gsteal_direct 19 [ 2027.699305][T14996] pgsteal_khugepaged 0 [ 2027.699305][T14996] pgfault 896004 [ 2027.699305][T14996] pgmajfault 9 [ 2027.699305][T14996] pgrefill 70 [ 2027.699305][T14996] pgactivate 2368 [ 2027.699305][T14996] pgdeactivate 152 [ 2027.699305][T14996] pglazyfree 0 [ 2027.699305][T14996] pglazyfreed 0 [ 2027.863460][T14996] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14995,uid=0 [ 2027.878792][T14996] Memory cgroup out of memory: Killed process 14996 (syz-executor.3) total-vm:56724kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2027.925185][T14992] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2027.950369][T14996] syz-executor.3 (14996) used greatest stack depth: 8632 bytes left 02:10:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:47 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xa030000}, 0x0) 02:10:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xaf, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8848, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:47 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x82da0000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2027.992894][T14999] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2028.001034][T14999] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:10:47 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xb000000}, 0x0) 02:10:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x34000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:47 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x83da0000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2028.046640][T15018] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2028.054807][T15018] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2028.073095][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2028.102771][T15014] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2028.113048][T15014] CPU: 0 PID: 15014 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2028.121725][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2028.131773][T15014] Call Trace: [ 2028.135122][T15014] [ 2028.138092][T15014] dump_stack_lvl+0xda/0x130 [ 2028.142729][T15014] dump_stack+0x15/0x20 [ 2028.146886][T15014] dump_header+0x95/0x3c0 02:10:47 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xc000000}, 0x0) 02:10:47 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xd000000}, 0x0) [ 2028.151212][T15014] oom_kill_process+0xe3/0x3e0 [ 2028.155993][T15014] out_of_memory+0x9f0/0xc30 [ 2028.160587][T15014] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2028.166669][T15014] mem_cgroup_out_of_memory+0x139/0x190 [ 2028.172215][T15014] try_charge_memcg+0x759/0xd20 [ 2028.177140][T15014] charge_memcg+0x51/0x200 [ 2028.181553][T15014] __mem_cgroup_charge+0x29/0xa0 [ 2028.186576][T15014] handle_mm_fault+0xcea/0x21d0 [ 2028.191448][T15014] exc_page_fault+0x45f/0x640 [ 2028.196188][T15014] asm_exc_page_fault+0x26/0x30 02:10:47 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xe000000}, 0x0) [ 2028.201124][T15014] RIP: 0033:0x7f2feb8f9de9 [ 2028.205539][T15014] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2028.225170][T15014] RSP: 002b:00007ffce8db9350 EFLAGS: 00010246 [ 2028.231239][T15014] RAX: 0000000020001140 RBX: 0000000000000000 RCX: 0000000000000000 [ 2028.239287][T15014] RDX: 0000000020000480 RSI: 0000000000000000 RDI: 0000555556a412e8 [ 2028.247332][T15014] RBP: 00007ffce8db9448 R08: 0000000000000000 R09: 0000000000000000 [ 2028.255300][T15014] R10: 00007f2feb4ce208 R11: 0000000000000246 R12: 00000000001ef134 [ 2028.263270][T15014] R13: 00007ffce8db9470 R14: 00007f2feba79f80 R15: 0000000000000032 [ 2028.271305][T15014] [ 2028.274481][T15014] memory: usage 307200kB, limit 307200kB, failcnt 7715 [ 2028.281342][T15014] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2028.288179][T15014] Memory cgroup stats for /syz4: [ 2028.288468][T15014] anon 380928 [ 2028.288468][T15014] file 7782400 [ 2028.288468][T15014] kernel 306405376 [ 2028.288468][T15014] kernel_stack 32768 [ 2028.288468][T15014] pagetables 77824 [ 2028.288468][T15014] sec_pagetables 0 [ 2028.288468][T15014] percpu 10869312 [ 2028.288468][T15014] sock 0 [ 2028.288468][T15014] vmalloc 0 [ 2028.288468][T15014] shmem 7782400 [ 2028.288468][T15014] file_mapped 77824 [ 2028.288468][T15014] file_dirty 0 [ 2028.288468][T15014] file_writeback 0 [ 2028.288468][T15014] swapcached 0 [ 2028.288468][T15014] inactive_anon 8077312 [ 2028.288468][T15014] active_anon 86016 [ 2028.288468][T15014] inactive_file 0 [ 2028.288468][T15014] active_file 0 [ 2028.288468][T15014] unevictable 0 [ 2028.288468][T15014] slab_reclaimable 30296 [ 2028.288468][T15014] slab_unreclaimable 295351488 [ 2028.288468][T15014] slab 295381784 [ 2028.288468][T15014] workingset_refault_anon 0 [ 2028.288468][T15014] workingset_refault_file 5 [ 2028.288468][T15014] workingset_activate_anon 0 [ 2028.288468][T15014] workingset_activate_file 0 [ 2028.288468][T15014] workingset_restore_anon 0 [ 2028.288468][T15014] workingset_restore_file 0 [ 2028.288468][T15014] workingset_nodereclaim 0 [ 2028.288468][T15014] pgscan 331 [ 2028.288468][T15014] pgsteal 31 [ 2028.288468][T15014] pgscan_kswapd 0 [ 2028.288468][T15014] pgscan_direct 331 [ 2028.288468][T15014] pgscan_khugepaged 0 [ 2028.288468][T15014] pgsteal_kswapd 0 [ 2028.288468][T15014] pgsteal_direct 31 [ 2028.288468][T15014] pgsteal_khugepaged 0 [ 2028.288468][T15014] pgfault 363337 [ 2028.288468][T15014] pgmajfault 31 [ 2028.288468][T15014] pgrefill 351 [ 2028.288468][T15014] pgactivate 12642 [ 2028.288468][T15014] pgdeactivate 364 [ 2028.288468][T15014] pglazyfree 0 [ 2028.288468][T15014] pglazyfreed 0 [ 2028.452383][T15014] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15014,uid=0 [ 2028.467723][T15014] Memory cgroup out of memory: Killed process 15014 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2028.486348][T15019] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2028.496562][T15019] CPU: 0 PID: 15019 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2028.505235][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2028.515287][T15019] Call Trace: [ 2028.518572][T15019] [ 2028.521499][T15019] dump_stack_lvl+0xda/0x130 [ 2028.526104][T15019] dump_stack+0x15/0x20 [ 2028.530241][T15019] dump_header+0x95/0x3c0 [ 2028.534553][T15019] oom_kill_process+0xe3/0x3e0 [ 2028.539413][T15019] out_of_memory+0x9f0/0xc30 [ 2028.544005][T15019] mem_cgroup_out_of_memory+0x139/0x190 [ 2028.549534][T15019] try_charge_memcg+0x759/0xd20 [ 2028.554426][T15019] charge_memcg+0x51/0x200 [ 2028.558885][T15019] __mem_cgroup_charge+0x29/0xa0 [ 2028.563919][T15019] do_wp_page+0xb96/0x1fb0 [ 2028.568343][T15019] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2028.573637][T15019] handle_mm_fault+0x64e/0x21d0 [ 2028.578475][T15019] exc_page_fault+0x45f/0x640 [ 2028.583139][T15019] asm_exc_page_fault+0x26/0x30 [ 2028.587979][T15019] RIP: 0033:0x7f0cbc47e610 [ 2028.592391][T15019] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2028.612044][T15019] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2028.618106][T15019] RAX: 00000000a65c9964 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2028.626078][T15019] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e2224e [ 2028.634041][T15019] RBP: 00000000a65c9964 R08: 0000000000001964 R09: 00000000a65c9968 [ 2028.642213][T15019] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2028.650176][T15019] R13: 0000000000000001 R14: 000000000000000c R15: ffffffff81930738 [ 2028.658197][T15019] ? security_is_socket_class+0x8/0x530 [ 2028.663817][T15019] [ 2028.666890][T15019] memory: usage 307200kB, limit 307200kB, failcnt 1175 [ 2028.667525][T15028] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2028.673737][T15019] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2028.673751][T15019] Memory cgroup stats for /syz3 [ 2028.681876][T15028] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2028.688769][T15019] : [ 2028.703134][T15019] anon 131072 [ 2028.703134][T15019] file 114688 [ 2028.703134][T15019] kernel 314269696 [ 2028.703134][T15019] kernel_stack 32768 [ 2028.703134][T15019] pagetables 65536 [ 2028.703134][T15019] sec_pagetables 0 [ 2028.703134][T15019] percpu 11058688 [ 2028.703134][T15019] sock 0 [ 2028.703134][T15019] vmalloc 0 [ 2028.703134][T15019] shmem 114688 [ 2028.703134][T15019] file_mapped 114688 [ 2028.703134][T15019] file_dirty 0 [ 2028.703134][T15019] file_writeback 0 [ 2028.703134][T15019] swapcached 0 [ 2028.703134][T15019] inactive_anon 159744 [ 2028.703134][T15019] active_anon 86016 [ 2028.703134][T15019] inactive_file 0 [ 2028.703134][T15019] active_file 0 [ 2028.703134][T15019] unevictable 0 [ 2028.703134][T15019] slab_reclaimable 10552 [ 2028.703134][T15019] slab_unreclaimable 303064080 [ 2028.703134][T15019] slab 303074632 [ 2028.703134][T15019] workingset_refault_anon 0 [ 2028.703134][T15019] workingset_refault_file 1 [ 2028.703134][T15019] workingset_activate_anon 0 [ 2028.703134][T15019] workingset_activate_file 0 [ 2028.703134][T15019] workingset_restore_anon 0 [ 2028.703134][T15019] workingset_restore_file 0 [ 2028.703134][T15019] workingset_nodereclaim 0 [ 2028.703134][T15019] pgscan 61 [ 2028.703134][T15019] pgsteal 19 [ 2028.703134][T15019] pgscan_kswapd 0 [ 2028.703134][T15019] pgscan_direct 61 [ 2028.703134][T15019] pgscan_khugepaged 0 [ 2028.703134][T15019] pgsteal_kswapd 