.876261][T24149] active_anon 86016 [ 2160.880078][T24149] inactive_file 0 [ 2160.883820][T24149] active_file 0 [ 2160.887295][T24149] unevictable 0 [ 2160.890772][T24149] hierarchical_memory_limit 314572800 [ 2160.896272][T24149] hierarchical_memsw_limit 9223372036854771712 [ 2160.902561][T24149] total_cache 0 [ 2160.906040][T24149] total_rss 86016 [ 2160.909688][T24149] total_rss_huge 0 [ 2160.913537][T24149] total_shmem 0 [ 2160.917011][T24149] total_mapped_file 0 [ 2160.921000][T24149] total_dirty 0 [ 2160.924552][T24149] total_writeback 0 [ 2160.928382][T24149] total_workingset_refault_anon 27748 [ 2160.936112][T24149] total_workingset_refault_file 333 [ 2160.941335][T24149] total_swap 303104 [ 2160.945225][T24149] total_swapcached 0 [ 2160.949159][T24149] total_pgpgin 301558 [ 2160.953236][T24149] total_pgpgout 301537 [ 2160.958327][T24149] total_pgfault 593848 [ 2160.962570][T24149] total_pgmajfault 26825 [ 2160.966859][T24149] total_inactive_anon 0 [ 2160.971029][T24149] total_active_anon 86016 [ 2160.975427][T24149] total_inactive_file 0 [ 2160.979597][T24149] total_active_file 0 [ 2160.983976][T24149] total_unevictable 0 [ 2160.987974][T24149] anon_cost 0 [ 2160.991269][T24149] file_cost 0 [ 2160.995058][T24149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24148,uid=0 [ 2161.011045][T24149] Memory cgroup out of memory: Killed process 24148 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:44 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140612800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2161.042210][T24149] socket: no more sockets [ 2161.092814][T24150] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2161.104058][T24150] CPU: 1 PID: 24150 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2161.114489][T24150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2161.124544][T24150] Call Trace: [ 2161.127824][T24150] [ 2161.130744][T24150] dump_stack_lvl+0x1e7/0x2e0 [ 2161.135419][T24150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2161.140608][T24150] ? __pfx__printk+0x10/0x10 [ 2161.145197][T24150] ? ___ratelimit+0x4c4/0x670 [ 2161.149887][T24150] ? __pfx____ratelimit+0x10/0x10 [ 2161.154903][T24150] dump_header+0xda/0x6a0 [ 2161.159242][T24150] oom_kill_process+0x3a7/0x930 [ 2161.164114][T24150] out_of_memory+0xf67/0x1320 [ 2161.168818][T24150] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2161.174459][T24150] ? __pfx___mutex_lock+0x10/0x10 [ 2161.179486][T24150] ? __pfx_out_of_memory+0x10/0x10 [ 2161.184603][T24150] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2161.190149][T24150] ? __pfx_lock_release+0x10/0x10 [ 2161.195176][T24150] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2161.201241][T24150] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2161.206436][T24150] ? mem_cgroup_iter+0x3e9/0x560 [ 2161.211372][T24150] try_charge_memcg+0xda2/0x18a0 [ 2161.216332][T24150] ? __pfx_try_charge_memcg+0x10/0x10 [ 2161.221703][T24150] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2161.227429][T24150] ? __pfx_lock_release+0x10/0x10 [ 2161.232460][T24150] ? memcg_account_kmem+0x1e7/0x210 [ 2161.237665][T24150] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2161.243466][T24150] __memcg_kmem_charge_page+0xe1/0x250 [ 2161.248925][T24150] memcg_charge_kernel_stack+0x196/0x550 [ 2161.254554][T24150] dup_task_struct+0x15d/0x7d0 [ 2161.259314][T24150] copy_process+0x5d5/0x3fc0 [ 2161.263912][T24150] ? __might_fault+0xa9/0x120 [ 2161.268586][T24150] ? __pfx_lock_release+0x10/0x10 [ 2161.273615][T24150] ? __pfx_copy_process+0x10/0x10 [ 2161.278635][T24150] ? __might_fault+0xc5/0x120 [ 2161.283311][T24150] ? __asan_memset+0x23/0x50 [ 2161.287900][T24150] kernel_clone+0x21d/0x8d0 [ 2161.292403][T24150] ? __pfx_kernel_clone+0x10/0x10 [ 2161.297456][T24150] __se_sys_clone3+0x2cb/0x350 [ 2161.302236][T24150] ? __pfx___se_sys_clone3+0x10/0x10 [ 2161.307549][T24150] ? do_syscall_64+0x108/0x240 [ 2161.312319][T24150] ? do_syscall_64+0xb4/0x240 [ 2161.317005][T24150] do_syscall_64+0xf9/0x240 [ 2161.321515][T24150] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2161.327406][T24150] RIP: 0033:0x7f810c8a9b99 [ 2161.331817][T24150] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2161.351418][T24150] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2161.359830][T24150] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 [ 2161.367795][T24150] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2161.375760][T24150] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2161.383726][T24150] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2161.391689][T24150] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2161.399662][T24150] [ 2161.405734][T24150] memory: usage 307200kB, limit 307200kB, failcnt 77075 [ 2161.445286][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2161.450096][T24150] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2161.465077][T24150] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 2161.474317][T24150] Memory cgroup stats for /syz4: [ 2161.474446][T24150] cache 0 [ 2161.483114][T24150] rss 102400 [ 2161.486434][T24150] rss_huge 0 [ 2161.489763][T24150] shmem 0 [ 2161.493445][T24150] mapped_file 0 [ 2161.497201][T24150] dirty 0 [ 2161.500233][T24150] writeback 0 [ 2161.504233][T24150] workingset_refault_anon 27748 [ 2161.509170][T24150] workingset_refault_file 333 [ 2161.514435][T24150] swap 303104 [ 2161.517811][T24150] swapcached 0 [ 2161.521250][T24150] pgpgin 301574 [ 2161.527358][T24150] pgpgout 301549 [ 2161.530998][T24150] pgfault 593897 [ 2161.535101][T24150] pgmajfault 26825 [ 2161.538915][T24150] inactive_anon 0 [ 2161.543599][T24150] active_anon 102400 [ 2161.547581][T24150] inactive_file 0 [ 2161.551280][T24150] active_file 0 [ 2161.555410][T24150] unevictable 0 [ 2161.558967][T24150] hierarchical_memory_limit 314572800 [ 2161.564925][T24150] hierarchical_memsw_limit 9223372036854771712 [ 2161.572511][T24150] total_cache 0 [ 2161.576065][T24150] total_rss 102400 [ 2161.579852][T24150] total_rss_huge 0 [ 2161.583762][T24150] total_shmem 0 [ 2161.587312][T24150] total_mapped_file 0 [ 2161.591806][T24150] total_dirty 0 [ 2161.595374][T24150] total_writeback 0 [ 2161.599263][T24150] total_workingset_refault_anon 27748 [ 2161.605349][T24150] total_workingset_refault_file 333 [ 2161.610648][T24150] total_swap 303104 [ 2161.615027][T24150] total_swapcached 0 [ 2161.619003][T24150] total_pgpgin 301574 [ 2161.623824][T24150] total_pgpgout 301549 [ 2161.627976][T24150] total_pgfault 593897 [ 2161.634551][T24150] total_pgmajfault 26825 [ 2161.638893][T24150] total_inactive_anon 0 [ 2161.643491][T24150] total_active_anon 102400 [ 2161.648011][T24150] total_inactive_file 0 [ 2161.653492][T24150] total_active_file 0 [ 2161.657562][T24150] total_unevictable 0 [ 2161.662396][T24150] anon_cost 0 [ 2161.665790][T24150] file_cost 0 [ 2161.669170][T24150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24150,uid=0 02:46:45 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140712800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2161.691460][T24150] Memory cgroup out of memory: Killed process 24150 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2161.806405][T24153] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2161.821680][T24153] CPU: 1 PID: 24153 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2161.832139][T24153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2161.842215][T24153] Call Trace: [ 2161.845503][T24153] [ 2161.848424][T24153] dump_stack_lvl+0x1e7/0x2e0 [ 2161.853101][T24153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2161.858291][T24153] ? __pfx__printk+0x10/0x10 [ 2161.862881][T24153] ? ___ratelimit+0x4c4/0x670 [ 2161.867572][T24153] ? __pfx____ratelimit+0x10/0x10 [ 2161.872610][T24153] dump_header+0xda/0x6a0 [ 2161.876938][T24153] oom_kill_process+0x3a7/0x930 [ 2161.881829][T24153] out_of_memory+0xf67/0x1320 [ 2161.886502][T24153] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2161.892125][T24153] ? __pfx___mutex_lock+0x10/0x10 [ 2161.897141][T24153] ? __pfx_out_of_memory+0x10/0x10 [ 2161.902242][T24153] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2161.907772][T24153] ? __pfx_lock_release+0x10/0x10 [ 2161.912790][T24153] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2161.918846][T24153] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2161.924033][T24153] ? mem_cgroup_iter+0x3e9/0x560 [ 2161.928959][T24153] try_charge_memcg+0xda2/0x18a0 [ 2161.933895][T24153] ? __pfx_try_charge_memcg+0x10/0x10 [ 2161.939254][T24153] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2161.944960][T24153] ? __pfx_lock_release+0x10/0x10 [ 2161.949977][T24153] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2161.955953][T24153] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2161.961923][T24153] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2161.967713][T24153] obj_cgroup_charge+0x389/0x630 [ 2161.972640][T24153] ? obj_cgroup_charge+0x121/0x630 [ 2161.977738][T24153] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2161.983193][T24153] ? __pfx___might_resched+0x10/0x10 [ 2161.988472][T24153] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2161.994275][T24153] ? sock_alloc_inode+0x28/0xc0 [ 2161.999115][T24153] kmem_cache_alloc_lru+0x204/0x350 [ 2162.004303][T24153] sock_alloc_inode+0x28/0xc0 [ 2162.008976][T24153] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2162.014335][T24153] new_inode_pseudo+0x69/0x1e0 [ 2162.019086][T24153] __sock_create+0x123/0x920 [ 2162.023668][T24153] ? restore_fpregs_from_fpstate+0x100/0x250 [ 2162.029642][T24153] __sys_socket+0x14f/0x3c0 [ 2162.034177][T24153] ? __pfx___sys_socket+0x10/0x10 [ 2162.039193][T24153] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2162.045515][T24153] ? do_syscall_64+0x108/0x240 [ 2162.050268][T24153] __x64_sys_socket+0x7a/0x90 [ 2162.054938][T24153] do_syscall_64+0xf9/0x240 [ 2162.059429][T24153] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2162.065319][T24153] RIP: 0033:0x7f810c87dda9 [ 2162.069722][T24153] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2162.089318][T24153] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2162.097719][T24153] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2162.105679][T24153] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2162.113637][T24153] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2162.121604][T24153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2162.129596][T24153] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2162.137562][T24153] [ 2162.155277][T24153] memory: usage 307200kB, limit 307200kB, failcnt 77174 [ 2162.162385][T24153] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2162.170378][T24153] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2162.178373][T24153] Memory cgroup stats for /syz4: [ 2162.178529][T24153] cache 0 [ 2162.187135][T24153] rss 94208 [ 2162.190276][T24153] rss_huge 0 [ 2162.193558][T24153] shmem 0 [ 2162.196515][T24153] mapped_file 0 [ 2162.199987][T24153] dirty 0 [ 2162.203050][T24153] writeback 0 [ 2162.206426][T24153] workingset_refault_anon 27748 [ 2162.211353][T24153] workingset_refault_file 333 [ 2162.216199][T24153] swap 303104 [ 2162.219591][T24153] swapcached 0 [ 2162.223116][T24153] pgpgin 301582 [ 2162.226662][T24153] pgpgout 301559 [ 2162.230297][T24153] pgfault 593933 [ 2162.233974][T24153] pgmajfault 26825 [ 2162.237777][T24153] inactive_anon 0 [ 2162.241564][T24153] active_anon 94208 [ 2162.245426][T24153] inactive_file 0 [ 2162.249074][T24153] active_file 0 [ 2162.254792][T24153] unevictable 0 [ 2162.258277][T24153] hierarchical_memory_limit 314572800 [ 2162.264765][T24153] hierarchical_memsw_limit 9223372036854771712 [ 2162.272077][T24153] total_cache 0 [ 2162.275560][T24153] total_rss 94208 [ 2162.279205][T24153] total_rss_huge 0 [ 2162.283050][T24153] total_shmem 0 [ 2162.286522][T24153] total_mapped_file 0 [ 2162.292427][T24153] total_dirty 0 [ 2162.295921][T24153] total_writeback 0 [ 2162.299743][T24153] total_workingset_refault_anon 27748 [ 2162.305672][T24153] total_workingset_refault_file 333 [ 2162.310895][T24153] total_swap 303104 [ 2162.315140][T24153] total_swapcached 0 [ 2162.319094][T24153] total_pgpgin 301582 [ 2162.323533][T24153] total_pgpgout 301559 [ 2162.327635][T24153] total_pgfault 593933 [ 2162.332196][T24153] total_pgmajfault 26825 [ 2162.336458][T24153] total_inactive_anon 0 [ 2162.340632][T24153] total_active_anon 94208 [ 2162.345479][T24153] total_inactive_file 0 [ 2162.349670][T24153] total_active_file 0 [ 2162.353815][T23784] __nla_validate_parse: 8 callbacks suppressed [ 2162.353829][T23784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2162.374325][T24153] total_unevictable 0 [ 2162.378331][T24153] anon_cost 0 [ 2162.382643][T24153] file_cost 0 [ 2162.385946][T24153] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24152,uid=0 [ 2162.408927][T24153] Memory cgroup out of memory: Killed process 24152 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2162.462641][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:46:46 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140812800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2162.510055][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.620409][T24155] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2162.675305][T24155] CPU: 0 PID: 24155 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2162.685771][T24155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2162.695855][T24155] Call Trace: [ 2162.699161][T24155] [ 2162.702106][T24155] dump_stack_lvl+0x1e7/0x2e0 [ 2162.706818][T24155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2162.712056][T24155] ? __pfx__printk+0x10/0x10 [ 2162.716678][T24155] ? ___ratelimit+0x4c4/0x670 [ 2162.721385][T24155] ? __pfx____ratelimit+0x10/0x10 [ 2162.726438][T24155] dump_header+0xda/0x6a0 [ 2162.730797][T24155] oom_kill_process+0x3a7/0x930 [ 2162.735681][T24155] out_of_memory+0xf67/0x1320 [ 2162.740394][T24155] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2162.746047][T24155] ? __pfx___mutex_lock+0x10/0x10 [ 2162.751115][T24155] ? __pfx_out_of_memory+0x10/0x10 [ 2162.756269][T24155] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2162.761843][T24155] ? __pfx_lock_release+0x10/0x10 [ 2162.766895][T24155] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2162.772995][T24155] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2162.778221][T24155] ? mem_cgroup_iter+0x3e9/0x560 [ 2162.783197][T24155] try_charge_memcg+0xda2/0x18a0 [ 2162.788188][T24155] ? __pfx_try_charge_memcg+0x10/0x10 [ 2162.793584][T24155] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2162.799331][T24155] ? __pfx_lock_release+0x10/0x10 [ 2162.804398][T24155] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2162.810411][T24155] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2162.816157][T24155] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2162.821989][T24155] obj_cgroup_charge+0x389/0x630 [ 2162.826966][T24155] ? obj_cgroup_charge+0x121/0x630 [ 2162.832110][T24155] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2162.837596][T24155] ? __pfx___might_resched+0x10/0x10 [ 2162.842919][T24155] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2162.848774][T24155] ? sock_alloc_inode+0x28/0xc0 [ 2162.853656][T24155] kmem_cache_alloc_lru+0x204/0x350 [ 2162.858891][T24155] sock_alloc_inode+0x28/0xc0 [ 2162.863604][T24155] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2162.869004][T24155] new_inode_pseudo+0x69/0x1e0 [ 2162.873803][T24155] __sock_create+0x123/0x920 [ 2162.878424][T24155] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2162.884341][T24155] __sys_socket+0x14f/0x3c0 [ 2162.888895][T24155] ? __pfx___sys_socket+0x10/0x10 [ 2162.893969][T24155] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2162.900334][T24155] ? do_syscall_64+0x108/0x240 [ 2162.905136][T24155] __x64_sys_socket+0x7a/0x90 [ 2162.909849][T24155] do_syscall_64+0xf9/0x240 [ 2162.914380][T24155] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2162.920307][T24155] RIP: 0033:0x7f810c87dda9 [ 2162.924743][T24155] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2162.944376][T24155] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2162.952822][T24155] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2162.961081][T24155] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2162.969071][T24155] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2162.977155][T24155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2162.985251][T24155] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2162.993250][T24155] [ 2162.996422][ C0] vkms_vblank_simulate: vblank timer overrun [ 2163.047803][T24155] memory: usage 307200kB, limit 307200kB, failcnt 77268 [ 2163.054952][T24155] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2163.063250][T24155] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 2163.070591][T24155] Memory cgroup stats for /syz4: [ 2163.070732][T24155] cache 0 02:46:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 2163.144360][T24155] rss 102400 [ 2163.150356][T24155] rss_huge 0 [ 2163.161663][T24155] shmem 0 [ 2163.164829][T24155] mapped_file 0 [ 2163.176190][T24155] dirty 0 [ 2163.182901][T24155] writeback 0 [ 2163.193031][T24155] workingset_refault_anon 27748 [ 2163.211734][T24155] workingset_refault_file 333 [ 2163.220826][T24155] swap 303104 [ 2163.225334][T24155] swapcached 0 [ 2163.228861][T24155] pgpgin 301596 [ 2163.232931][T24155] pgpgout 301571 [ 2163.236621][T24155] pgfault 593977 [ 2163.240276][T24155] pgmajfault 26825 [ 2163.245615][T24155] inactive_anon 0 [ 2163.249374][T24155] active_anon 102400 [ 2163.256022][T24155] inactive_file 0 [ 2163.259809][T24155] active_file 0 [ 2163.263857][T24155] unevictable 0 [ 2163.267475][T24155] hierarchical_memory_limit 314572800 [ 2163.273790][T24155] hierarchical_memsw_limit 9223372036854771712 [ 2163.280119][T24155] total_cache 0 [ 2163.284225][T24155] total_rss 102400 [ 2163.288136][T24155] total_rss_huge 0 [ 2163.292685][T24155] total_shmem 0 [ 2163.303547][T24155] total_mapped_file 0 [ 2163.308066][T24155] total_dirty 0 [ 2163.312274][T24155] total_writeback 0 [ 2163.316238][T24155] total_workingset_refault_anon 27748 [ 2163.322292][T24155] total_workingset_refault_file 333 [ 2163.327736][T24155] total_swap 303104 [ 2163.332902][T24155] total_swapcached 0 [ 2163.338366][T24155] total_pgpgin 301596 [ 2163.342802][T24155] total_pgpgout 301571 [ 2163.346948][T24155] total_pgfault 593977 [ 2163.351040][T24155] total_pgmajfault 26825 [ 2163.356253][T24155] total_inactive_anon 0 [ 2163.360435][T24155] total_active_anon 102400 [ 2163.367450][T24155] total_inactive_file 0 [ 2163.372684][T24155] total_active_file 0 [ 2163.376687][T24155] total_unevictable 0 [ 2163.380677][T24155] anon_cost 0 [ 2163.384867][T24155] file_cost 0 [ 2163.388165][T24155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24154,uid=0 02:46:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140912800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 2163.404330][T24155] Memory cgroup out of memory: Killed process 24154 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2163.516832][T24161] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2163.527591][T24161] CPU: 0 PID: 24161 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2163.538033][T24161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2163.548087][T24161] Call Trace: [ 2163.551360][T24161] [ 2163.554286][T24161] dump_stack_lvl+0x1e7/0x2e0 [ 2163.558975][T24161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2163.564171][T24161] ? __pfx__printk+0x10/0x10 [ 2163.568759][T24161] ? ___ratelimit+0x4c4/0x670 [ 2163.573435][T24161] ? __pfx____ratelimit+0x10/0x10 [ 2163.578464][T24161] dump_header+0xda/0x6a0 [ 2163.582804][T24161] oom_kill_process+0x3a7/0x930 [ 2163.587663][T24161] out_of_memory+0xf67/0x1320 [ 2163.592345][T24161] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2163.597976][T24161] ? __pfx___mutex_lock+0x10/0x10 [ 2163.603008][T24161] ? __pfx_out_of_memory+0x10/0x10 [ 2163.608125][T24161] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2163.613669][T24161] ? __pfx_lock_release+0x10/0x10 [ 2163.618701][T24161] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2163.624789][T24161] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2163.630012][T24161] ? mem_cgroup_iter+0x3e9/0x560 [ 2163.634970][T24161] try_charge_memcg+0xda2/0x18a0 [ 2163.639940][T24161] ? __pfx_try_charge_memcg+0x10/0x10 [ 2163.645315][T24161] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2163.651035][T24161] ? __pfx_lock_release+0x10/0x10 [ 2163.656066][T24161] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 2163.662054][T24161] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2163.667772][T24161] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2163.673577][T24161] obj_cgroup_charge+0x389/0x630 [ 2163.678521][T24161] ? obj_cgroup_charge+0x121/0x630 [ 2163.683636][T24161] ? __pfx_obj_cgroup_charge+0x10/0x10 [ 2163.689102][T24161] ? __pfx___might_resched+0x10/0x10 [ 2163.694391][T24161] __memcg_slab_pre_alloc_hook+0x28d/0x2b0 [ 2163.700203][T24161] ? sock_alloc_inode+0x28/0xc0 [ 2163.705059][T24161] kmem_cache_alloc_lru+0x204/0x350 [ 2163.710259][T24161] sock_alloc_inode+0x28/0xc0 [ 2163.714938][T24161] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2163.720307][T24161] new_inode_pseudo+0x69/0x1e0 [ 2163.725072][T24161] __sock_create+0x123/0x920 [ 2163.729671][T24161] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2163.735570][T24161] __sys_socket+0x14f/0x3c0 [ 2163.740078][T24161] ? __pfx___sys_socket+0x10/0x10 [ 2163.745104][T24161] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2163.751434][T24161] ? do_syscall_64+0x108/0x240 [ 2163.756200][T24161] __x64_sys_socket+0x7a/0x90 [ 2163.760884][T24161] do_syscall_64+0xf9/0x240 [ 2163.765391][T24161] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2163.771286][T24161] RIP: 0033:0x7f810c87dda9 [ 2163.775696][T24161] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2163.795300][T24161] RSP: 002b:00007f810d5010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2163.803713][T24161] RAX: ffffffffffffffda RBX: 00007f810c9abf80 RCX: 00007f810c87dda9 [ 2163.811677][T24161] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 2163.819644][T24161] RBP: 00007f810c8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 2163.827610][T24161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2163.835580][T24161] R13: 000000000000000b R14: 00007f810c9abf80 R15: 00007f810cacfa48 [ 2163.843562][T24161] [ 2163.846697][ C0] vkms_vblank_simulate: vblank timer overrun [ 2163.859613][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2163.888026][T24161] memory: usage 307192kB, limit 307200kB, failcnt 77378 [ 2163.895568][T24161] memory+swap: usage 307488kB, limit 9007199254740988kB, failcnt 0 [ 2163.902597][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2163.904146][T24161] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 2163.919486][T24161] Memory cgroup stats for /syz4: [ 2163.919639][T24161] cache 0 [ 2163.928619][T24161] rss 106496 [ 2163.932308][T24161] rss_huge 0 [ 2163.935734][T24161] shmem 0 [ 2163.938850][T24161] mapped_file 0 02:46:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 2163.967759][T24161] dirty 0 [ 2163.970829][T24161] writeback 0 [ 2163.974812][T24161] workingset_refault_anon 27748 [ 2163.979691][T24161] workingset_refault_file 333 [ 2163.989570][T24161] swap 303104 [ 2163.994067][T24161] swapcached 0 [ 2163.997533][T24161] pgpgin 301609 [ 2164.001113][T24161] pgpgout 301583 [ 2164.028872][T24161] pgfault 594017 [ 2164.032637][T24161] pgmajfault 26825 [ 2164.033547][ T6564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.041476][T24161] inactive_anon 0 [ 2164.051562][T24161] active_anon 106496 [ 2164.058989][T24161] inactive_file 0 [ 2164.102242][T24161] active_file 0 [ 2164.105748][T24161] unevictable 0 [ 2164.109214][T24161] hierarchical_memory_limit 314572800 [ 2164.120092][T24161] hierarchical_memsw_limit 9223372036854771712 [ 2164.134253][T24161] total_cache 0 [ 2164.137802][T24161] total_rss 106496 [ 2164.142242][T24161] total_rss_huge 0 [ 2164.145991][T24161] total_shmem 0 02:46:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 2164.149467][T24161] total_mapped_file 0 [ 2164.154117][T24161] total_dirty 0 [ 2164.157594][T24161] total_writeback 0 [ 2164.162919][T24161] total_workingset_refault_anon 27748 [ 2164.168347][T24161] total_workingset_refault_file 333 [ 2164.184143][T24161] total_swap 303104 [ 2164.188016][T24161] total_swapcached 0 [ 2164.201897][T24161] total_pgpgin 301609 [ 2164.205908][T24161] total_pgpgout 301583 [ 2164.209985][T24161] total_pgfault 594017 [ 2164.231512][T24161] total_pgmajfault 26825 [ 2164.236829][T24161] total_inactive_anon 0 [ 2164.241011][T24161] total_active_anon 106496 [ 2164.256500][T24161] total_inactive_file 0 [ 2164.260816][T24161] total_active_file 0 [ 2164.266063][T24161] total_unevictable 0 [ 2164.270588][T24161] anon_cost 0 [ 2164.274352][T24161] file_cost 0 [ 2164.278183][T24161] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24160,uid=0 [ 2164.301750][T24161] Memory cgroup out of memory: Killed process 24160 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:48 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140a12800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2164.427535][ T6564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.514749][T24170] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2164.545920][T24170] CPU: 0 PID: 24170 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2164.556370][T24170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2164.566449][T24170] Call Trace: [ 2164.569742][T24170] [ 2164.572691][T24170] dump_stack_lvl+0x1e7/0x2e0 [ 2164.577390][T24170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2164.582608][T24170] ? __pfx__printk+0x10/0x10 [ 2164.587213][T24170] ? ___ratelimit+0x4c4/0x670 [ 2164.591912][T24170] ? __pfx____ratelimit+0x10/0x10 [ 2164.596958][T24170] dump_header+0xda/0x6a0 [ 2164.601315][T24170] oom_kill_process+0x3a7/0x930 [ 2164.606188][T24170] out_of_memory+0xf67/0x1320 [ 2164.610895][T24170] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2164.616545][T24170] ? __pfx___mutex_lock+0x10/0x10 [ 2164.621597][T24170] ? __pfx_out_of_memory+0x10/0x10 [ 2164.626744][T24170] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2164.632327][T24170] ? __pfx_lock_release+0x10/0x10 [ 2164.637379][T24170] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2164.643462][T24170] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2164.648678][T24170] ? mem_cgroup_iter+0x3e9/0x560 [ 2164.653641][T24170] try_charge_memcg+0xda2/0x18a0 [ 2164.658625][T24170] ? __pfx_try_charge_memcg+0x10/0x10 [ 2164.664021][T24170] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 2164.669761][T24170] ? __pfx_lock_release+0x10/0x10 [ 2164.674814][T24170] ? memcg_account_kmem+0x1e7/0x210 [ 2164.680044][T24170] ? get_mem_cgroup_from_objcg+0x13b/0x150 [ 2164.685874][T24170] __memcg_kmem_charge_page+0xe1/0x250 [ 2164.691365][T24170] memcg_charge_kernel_stack+0x3f8/0x550 [ 2164.697023][T24170] dup_task_struct+0x15d/0x7d0 [ 2164.701807][T24170] copy_process+0x5d5/0x3fc0 [ 2164.706422][T24170] ? __might_fault+0xa9/0x120 [ 2164.711115][T24170] ? __pfx_lock_release+0x10/0x10 [ 2164.716163][T24170] ? __pfx_copy_process+0x10/0x10 [ 2164.721219][T24170] ? __might_fault+0xc5/0x120 [ 2164.725919][T24170] ? __asan_memset+0x23/0x50 [ 2164.730527][T24170] kernel_clone+0x21d/0x8d0 [ 2164.735047][T24170] ? __pfx_kernel_clone+0x10/0x10 [ 2164.740109][T24170] __se_sys_clone3+0x2cb/0x350 [ 2164.744890][T24170] ? __pfx___se_sys_clone3+0x10/0x10 [ 2164.750228][T24170] ? do_syscall_64+0x108/0x240 [ 2164.755012][T24170] ? do_syscall_64+0xb4/0x240 [ 2164.759706][T24170] do_syscall_64+0xf9/0x240 [ 2164.764231][T24170] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2164.770138][T24170] RIP: 0033:0x7f810c8a9b99 [ 2164.774561][T24170] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 2164.794178][T24170] RSP: 002b:00007f810cacf918 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 2164.802610][T24170] RAX: ffffffffffffffda RBX: 00007f810c852270 RCX: 00007f810c8a9b99 02:46:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6}, 0x0) [ 2164.810589][T24170] RDX: 00007f810c852270 RSI: 0000000000000058 RDI: 00007f810cacf960 [ 2164.818568][T24170] RBP: 00007f810d5016c0 R08: 00007f810d5016c0 R09: 00007f810cacfa47 [ 2164.826547][T24170] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0 [ 2164.834527][T24170] R13: 000000000000000b R14: 00007f810cacf960 R15: 00007f810cacfa48 [ 2164.842528][T24170] [ 2164.845622][ C0] vkms_vblank_simulate: vblank timer overrun [ 2164.897074][T24170] memory: usage 307172kB, limit 307200kB, failcnt 77448 [ 2164.907180][T24170] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 2164.916847][T24170] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 2164.924471][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2164.924510][T24170] Memory cgroup stats for /syz4: [ 2164.935007][T24170] cache 0 [ 2164.943533][T24170] rss 102400 [ 2164.946829][T24170] rss_huge 0 [ 2164.950355][T24170] shmem 0 [ 2164.953750][T24170] mapped_file 0 [ 2164.957327][T24170] dirty 0 [ 2164.960386][T24170] writeback 0 [ 2164.966219][T24170] workingset_refault_anon 27748 [ 2164.971258][T24170] workingset_refault_file 333 [ 2164.976869][T24170] swap 303104 [ 2164.980296][T24170] swapcached 0 [ 2164.984390][T24170] pgpgin 301621 [ 2164.988007][T24170] pgpgout 301596 [ 2164.992085][T24170] pgfault 594057 [ 2164.995763][T24170] pgmajfault 26825 [ 2164.999690][T24170] inactive_anon 0 [ 2165.004270][T24170] active_anon 81920 [ 2165.008272][T24170] inactive_file 0 [ 2165.012476][T24170] active_file 0 [ 2165.016039][T24170] unevictable 0 [ 2165.019631][T24170] hierarchical_memory_limit 314572800 [ 2165.025750][T24170] hierarchical_memsw_limit 9223372036854771712 [ 2165.032525][T24170] total_cache 0 [ 2165.036143][T24170] total_rss 102400 [ 2165.039983][T24170] total_rss_huge 0 [ 2165.056680][T24170] total_shmem 0 [ 2165.060196][T24170] total_mapped_file 0 [ 2165.064568][T24170] total_dirty 0 [ 2165.068154][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2165.078875][T24170] total_writeback 0 [ 2165.082807][T24170] total_workingset_refault_anon 27748 [ 2165.088224][T24170] total_workingset_refault_file 333 [ 2165.100474][ T6564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2165.111263][T24170] total_swap 303104 [ 2165.116411][T24170] total_swapcached 0 [ 2165.143329][T24170] total_pgpgin 301621 [ 2165.147351][T24170] total_pgpgout 301596 [ 2165.154125][T24170] total_pgfault 594057 02:46:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x7}, 0x0) [ 2165.177530][T24170] total_pgmajfault 26825 [ 2165.189731][T24170] total_inactive_anon 0 [ 2165.195531][T24170] total_active_anon 81920 [ 2165.211677][T24170] total_inactive_file 0 [ 2165.215862][T24170] total_active_file 0 [ 2165.219886][T24170] total_unevictable 0 [ 2165.235508][T24170] anon_cost 0 [ 2165.238822][T24170] file_cost 0 [ 2165.245431][T24170] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24170,uid=0 [ 2165.260888][T23904] chnl_net:caif_netlink_parms(): no params data found [ 2165.269242][T24170] Memory cgroup out of memory: Killed process 24170 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:49 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140b12800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2165.356224][ T6564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 02:46:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 2165.550890][T24181] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2165.582917][T24181] CPU: 0 PID: 24181 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2165.593371][T24181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2165.603442][T24181] Call Trace: [ 2165.606733][T24181] [ 2165.609680][T24181] dump_stack_lvl+0x1e7/0x2e0 [ 2165.614382][T24181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2165.619596][T24181] ? __pfx__printk+0x10/0x10 [ 2165.624199][T24181] ? ___ratelimit+0x4c4/0x670 [ 2165.628897][T24181] ? __pfx____ratelimit+0x10/0x10 [ 2165.633945][T24181] dump_header+0xda/0x6a0 [ 2165.638306][T24181] oom_kill_process+0x3a7/0x930 [ 2165.643186][T24181] out_of_memory+0xf67/0x1320 [ 2165.647899][T24181] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2165.653552][T24181] ? __pfx___mutex_lock+0x10/0x10 [ 2165.658602][T24181] ? __pfx_out_of_memory+0x10/0x10 [ 2165.663754][T24181] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2165.669321][T24181] ? __pfx_lock_release+0x10/0x10 [ 2165.674369][T24181] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2165.680459][T24181] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2165.685671][T24181] ? mem_cgroup_iter+0x3e9/0x560 [ 2165.690610][T24181] try_charge_memcg+0xda2/0x18a0 [ 2165.695563][T24181] ? __pfx_try_charge_memcg+0x10/0x10 [ 2165.700931][T24181] ? percpu_ref_tryget+0x14/0x180 [ 2165.705964][T24181] charge_memcg+0xa2/0x160 [ 2165.710379][T24181] __mem_cgroup_charge+0x27/0x80 [ 2165.715314][T24181] folio_prealloc+0x52/0x170 [ 2165.719906][T24181] do_wp_page+0x1222/0x4c90 [ 2165.724416][T24181] ? __pfx_do_wp_page+0x10/0x10 [ 2165.729268][T24181] ? __pfx_lock_acquire+0x10/0x10 [ 2165.734301][T24181] ? do_raw_spin_lock+0x14e/0x370 [ 2165.739355][T24181] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2165.744585][T24181] __handle_mm_fault+0x26ad/0x72d0 [ 2165.749750][T24181] ? reacquire_held_locks+0x3eb/0x690 [ 2165.755143][T24181] ? __pfx___handle_mm_fault+0x10/0x10 [ 2165.760638][T24181] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2165.766395][T24181] ? mtree_range_walk+0x6fd/0x8e0 [ 2165.771437][T24181] ? lock_vma_under_rcu+0x18a/0x730 [ 2165.776644][T24181] ? __pfx_lock_release+0x10/0x10 [ 2165.781675][T24181] ? lock_vma_under_rcu+0x2f9/0x730 [ 2165.786893][T24181] ? lock_vma_under_rcu+0x18a/0x730 [ 2165.792089][T24181] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2165.797640][T24181] handle_mm_fault+0x3c1/0x8a0 [ 2165.802406][T24181] exc_page_fault+0x456/0x870 [ 2165.807083][T24181] asm_exc_page_fault+0x26/0x30 [ 2165.811933][T24181] RIP: 0033:0x7f810c839c40 [ 2165.816339][T24181] Code: 89 1c 24 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 89 c5 e9 7f fe ff ff 0f 1f 84 00 00 00 00 00 <43> 89 2c 8e e9 a5 fe ff ff 0f 1f 80 00 00 00 00 48 39 c3 74 99 48 [ 2165.835943][T24181] RSP: 002b:00007f810cacfa60 EFLAGS: 00010246 [ 2165.842008][T24181] RAX: 000000008933a913 RBX: 00007f810c9ac018 RCX: 0000000000000003 [ 2165.849968][T24181] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 00000000000168f7 [ 2165.857930][T24181] RBP: 000000008933a913 R08: 0000001b32120000 R09: 0000000000000913 [ 2165.865893][T24181] R10: 000000008933a917 R11: 0000000000000246 R12: 0000000000000003 [ 2165.873855][T24181] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff8933a1b7 [ 2165.881821][T24181] ? __sock_create+0x27/0x920 [ 2165.886511][T24181] [ 2165.889540][ C0] vkms_vblank_simulate: vblank timer overrun [ 2165.950819][T23902] chnl_net:caif_netlink_parms(): no params data found [ 2165.971672][T23804] net_ratelimit: 3 callbacks suppressed [ 2165.971689][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:46:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 2166.080380][T23915] chnl_net:caif_netlink_parms(): no params data found [ 2166.101691][T24181] memory: usage 307200kB, limit 307200kB, failcnt 77538 [ 2166.111455][T24181] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2166.119378][T24181] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 2166.173011][T24181] Memory cgroup stats for /syz4: [ 2166.173151][T24181] cache 0 [ 2166.183532][T24181] rss 122880 [ 2166.186845][T24181] rss_huge 0 [ 2166.195407][T24181] shmem 0 [ 2166.198455][T24181] mapped_file 0 [ 2166.202055][T24181] dirty 0 [ 2166.205555][T24181] writeback 0 [ 2166.208929][T24181] workingset_refault_anon 27748 [ 2166.216102][T24181] workingset_refault_file 333 [ 2166.222979][T24181] swap 303104 [ 2166.230498][T24181] swapcached 0 [ 2166.236590][T24181] pgpgin 301636 [ 2166.240225][T24181] pgpgout 301606 [ 2166.251714][T24181] pgfault 594106 [ 2166.257646][T24181] pgmajfault 26825 [ 2166.264738][T24181] inactive_anon 0 [ 2166.268437][T24181] active_anon 122880 [ 2166.272931][T24181] inactive_file 0 [ 2166.276582][T24181] active_file 0 [ 2166.280051][T24181] unevictable 0 [ 2166.284471][T24181] hierarchical_memory_limit 314572800 [ 2166.289864][T24181] hierarchical_memsw_limit 9223372036854771712 [ 2166.305006][T24181] total_cache 0 [ 2166.308491][T24181] total_rss 122880 [ 2166.318116][T24181] total_rss_huge 0 [ 2166.325560][T24181] total_shmem 0 [ 2166.329035][T24181] total_mapped_file 0 [ 2166.338696][T24181] total_dirty 0 [ 2166.358887][T24181] total_writeback 0 [ 2166.366338][T24181] total_workingset_refault_anon 27748 02:46:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 2166.385497][T24181] total_workingset_refault_file 333 [ 2166.396436][T24181] total_swap 303104 [ 2166.404044][T24181] total_swapcached 0 [ 2166.412476][T24181] total_pgpgin 301636 [ 2166.420986][T24181] total_pgpgout 301606 [ 2166.425791][T24181] total_pgfault 594106 [ 2166.429960][T24181] total_pgmajfault 26825 [ 2166.442612][T24181] total_inactive_anon 0 [ 2166.446791][T24181] total_active_anon 122880 [ 2166.461271][T24181] total_inactive_file 0 [ 2166.465647][T24181] total_active_file 0 [ 2166.469745][T24181] total_unevictable 0 [ 2166.477016][T24181] anon_cost 0 [ 2166.480400][T24181] file_cost 0 02:46:50 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140c12800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2166.484036][T24181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24181,uid=0 [ 2166.500177][T24181] Memory cgroup out of memory: Killed process 24181 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:46:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb}, 0x0) [ 2166.628070][T24198] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2166.681754][T24198] CPU: 0 PID: 24198 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2166.692215][T24198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2166.702282][T24198] Call Trace: [ 2166.705570][T24198] [ 2166.708515][T24198] dump_stack_lvl+0x1e7/0x2e0 [ 2166.713216][T24198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2166.718431][T24198] ? __pfx__printk+0x10/0x10 [ 2166.723033][T24198] ? ___ratelimit+0x4c4/0x670 [ 2166.727730][T24198] ? __pfx____ratelimit+0x10/0x10 [ 2166.732779][T24198] dump_header+0xda/0x6a0 [ 2166.737135][T24198] oom_kill_process+0x3a7/0x930 [ 2166.742008][T24198] out_of_memory+0xf67/0x1320 [ 2166.746707][T24198] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2166.752355][T24198] ? __pfx___mutex_lock+0x10/0x10 [ 2166.757399][T24198] ? __pfx_out_of_memory+0x10/0x10 [ 2166.762539][T24198] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2166.768100][T24198] ? __pfx_lock_release+0x10/0x10 [ 2166.773144][T24198] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2166.779231][T24198] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2166.784451][T24198] ? mem_cgroup_iter+0x3e9/0x560 [ 2166.789422][T24198] try_charge_memcg+0xda2/0x18a0 [ 2166.794413][T24198] ? __pfx_try_charge_memcg+0x10/0x10 [ 2166.799811][T24198] ? percpu_ref_tryget+0x14/0x180 [ 2166.804876][T24198] charge_memcg+0xa2/0x160 [ 2166.809317][T24198] __mem_cgroup_charge+0x27/0x80 [ 2166.814273][T24198] folio_prealloc+0x52/0x170 [ 2166.818898][T24198] do_wp_page+0x1222/0x4c90 [ 2166.823436][T24198] ? __pfx_do_wp_page+0x10/0x10 [ 2166.828309][T24198] ? __pfx_lock_acquire+0x10/0x10 [ 2166.833358][T24198] ? do_raw_spin_lock+0x14e/0x370 [ 2166.838411][T24198] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2166.843634][T24198] __handle_mm_fault+0x26ad/0x72d0 [ 2166.848790][T24198] ? reacquire_held_locks+0x3eb/0x690 [ 2166.854175][T24198] ? __pfx___handle_mm_fault+0x10/0x10 [ 2166.859662][T24198] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2166.865409][T24198] ? mtree_range_walk+0x6fd/0x8e0 [ 2166.870449][T24198] ? lock_vma_under_rcu+0x18a/0x730 [ 2166.875676][T24198] ? __pfx_lock_release+0x10/0x10 [ 2166.880714][T24198] ? lock_vma_under_rcu+0x2f9/0x730 [ 2166.885951][T24198] ? lock_vma_under_rcu+0x18a/0x730 [ 2166.891164][T24198] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2166.896730][T24198] handle_mm_fault+0x3c1/0x8a0 [ 2166.901530][T24198] exc_page_fault+0x456/0x870 [ 2166.906233][T24198] asm_exc_page_fault+0x26/0x30 [ 2166.911100][T24198] RIP: 0033:0x7f810c839c40 [ 2166.915528][T24198] Code: 89 1c 24 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 