0 [ 2028.703134][T15019] pgsteal_direct 19 [ 2028.703134][T15019] pgsteal_khugepaged 0 [ 2028.703134][T15019] pgfault 896061 [ 2028.703134][T15019] pgmajfault 9 [ 2028.703134][T15019] pgrefill 70 [ 2028.703134][T15019] pgactivate 2368 02:10:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xf000000}, 0x0) 02:10:48 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb0, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x400300, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x66, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:48 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xb2fae6f6}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2028.703134][T15019] pgdeactivate 152 [ 2028.703134][T15019] pglazyfree 0 [ 2028.703134][T15019] pglazyfreed 0 [ 2028.864071][T15019] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15019,uid=0 [ 2028.879332][T15019] Memory cgroup out of memory: Killed process 15019 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:10:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x10000000}, 0x0) 02:10:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:48 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xeaffffff}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2028.913960][T15042] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2028.922078][T15042] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2028.979072][T15037] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2028.989343][T15037] CPU: 1 PID: 15037 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2028.998015][T15037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2029.008061][T15037] Call Trace: [ 2029.011332][T15037] [ 2029.014253][T15037] dump_stack_lvl+0xda/0x130 [ 2029.018846][T15037] dump_stack+0x15/0x20 [ 2029.023006][T15037] dump_header+0x95/0x3c0 02:10:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x11000000}, 0x0) 02:10:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x12000000}, 0x0) 02:10:48 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x22010000}, 0x0) [ 2029.027376][T15037] oom_kill_process+0xe3/0x3e0 [ 2029.032171][T15037] out_of_memory+0x9f0/0xc30 [ 2029.036831][T15037] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2029.042910][T15037] mem_cgroup_out_of_memory+0x139/0x190 [ 2029.048524][T15037] try_charge_memcg+0x759/0xd20 [ 2029.053525][T15037] charge_memcg+0x51/0x200 [ 2029.057994][T15037] __mem_cgroup_charge+0x29/0xa0 [ 2029.062943][T15037] handle_mm_fault+0xcea/0x21d0 [ 2029.067811][T15037] exc_page_fault+0x45f/0x640 [ 2029.072500][T15037] asm_exc_page_fault+0x26/0x30 [ 2029.077359][T15037] RIP: 0033:0x7f2feb8f9de9 [ 2029.081821][T15037] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2029.101506][T15037] RSP: 002b:00007ffce8db9350 EFLAGS: 00010246 [ 2029.107558][T15037] RAX: 0000000020001140 RBX: 0000000000000000 RCX: 0000000000000000 [ 2029.115510][T15037] RDX: 0000000020000480 RSI: 0000000000000000 RDI: 0000555556a412e8 [ 2029.123578][T15037] RBP: 00007ffce8db9448 R08: 0000000000000000 R09: 0000000000000000 [ 2029.131533][T15037] R10: 00007f2feb4ce208 R11: 0000000000000246 R12: 00000000001ef49f [ 2029.139483][T15037] R13: 00007ffce8db9470 R14: 00007f2feba79f80 R15: 0000000000000032 [ 2029.147443][T15037] [ 2029.150583][T15037] memory: usage 307200kB, limit 307200kB, failcnt 7794 [ 2029.157426][T15037] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2029.164273][T15037] Memory cgroup stats for /syz4: [ 2029.164619][T15037] anon 380928 [ 2029.164619][T15037] file 7782400 [ 2029.164619][T15037] kernel 306409472 [ 2029.164619][T15037] kernel_stack 32768 [ 2029.164619][T15037] pagetables 77824 [ 2029.164619][T15037] sec_pagetables 0 [ 2029.164619][T15037] percpu 10869312 [ 2029.164619][T15037] sock 0 [ 2029.164619][T15037] vmalloc 0 [ 2029.164619][T15037] shmem 7782400 [ 2029.164619][T15037] file_mapped 77824 [ 2029.164619][T15037] file_dirty 0 [ 2029.164619][T15037] file_writeback 0 [ 2029.164619][T15037] swapcached 0 [ 2029.164619][T15037] inactive_anon 8077312 [ 2029.164619][T15037] active_anon 86016 [ 2029.164619][T15037] inactive_file 0 [ 2029.164619][T15037] active_file 0 [ 2029.164619][T15037] unevictable 0 [ 2029.164619][T15037] slab_reclaimable 30296 [ 2029.164619][T15037] slab_unreclaimable 295356752 [ 2029.164619][T15037] slab 295387048 [ 2029.164619][T15037] workingset_refault_anon 0 [ 2029.164619][T15037] workingset_refault_file 5 [ 2029.164619][T15037] workingset_activate_anon 0 [ 2029.164619][T15037] workingset_activate_file 0 [ 2029.164619][T15037] workingset_restore_anon 0 [ 2029.164619][T15037] workingset_restore_file 0 [ 2029.164619][T15037] workingset_nodereclaim 0 [ 2029.164619][T15037] pgscan 331 [ 2029.164619][T15037] pgsteal 31 [ 2029.164619][T15037] pgscan_kswapd 0 [ 2029.164619][T15037] pgscan_direct 331 [ 2029.164619][T15037] pgscan_khugepaged 0 [ 2029.164619][T15037] pgsteal_kswapd 0 [ 2029.164619][T15037] pgsteal_direct 31 [ 2029.164619][T15037] pgsteal_khugepaged 0 [ 2029.164619][T15037] pgfault 363393 [ 2029.164619][T15037] pgmajfault 31 [ 2029.164619][T15037] pgrefill 351 [ 2029.164619][T15037] pgactivate 12642 [ 2029.164619][T15037] pgdeactivate 364 [ 2029.164619][T15037] pglazyfree 0 [ 2029.164619][T15037] pglazyfreed 0 [ 2029.328485][T15037] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15037,uid=0 [ 2029.343738][T15037] Memory cgroup out of memory: Killed process 15037 (syz-executor.4) total-vm:46352kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2029.361087][T15044] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2029.371323][T15044] CPU: 0 PID: 15044 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2029.379997][T15044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2029.390111][T15044] Call Trace: [ 2029.393378][T15044] [ 2029.396329][T15044] dump_stack_lvl+0xda/0x130 [ 2029.400903][T15044] dump_stack+0x15/0x20 [ 2029.405042][T15044] dump_header+0x95/0x3c0 [ 2029.409353][T15044] oom_kill_process+0xe3/0x3e0 [ 2029.414101][T15044] out_of_memory+0x9f0/0xc30 [ 2029.418763][T15044] mem_cgroup_out_of_memory+0x139/0x190 [ 2029.424373][T15044] try_charge_memcg+0x759/0xd20 [ 2029.429212][T15044] ? memcg_account_kmem+0x81/0x140 [ 2029.434358][T15044] obj_cgroup_charge_pages+0xab/0x130 [ 2029.439746][T15044] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2029.445294][T15044] memcg_charge_kernel_stack+0xee/0x290 [ 2029.450955][T15044] dup_task_struct+0x2c6/0x450 [ 2029.455746][T15044] copy_process+0x396/0x2100 [ 2029.460328][T15044] kernel_clone+0x169/0x560 [ 2029.464843][T15044] __x64_sys_clone+0xdf/0x110 [ 2029.469510][T15044] do_syscall_64+0x41/0xc0 [ 2029.473928][T15044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2029.479836][T15044] RIP: 0033:0x7f0cbc4d2591 [ 2029.484245][T15044] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2029.503936][T15044] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2029.512395][T15044] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2029.520353][T15044] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2029.528365][T15044] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2029.536337][T15044] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2029.544342][T15044] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2029.552345][T15044] [ 2029.555465][T15044] memory: usage 307200kB, limit 307200kB, failcnt 1261 [ 2029.562378][T15044] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2029.569203][T15044] Memory cgroup stats for /syz3: [ 2029.569403][T15044] anon 151552 [ 2029.569403][T15044] file 114688 [ 2029.569403][T15044] kernel 314306560 [ 2029.569403][T15044] kernel_stack 32768 [ 2029.569403][T15044] pagetables 73728 [ 2029.569403][T15044] sec_pagetables 0 [ 2029.569403][T15044] percpu 11058752 [ 2029.569403][T15044] sock 0 [ 2029.569403][T15044] vmalloc 0 [ 2029.569403][T15044] shmem 114688 [ 2029.569403][T15044] file_mapped 114688 [ 2029.569403][T15044] file_dirty 0 [ 2029.569403][T15044] file_writeback 0 [ 2029.569403][T15044] swapcached 0 [ 2029.569403][T15044] inactive_anon 180224 [ 2029.569403][T15044] active_anon 86016 [ 2029.569403][T15044] inactive_file 0 [ 2029.569403][T15044] active_file 0 [ 2029.569403][T15044] unevictable 0 [ 2029.569403][T15044] slab_reclaimable 13480 [ 2029.569403][T15044] slab_unreclaimable 303076360 [ 2029.569403][T15044] slab 303089840 [ 2029.569403][T15044] workingset_refault_anon 0 [ 2029.569403][T15044] workingset_refault_file 1 [ 2029.569403][T15044] workingset_activate_anon 0 [ 2029.569403][T15044] workingset_activate_file 0 [ 2029.569403][T15044] workingset_restore_anon 0 [ 2029.569403][T15044] workingset_restore_file 0 [ 2029.569403][T15044] workingset_nodereclaim 0 [ 2029.569403][T15044] pgscan 61 [ 2029.569403][T15044] pgsteal 19 [ 2029.569403][T15044] pgscan_kswapd 0 [ 2029.569403][T15044] pgscan_direct 61 [ 2029.569403][T15044] pgscan_khugepaged 0 [ 2029.569403][T15044] pgsteal_kswapd 0 [ 2029.569403][T15044] pgsteal_direct 19 [ 2029.569403][T15044] pgsteal_khugepaged 0 [ 2029.569403][T15044] pgfault 896123 [ 2029.569403][T15044] pgmajfault 9 [ 2029.569403][T15044] pgrefill 70 [ 2029.569403][T15044] pgactivate 2368 [ 2029.569403][T15044] pgdeactivate 152 [ 2029.569403][T15044] pglazyfree 0 [ 2029.569403][T15044] pglazyfreed 0 [ 2029.732699][T15044] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15044,uid=0 [ 2029.748010][T15044] Memory cgroup out of memory: Killed process 15044 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:10:49 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb1, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x25000000}, 0x0) 02:10:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x68, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:49 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xf0ffffff}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2029.831368][T15054] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:10:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x2f000000}, 0x0) 02:10:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2029.902217][T15067] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2029.927917][T15062] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2029.938167][T15062] CPU: 1 PID: 15062 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 02:10:49 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xf6e6fab2}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x3a000000}, 0x0) 02:10:49 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xfeffffff}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2029.946922][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2029.957002][T15062] Call Trace: [ 2029.960330][T15062] [ 2029.963254][T15062] dump_stack_lvl+0xda/0x130 [ 2029.966758][T15079] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2029.967832][T15062] dump_stack+0x15/0x20 [ 2029.967852][T15062] dump_header+0x95/0x3c0 [ 2029.984623][T15062] oom_kill_process+0xe3/0x3e0 [ 2029.989383][T15062] out_of_memory+0x9f0/0xc30 [ 2029.994056][T15062] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2030.000215][T15062] mem_cgroup_out_of_memory+0x139/0x190 [ 2030.005766][T15062] try_charge_memcg+0x759/0xd20 [ 2030.010669][T15062] ? obj_cgroup_charge_pages+0xed/0x130 [ 2030.016223][T15062] obj_cgroup_charge_pages+0xab/0x130 [ 2030.021654][T15062] obj_cgroup_charge+0xe9/0x140 [ 2030.026502][T15062] slab_pre_alloc_hook+0x112/0x180 [ 2030.031623][T15062] kmem_cache_alloc+0x58/0x260 [ 2030.036393][T15062] ? __anon_vma_prepare+0x45/0x2b0 [ 2030.041506][T15062] ? pte_alloc_one+0x90/0xc0 [ 2030.046099][T15062] __anon_vma_prepare+0x45/0x2b0 02:10:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x48000000}, 0x0) [ 2030.051039][T15062] handle_mm_fault+0x1d5f/0x21d0 [ 2030.055981][T15062] exc_page_fault+0x45f/0x640 [ 2030.060732][T15062] asm_exc_page_fault+0x26/0x30 [ 2030.065584][T15062] RIP: 0033:0x7f2feb954bcf [ 2030.069996][T15062] Code: d0 eb 0b 0f 1f 84 00 00 00 00 00 48 89 f8 48 83 fa 10 0f 82 da 00 00 00 48 83 fa 20 0f 87 1f 01 00 00 0f 10 06 0f 10 4c 16 f0 <0f> 11 07 0f 11 4c 17 f0 c3 0f 1f 84 00 00 00 00 00 48 39 d1 0f 82 [ 2030.089802][T15062] RSP: 002b:00007ffce8db9388 EFLAGS: 00010287 [ 2030.096018][T15062] RAX: 0000000020000000 RBX: 0000000000000000 RCX: 00007f2feb4ce000 [ 2030.104006][T15062] RDX: 0000000000000010 RSI: 00007f2feb4ce0e0 RDI: 0000000020000000 [ 2030.111961][T15062] RBP: 00007ffce8db9448 R08: 00007f2feb8ce000 R09: 00007f2feb4ce000 [ 2030.120000][T15062] R10: 00007f2feb4ce0c8 R11: 0000000000000246 R12: 00000000001ef85a [ 2030.127952][T15062] R13: 00007ffce8db9470 R14: 00007f2feba79f80 R15: 0000000000000032 [ 2030.135985][T15062] [ 2030.139177][T15062] memory: usage 307200kB, limit 307200kB, failcnt 7889 [ 2030.146045][T15062] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2030.152940][T15062] Memory cgroup stats for /syz4: [ 2030.153248][T15062] anon 376832 [ 2030.153248][T15062] file 7782400 [ 2030.153248][T15062] kernel 306413568 [ 2030.153248][T15062] kernel_stack 32768 [ 2030.153248][T15062] pagetables 77824 [ 2030.153248][T15062] sec_pagetables 0 [ 2030.153248][T15062] percpu 10869312 [ 2030.153248][T15062] sock 0 [ 2030.153248][T15062] vmalloc 0 [ 2030.153248][T15062] shmem 7782400 [ 2030.153248][T15062] file_mapped 77824 [ 2030.153248][T15062] file_dirty 0 [ 2030.153248][T15062] file_writeback 0 [ 2030.153248][T15062] swapcached 0 [ 2030.153248][T15062] inactive_anon 8060928 [ 2030.153248][T15062] active_anon 86016 [ 2030.153248][T15062] inactive_file 0 [ 2030.153248][T15062] active_file 0 [ 2030.153248][T15062] unevictable 0 [ 2030.153248][T15062] slab_reclaimable 34424 [ 2030.153248][T15062] slab_unreclaimable 295356576 [ 2030.153248][T15062] slab 295391000 [ 2030.153248][T15062] workingset_refault_anon 0 [ 2030.153248][T15062] workingset_refault_file 5 [ 2030.153248][T15062] workingset_activate_anon 0 [ 2030.153248][T15062] workingset_activate_file 0 [ 2030.153248][T15062] workingset_restore_anon 0 [ 2030.153248][T15062] workingset_restore_file 0 [ 2030.153248][T15062] workingset_nodereclaim 0 [ 2030.153248][T15062] pgscan 331 [ 2030.153248][T15062] pgsteal 31 [ 2030.153248][T15062] pgscan_kswapd 0 [ 2030.153248][T15062] pgscan_direct 331 [ 2030.153248][T15062] pgscan_khugepaged 0 [ 2030.153248][T15062] pgsteal_kswapd 0 [ 2030.153248][T15062] pgsteal_direct 31 [ 2030.153248][T15062] pgsteal_khugepaged 0 [ 2030.153248][T15062] pgfault 363448 [ 2030.153248][T15062] pgmajfault 31 [ 2030.153248][T15062] pgrefill 351 [ 2030.153248][T15062] pgactivate 12642 [ 2030.153248][T15062] pgdeactivate 364 [ 2030.153248][T15062] pglazyfree 0 [ 2030.153248][T15062] pglazyfreed 0 [ 2030.317600][T15062] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15062,uid=0 [ 2030.332909][T15062] Memory cgroup out of memory: Killed process 15062 (syz-executor.4) total-vm:46352kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:10:49 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb2, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x4c000000}, 0x0) 02:10:49 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x4c6334a8}, 0x0) [ 2030.350647][T15069] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2030.360944][T15069] CPU: 0 PID: 15069 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2030.369705][T15069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2030.379818][T15069] Call Trace: [ 2030.383095][T15069] [ 2030.386020][T15069] dump_stack_lvl+0xda/0x130 [ 2030.390620][T15069] dump_stack+0x15/0x20 [ 2030.394888][T15069] dump_header+0x95/0x3c0 [ 2030.399229][T15069] oom_kill_process+0xe3/0x3e0 [ 2030.404005][T15069] out_of_memory+0x9f0/0xc30 [ 2030.408609][T15069] mem_cgroup_out_of_memory+0x139/0x190 [ 2030.414158][T15069] try_charge_memcg+0x759/0xd20 [ 2030.419061][T15069] ? mas_state_walk+0x121/0x5d0 [ 2030.423915][T15069] obj_cgroup_charge_pages+0xab/0x130 [ 2030.429293][T15069] obj_cgroup_charge+0xe9/0x140 [ 2030.434144][T15069] slab_pre_alloc_hook+0x112/0x180 [ 2030.439313][T15069] kmem_cache_alloc+0x58/0x260 [ 2030.444067][T15069] ? vm_area_dup+0x2c/0xb0 [ 2030.448510][T15069] vm_area_dup+0x2c/0xb0 [ 2030.452735][T15069] __split_vma+0x107/0x400 [ 2030.457138][T15069] split_vma+0x6d/0x90 [ 2030.461206][T15069] mprotect_fixup+0x4a2/0x5b0 [ 2030.465877][T15069] do_mprotect_pkey+0x63d/0x8f0 [ 2030.470759][T15069] __x64_sys_mprotect+0x48/0x50 [ 2030.475640][T15069] do_syscall_64+0x41/0xc0 [ 2030.480058][T15069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2030.485972][T15069] RIP: 0033:0x7f0cbc4d1277 [ 2030.490427][T15069] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2030.510039][T15069] RSP: 002b:00007fff8ab2bea8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2030.518447][T15069] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f0cbc4d1277 [ 2030.526403][T15069] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0cbb804000 [ 2030.534369][T15069] RBP: 00007fff8ab2bf80 R08: 00000000ffffffff R09: 00007f0cbb823700 [ 2030.542320][T15069] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff8ab2c0a0 02:10:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6a, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x60000000}, 0x0) [ 2030.550282][T15069] R13: 00007f0cbb823700 R14: 0000000000000000 R15: 0000000000022000 [ 2030.558308][T15069] [ 2030.561336][T15069] memory: usage 307188kB, limit 307200kB, failcnt 1419 [ 2030.566870][T15082] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2030.568167][T15069] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2030.568179][T15069] Memory cgroup stats for /syz3: [ 2030.568457][T15069] anon 143360 [ 2030.568457][T15069] file 114688 [ 2030.568457][T15069] kernel 314298368 [ 2030.568457][T15069] kernel_stack 32768 [ 2030.568457][T15069] pagetables 73728 [ 2030.568457][T15069] sec_pagetables 0 [ 2030.568457][T15069] percpu 11058752 [ 2030.568457][T15069] sock 0 [ 2030.568457][T15069] vmalloc 0 [ 2030.568457][T15069] shmem 114688 [ 2030.568457][T15069] file_mapped 114688 [ 2030.568457][T15069] file_dirty 0 [ 2030.568457][T15069] file_writeback 0 [ 2030.568457][T15069] swapcached 0 [ 2030.568457][T15069] inactive_anon 172032 [ 2030.568457][T15069] active_anon 86016 [ 2030.568457][T15069] inactive_file 0 [ 2030.568457][T15069] active_file 0 [ 2030.568457][T15069] unevictable 0 [ 2030.568457][T15069] slab_reclaimable 13280 [ 2030.568457][T15069] slab_unreclaimable 303074600 [ 2030.568457][T15069] slab 303087880 [ 2030.568457][T15069] workingset_refault_anon 0 [ 2030.568457][T15069] workingset_refault_file 1 [ 2030.568457][T15069] workingset_activate_anon 0 [ 2030.568457][T15069] workingset_activate_file 0 [ 2030.568457][T15069] workingset_restore_anon 0 [ 2030.568457][T15069] workingset_restore_file 0 [ 2030.568457][T15069] workingset_nodereclaim 0 [ 2030.568457][T15069] pgscan 61 [ 2030.568457][T15069] pgsteal 