89 c5 e9 7f fe ff ff 0f 1f 84 00 00 00 00 00 <43> 89 2c 8e e9 a5 fe ff ff 0f 1f 80 00 00 00 00 48 39 c3 74 99 48 [ 2166.935148][T24198] RSP: 002b:00007f810cacfa60 EFLAGS: 00010246 [ 2166.941236][T24198] RAX: 000000008933a913 RBX: 00007f810c9ac018 RCX: 0000000000000003 [ 2166.949219][T24198] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 00000000000168f7 [ 2166.957199][T24198] RBP: 000000008933a913 R08: 0000001b32120000 R09: 0000000000000913 [ 2166.965178][T24198] R10: 000000008933a917 R11: 0000000000000246 R12: 0000000000000003 [ 2166.973158][T24198] R13: 0000000000000001 R14: 00007f810c9a0000 R15: ffffffff8933a1b7 [ 2166.981143][T24198] ? __sock_create+0x27/0x920 [ 2166.985862][T24198] [ 2166.988910][ C0] vkms_vblank_simulate: vblank timer overrun [ 2166.999758][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2167.013514][T24198] memory: usage 307200kB, limit 307200kB, failcnt 77602 [ 2167.016126][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2167.020495][T24198] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 2167.037123][T24198] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 2167.041072][T23904] bridge0: port 1(bridge_slave_0) entered blocking state [ 2167.044843][T24198] Memory cgroup stats for /syz4: [ 2167.052874][T24198] cache 0 [ 2167.060872][T24198] rss 102400 [ 2167.066087][T24198] rss_huge 0 [ 2167.069437][T24198] shmem 0 [ 2167.073534][T24198] mapped_file 0 [ 2167.077173][T24198] dirty 0 [ 2167.080237][T24198] writeback 0 [ 2167.084135][T23904] bridge0: port 1(bridge_slave_0) entered disabled state [ 2167.092625][T23904] bridge_slave_0: entered allmulticast mode [ 2167.105793][T23904] bridge_slave_0: entered promiscuous mode [ 2167.112163][T24198] workingset_refault_anon 27748 [ 2167.117201][T24198] workingset_refault_file 333 [ 2167.128635][T24198] swap 303104 [ 2167.137106][T24198] swapcached 0 [ 2167.145268][T24198] pgpgin 301648 [ 2167.153416][T24198] pgpgout 301623 [ 2167.160474][T24198] pgfault 594146 [ 2167.168967][T24198] pgmajfault 26825 [ 2167.177502][T24198] inactive_anon 0 [ 2167.185785][T24198] active_anon 98304 [ 2167.197606][T24198] inactive_file 0 [ 2167.206427][T24198] active_file 0 [ 2167.217557][T24198] unevictable 0 [ 2167.225746][T24198] hierarchical_memory_limit 314572800 [ 2167.242601][T24198] hierarchical_memsw_limit 9223372036854771712 [ 2167.271688][T24198] total_cache 0 [ 2167.289937][T24198] total_rss 102400 [ 2167.308930][T24198] total_rss_huge 0 [ 2167.326205][T24198] total_shmem 0 [ 2167.339969][T24198] total_mapped_file 0 [ 2167.351470][T24198] total_dirty 0 [ 2167.354962][T24198] total_writeback 0 [ 2167.358770][T24198] total_workingset_refault_anon 27748 [ 2167.371517][T24198] total_workingset_refault_file 333 [ 2167.376832][T24198] total_swap 303104 [ 2167.380648][T24198] total_swapcached 0 [ 2167.403150][T24198] total_pgpgin 301648 [ 2167.408428][T23904] bridge0: port 2(bridge_slave_1) entered blocking state [ 2167.425120][T23904] bridge0: port 2(bridge_slave_1) entered disabled state [ 2167.429079][T24198] total_pgpgout 301623 [ 2167.440742][T23904] bridge_slave_1: entered allmulticast mode [ 2167.445931][T24198] total_pgfault 594146 02:46:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc}, 0x0) [ 2167.450954][T24198] total_pgmajfault 26825 [ 2167.456605][T23904] bridge_slave_1: entered promiscuous mode [ 2167.481494][T24198] total_inactive_anon 0 [ 2167.485694][T24198] total_active_anon 98304 [ 2167.490056][T24198] total_inactive_file 0 [ 2167.514962][T24198] total_active_file 0 [ 2167.524638][T24198] total_unevictable 0 [ 2167.535401][T24198] anon_cost 0 [ 2167.544300][T24198] file_cost 0 [ 2167.560203][T23902] bridge0: port 1(bridge_slave_0) entered blocking state [ 2167.560956][T24198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24198,uid=0 [ 2167.577301][T23902] bridge0: port 1(bridge_slave_0) entered disabled state [ 2167.611676][T24198] Memory cgroup out of memory: Killed process 24198 (syz-executor.4) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2167.615736][T23902] bridge_slave_0: entered allmulticast mode 02:46:51 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140d12800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2167.659044][T23902] bridge_slave_0: entered promiscuous mode [ 2167.808071][T23915] bridge0: port 1(bridge_slave_0) entered blocking state [ 2167.810583][T24208] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2167.825001][T23915] bridge0: port 1(bridge_slave_0) entered disabled state [ 2167.840702][T23915] bridge_slave_0: entered allmulticast mode [ 2167.856046][T24208] CPU: 1 PID: 24208 Comm: syz-executor.4 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2167.863254][T23915] bridge_slave_0: entered promiscuous mode [ 2167.866473][T24208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2167.866487][T24208] Call Trace: [ 2167.866495][T24208] [ 2167.866504][T24208] dump_stack_lvl+0x1e7/0x2e0 [ 2167.893234][T24208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2167.895615][T23915] bridge0: port 2(bridge_slave_1) entered blocking state [ 2167.898445][T24208] ? __pfx__printk+0x10/0x10 [ 2167.898476][T24208] ? ___ratelimit+0x4c4/0x670 [ 2167.914730][T24208] ? __pfx____ratelimit+0x10/0x10 [ 2167.919761][T24208] dump_header+0xda/0x6a0 [ 2167.924097][T24208] oom_kill_process+0x3a7/0x930 [ 2167.928952][T24208] out_of_memory+0xf67/0x1320 [ 2167.933630][T24208] ? mem_cgroup_out_of_memory+0xf7/0x3b0 [ 2167.939257][T24208] ? __pfx___mutex_lock+0x10/0x10 [ 2167.944285][T24208] ? __pfx_out_of_memory+0x10/0x10 [ 2167.949401][T24208] mem_cgroup_out_of_memory+0x263/0x3b0 [ 2167.954941][T24208] ? __pfx_lock_release+0x10/0x10 [ 2167.959966][T24208] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2167.966032][T24208] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2167.971223][T24208] ? mem_cgroup_iter+0x3e9/0x560 [ 2167.976157][T24208] try_charge_memcg+0xda2/0x18a0 [ 2167.981089][T24208] ? mark_lock+0x9a/0x350 [ 2167.985429][T24208] ? __pfx_try_charge_memcg+0x10/0x10 [ 2167.990818][T24208] ? mem_cgroup_swapin_charge_folio+0x35/0x3a0 [ 2167.996967][T24208] charge_memcg+0xa2/0x160 [ 2168.001388][T24208] mem_cgroup_swapin_charge_folio+0x267/0x3a0 [ 2168.007461][T24208] __read_swap_cache_async+0x480/0x8b0 [ 2168.012918][T24208] ? mark_lock+0x9a/0x350 [ 2168.017249][T24208] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2168.023234][T24208] swap_cluster_readahead+0x67c/0x810 [ 2168.028612][T24208] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2168.034508][T24208] ? __pfx_lock_release+0x10/0x10 [ 2168.039536][T24208] ? xas_descend+0x37e/0x470 [ 2168.044127][T24208] swapin_readahead+0x1ea/0x1070 [ 2168.049061][T24208] ? filemap_get_entry+0x127/0x4e0 [ 2168.054184][T24208] ? __pfx_swapin_readahead+0x10/0x10 [ 2168.059560][T24208] ? __filemap_get_folio+0x935/0xbc0 [ 2168.064848][T24208] ? swap_cache_get_folio+0x9f/0x570 [ 2168.070132][T24208] do_swap_page+0x8ab/0x3da0 [ 2168.074719][T24208] ? __pte_offset_map+0x2c4/0x380 [ 2168.079741][T24208] ? __pfx_lock_acquire+0x10/0x10 [ 2168.084761][T24208] ? do_swap_page+0x154/0x3da0 [ 2168.089519][T24208] ? __pfx_do_swap_page+0x10/0x10 [ 2168.094536][T24208] ? pte_offset_map_nolock+0x137/0x1f0 [ 2168.099993][T24208] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 2168.105795][T24208] ? do_raw_spin_unlock+0x13b/0x8b0 [ 2168.110994][T24208] __handle_mm_fault+0x15e8/0x72d0 [ 2168.116124][T24208] ? reacquire_held_locks+0x3eb/0x690 [ 2168.121492][T24208] ? __pfx___handle_mm_fault+0x10/0x10 [ 2168.126955][T24208] ? __pfx_reacquire_held_locks+0x10/0x10 [ 2168.132682][T24208] ? mtree_range_walk+0x6fd/0x8e0 [ 2168.137701][T24208] ? lock_vma_under_rcu+0x18a/0x730 [ 2168.142893][T24208] ? __pfx_lock_release+0x10/0x10 [ 2168.147913][T24208] ? lock_vma_under_rcu+0x2f9/0x730 [ 2168.153125][T24208] ? lock_vma_under_rcu+0x18a/0x730 [ 2168.158315][T24208] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2168.163857][T24208] handle_mm_fault+0x3c1/0x8a0 [ 2168.168621][T24208] exc_page_fault+0x456/0x870 [ 2168.173297][T24208] asm_exc_page_fault+0x26/0x30 [ 2168.178141][T24208] RIP: 0033:0x7f810c836cfa [ 2168.182554][T24208] Code: 00 80 7f 20 00 0f 84 72 01 00 00 48 8b 87 88 00 00 00 48 83 f8 ff 75 38 be 01 00 00 00 48 89 df e8 cb fc ff ff e8 96 f8 ff ff <8b> 05 88 6c 17 00 c6 43 20 00 8d 50 ff 89 15 7b 6c 17 00 85 d2 0f [ 2168.202149][T24208] RSP: 002b:00007f810cacfb00 EFLAGS: 00010246 [ 2168.208213][T24208] RAX: 0000000000000000 RBX: 00007f810c9abf80 RCX: 0000001b31d20000 [ 2168.216175][T24208] RDX: 0000001b31d20000 RSI: 0000001b31d20018 RDI: 000000008135d7d3 [ 2168.224141][T24208] RBP: 0000000000000032 R08: 0000001b32120000 R09: 0000000000000152 [ 2168.232106][T24208] R10: 000000008135d7d7 R11: 0000000000000246 R12: 00007f810c9a80c0 [ 2168.240071][T24208] R13: 00000000002113db R14: 00007f810cacfc80 R15: 00007f810c9abf80 [ 2168.248049][T24208] [ 2168.254382][T24208] memory: usage 307200kB, limit 307200kB, failcnt 77675 [ 2168.261345][T24208] memory+swap: usage 307524kB, limit 9007199254740988kB, failcnt 0 [ 2168.262394][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2168.271019][T24208] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 2168.285628][T24208] Memory cgroup stats for /syz4: [ 2168.285767][T24208] cache 0 [ 2168.301991][T24208] rss 61440 [ 2168.305285][T24208] rss_huge 0 [ 2168.308643][T24208] shmem 0 [ 2168.312484][T24208] mapped_file 0 [ 2168.316107][T24208] dirty 0 [ 2168.319220][T24208] writeback 0 [ 2168.323952][T24208] workingset_refault_anon 27748 [ 2168.329895][T24208] workingset_refault_file 333 [ 2168.335248][T24208] swap 360448 [ 2168.338702][T24208] swapcached 0 [ 2168.342832][T24208] pgpgin 301670 [ 2168.346454][T24208] pgpgout 301655 [ 2168.350148][T24208] pgfault 594200 [ 2168.354389][T24208] pgmajfault 26825 [ 2168.358299][T24208] inactive_anon 0 [ 2168.366477][T24208] active_anon 61440 [ 2168.370770][T24208] inactive_file 0 [ 2168.375168][T24208] active_file 0 [ 2168.378763][T24208] unevictable 0 [ 2168.381557][T23915] bridge0: port 2(bridge_slave_1) entered disabled state [ 2168.383513][T24208] hierarchical_memory_limit 314572800 [ 2168.390643][T23915] bridge_slave_1: entered allmulticast mode [ 2168.395152][T24208] hierarchical_memsw_limit 9223372036854771712 [ 2168.407674][T24208] total_cache 0 [ 2168.411261][T24208] total_rss 61440 [ 2168.418252][T23915] bridge_slave_1: entered promiscuous mode [ 2168.426056][T24208] total_rss_huge 0 [ 2168.443793][T24208] total_shmem 0 02:46:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd}, 0x0) [ 2168.475926][T24208] total_mapped_file 0 [ 2168.486682][T24208] total_dirty 0 [ 2168.497407][T24208] total_writeback 0 [ 2168.515244][T24208] total_workingset_refault_anon 27748 [ 2168.533958][T23902] bridge0: port 2(bridge_slave_1) entered blocking state [ 2168.542001][T23902] bridge0: port 2(bridge_slave_1) entered disabled state [ 2168.550587][T24208] total_workingset_refault_file 333 [ 2168.559661][T24208] total_swap 360448 [ 2168.569148][T23902] bridge_slave_1: entered allmulticast mode [ 2168.570306][T24208] total_swapcached 0 [ 2168.581829][T24208] total_pgpgin 301670 [ 2168.585921][T24208] total_pgpgout 301655 [ 2168.597665][T23902] bridge_slave_1: entered promiscuous mode [ 2168.604432][T24208] total_pgfault 594200 [ 2168.609233][T24208] total_pgmajfault 26825 [ 2168.620404][T24208] total_inactive_anon 0 [ 2168.624986][T24208] total_active_anon 61440 [ 2168.629405][T24208] total_inactive_file 0 [ 2168.634210][T24208] total_active_file 0 [ 2168.639068][T24208] total_unevictable 0 [ 2168.643467][T24208] anon_cost 0 [ 2168.646884][T24208] file_cost 0 [ 2168.650294][T24208] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=24208,uid=0 [ 2168.665858][T23904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 02:46:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140e12800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2168.675724][T24208] Memory cgroup out of memory: Killed process 24208 (syz-executor.4) total-vm:54508kB, anon-rss:440kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2168.690787][T23904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 02:46:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe}, 0x0) [ 2168.933216][T23915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2168.946060][T24213] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 02:46:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140f12800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 2168.987375][T23902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2169.007572][T23902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2169.110669][T23915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 02:46:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000141012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 2169.164712][T24219] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2169.198745][T23904] team0: Port device team_slave_0 added [ 2169.226895][T23904] team0: Port device team_slave_1 added 02:46:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000141112800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2169.273469][T24221] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2169.308462][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2169.316429][T23902] team0: Port device team_slave_0 added 02:46:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 02:46:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000141212800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2169.456295][T23902] team0: Port device