19 [ 2030.568457][T15069] pgscan_kswapd 0 [ 2030.568457][T15069] pgscan_direct 61 [ 2030.568457][T15069] pgscan_khugepaged 0 [ 2030.568457][T15069] pgsteal_kswapd 0 [ 2030.568457][T15069] pgsteal_direct 19 [ 2030.568457][T15069] pgsteal_khugepaged 0 [ 2030.568457][T15069] pgfault 896180 [ 2030.568457][T15069] pgmajfault 9 [ 2030.568457][T15069] pgrefill 70 [ 2030.568457][T15069] pgactivate 2368 [ 2030.568457][T15069] pgdeactivate 152 [ 2030.568457][T15069] pglazyfree 0 [ 2030.568457][T15069] pglazyfreed 0 02:10:50 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:50 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:50 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xffffff7f}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x65580000}, 0x0) [ 2030.750732][T15069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15069,uid=0 [ 2030.766251][T15069] Memory cgroup out of memory: Killed process 15069 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2030.789549][T15086] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 02:10:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x68000000}, 0x0) [ 2030.799966][T15086] CPU: 1 PID: 15086 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2030.809057][T15086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2030.819122][T15086] Call Trace: [ 2030.822422][T15086] [ 2030.825348][T15086] dump_stack_lvl+0xda/0x130 [ 2030.830023][T15086] dump_stack+0x15/0x20 [ 2030.838871][T15086] dump_header+0x95/0x3c0 [ 2030.843269][T15086] oom_kill_process+0xe3/0x3e0 [ 2030.848034][T15086] out_of_memory+0x9f0/0xc30 02:10:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x6c000000}, 0x0) 02:10:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x74000000}, 0x0) [ 2030.852674][T15086] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2030.858823][T15086] mem_cgroup_out_of_memory+0x139/0x190 [ 2030.864440][T15086] try_charge_memcg+0x759/0xd20 [ 2030.869379][T15086] charge_memcg+0x51/0x200 [ 2030.873804][T15086] __mem_cgroup_charge+0x29/0xa0 [ 2030.878827][T15086] do_wp_page+0xb96/0x1fb0 [ 2030.883306][T15086] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2030.888598][T15086] handle_mm_fault+0x64e/0x21d0 [ 2030.893511][T15086] exc_page_fault+0x45f/0x640 [ 2030.898196][T15086] asm_exc_page_fault+0x26/0x30 [ 2030.903057][T15086] RIP: 0033:0x7f2feb907610 [ 2030.907468][T15086] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2030.927133][T15086] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2030.933194][T15086] RAX: 000000002d408a59 RBX: 00007f2feba7a018 RCX: 0000001b2f820000 [ 2030.941149][T15086] RDX: 0000000000000000 RSI: 0000001b2f820018 RDI: 0000000008e179b5 [ 2030.949158][T15086] RBP: 000000002d408a59 R08: 0000000000000a59 R09: 000000002d408a5d [ 2030.957140][T15086] R10: 00007ffce8db9470 R11: 0000000000000246 R12: 00007f2feba6e000 [ 2030.965116][T15086] R13: 0000000000000001 R14: 0000000000000008 R15: ffffffff81928445 [ 2030.973085][T15086] ? security_transition_sid+0x25/0x80 [ 2030.978539][T15086] [ 2030.981739][T15086] memory: usage 307200kB, limit 307200kB, failcnt 7983 [ 2030.989102][T15086] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2030.995969][T15086] Memory cgroup stats for /syz4: [ 2030.996264][T15086] anon 364544 [ 2030.996264][T15086] file 7782400 [ 2030.996264][T15086] kernel 306417664 [ 2030.996264][T15086] kernel_stack 32768 [ 2030.996264][T15086] pagetables 69632 [ 2030.996264][T15086] sec_pagetables 0 [ 2030.996264][T15086] percpu 10869312 [ 2030.996264][T15086] sock 0 [ 2030.996264][T15086] vmalloc 0 [ 2030.996264][T15086] shmem 7782400 [ 2030.996264][T15086] file_mapped 77824 [ 2030.996264][T15086] file_dirty 0 [ 2030.996264][T15086] file_writeback 0 [ 2030.996264][T15086] swapcached 0 [ 2030.996264][T15086] inactive_anon 8048640 [ 2030.996264][T15086] active_anon 86016 [ 2030.996264][T15086] inactive_file 0 [ 2030.996264][T15086] active_file 0 [ 2030.996264][T15086] unevictable 0 [ 2030.996264][T15086] slab_reclaimable 48352 [ 2030.996264][T15086] slab_unreclaimable 295358824 [ 2030.996264][T15086] slab 295407176 [ 2030.996264][T15086] workingset_refault_anon 0 [ 2030.996264][T15086] workingset_refault_file 5 [ 2030.996264][T15086] workingset_activate_anon 0 [ 2030.996264][T15086] workingset_activate_file 0 [ 2030.996264][T15086] workingset_restore_anon 0 [ 2030.996264][T15086] workingset_restore_file 0 [ 2030.996264][T15086] workingset_nodereclaim 0 [ 2030.996264][T15086] pgscan 331 [ 2030.996264][T15086] pgsteal 31 [ 2030.996264][T15086] pgscan_kswapd 0 [ 2030.996264][T15086] pgscan_direct 331 [ 2030.996264][T15086] pgscan_khugepaged 0 [ 2030.996264][T15086] pgsteal_kswapd 0 [ 2030.996264][T15086] pgsteal_direct 31 [ 2030.996264][T15086] pgsteal_khugepaged 0 [ 2030.996264][T15086] pgfault 363498 [ 2030.996264][T15086] pgmajfault 31 [ 2030.996264][T15086] pgrefill 351 [ 2030.996264][T15086] pgactivate 12642 [ 2030.996264][T15086] pgdeactivate 364 [ 2030.996264][T15086] pglazyfree 0 [ 2030.996264][T15086] pglazyfreed 0 [ 2031.160175][T15086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15086,uid=0 [ 2031.175496][T15086] Memory cgroup out of memory: Killed process 15086 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:10:50 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb3, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x7a000000}, 0x0) 02:10:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6c, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x81000000}, 0x0) [ 2031.199066][T15098] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2031.209316][T15098] CPU: 0 PID: 15098 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2031.217979][T15098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2031.228062][T15098] Call Trace: [ 2031.231337][T15098] [ 2031.234260][T15098] dump_stack_lvl+0xda/0x130 [ 2031.238977][T15098] dump_stack+0x15/0x20 [ 2031.243983][T15098] dump_header+0x95/0x3c0 [ 2031.248333][T15098] oom_kill_process+0xe3/0x3e0 [ 2031.253166][T15098] out_of_memory+0x9f0/0xc30 02:10:50 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x81ffffff}, 0x0) [ 2031.257757][T15098] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2031.263906][T15098] mem_cgroup_out_of_memory+0x139/0x190 [ 2031.269535][T15098] try_charge_memcg+0x759/0xd20 [ 2031.274398][T15098] ? obj_cgroup_charge_pages+0xed/0x130 [ 2031.279985][T15098] obj_cgroup_charge_pages+0xab/0x130 [ 2031.285362][T15098] obj_cgroup_charge+0xe9/0x140 [ 2031.290315][T15098] slab_pre_alloc_hook+0x112/0x180 [ 2031.295584][T15098] kmem_cache_alloc+0x58/0x260 [ 2031.300361][T15098] ? __anon_vma_prepare+0x45/0x2b0 [ 2031.305517][T15098] ? pte_alloc_one+0x90/0xc0 [ 2031.310167][T15098] __anon_vma_prepare+0x45/0x2b0 [ 2031.315134][T15098] handle_mm_fault+0x1d5f/0x21d0 [ 2031.320111][T15098] exc_page_fault+0x45f/0x640 [ 2031.324821][T15098] asm_exc_page_fault+0x26/0x30 [ 2031.329662][T15098] RIP: 0033:0x7f0cbc470de9 [ 2031.334071][T15098] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2031.354600][T15098] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2031.360649][T15098] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2031.368685][T15098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2031.376699][T15098] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2031.384695][T15098] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000001efbdc [ 2031.392655][T15098] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2031.400618][T15098] [ 2031.403787][T15098] memory: usage 307200kB, limit 307200kB, failcnt 1507 [ 2031.410639][T15098] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2031.417494][T15098] Memory cgroup stats for /syz3: [ 2031.417823][T15098] anon 139264 [ 2031.417823][T15098] file 114688 [ 2031.417823][T15098] kernel 314318848 [ 2031.417823][T15098] kernel_stack 32768 [ 2031.417823][T15098] pagetables 73728 [ 2031.417823][T15098] sec_pagetables 0 [ 2031.417823][T15098] percpu 11058752 [ 2031.417823][T15098] sock 0 [ 2031.417823][T15098] vmalloc 0 [ 2031.417823][T15098] shmem 114688 [ 2031.417823][T15098] file_mapped 114688 [ 2031.417823][T15098] file_dirty 0 [ 2031.417823][T15098] file_writeback 0 [ 2031.417823][T15098] swapcached 0 [ 2031.417823][T15098] inactive_anon 163840 [ 2031.417823][T15098] active_anon 86016 [ 2031.417823][T15098] inactive_file 0 [ 2031.417823][T15098] active_file 0 [ 2031.417823][T15098] unevictable 0 [ 2031.417823][T15098] slab_reclaimable 31136 [ 2031.417823][T15098] slab_unreclaimable 303081416 [ 2031.417823][T15098] slab 303112552 [ 2031.417823][T15098] workingset_refault_anon 0 [ 2031.417823][T15098] workingset_refault_file 1 [ 2031.417823][T15098] workingset_activate_anon 0 [ 2031.417823][T15098] workingset_activate_file 0 [ 2031.417823][T15098] workingset_restore_anon 0 [ 2031.417823][T15098] workingset_restore_file 0 [ 2031.417823][T15098] workingset_nodereclaim 0 [ 2031.417823][T15098] pgscan 61 [ 2031.417823][T15098] pgsteal 19 [ 2031.417823][T15098] pgscan_kswapd 0 [ 2031.417823][T15098] pgscan_direct 61 [ 2031.417823][T15098] pgscan_khugepaged 0 [ 2031.417823][T15098] pgsteal_kswapd 0 [ 2031.417823][T15098] pgsteal_direct 19 [ 2031.417823][T15098] pgsteal_khugepaged 0 [ 2031.417823][T15098] pgfault 896242 [ 2031.417823][T15098] pgmajfault 9 [ 2031.417823][T15098] pgrefill 70 [ 2031.417823][T15098] pgactivate 2368 [ 2031.417823][T15098] pgdeactivate 152 [ 2031.417823][T15098] pglazyfree 0 [ 2031.417823][T15098] pglazyfreed 0 [ 2031.585555][T15098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15098,uid=0 02:10:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x88470000}, 0x0) 02:10:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:51 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xffffff81}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x88480000}, 0x0) [ 2031.600799][T15098] Memory cgroup out of memory: Killed process 15098 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2031.620168][T15105] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2031.628259][T15105] __nla_validate_parse: 8 callbacks suppressed [ 2031.628271][T15105] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2031.650091][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2031.684306][T15113] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2031.694608][T15113] CPU: 1 PID: 15113 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2031.703274][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2031.713405][T15113] Call Trace: [ 2031.716681][T15113] [ 2031.719603][T15113] dump_stack_lvl+0xda/0x130 [ 2031.724195][T15113] dump_stack+0x15/0x20 [ 2031.728339][T15113] dump_header+0x95/0x3c0 02:10:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x88a8ffff}, 0x0) 02:10:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x94030000}, 0x0) [ 2031.732716][T15113] oom_kill_process+0xe3/0x3e0 [ 2031.737525][T15113] out_of_memory+0x9f0/0xc30 [ 2031.742116][T15113] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2031.748191][T15113] mem_cgroup_out_of_memory+0x139/0x190 [ 2031.753795][T15113] try_charge_memcg+0x759/0xd20 [ 2031.758705][T15113] charge_memcg+0x51/0x200 [ 2031.763133][T15113] __mem_cgroup_charge+0x29/0xa0 [ 2031.768080][T15113] handle_mm_fault+0xcea/0x21d0 [ 2031.772961][T15113] exc_page_fault+0x45f/0x640 [ 2031.777707][T15113] asm_exc_page_fault+0x26/0x30 [ 2031.782641][T15113] RIP: 0033:0x7f2feb954bcf [ 2031.787072][T15113] Code: d0 eb 0b 0f 1f 84 00 00 00 00 00 48 89 f8 48 83 fa 10 0f 82 da 00 00 00 48 83 fa 20 0f 87 1f 01 00 00 0f 10 06 0f 10 4c 16 f0 <0f> 11 07 0f 11 4c 17 f0 c3 0f 1f 84 00 00 00 00 00 48 39 d1 0f 82 [ 2031.806787][T15113] RSP: 002b:00007ffce8db9388 EFLAGS: 00010287 [ 2031.812855][T15113] RAX: 0000000020000000 RBX: 0000000000000000 RCX: 00007f2feb4ce000 [ 2031.820816][T15113] RDX: 0000000000000010 RSI: 00007f2feb4ce0e0 RDI: 0000000020000000 [ 2031.828766][T15113] RBP: 00007ffce8db9448 R08: 00007f2feb8ce000 R09: 00007f2feb4ce000 [ 2031.841689][T15113] R10: 00007f2feb4ce0c8 R11: 0000000000000246 R12: 00000000001eff2b [ 2031.849646][T15113] R13: 00007ffce8db9470 R14: 00007f2feba79f80 R15: 0000000000000032 [ 2031.857680][T15113] [ 2031.860716][T15113] memory: usage 307200kB, limit 307200kB, failcnt 8096 [ 2031.867571][T15113] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2031.874428][T15113] Memory cgroup stats for /syz4: [ 2031.874692][T15113] anon 376832 [ 2031.874692][T15113] file 7786496 [ 2031.874692][T15113] kernel 306409472 [ 2031.874692][T15113] kernel_stack 32768 [ 2031.874692][T15113] pagetables 77824 [ 2031.874692][T15113] sec_pagetables 0 [ 2031.874692][T15113] percpu 10869312 [ 2031.874692][T15113] sock 0 [ 2031.874692][T15113] vmalloc 0 [ 2031.874692][T15113] shmem 7782400 [ 2031.874692][T15113] file_mapped 77824 [ 2031.874692][T15113] file_dirty 0 [ 2031.874692][T15113] file_writeback 0 [ 2031.874692][T15113] swapcached 0 [ 2031.874692][T15113] inactive_anon 8073216 [ 2031.874692][T15113] active_anon 86016 [ 2031.874692][T15113] inactive_file 4096 [ 2031.874692][T15113] active_file 0 [ 2031.874692][T15113] unevictable 0 [ 2031.874692][T15113] slab_reclaimable 30408 [ 2031.874692][T15113] slab_unreclaimable 295356752 [ 2031.874692][T15113] slab 295387160 [ 2031.874692][T15113] workingset_refault_anon 0 [ 2031.874692][T15113] workingset_refault_file 6 [ 2031.874692][T15113] workingset_activate_anon 0 [ 2031.874692][T15113] workingset_activate_file 0 [ 2031.874692][T15113] workingset_restore_anon 0 [ 2031.874692][T15113] workingset_restore_file 0 [ 2031.874692][T15113] workingset_nodereclaim 0 [ 2031.874692][T15113] pgscan 352 [ 2031.874692][T15113] pgsteal 31 [ 2031.874692][T15113] pgscan_kswapd 0 [ 2031.874692][T15113] pgscan_direct 352 [ 2031.874692][T15113] pgscan_khugepaged 0 [ 2031.874692][T15113] pgsteal_kswapd 0 [ 2031.874692][T15113] pgsteal_direct 31 [ 2031.874692][T15113] pgsteal_khugepaged 0 [ 2031.874692][T15113] pgfault 363554 [ 2031.874692][T15113] pgmajfault 31 [ 2031.874692][T15113] pgrefill 372 [ 2031.874692][T15113] pgactivate 12663 [ 2031.874692][T15113] pgdeactivate 385 [ 2031.874692][T15113] pglazyfree 0 [ 2031.874692][T15113] pglazyfreed 0 [ 2032.038911][T15113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15113,uid=0 [ 2032.054225][T15113] Memory cgroup out of memory: Killed process 15113 (syz-executor.4) total-vm:46352kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 02:10:51 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb4, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x9a020000}, 0x0) 02:10:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x74, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2032.078305][T15125] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2032.088630][T15125] CPU: 0 PID: 15125 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2032.097359][T15125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2032.107489][T15125] Call Trace: [ 2032.110872][T15125] [ 2032.113847][T15125] dump_stack_lvl+0xda/0x130 [ 2032.118440][T15125] dump_stack+0x15/0x20 [ 2032.122600][T15125] dump_header+0x95/0x3c0 [ 2032.126945][T15125] oom_kill_process+0xe3/0x3e0 [ 2032.131723][T15125] out_of_memory+0x9f0/0xc30 02:10:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xa834634c}, 0x0) 02:10:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xc2000000}, 0x0) [ 2032.136322][T15125] mem_cgroup_out_of_memory+0x139/0x190 [ 2032.141925][T15125] try_charge_memcg+0x759/0xd20 [ 2032.146786][T15125] ? __rmqueue_pcplist+0x9d0/0xa50 [ 2032.151898][T15125] ? shrink_node+0x146c/0x14f0 [ 2032.156734][T15125] obj_cgroup_charge_pages+0xab/0x130 [ 2032.162120][T15125] obj_cgroup_charge+0xe9/0x140 [ 2032.166981][T15125] slab_pre_alloc_hook+0x112/0x180 [ 2032.172103][T15125] kmem_cache_alloc_node+0x5d/0x2e0 [ 2032.177354][T15125] ? dup_task_struct+0x60/0x450 [ 2032.182207][T15125] dup_task_struct+0x60/0x450 [ 2032.186965][T15125] copy_process+0x396/0x2100 [ 2032.191569][T15125] ? __rcu_read_unlock+0x4d/0x70 [ 2032.196613][T15125] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 2032.202215][T15125] kernel_clone+0x169/0x560 [ 2032.206716][T15125] __x64_sys_clone+0xdf/0x110 [ 2032.211385][T15125] do_syscall_64+0x41/0xc0 [ 2032.215797][T15125] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2032.221676][T15125] RIP: 0033:0x7f0cbc4d2591 [ 2032.226068][T15125] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2032.245781][T15125] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2032.254173][T15125] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2032.262171][T15125] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2032.270173][T15125] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2032.278144][T15125] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2032.286457][T15125] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2032.294434][T15125] [ 2032.297526][T15125] memory: usage 307188kB, limit 307200kB, failcnt 1608 [ 2032.303005][T15129] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2032.304371][T15125] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2032.304385][T15125] Memory cgroup stats for [ 2032.312475][T15129] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2032.319261][T15125] /syz3: [ 2032.333187][T15125] anon 147456 [ 2032.333187][T15125] file 114688 [ 2032.333187][T15125] kernel 314298368 [ 2032.333187][T15125] kernel_stack 32768 [ 2032.333187][T15125] pagetables 73728 [ 2032.333187][T15125] sec_pagetables 0 [ 2032.333187][T15125] percpu 11058752 [ 2032.333187][T15125] sock 0 [ 2032.333187][T15125] vmalloc 0 [ 2032.333187][T15125] shmem 114688 [ 2032.333187][T15125] file_mapped 114688 [ 2032.333187][T15125] file_dirty 0 [ 2032.333187][T15125] file_writeback 0 [ 2032.333187][T15125] swapcached 0 [ 2032.333187][T15125] inactive_anon 172032 [ 2032.333187][T15125] active_anon 86016 [ 2032.333187][T15125] inactive_file 0 [ 2032.333187][T15125] active_file 0 [ 2032.333187][T15125] unevictable 0 [ 2032.333187][T15125] slab_reclaimable 13480 [ 2032.333187][T15125] slab_unreclaimable 303075584 [ 2032.333187][T15125] slab 303089064 [ 2032.333187][T15125] workingset_refault_anon 0 [ 2032.333187][T15125] workingset_refault_file 1 [ 2032.333187][T15125] workingset_activate_anon 0 [ 2032.333187][T15125] workingset_activate_file 0 [ 2032.333187][T15125] workingset_restore_anon 0 [ 2032.333187][T15125] workingset_restore_file 0 [ 2032.333187][T15125] workingset_nodereclaim 0 [ 2032.333187][T15125] pgscan 61 [ 2032.333187][T15125] pgsteal 19 [ 2032.333187][T15125] pgscan_kswapd 0 [ 2032.333187][T15125] pgscan_direct 61 [ 2032.333187][T15125] pgscan_khugepaged 0 [ 2032.333187][T15125] pgsteal_kswapd 0 [ 2032.333187][T15125] pgsteal_direct 19 [ 2032.333187][T15125] pgsteal_khugepaged 0 [ 2032.333187][T15125] pgfault 896305 [ 2032.333187][T15125] pgmajfault 9 [ 