team_slave_1 added [ 2169.474622][T24225] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2169.545140][T23904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2169.559168][T23904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2169.586667][T23904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2169.611938][T23915] team0: Port device team_slave_0 added 02:46:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x12}, 0x0) 02:46:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000141712800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2169.655731][T24229] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2169.741081][T23904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2169.748407][T23904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2169.777646][T23904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2169.807887][T23915] team0: Port device team_slave_1 added 02:46:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000141812800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:46:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18}, 0x0) [ 2169.878011][T24234] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2170.029616][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2170.071359][T23902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2170.078517][T23902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2170.104455][ C0] vkms_vblank_simulate: vblank timer overrun [ 2170.116627][T23902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 02:46:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x21}, 0x0) [ 2170.174900][T24240] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 02:46:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000142112800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2170.363066][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.395880][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2172.437173][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.069278][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.469699][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.512148][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2174.671740][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.550043][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2175.732077][T23915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2175.739070][T23915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.765753][T23915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2175.793278][T23902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2175.800296][T23902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.851256][T23902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2175.908313][T24253] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 02:46:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x25}, 0x0) 02:46:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000142512800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2176.101786][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:46:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000142f12800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2176.170571][T23915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2176.178143][T23915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2176.207636][T23915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 02:46:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2f}, 0x0) [ 2176.589431][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2177.632046][T22227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2177.673901][ T6564] gretap0 (unregistering): left allmulticast mode [ 2178.670704][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2179.153567][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2179.720495][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2180.749465][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2181.808428][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.182147][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.839041][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2183.870416][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2184.262037][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2184.923533][ T5145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.221881][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.949792][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2187.003632][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.029266][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.261916][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2189.070007][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.107469][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2191.160865][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2191.349983][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2192.200184][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.227473][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2193.861779][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.269264][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.422236][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.310388][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.327546][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.338410][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.351824][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.440790][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.461870][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2197.470036][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2198.512353][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2199.550048][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2200.502179][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2200.581998][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2201.631633][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.673163][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2202.750222][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2202.759370][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2202.769427][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2202.778939][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2202.789701][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2202.797652][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2203.121573][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2203.130960][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2203.139251][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2203.154303][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2203.163348][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2203.170641][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2203.461938][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.548471][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.562175][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.570947][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.572779][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2203.588615][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2203.597027][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2203.605908][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2203.618834][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2203.627804][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2203.635385][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2203.702123][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2204.752314][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2204.901650][ T5099] Bluetooth: hci1: command 0x0409 tx timeout [ 2205.221833][ T5099] Bluetooth: hci3: command 0x0409 tx timeout [ 2205.701721][ T5099] Bluetooth: hci4: command 0x0409 tx timeout [ 2205.800189][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:47:29 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000143212800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 02:47:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3a}, 0x0) [ 2206.675411][T31633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2206.982964][ T5099] Bluetooth: hci1: command 0x041b tx timeout [ 2207.301928][ T5099] Bluetooth: hci3: command 0x041b tx timeout [ 2207.791250][ T5099] Bluetooth: hci4: command 0x041b tx timeout [ 2207.861764][T32585] net_ratelimit: 1 callbacks suppressed [ 2207.861780][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.095148][ T5103] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2208.104773][ T5103] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2208.113995][ T5103] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2208.122115][ T5103] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2208.132093][ T5103] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2208.139355][ T5103] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2208.560327][ T5099] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2208.569334][ T5099] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2208.581230][ T5099] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2208.593392][ T5099] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2208.604029][ T5099] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2208.611717][ T5099] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2208.911036][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2209.071877][ T5103] Bluetooth: hci1: command 0x040f tx timeout [ 2209.381764][ T5103] Bluetooth: hci3: command 0x040f tx timeout [ 2209.701763][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2209.863414][ T5103] Bluetooth: hci4: command 0x040f tx timeout [ 2209.942121][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2210.183773][ T5103] Bluetooth: hci8: command 0x0409 tx timeout [ 2210.661684][ T5103] Bluetooth: hci9: command 0x0409 tx timeout [ 2210.984848][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2211.150156][ T5103] Bluetooth: hci1: command 0x0419 tx timeout [ 2211.461770][ T5103] Bluetooth: hci3: command 0x0419 tx timeout [ 2211.941465][ T5103] Bluetooth: hci4: command 0x0419 tx timeout [ 2212.023248][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2212.261511][ T5103] Bluetooth: hci8: command 0x041b tx timeout [ 2212.741585][ T5103] Bluetooth: hci9: command 0x041b tx timeout [ 2212.742793][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.062096][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2213.070232][ T7632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2214.111932][T32585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2214.129072][T23904] hsr_slave_0: entered promiscuous mode [ 2214.138288][T23904] hsr_slave_1: entered promiscuous mode [ 2214.146449][T23904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2214.154340][T23904] Cannot create hsr debugfs directory [ 2214.174932][T24265] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2214.361497][ T5103] Bluetooth: hci8: command 0x040f tx timeout [ 2214.831491][ T5103] Bluetooth: hci9: command 0x040f tx timeout [ 2215.152043][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.790565][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.183740][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2216.422685][ T5103] Bluetooth: hci8: command 0x0419 tx timeout [ 2216.925346][ T5103] Bluetooth: hci9: command 0x0419 tx timeout [ 2217.188110][T24282] chnl_net:caif_netlink_parms(): no params data found [ 2217.208452][T24274] chnl_net:caif_netlink_parms(): no params data found [ 2217.219887][T24271] chnl_net:caif_netlink_parms(): no params data found [ 2217.227463][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.276363][T24278] chnl_net:caif_netlink_parms(): no params data found [ 2217.327585][T24286] chnl_net:caif_netlink_parms(): no params data found [ 2217.865111][T24282] bridge0: port 1(bridge_slave_0) entered blocking state [ 2217.872715][T24282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2217.880724][T24282] bridge_slave_0: entered allmulticast mode [ 2217.890058][T24282] bridge_slave_0: entered promiscuous mode [ 2217.942541][ T6564] hsr_slave_0: left promiscuous mode [ 2217.951952][ T6564] hsr_slave_1: left promiscuous mode [ 2217.973226][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2217.985335][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2217.998282][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2218.009306][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2218.021024][ T6564] bridge_slave_1: left allmulticast mode [ 2218.027265][ T6564] bridge_slave_1: left promiscuous mode [ 2218.033224][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.044489][ T6564] bridge_slave_0: left allmulticast mode [ 2218.050140][ T6564] bridge_slave_0: left promiscuous mode [ 2218.055910][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 2218.079061][ T6564] veth1_macvtap: left promiscuous mode [ 2218.085141][ T6564] veth0_macvtap: left promiscuous mode [ 2218.090734][ T6564] veth1_vlan: left promiscuous mode [ 2218.097296][ T6564] veth0_vlan: left promiscuous mode [ 2218.277224][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.469829][ T6564] bond4 (unregistering): Released all slaves [ 2218.611247][ T6564] bond3 (unregistering): Released all slaves [ 2218.627785][ T6564] bond2 (unregistering): Released all slaves [ 2218.647273][ T6564] bond1 (unregistering): Released all slaves [ 2218.821858][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.945780][ T6564] team_slave_1 (unregistering): left promiscuous mode [ 2218.953815][ T6564] team_slave_1 (unregistering): left allmulticast mode [ 2218.966351][ T6564] team0 (unregistering): Port device team_slave_1 removed [ 2218.983285][ T6564] team_slave_0 (unregistering): left promiscuous mode [ 2218.990082][ T6564] team_slave_0 (unregistering): left allmulticast mode [ 2218.999815][ T6564] team0 (unregistering): Port device team_slave_0 removed [ 2219.024613][ T6564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2219.033488][ T6564] bond_slave_1 (unregistering): left promiscuous mode [ 2219.040248][ T6564] bond_slave_1 (unregistering): left allmulticast mode [ 2219.060155][ T6564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2219.069642][ T6564] bond_slave_0 (unregistering): left promiscuous mode [ 2219.076764][ T6564] bond_slave_0 (unregistering): left allmulticast mode [ 2219.194514][ T6564] bond0 (unregistering): Released all slaves [ 2219.292028][T24271] bridge0: port 1(bridge_slave_0) entered blocking state [ 2219.299214][T24271] bridge0: port 1(bridge_slave_0) entered disabled state [ 2219.308279][T24271] bridge_slave_0: entered allmulticast mode [ 2219.314560][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2219.328796][T24271] bridge_slave_0: entered promiscuous mode [ 2219.340601][T24282] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.349226][T24282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.359578][T24282] bridge_slave_1: entered allmulticast mode [ 2219.369038][T24282] bridge_slave_1: entered promiscuous mode [ 2219.404223][T24278] bridge0: port 1(bridge_slave_0) entered blocking state [ 2219.412766][T24278] bridge0: port 1(bridge_slave_0) entered disabled state [ 2219.420752][T24278] bridge_slave_0: entered allmulticast mode [ 2219.431216][T24278] bridge_slave_0: entered promiscuous mode [ 2219.456009][T24278] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.463891][T24278] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.472729][T24278] bridge_slave_1: entered allmulticast mode [ 2219.482030][T24278] bridge_slave_1: entered promiscuous mode [ 2219.489200][T24274] bridge0: port 1(bridge_slave_0) entered blocking state [ 2219.496431][T24274] bridge0: port 1(bridge_slave_0) entered disabled state [ 2219.505144][T24274] bridge_slave_0: entered allmulticast mode [ 2219.515496][T24274] bridge_slave_0: entered promiscuous mode [ 2219.526262][T24274] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.533605][T24274] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.542946][T24274] bridge_slave_1: entered allmulticast mode [ 2219.552353][T24274] bridge_slave_1: entered promiscuous mode [ 2219.585028][T24271] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.595535][T24271] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.604230][T24271] bridge_slave_1: entered allmulticast mode [ 2219.613698][T24271] bridge_slave_1: entered promiscuous mode [ 2219.787618][T24282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2219.805396][T24278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2219.838074][T24286] bridge0: port 1(bridge_slave_0) entered blocking state [ 2219.853110][T24286] bridge0: port 1(bridge_slave_0) entered disabled state [ 2219.866875][T24286] bridge_slave_0: entered allmulticast mode [ 2219.877403][T24286] bridge_slave_0: entered promiscuous mode [ 2219.887675][T24286] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.895642][T24286] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.903415][T24286] bridge_slave_1: entered allmulticast mode [ 2219.912308][T24286] bridge_slave_1: entered promiscuous mode [ 2219.930477][T24271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2219.957571][T24282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2219.988986][T24278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2220.021349][T24274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2220.041198][T24274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2220.084904][T24271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2220.228605][T24271] team0: Port device team_slave_0 added [ 2220.244850][T24282] team0: Port device team_slave_0 added [ 2220.261064][T24282] team0: Port device team_slave_1 added [ 2220.297748][T24278] team0: Port device team_slave_0 added [ 2220.310925][T24278] team0: Port device team_slave_1 added [ 2220.342231][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2220.357264][T24274] team0: Port device team_slave_0 added [ 2220.373555][T24274] team0: Port device team_slave_1 added [ 2220.389979][T24286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2220.409339][T24286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2220.424146][T24271] team0: Port device team_slave_1 added [ 2220.855376][T24271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2220.863640][T24271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2220.890631][T24271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2220.974350][T24278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2220.981325][T24278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.028127][T24278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2221.054692][T24274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2221.072763][T24274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.098658][ C0] vkms_vblank_simulate: vblank timer overrun [ 2221.121438][T24274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2221.161009][T24286] team0: Port device team_slave_0 added [ 2221.191007][T24271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2221.198731][T24271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.225327][T24271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.284902][T24282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2221.301599][T24282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.341418][T24282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2221.360382][T24278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2221.367730][T24278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.395929][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.405168][T24278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.421256][T24274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2221.428809][T24274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.455363][T24274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.488434][T24286] team0: Port device team_slave_1 added [ 2221.550117][T24286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2221.557220][T24286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.583139][ C0] vkms_vblank_simulate: vblank timer overrun [ 2221.590257][T24286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2221.606124][T24282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2221.614331][T24282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.642715][T24282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.764920][T24286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2221.772515][T24286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2221.798401][ C0] vkms_vblank_simulate: vblank timer overrun [ 2221.805346][T24286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.862906][T21865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.946055][T24274] hsr_slave_0: entered promiscuous mode [ 2221.955177][T24274] hsr_slave_1: entered promiscuous mode [ 2221.962536][T24274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2221.970123][T24274] Cannot create hsr debugfs directory [ 2221.987042][T24271] hsr_slave_0: entered promiscuous mode [ 2221.996116][T24271] hsr_slave_1: entered promiscuous mode [ 2222.003618][T24271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2222.011278][T24271] Cannot create hsr debugfs directory [ 2222.043419][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.049782][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.114383][T24278] hsr_slave_0: entered promiscuous mode [ 2222.123725][T24278] hsr_slave_1: entered promiscuous mode [ 2222.131942][T24278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2222.139532][T24278] Cannot create hsr debugfs directory [ 2222.200771][T24286] hsr_slave_0: entered promiscuous mode [ 2222.210149][T24286] hsr_slave_1: entered promiscuous mode [ 2222.218206][T24286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2222.226117][T24286] Cannot create hsr debugfs directory [ 2222.314570][T24282] hsr_slave_0: entered promiscuous mode [ 2222.324049][T24282] hsr_slave_1: entered promiscuous mode [ 2222.332619][T24282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2222.340193][T24282] Cannot create hsr debugfs directory [ 2222.439550][T23804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2222.682062][T23838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2223.444812][ T6564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.054711][ T6564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.443526][ T6564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.632351][ T6564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.021047][T24278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.252617][T24278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.428802][T24278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.632613][ T6564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.784149][T24278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.933876][ T6564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.142516][ T6564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.387343][ T6564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.794384][T24278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2226.838918][T24278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2226.871526][T24278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2226.963491][T24278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2227.463780][T24278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2227.567230][T24278] 8021q: adding VLAN 0 to HW filter on device team0 [ 2227.596194][ T6564] tipc: Left network mode [ 2227.604935][T23804] bridge0: port 1(bridge_slave_0) entered blocking state [ 2227.612172][T23804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2227.644127][ T6564] tipc: Left network mode [ 2227.668787][T23804] bridge0: port 2(bridge_slave_1) entered blocking state [ 2227.675990][T23804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2227.816439][T24278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2227.966207][T24278] veth0_vlan: entered promiscuous mode [ 2228.522369][T24278] veth1_vlan: entered promiscuous mode [ 2228.976379][T24278] veth0_macvtap: entered promiscuous mode [ 2229.017063][T24278] veth1_macvtap: entered promiscuous mode [ 2229.873393][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.901449][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.920044][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.937769][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.949151][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.960152][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2229.976056][T24278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2230.016581][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.052831][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.091469][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.111524][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.128274][T24278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.139243][T24278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.167536][T24278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2230.429629][T24278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.451975][T24278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.460705][T24278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2230.486414][T24278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2250.894167][T21865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.906830][T21865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2250.968560][ T5147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.982723][ T5147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 02:48:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000002b700000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2251.215532][T24513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2251.286583][T24513] gretap0: entered promiscuous mode 02:48:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000001b900000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2251.433488][T24520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:48:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000003bf00000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2251.691729][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:48:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000003c100000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2259.305131][ T6564] gretap0 (unregistering): left allmulticast mode [ 2269.507386][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2269.517579][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2269.526881][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2269.538583][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2269.562084][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2269.569435][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2270.192287][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2270.202706][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2270.210993][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2270.223464][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2270.231286][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2270.238721][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2271.631773][ T5103] Bluetooth: hci0: command 0x0409 tx timeout [ 2272.351010][ T5103] Bluetooth: hci2: command 0x0409 tx timeout [ 2273.703062][ T5103] Bluetooth: hci0: command 0x041b tx timeout [ 2274.432136][ T5103] Bluetooth: hci2: command 0x041b tx timeout [ 2274.868020][ T5099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2274.877751][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2274.889331][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2274.899681][ T5099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2274.914438][ T5099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2274.922783][ T5099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2275.583842][ T5099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2275.602864][ T5099] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2275.623115][ T5099] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2275.632063][ T5099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2275.639743][ T5099] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2275.651569][ T5099] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2275.781607][ T5099] Bluetooth: hci0: command 0x040f tx timeout [ 2276.502556][ T5099] Bluetooth: hci2: command 0x040f tx timeout [ 2276.984995][ T5099] Bluetooth: hci5: command 0x0409 tx timeout [ 2277.714699][ T5099] Bluetooth: hci6: command 0x0409 tx timeout [ 2277.861529][ T5099] Bluetooth: hci0: command 0x0419 tx timeout [ 2278.581458][ T5099] Bluetooth: hci2: command 0x0419 tx timeout [ 2279.071385][ T5099] Bluetooth: hci5: command 0x041b tx timeout [ 2279.781573][ T5099] Bluetooth: hci6: command 0x041b tx timeout [ 2281.143780][ T5099] Bluetooth: hci5: command 0x040f tx timeout 02:48:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000002c300000000000300", @ANYRES32=r1, @ANYBLOB="0104000000000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) [ 2281.861744][ T5099] Bluetooth: hci6: command 0x040f tx timeout [ 2283.222528][ T5099] Bluetooth: hci5: command 0x0419 tx timeout [ 2283.471598][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.478017][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.941634][ T5099] Bluetooth: hci6: command 0x0419 tx timeout [ 2284.094257][ T5103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2284.104884][ T5103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2284.114837][T24550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2284.126587][T24550] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2284.135061][T24550] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2284.142772][T24550] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2286.261587][ T5099] Bluetooth: hci7: command 0x0409 tx timeout [ 2288.341883][ T5099] Bluetooth: hci7: command 0x041b tx timeout [ 2290.421443][ T5099] Bluetooth: hci7: command 0x040f tx timeout [ 2292.501440][ T5099] Bluetooth: hci7: command 0x0419 tx timeout [ 2326.511792][T24553] Bluetooth: hci3: command 0x0406 tx timeout [ 2326.517831][T24553] Bluetooth: hci1: command 0x0406 tx timeout [ 2326.524763][T24553] Bluetooth: hci4: command 0x0406 tx timeout [ 2331.623811][T23900] Bluetooth: hci8: command 0x0406 tx timeout [ 2331.629867][T24555] Bluetooth: hci9: command 0x0406 tx timeout [ 2336.142501][T24550] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2336.152544][T24550] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2336.161068][T24550] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2336.185745][T24550] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2336.205179][T24550] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2336.213712][T24550] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2336.807226][ T5099] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2336.818547][ T5099] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2336.830396][ T5099] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2336.841873][ T5099] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2336.852021][ T5099] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2336.859415][ T5099] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2338.262458][ T5099] Bluetooth: hci10: command 0x0409 tx timeout [ 2338.901547][ T5099] Bluetooth: hci11: command 0x0409 tx timeout [ 2340.351704][ T5099] Bluetooth: hci10: command 0x041b tx timeout [ 2340.981928][ T5099] Bluetooth: hci11: command 0x041b tx timeout [ 2341.671646][T24550] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2341.692206][T24550] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2341.700223][T24550] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2341.726835][T24550] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2341.735046][T24550] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2341.746740][T24550] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2342.239728][ T5099] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2342.250110][ T5099] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2342.258204][ T5099] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2342.267432][ T5099] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2342.276135][ T5099] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2342.287480][ T5099] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2342.422407][T24550] Bluetooth: hci10: command 0x040f tx timeout [ 2343.061612][T24550] Bluetooth: hci11: command 0x040f tx timeout [ 2343.861701][T24550] Bluetooth: hci12: command 0x0409 tx timeout [ 2344.341599][T24550] Bluetooth: hci13: command 0x0409 tx timeout [ 2344.501785][T24550] Bluetooth: hci10: command 0x0419 tx timeout [ 2344.908154][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.914670][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.141586][T24550] Bluetooth: hci11: command 0x0419 tx timeout [ 2345.941504][T24550] Bluetooth: hci12: command 0x041b tx timeout [ 2346.421499][T24550] Bluetooth: hci13: command 0x041b tx timeout [ 2348.021727][T24550] Bluetooth: hci12: command 0x040f tx timeout [ 2348.501479][T24550] Bluetooth: hci13: command 0x040f tx timeout [ 2350.101512][T24550] Bluetooth: hci12: command 0x0419 tx timeout [ 2350.581480][T24550] Bluetooth: hci13: command 0x0419 tx timeout [ 2350.641159][ T5099] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2350.655358][ T5099] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2350.671714][ T5099] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2350.692547][ T5099] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2350.700259][ T5099] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2350.712504][ T5099] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2352.821492][T24550] Bluetooth: hci14: command 0x0409 tx timeout [ 2354.901627][T24550] Bluetooth: hci14: command 0x041b tx timeout [ 2356.981561][T24550] Bluetooth: hci14: command 0x040f tx timeout [ 2359.061449][T24550] Bluetooth: hci14: command 0x0419 tx timeout [ 2386.501507][ T29] INFO: task syz-executor.0:24274 blocked for more than 143 seconds. [ 2386.509668][ T29] Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2386.531366][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2386.540084][ T29] task:syz-executor.0 state:D stack:20984 pid:24274 tgid:24274 ppid:1 flags:0x00004006 [ 2386.561362][ T29] Call Trace: [ 2386.564689][ T29] [ 2386.567630][ T29] __schedule+0x17d1/0x49f0 [ 2386.572815][ T29] ? __pfx___schedule+0x10/0x10 [ 2386.577717][ T29] ? __pfx_lock_release+0x10/0x10 [ 2386.591334][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2386.596841][ T29] ? schedule+0x8e/0x260 [ 2386.601103][ T29] schedule+0x149/0x260 [ 2386.621443][ T29] schedule_preempt_disabled+0x13/0x30 [ 2386.626944][ T29] __mutex_lock+0x6a3/0xd70 [ 2386.643810][ T29] ? __mutex_lock+0x526/0xd70 [ 2386.650314][ T29] ? new_device_store+0x1b4/0x890 [ 2386.661322][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2386.666443][ T29] ? __pfx_lock_acquire+0x10/0x10 [ 2386.691604][ T29] new_device_store+0x1b4/0x890 [ 2386.696500][ T29] ? kernfs_fop_write_iter+0x1eb/0x500 [ 2386.711341][ T29] ? __pfx_new_device_store+0x10/0x10 [ 2386.716752][ T29] ? sysfs_kf_write+0x185/0x2a0 [ 2386.722756][ T29] ? bus_attr_store+0x4f/0xa0 [ 2386.727466][ T29] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2386.733117][ T29] kernfs_fop_write_iter+0x3a4/0x500 [ 2386.738438][ T29] vfs_write+0xa81/0xcb0 [ 2386.744380][ T29] ? __pfx_vfs_write+0x10/0x10 [ 2386.750310][ T29] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2386.759226][ T29] ? __fdget_pos+0x271/0x320 [ 2386.764192][ T29] ksys_write+0x1a0/0x2c0 [ 2386.768562][ T29] ? __pfx_ksys_write+0x10/0x10 [ 2386.773879][ T29] ? do_syscall_64+0x108/0x240 [ 2386.778675][ T29] ? do_syscall_64+0xb4/0x240 [ 2386.783832][ T29] do_syscall_64+0xf9/0x240 [ 2386.788370][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2386.794735][ T29] RIP: 0033:0x7f665767caef [ 2386.799180][ T29] RSP: 002b:00007f66578cf200 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2386.808188][ T29] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f665767caef [ 2386.816624][ T29] RDX: 0000000000000003 RSI: 00007f66578cf250 RDI: 0000000000000005 [ 2386.833774][ T29] RBP: 00007f66576ca045 R08: 0000000000000000 R09: 00007f66578cf057 [ 2386.851826][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 2386.859833][ T29] R13: 00007f66578cf250 R14: 00007f66582d4620 R15: 0000000000000003 [ 2386.884948][ T29] [ 2386.892450][ T29] INFO: task syz-executor.1:24282 blocked for more than 143 seconds. [ 2386.900540][ T29] Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2386.930559][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2386.939907][ T29] task:syz-executor.1 state:D stack:20984 pid:24282 tgid:24282 ppid:1 flags:0x00004006 [ 2386.964735][ T29] Call Trace: [ 2386.968051][ T29] [ 2386.970996][ T29] __schedule+0x17d1/0x49f0 [ 2386.976005][ T29] ? __pfx___schedule+0x10/0x10 [ 2386.980889][ T29] ? __pfx_lock_release+0x10/0x10 [ 2387.002439][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2387.008108][ T29] ? schedule+0x8e/0x260 [ 2387.021326][ T29] schedule+0x149/0x260 [ 2387.025530][ T29] schedule_preempt_disabled+0x13/0x30 [ 2387.031006][ T29] __mutex_lock+0x6a3/0xd70 [ 2387.049341][ T29] ? __mutex_lock+0x526/0xd70 [ 2387.059635][ T29] ? del_device_store+0xfc/0x480 [ 2387.065239][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2387.070310][ T29] del_device_store+0xfc/0x480 [ 2387.075694][ T29] ? __pfx_del_device_store+0x10/0x10 [ 2387.081395][ T29] ? sysfs_kf_write+0x185/0x2a0 [ 2387.086273][ T29] ? bus_attr_store+0x4f/0xa0 [ 2387.091252][ T29] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2387.096621][ T29] kernfs_fop_write_iter+0x3a4/0x500 [ 2387.102032][ T29] vfs_write+0xa81/0xcb0 [ 2387.106453][ T29] ? __pfx_vfs_write+0x10/0x10 [ 2387.111251][ T29] ? __fdget_pos+0x271/0x320 [ 2387.117011][ T29] ksys_write+0x1a0/0x2c0 [ 2387.121477][ T29] ? __pfx_ksys_write+0x10/0x10 [ 2387.126348][ T29] ? do_syscall_64+0x108/0x240 [ 2387.131129][ T29] ? do_syscall_64+0xb4/0x240 [ 2387.136156][ T29] do_syscall_64+0xf9/0x240 [ 2387.140692][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2387.147484][ T29] RIP: 0033:0x7f254f87caef [ 2387.151969][ T29] RSP: 002b:00007f254facf200 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2387.174064][ T29] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f254f87caef [ 2387.182492][ T29] RDX: 0000000000000001 RSI: 00007f254facf250 RDI: 0000000000000005 [ 2387.190485][ T29] RBP: 00007f254f8ca021 R08: 0000000000000000 R09: 00007f254facf057 [ 2387.215130][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2387.224731][ T29] R13: 00007f254facf250 R14: 00007f25504d4620 R15: 0000000000000003 [ 2387.233099][ T29] [ 2387.236218][ T29] INFO: task syz-executor.4:24286 blocked for more than 144 seconds. [ 2387.244625][ T29] Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2387.252518][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2387.262579][ T29] task:syz-executor.4 state:D stack:20984 pid:24286 tgid:24286 ppid:1 flags:0x00004006 [ 2387.274076][ T29] Call Trace: [ 2387.279579][ T29] [ 2387.282671][ T29] __schedule+0x17d1/0x49f0 [ 2387.287438][ T29] ? __pfx___schedule+0x10/0x10 [ 2387.292414][ T29] ? __pfx_lock_release+0x10/0x10 [ 2387.297562][ T29] ? __mutex_trylock_common+0x91/0x2e0 [ 2387.303361][ T29] ? schedule+0x8e/0x260 [ 2387.307629][ T29] schedule+0x149/0x260 [ 2387.321323][ T29] schedule_preempt_disabled+0x13/0x30 [ 2387.326818][ T29] __mutex_lock+0x6a3/0xd70 [ 2387.341337][ T29] ? __mutex_lock+0x526/0xd70 [ 2387.346053][ T29] ? del_device_store+0xfc/0x480 [ 2387.351012][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 2387.371341][ T29] del_device_store+0xfc/0x480 [ 2387.376259][ T29] ? __pfx_del_device_store+0x10/0x10 [ 2387.399271][ T29] ? sysfs_kf_write+0x185/0x2a0 [ 2387.404575][ T29] ? bus_attr_store+0x4f/0xa0 [ 2387.409277][ T29] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2387.421318][ T29] kernfs_fop_write_iter+0x3a4/0x500 [ 2387.426640][ T29] vfs_write+0xa81/0xcb0 [ 2387.430911][ T29] ? __pfx_vfs_write+0x10/0x10 [ 2387.448938][ T29] ? __fdget_pos+0x271/0x320 [ 2387.460303][ T29] ksys_write+0x1a0/0x2c0 [ 2387.466402][ T29] ? __pfx_ksys_write+0x10/0x10 [ 2387.471768][ T29] ? do_syscall_64+0x108/0x240 [ 2387.476698][ T29] ? do_syscall_64+0xb4/0x240 [ 2387.481435][ T29] do_syscall_64+0xf9/0x240 [ 2387.486160][ T29] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 2387.492186][ T29] RIP: 0033:0x7f413367caef [ 2387.496762][ T29] RSP: 002b:00007f41338cf200 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2387.505236][ T29] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f413367caef [ 2387.513487][ T29] RDX: 0000000000000001 RSI: 00007f41338cf250 RDI: 0000000000000005 [ 2387.531385][ T29] RBP: 00007f41336ca021 R08: 0000000000000000 R09: 00007f41338cf057 [ 2387.539386][ T29] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2387.561339][ T29] R13: 00007f41338cf250 R14: 00007f41342d4620 R15: 0000000000000003 [ 2387.581492][ T29] [ 2387.584633][ T29] [ 2387.584633][ T29] Showing all locks held in the system: [ 2387.601331][ T29] 1 lock held by khungtaskd/29: [ 2387.606220][ T29] #0: ffffffff8e130ae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2387.628887][ T29] 2 locks held by kworker/0:2/1140: [ 2387.641322][ T29] #0: ffff888014c8e938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.661336][ T29] #1: ffffc90005267d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.675008][ T29] 1 lock held by dhcpcd/4734: [ 2387.679708][ T29] #0: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x13e/0x790 [ 2387.690561][ T29] 2 locks held by getty/4818: [ 2387.695587][ T29] #0: ffff88802bdf80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2387.706033][ T29] #1: ffffc900015e02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 2387.716622][ T29] 5 locks held by kworker/u4:15/6564: [ 2387.722107][ T29] #0: ffff8880162ecd38 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.733269][ T29] #1: ffffc90004a67d20 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.743924][ T29] #2: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf5/0xb90 [ 2387.753530][ T29] #3: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xce/0x370 [ 2387.763489][ T29] #4: ffffffff8e136478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a3/0x890 [ 2387.781323][ T29] 3 locks held by kworker/u4:17/6566: [ 2387.786723][ T29] 3 locks held by kworker/1:7/7531: [ 2387.801476][ T29] #0: ffff888014c8e138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.831459][ T29] #1: ffffc9000a797d20 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.851386][ T29] #2: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xe50 [ 2387.861123][ T29] 3 locks held by kworker/0:6/14578: [ 2387.891460][ T29] #0: ffff88802acf1138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.918568][ T29] #1: ffffc900058c7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.934056][ T29] #2: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 2387.959039][ T29] 3 locks held by kworker/0:4/21865: [ 2387.964833][ T29] #0: ffff888014c8cd38 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.976107][ T29] #1: ffffc9001443fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2387.988374][ T29] #2: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2387.997592][ T29] 1 lock held by syz-executor.3/23778: [ 2388.003164][ T29] #0: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x75c/0xf40 [ 2388.013653][ T29] 3 locks held by kworker/1:3/23804: [ 2388.019071][ T29] #0: ffff88802acf1138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2388.031747][ T29] #1: ffffc9000b5c7d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x825/0x1420 [ 2388.045018][ T29] #2: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 2388.054532][ T29] 2 locks held by kworker/0:7/23839: [ 2388.060241][ T29] 7 locks held by syz-executor.3/24271: [ 2388.070067][ T29] #0: ffff8880301a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x233/0xcb0 [ 2388.089216][ T29] #1: ffff88808eb15c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 2388.105621][ T29] #2: ffff888023812e90 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 2388.126665][ T29] #3: ffffffff8ecb4ce8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 2388.147226][ T29] #4: ffff88802cc1e0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 2388.158366][ T29] #5: ffff88802cc1f250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 2388.170127][ T29] #6: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x75c/0xf40 [ 2388.191394][ T29] 4 locks held by syz-executor.0/24274: [ 2388.196973][ T29] #0: ffff8880301a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x233/0xcb0 [ 2388.221323][ T29] #1: ffff88817a9c7488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 2388.231158][ T29] #2: ffff888023812d98 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 2388.255209][ T29] #3: ffffffff8ecb4ce8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 2388.281747][ T29] 4 locks held by syz-executor.1/24282: [ 2388.291474][ T29] #0: ffff8880301a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x233/0xcb0 [ 2388.300420][ T29] #1: ffff88808c6a1c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 2388.310371][ T29] #2: ffff888023812e90 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 2388.320460][ T29] #3: ffffffff8ecb4ce8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 2388.330851][ T29] 4 locks held by syz-executor.4/24286: [ 2388.336607][ T29] #0: ffff8880301a0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x233/0xcb0 [ 2388.345988][ T29] #1: ffff88808f507888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 2388.356760][ T29] #2: ffff888023812e90 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 2388.366932][ T29] #3: ffffffff8ecb4ce8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 2388.387519][ T29] 1 lock held by syz-executor.2/24529: [ 2388.401241][ T29] #0: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x82c/0x1040 [ 2388.410987][ T29] 2 locks held by syz-executor.3/24535: [ 2388.421696][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.431166][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.441027][ T29] 2 locks held by syz-executor.0/24538: [ 2388.446641][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.456139][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.466600][ T29] 2 locks held by syz-executor.1/24543: [ 2388.472216][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.482024][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.492597][ T29] 2 locks held by syz-executor.4/24546: [ 2388.498165][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.507904][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.517700][ T29] 2 locks held by syz-executor.2/24551: [ 2388.523324][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.532831][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.542524][ T29] 2 locks held by syz-executor.3/24563: [ 2388.548078][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.557788][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.567449][ T29] 2 locks held by syz-executor.0/24567: [ 2388.574150][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.584058][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.614585][ T29] 2 locks held by syz-executor.1/24572: [ 2388.620157][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.639976][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.655470][ T29] 2 locks held by syz-executor.4/24574: [ 2388.661038][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.682318][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.701318][ T29] 2 locks held by syz-executor.2/24580: [ 2388.706885][ T29] #0: ffffffff8f368a10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 [ 2388.729115][ T29] #1: ffffffff8f374f88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 [ 2388.747877][ T29] [ 2388.750228][ T29] ============================================= [ 2388.750228][ T29] [ 2388.769565][ T29] NMI backtrace for cpu 1 [ 2388.773919][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2388.783730][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2388.793780][ T29] Call Trace: [ 2388.797058][ T29] [ 2388.799982][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 2388.804663][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2388.809857][ T29] ? __pfx__printk+0x10/0x10 [ 2388.814453][ T29] ? vprintk_emit+0x607/0x720 [ 2388.819124][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 2388.824145][ T29] nmi_cpu_backtrace+0x49c/0x4d0 [ 2388.829087][ T29] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2388.834541][ T29] ? _printk+0xd5/0x120 [ 2388.838696][ T29] ? __pfx__printk+0x10/0x10 [ 2388.843288][ T29] ? __wake_up_klogd+0xcc/0x110 [ 2388.848134][ T29] ? __pfx__printk+0x10/0x10 [ 2388.852720][ T29] ? __rcu_read_unlock+0xa0/0x110 [ 2388.857741][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2388.863720][ T29] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2388.869700][ T29] watchdog+0xfaf/0xff0 [ 2388.873858][ T29] ? watchdog+0x1e9/0xff0 [ 2388.878188][ T29] ? __pfx_watchdog+0x10/0x10 [ 2388.882864][ T29] kthread+0x2ef/0x390 [ 2388.886924][ T29] ? __pfx_watchdog+0x10/0x10 [ 2388.891596][ T29] ? __pfx_kthread+0x10/0x10 [ 2388.896180][ T29] ret_from_fork+0x4b/0x80 [ 2388.900600][ T29] ? __pfx_kthread+0x10/0x10 [ 2388.905188][ T29] ret_from_fork_asm+0x1b/0x30 [ 2388.909964][ T29] [ 2388.914418][ T29] Sending NMI from CPU 1 to CPUs 0: [ 2388.919755][ C0] NMI backtrace for cpu 0 [ 2388.919766][ C0] CPU: 0 PID: 23839 Comm: kworker/0:7 Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2388.919785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2388.919796][ C0] Workqueue: 0x0 (events) [ 2388.919818][ C0] RIP: 0010:process_scheduled_works+0x214/0x1420 [ 2388.919845][ C0] Code: 74 08 48 89 df e8 4c 58 95 00 48 8b 1b 48 83 c3 50 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1f 59 95 00 4c 89 3b 44 24 4c 00 00 00 00 4c 89 f7 be 08 00 00 00 e8 87 5a 95 00 4c [ 2388.919858][ C0] RSP: 0018:ffffc9000abffc00 EFLAGS: 00000046 [ 2388.919871][ C0] RAX: 1ffff1101728782a RBX: ffff8880b943c150 RCX: ffff8880834a9dc0 [ 2388.919884][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2388.919895][ C0] RBP: ffffc9000abffdc8 R08: ffffffff816029f7 R09: 0000000000000000 [ 2388.919906][ C0] R10: ffff88817c332010 R11: ffffed102f866405 R12: ffff88802d64ec08 [ 2388.919919][ C0] R13: dffffc0000000000 R14: ffff88802d64ec00 R15: 0000000100032f31 [ 2388.919932][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 2388.919947][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2388.919959][ C0] CR2: 00007f8b04628866 CR3: 000000000df32000 CR4: 00000000003506f0 [ 2388.919974][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2388.919985][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2388.919996][ C0] Call Trace: [ 2388.920002][ C0] [ 2388.920008][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2388.920032][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2388.920055][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2388.920079][ C0] ? nmi_handle+0x2a/0x580 [ 2388.920129][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2388.920147][ C0] ? nmi_handle+0x14f/0x580 [ 2388.920162][ C0] ? nmi_handle+0x2a/0x580 [ 2388.920178][ C0] ? process_scheduled_works+0x214/0x1420 [ 2388.920200][ C0] ? default_do_nmi+0x63/0x160 [ 2388.920217][ C0] ? exc_nmi+0x121/0x210 [ 2388.920232][ C0] ? end_repeat_nmi+0xf/0x60 [ 2388.920257][ C0] ? process_scheduled_works+0x1a7/0x1420 [ 2388.920280][ C0] ? process_scheduled_works+0x214/0x1420 [ 2388.920302][ C0] ? process_scheduled_works+0x214/0x1420 [ 2388.920325][ C0] ? process_scheduled_works+0x214/0x1420 [ 2388.920347][ C0] [ 2388.920353][ C0] [ 2388.920371][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2388.920396][ C0] ? assign_work+0x364/0x3d0 [ 2388.920419][ C0] worker_thread+0xa5f/0x1000 [ 2388.920451][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2388.920472][ C0] kthread+0x2ef/0x390 [ 2388.920488][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2388.920509][ C0] ? __pfx_kthread+0x10/0x10 [ 2388.920526][ C0] ret_from_fork+0x4b/0x80 [ 2388.920545][ C0] ? __pfx_kthread+0x10/0x10 [ 2388.920561][ C0] ret_from_fork_asm+0x1b/0x30 [ 2388.920589][ C0] [ 2389.221459][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2389.228345][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc3-syzkaller-00041-g547ab8fc4cb0 #0 [ 2389.238162][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 2389.248235][ T29] Call Trace: [ 2389.251521][ T29] [ 2389.254459][ T29] dump_stack_lvl+0x1e7/0x2e0 [ 2389.259154][ T29] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2389.264350][ T29] ? __pfx__printk+0x10/0x10 [ 2389.268926][ T29] ? vscnprintf+0x5d/0x90 [ 2389.273244][ T29] panic+0x349/0x860 [ 2389.277123][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2389.283275][ T29] ? __pfx_panic+0x10/0x10 [ 2389.287705][ T29] ? tick_nohz_tick_stopped+0x7b/0xc0 [ 2389.293085][ T29] ? __irq_work_queue_local+0x137/0x3e0 [ 2389.298637][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2389.304013][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2389.310181][ T29] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2389.316336][ T29] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2389.322478][ T29] watchdog+0xfee/0xff0 [ 2389.326623][ T29] ? watchdog+0x1e9/0xff0 [ 2389.330938][ T29] ? __pfx_watchdog+0x10/0x10 [ 2389.335612][ T29] kthread+0x2ef/0x390 [ 2389.339681][ T29] ? __pfx_watchdog+0x10/0x10 [ 2389.344352][ T29] ? __pfx_kthread+0x10/0x10 [ 2389.348933][ T29] ret_from_fork+0x4b/0x80 [ 2389.353343][ T29] ? __pfx_kthread+0x10/0x10 [ 2389.357924][ T29] ret_from_fork_asm+0x1b/0x30 [ 2389.362695][ T29] [ 2389.365883][ T29] Kernel Offset: disabled [ 2389.370196][ T29] Rebooting in 86400 seconds..