2032.333187][T15125] pgrefill 70 [ 2032.333187][T15125] pgactivate 2368 [ 2032.333187][T15125] pgdeactivate 152 [ 2032.333187][T15125] pglazyfree 0 [ 2032.333187][T15125] pglazyfreed 0 [ 2032.335225][T15139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2032.336052][T15125] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15125,uid=0 [ 2032.519240][T15125] Memory cgroup out of memory: Killed process 15125 (syz-executor.3) total-vm:46484kB, anon-rss:360kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:10:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xeaffffff}, 0x0) 02:10:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:52 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xffffffea}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2032.562819][T15137] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2032.573038][T15137] CPU: 1 PID: 15137 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2032.581710][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2032.596481][T15137] Call Trace: [ 2032.599762][T15137] [ 2032.602686][T15137] dump_stack_lvl+0xda/0x130 [ 2032.607317][T15137] dump_stack+0x15/0x20 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xf0ffffff}, 0x0) 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xf6030000}, 0x0) 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xfe030000}, 0x0) [ 2032.611521][T15137] dump_header+0x95/0x3c0 [ 2032.615856][T15137] oom_kill_process+0xe3/0x3e0 [ 2032.620635][T15137] out_of_memory+0x9f0/0xc30 [ 2032.625234][T15137] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2032.631311][T15137] mem_cgroup_out_of_memory+0x139/0x190 [ 2032.636972][T15137] try_charge_memcg+0x759/0xd20 [ 2032.641899][T15137] charge_memcg+0x51/0x200 [ 2032.646332][T15137] __mem_cgroup_charge+0x29/0xa0 [ 2032.651284][T15137] do_wp_page+0xb96/0x1fb0 [ 2032.655783][T15137] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2032.661159][T15137] handle_mm_fault+0x64e/0x21d0 [ 2032.666115][T15137] exc_page_fault+0x45f/0x640 [ 2032.670827][T15137] asm_exc_page_fault+0x26/0x30 [ 2032.675687][T15137] RIP: 0033:0x7f2feb907610 [ 2032.680175][T15137] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2032.699780][T15137] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2032.705902][T15137] RAX: 00000000c301b5fc RBX: 00007f2feba7a018 RCX: 0000001b2f820000 [ 2032.713930][T15137] RDX: 0000000000000000 RSI: 0000001b2f820018 RDI: 0000000008e062e9 [ 2032.721884][T15137] RBP: 00000000c301b5fc R08: 00000000000015fc R09: 00000000c301b600 [ 2032.729851][T15137] R10: 00007ffce8db9470 R11: 0000000000000246 R12: 00007f2feba6e000 [ 2032.737850][T15137] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff818fe770 [ 2032.747797][T15137] ? selinux_socket_create+0x30/0x180 [ 2032.753273][T15137] [ 2032.756414][T15137] memory: usage 307196kB, limit 307200kB, failcnt 8205 [ 2032.763276][T15137] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2032.770140][T15137] Memory cgroup stats for /syz4: [ 2032.770348][T15137] anon 360448 [ 2032.770348][T15137] file 7786496 [ 2032.770348][T15137] kernel 306421760 [ 2032.770348][T15137] kernel_stack 32768 [ 2032.770348][T15137] pagetables 69632 [ 2032.770348][T15137] sec_pagetables 0 [ 2032.770348][T15137] percpu 10869312 [ 2032.770348][T15137] sock 0 [ 2032.770348][T15137] vmalloc 0 [ 2032.770348][T15137] shmem 7782400 [ 2032.770348][T15137] file_mapped 77824 [ 2032.770348][T15137] file_dirty 0 [ 2032.770348][T15137] file_writeback 0 [ 2032.770348][T15137] swapcached 0 [ 2032.770348][T15137] inactive_anon 8056832 [ 2032.770348][T15137] active_anon 86016 [ 2032.770348][T15137] inactive_file 4096 [ 2032.770348][T15137] active_file 0 [ 2032.770348][T15137] unevictable 0 [ 2032.770348][T15137] slab_reclaimable 49840 [ 2032.770348][T15137] slab_unreclaimable 295359064 [ 2032.770348][T15137] slab 295408904 [ 2032.770348][T15137] workingset_refault_anon 0 [ 2032.770348][T15137] workingset_refault_file 6 [ 2032.770348][T15137] workingset_activate_anon 0 [ 2032.770348][T15137] workingset_activate_file 0 [ 2032.770348][T15137] workingset_restore_anon 0 [ 2032.770348][T15137] workingset_restore_file 0 [ 2032.770348][T15137] workingset_nodereclaim 0 [ 2032.770348][T15137] pgscan 391 [ 2032.770348][T15137] pgsteal 31 [ 2032.770348][T15137] pgscan_kswapd 0 [ 2032.770348][T15137] pgscan_direct 391 [ 2032.770348][T15137] pgscan_khugepaged 0 [ 2032.770348][T15137] pgsteal_kswapd 0 [ 2032.770348][T15137] pgsteal_direct 31 [ 2032.770348][T15137] pgsteal_khugepaged 0 [ 2032.770348][T15137] pgfault 363602 [ 2032.770348][T15137] pgmajfault 31 [ 2032.770348][T15137] pgrefill 412 [ 2032.770348][T15137] pgactivate 12703 [ 2032.770348][T15137] pgdeactivate 425 [ 2032.770348][T15137] pglazyfree 0 [ 2032.770348][T15137] pglazyfreed 0 [ 2032.934460][T15137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15137,uid=0 02:10:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb5, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xfeffffff}, 0x0) [ 2032.949756][T15137] Memory cgroup out of memory: Killed process 15137 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2032.974274][T15150] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2032.986533][T15150] CPU: 1 PID: 15150 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2032.995278][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2033.005387][T15150] Call Trace: [ 2033.008669][T15150] 02:10:52 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x7a, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xff7f0000}, 0x0) [ 2033.011601][T15150] dump_stack_lvl+0xda/0x130 [ 2033.016201][T15150] dump_stack+0x15/0x20 [ 2033.020392][T15150] dump_header+0x95/0x3c0 [ 2033.024726][T15150] oom_kill_process+0xe3/0x3e0 [ 2033.028611][T15154] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2033.029479][T15150] out_of_memory+0x9f0/0xc30 [ 2033.037547][T15154] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2033.042082][T15150] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2033.057485][T15150] mem_cgroup_out_of_memory+0x139/0x190 02:10:52 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xfffffff0}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2033.063107][T15150] try_charge_memcg+0x759/0xd20 [ 2033.067999][T15150] obj_cgroup_charge_pages+0xab/0x130 [ 2033.073426][T15150] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2033.079028][T15150] __alloc_pages+0x1bb/0x340 [ 2033.083724][T15150] alloc_pages+0x3e1/0x4e0 [ 2033.088208][T15150] __pmd_alloc+0x4b/0x300 [ 2033.092550][T15150] handle_mm_fault+0x1c07/0x21d0 [ 2033.097493][T15150] exc_page_fault+0x45f/0x640 [ 2033.102167][T15150] asm_exc_page_fault+0x26/0x30 [ 2033.107025][T15150] RIP: 0033:0x7f0cbc470de9 [ 2033.111445][T15150] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2033.131128][T15150] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2033.137171][T15150] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2033.145203][T15150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2033.153168][T15150] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2033.161144][T15150] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000001f02cf [ 2033.169151][T15150] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2033.177140][T15150] [ 2033.180174][T15150] memory: usage 307172kB, limit 307200kB, failcnt 1723 [ 2033.185221][T15171] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2033.187441][T15150] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2033.187454][T15150] Memory cgroup stats for /syz3 [ 2033.195634][T15171] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2033.202330][T15150] : [ 2033.202610][T15150] anon 139264 [ 2033.202610][T15150] file 114688 [ 2033.202610][T15150] kernel 314290176 [ 2033.202610][T15150] kernel_stack 32768 [ 2033.202610][T15150] pagetables 65536 [ 2033.202610][T15150] sec_pagetables 0 [ 2033.202610][T15150] percpu 11058752 [ 2033.202610][T15150] sock 0 [ 2033.202610][T15150] vmalloc 0 [ 2033.202610][T15150] shmem 114688 [ 2033.202610][T15150] file_mapped 114688 [ 2033.202610][T15150] file_dirty 0 [ 2033.202610][T15150] file_writeback 0 [ 2033.202610][T15150] swapcached 0 [ 2033.202610][T15150] inactive_anon 167936 [ 2033.202610][T15150] active_anon 86016 [ 2033.202610][T15150] inactive_file 0 [ 2033.202610][T15150] active_file 0 [ 2033.202610][T15150] unevictable 0 [ 2033.202610][T15150] slab_reclaimable 16456 [ 2033.202610][T15150] slab_unreclaimable 303074400 [ 2033.202610][T15150] slab 303090856 [ 2033.202610][T15150] workingset_refault_anon 0 [ 2033.202610][T15150] workingset_refault_file 1 [ 2033.202610][T15150] workingset_activate_anon 0 [ 2033.202610][T15150] workingset_activate_file 0 [ 2033.202610][T15150] workingset_restore_anon 0 [ 2033.202610][T15150] workingset_restore_file 0 [ 2033.202610][T15150] workingset_nodereclaim 0 [ 2033.202610][T15150] pgscan 61 [ 2033.202610][T15150] pgsteal 19 [ 2033.202610][T15150] pgscan_kswapd 0 [ 2033.202610][T15150] pgscan_direct 61 [ 2033.202610][T15150] pgscan_khugepaged 0 [ 2033.202610][T15150] pgsteal_kswapd 0 [ 2033.202610][T15150] pgsteal_direct 19 [ 2033.202610][T15150] pgsteal_khugepaged 0 [ 2033.202610][T15150] pgfault 896365 [ 2033.202610][T15150] pgmajfault 9 [ 2033.202610][T15150] pgrefill 70 02:10:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xa, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xffffa888}, 0x0) 02:10:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:52 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xfffffffe}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2033.202610][T15150] pgactivate 2368 [ 2033.202610][T15150] pgdeactivate 152 [ 2033.202610][T15150] pglazyfree 0 [ 2033.202610][T15150] pglazyfreed 0 [ 2033.220990][T15169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2033.377062][T15150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15150,uid=0 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xffffff7f}, 0x0) 02:10:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb6, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2033.377131][T15150] Memory cgroup out of memory: Killed process 15150 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2033.414921][T15165] Memory cgroup out of memory: Killed process 15165 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:10:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb7, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xffffff81}, 0x0) 02:10:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xffffffea}, 0x0) [ 2033.478449][T15181] Memory cgroup out of memory: Killed process 15181 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:10:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xb2, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb8, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2033.541091][T15175] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2033.545057][T15186] Memory cgroup out of memory: Killed process 15186 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2033.549197][T15175] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:10:53 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2033.595367][T15178] Memory cgroup out of memory: Killed process 15178 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2033.612782][T15192] Memory cgroup out of memory: Killed process 15192 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2033.637670][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xb9, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xfffffff0}, 0x0) 02:10:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2033.709764][T15191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:10:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xfffffffe}, 0x0) 02:10:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x1000000000000}, 0x0) 02:10:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xba, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x4000000000000}, 0x0) 02:10:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xde, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 2033.789351][T15205] Memory cgroup out of memory: Killed process 15200 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2033.823027][T15195] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:10:53 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2033.898078][T15208] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 2033.902985][T15213] Memory cgroup out of memory: Killed process 15213 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2033.918384][T15208] CPU: 0 PID: 15208 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2033.944211][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2033.954270][T15208] Call Trace: [ 2033.957531][T15208] [ 2033.960446][T15208] dump_stack_lvl+0xda/0x130 [ 2033.965038][T15208] dump_stack+0x15/0x20 [ 2033.969186][T15208] warn_alloc+0x140/0x1b0 [ 2033.973506][T15208] ? __rcu_read_unlock+0x4d/0x70 [ 2033.978425][T15208] __vmalloc_node_range+0xc7c/0xeb0 [ 2033.983669][T15208] kvmalloc_node+0x121/0x160 [ 2033.988250][T15208] ? alloc_netdev_mqs+0x89/0x870 [ 2033.997978][T15208] alloc_netdev_mqs+0x89/0x870 [ 2034.002853][T15208] ? cfv_alloc_and_copy_to_shm+0x290/0x290 [ 2034.008662][T15208] rtnl_create_link+0x226/0x7f0 [ 2034.013497][T15208] rtnl_newlink+0xda3/0x15a0 [ 2034.018163][T15208] ? security_capable+0x5e/0x80 [ 2034.023006][T15208] ? ns_capable+0x7c/0xb0 [ 2034.027320][T15208] ? rtnl_setlink+0x2d0/0x2d0 [ 2034.032052][T15208] rtnetlink_rcv_msg+0x807/0x8c0 [ 2034.036974][T15208] ? __blk_flush_plug+0x23f/0x280 [ 2034.042044][T15208] ? xas_load+0x37c/0x390 [ 2034.046420][T15208] ? __rcu_read_unlock+0x33/0x70 [ 2034.051360][T15208] ? kmem_cache_free+0x178/0x280 [ 2034.056288][T15208] ? nlmon_xmit+0x4b/0x60 [ 2034.060608][T15208] ? __kfree_skb+0x102/0x140 [ 2034.065209][T15208] ? consume_skb+0x57/0x180 [ 2034.069695][T15208] ? nlmon_xmit+0x4b/0x60 [ 2034.074054][T15208] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 2034.079382][T15208] ? ref_tracker_free+0x3a1/0x400 [ 2034.084473][T15208] ? local_bh_enable+0x1f/0x20 [ 2034.089320][T15208] ? __dev_queue_xmit+0xbba/0x1e60 [ 2034.094490][T15208] netlink_rcv_skb+0x126/0x220 [ 2034.099236][T15208] ? rtnetlink_bind+0x60/0x60 [ 2034.103954][T15208] rtnetlink_rcv+0x1c/0x20 [ 2034.109356][T15208] netlink_unicast+0x56f/0x640 [ 2034.114101][T15208] netlink_sendmsg+0x665/0x770 [ 2034.118886][T15208] ? netlink_getsockopt+0x710/0x710 [ 2034.124154][T15208] ____sys_sendmsg+0x375/0x4c0 [ 2034.128945][T15208] __sys_sendmsg+0x1e3/0x270 [ 2034.133602][T15208] __x64_sys_sendmsg+0x46/0x50 [ 2034.138350][T15208] do_syscall_64+0x41/0xc0 [ 2034.142746][T15208] ? syscall_exit_to_user_mode+0x26/0x140 [ 2034.148450][T15208] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2034.154389][T15208] RIP: 0033:0x7f0cbc4d1169 [ 2034.158783][T15208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2034.178401][T15208] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2034.186841][T15208] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2034.194792][T15208] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 2034.202789][T15208] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2034.210919][T15208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2034.218870][T15208] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2034.226870][T15208] [ 2034.229980][T15208] Mem-Info: [ 2034.233157][T15208] active_anon:7239 inactive_anon:134211 isolated_anon:0 [ 2034.233157][T15208] active_file:10840 inactive_file:8684 isolated_file:0 [ 2034.233157][T15208] unevictable:0 dirty:0 writeback:0 [ 2034.233157][T15208] slab_reclaimable:16935 slab_unreclaimable:512937 [ 2034.233157][T15208] mapped:20605 shmem:11169 pagetables:864 [ 2034.233157][T15208] sec_pagetables:0 bounce:0 [ 2034.233157][T15208] kernel_misc_reclaimable:0 [ 2034.233157][T15208] free:1246799 free_pcp:2759 free_cma:0 [ 2034.279163][T15208] Node 0 active_anon:28956kB inactive_anon:536844kB active_file:43360kB inactive_file:34736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82420kB dirty:0kB writeback:0kB shmem:44676kB writeback_tmp:0kB kernel_stack:3072kB pagetables:3456kB sec_pagetables:0kB all_unreclaimable? no [ 2034.307234][T15208] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2034.334079][T15208] lowmem_reserve[]: 0 2896 7874 7874 [ 2034.339445][T15208] Node 0 DMA32 free:2965464kB boost:0kB min:4172kB low:7136kB high:10100kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2969224kB mlocked:0kB bounce:0kB free_pcp:3760kB local_pcp:1804kB free_cma:0kB [ 2034.368109][T15208] lowmem_reserve[]: 0 0 4978 4978 [ 2034.373168][T15208] Node 0 Normal free:2006392kB boost:0kB min:7172kB low:12268kB high:17364kB reserved_highatomic:0KB active_anon:28960kB inactive_anon:536808kB active_file:43360kB inactive_file:34736kB unevictable:0kB writepending:0kB present:5242880kB managed:5098224kB mlocked:0kB bounce:0kB free_pcp:7276kB local_pcp:1408kB free_cma:0kB [ 2034.403420][T15208] lowmem_reserve[]: 0 0 0 0 [ 2034.407956][T15208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2034.420747][T15208] Node 0 DMA32: 2*4kB (M) 0*8kB 1*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 722*4096kB (M) = 2965464kB [ 2034.436461][T15208] Node 0 Normal: 592*4kB (M) 689*8kB (UME) 475*16kB (UME) 452*32kB (UM) 306*64kB (M) 150*128kB (UME) 15*256kB (M) 5*512kB (UME) 2*1024kB (UE) 0*2048kB 471*4096kB (M) = 2006392kB [ 2034.454269][T15208] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2034.463555][T15208] 30695 total pagecache pages [ 2034.468284][T15208] 0 pages in swap cache [ 2034.472433][T15208] Free swap = 0kB [ 2034.476202][T15208] Total swap = 0kB [ 2034.479977][T15208] 2097051 pages RAM [ 2034.483801][T15208] 0 pages HighMem/MovableOnly [ 2034.488502][T15208] 76349 pages reserved 02:10:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xf, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x200000000000000}, 0x0) 02:10:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xbb, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:53 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x3}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 2034.493417][T15221] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2034.551136][T15226] oom_kill_process: 7 callbacks suppressed [ 2034.551149][T15226] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2034.567218][T15226] CPU: 1 PID: 15226 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2034.575931][T15226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2034.585993][T15226] Call Trace: [ 2034.589272][T15226] [ 2034.592230][T15226] dump_stack_lvl+0xda/0x130 [ 2034.596848][T15226] dump_stack+0x15/0x20 02:10:54 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x400000000000000}, 0x0) 02:10:54 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 2034.601048][T15226] dump_header+0x95/0x3c0 [ 2034.605383][T15226] oom_kill_process+0xe3/0x3e0 [ 2034.610151][T15226] out_of_memory+0x9f0/0xc30 [ 2034.614746][T15226] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2034.620853][T15226] mem_cgroup_out_of_memory+0x139/0x190 [ 2034.626408][T15226] try_charge_memcg+0x759/0xd20 [ 2034.631293][T15226] ? memcg_account_kmem+0x81/0x140 [ 2034.636408][T15226] obj_cgroup_charge_pages+0xab/0x130 [ 2034.641828][T15226] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2034.647545][T15226] memcg_charge_kernel_stack+0x137/0x290 [ 2034.653242][T15226] dup_task_struct+0x2c6/0x450 [ 2034.658045][T15226] copy_process+0x396/0x2100 [ 2034.662695][T15226] kernel_clone+0x169/0x560 [ 2034.667216][T15226] __x64_sys_clone+0xdf/0x110 [ 2034.671905][T15226] do_syscall_64+0x41/0xc0 [ 2034.676311][T15226] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2034.682189][T15226] RIP: 0033:0x7f2feb95b591 [ 2034.686582][T15226] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2034.706247][T15226] RSP: 002b:00007ffce8db9258 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2034.714695][T15226] RAX: ffffffffffffffda RBX: 00007f2feaccd700 RCX: 00007f2feb95b591 [ 2034.722669][T15226] RDX: 00007f2feaccd9d0 RSI: 00007f2feaccd2f0 RDI: 00000000003d0f00 [ 2034.730637][T15226] RBP: 00007ffce8db94a0 R08: 00007f2feaccd700 R09: 00007f2feaccd700 [ 2034.738621][T15226] R10: 00007f2feaccd9d0 R11: 0000000000000206 R12: 00007ffce8db930e [ 2034.746574][T15226] R13: 00007ffce8db930f R14: 00007f2feaccd300 R15: 0000000000022000 [ 2034.754545][T15226] [ 2034.757639][T15226] memory: usage 307200kB, limit 307200kB, failcnt 8734 [ 2034.764495][T15226] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2034.771375][T15226] Memory cgroup stats for /syz4: [ 2034.771651][T15226] anon 331776 [ 2034.771651][T15226] file 7786496 [ 2034.771651][T15226] kernel 306454528 [ 2034.771651][T15226] kernel_stack 16384 [ 2034.771651][T15226] pagetables 69632 [ 2034.771651][T15226] sec_pagetables 0 [ 2034.771651][T15226] percpu 10869632 [ 2034.771651][T15226] sock 0 [ 2034.771651][T15226] vmalloc 0 [ 2034.771651][T15226] shmem 7782400 [ 2034.771651][T15226] file_mapped 77824 [ 2034.771651][T15226] file_dirty 0 [ 2034.771651][T15226] file_writeback 0 [ 2034.771651][T15226] swapcached 0 [ 2034.771651][T15226] inactive_anon 8028160 [ 2034.771651][T15226] active_anon 86016 [ 2034.771651][T15226] inactive_file 4096 [ 2034.771651][T15226] active_file 0 [ 2034.771651][T15226] unevictable 0 [ 2034.771651][T15226] slab_reclaimable 33960 [ 2034.771651][T15226] slab_unreclaimable 295388552 [ 2034.771651][T15226] slab 295422512 [ 2034.771651][T15226] workingset_refault_anon 0 [ 2034.771651][T15226] workingset_refault_file 6 [ 2034.771651][T15226] workingset_activate_anon 0 [ 2034.771651][T15226] workingset_activate_file 0 [ 2034.771651][T15226] workingset_restore_anon 0 [ 2034.771651][T15226] workingset_restore_file 0 [ 2034.771651][T15226] workingset_nodereclaim 0 [ 2034.771651][T15226] pgscan 552 [ 2034.771651][T15226] pgsteal 31 [ 2034.771651][T15226] pgscan_kswapd 0 [ 2034.771651][T15226] pgscan_direct 552 [ 2034.771651][T15226] pgscan_khugepaged 0 [ 2034.771651][T15226] pgsteal_kswapd 0 [ 2034.771651][T15226] pgsteal_direct 31 [ 2034.771651][T15226] pgsteal_khugepaged 0 [ 2034.771651][T15226] pgfault 363881 [ 2034.771651][T15226] pgmajfault 31 [ 2034.771651][T15226] pgrefill 573 [ 2034.771651][T15226] pgactivate 12864 [ 2034.771651][T15226] pgdeactivate 586 [ 2034.771651][T15226] pglazyfree 0 [ 2034.771651][T15226] pglazyfreed 0 [ 2034.940725][T15226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15226,uid=0 [ 2034.956047][T15226] Memory cgroup out of memory: Killed process 15226 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2034.991266][T15231] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:10:54 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfa, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:54 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x600000000000000}, 0x0) 02:10:54 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xbc, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2035.034805][T15232] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2035.045009][T15232] CPU: 1 PID: 15232 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2035.053682][T15232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2035.063740][T15232] Call Trace: [ 2035.067006][T15232] [ 2035.069925][T15232] dump_stack_lvl+0xda/0x130 [ 2035.074594][T15232] dump_stack+0x15/0x20 [ 2035.078748][T15232] dump_header+0x95/0x3c0 [ 2035.083099][T15232] oom_kill_process+0xe3/0x3e0 [ 2035.087916][T15232] out_of_memory+0x9f0/0xc30 [ 2035.092502][T15232] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2035.098576][T15232] mem_cgroup_out_of_memory+0x139/0x190 [ 2035.104107][T15232] try_charge_memcg+0x759/0xd20 [ 2035.109027][T15232] obj_cgroup_charge_pages+0xab/0x130 [ 2035.114511][T15232] obj_cgroup_charge+0xe9/0x140 [ 2035.119480][T15232] slab_pre_alloc_hook+0x112/0x180 [ 2035.124579][T15232] kmem_cache_alloc+0x58/0x260 [ 2035.129359][T15232] ? vm_area_dup+0x2c/0xb0 [ 2035.133813][T15232] vm_area_dup+0x2c/0xb0 [ 2035.138040][T15232] __split_vma+0x107/0x400 [ 2035.142444][T15232] split_vma+0x6d/0x90 [ 2035.146506][T15232] mprotect_fixup+0x4a2/0x5b0 [ 2035.151179][T15232] do_mprotect_pkey+0x63d/0x8f0 [ 2035.156073][T15232] __x64_sys_mprotect+0x48/0x50 [ 2035.160939][T15232] do_syscall_64+0x41/0xc0 [ 2035.165336][T15232] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2035.171331][T15232] RIP: 0033:0x7f0cbc4d1277 [ 2035.175825][T15232] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2035.195520][T15232] RSP: 002b:00007fff8ab2bea8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 2035.203912][T15232] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f0cbc4d1277 [ 2035.211879][T15232] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0cbb804000 [ 2035.219914][T15232] RBP: 00007fff8ab2bf80 R08: 00000000ffffffff R09: 00007f0cbb823700 [ 2035.227870][T15232] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff8ab2c0a0 [ 2035.235819][T15232] R13: 00007f0cbb823700 R14: 0000000000000000 R15: 0000000000022000 [ 2035.243825][T15232] [ 2035.246890][T15232] memory: usage 307200kB, limit 307200kB, failcnt 2115 [ 2035.253746][T15232] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2035.260665][T15232] Memory cgroup stats for /syz3: [ 2035.260926][T15232] anon 147456 [ 2035.260926][T15232] file 114688 [ 2035.260926][T15232] kernel 314310656 [ 2035.260926][T15232] kernel_stack 32768 [ 2035.260926][T15232] pagetables 73728 [ 2035.260926][T15232] sec_pagetables 0 [ 2035.260926][T15232] percpu 11058752 [ 2035.260926][T15232] sock 0 [ 2035.260926][T15232] vmalloc 0 [ 2035.260926][T15232] shmem 114688 [ 2035.260926][T15232] file_mapped 114688 [ 2035.260926][T15232] file_dirty 0 [ 2035.260926][T15232] file_writeback 0 [ 2035.260926][T15232] swapcached 0 [ 2035.260926][T15232] inactive_anon 172032 [ 2035.260926][T15232] active_anon 86016 [ 2035.260926][T15232] inactive_file 0 [ 2035.260926][T15232] active_file 0 [ 2035.260926][T15232] unevictable 0 [ 2035.260926][T15232] slab_reclaimable 13480 [ 2035.260926][T15232] slab_unreclaimable 303088232 [ 2035.260926][T15232] slab 303101712 [ 2035.260926][T15232] workingset_refault_anon 0 [ 2035.260926][T15232] workingset_refault_file 1 [ 2035.260926][T15232] workingset_activate_anon 0 [ 2035.260926][T15232] workingset_activate_file 0 [ 2035.260926][T15232] workingset_restore_anon 0 [ 2035.260926][T15232] workingset_restore_file 0 [ 2035.260926][T15232] workingset_nodereclaim 0 [ 2035.260926][T15232] pgscan 61 [ 2035.260926][T15232] pgsteal 19 [ 2035.260926][T15232] pgscan_kswapd 0 [ 2035.260926][T15232] pgscan_direct 61 [ 2035.260926][T15232] pgscan_khugepaged 0 [ 2035.260926][T15232] pgsteal_kswapd 0 [ 2035.260926][T15232] pgsteal_direct 19 [ 2035.260926][T15232] pgsteal_khugepaged 0 [ 2035.260926][T15232] pgfault 896544 [ 2035.260926][T15232] pgmajfault 9 [ 2035.260926][T15232] pgrefill 70 [ 2035.260926][T15232] pgactivate 2368 [ 2035.260926][T15232] pgdeactivate 152 [ 2035.260926][T15232] pglazyfree 0 [ 2035.260926][T15232] pglazyfreed 0 [ 2035.424319][T15232] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15232,uid=0 [ 2035.439561][T15232] Memory cgroup out of memory: Killed process 15232 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2035.456935][T15241] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2035.467192][T15241] CPU: 0 PID: 15241 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2035.475939][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2035.485980][T15241] Call Trace: [ 2035.489309][T15241] [ 2035.492263][T15241] dump_stack_lvl+0xda/0x130 [ 2035.496940][T15241] dump_stack+0x15/0x20 [ 2035.501076][T15241] dump_header+0x95/0x3c0 [ 2035.505409][T15241] oom_kill_process+0xe3/0x3e0 [ 2035.510290][T15241] out_of_memory+0x9f0/0xc30 [ 2035.514874][T15241] mem_cgroup_out_of_memory+0x139/0x190 [ 2035.520493][T15241] try_charge_memcg+0x759/0xd20 [ 2035.525342][T15241] charge_memcg+0x51/0x200 [ 2035.529739][T15241] __mem_cgroup_charge+0x29/0xa0 [ 2035.534663][T15241] do_wp_page+0xb96/0x1fb0 [ 2035.539126][T15241] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2035.544458][T15241] handle_mm_fault+0x64e/0x21d0 [ 2035.549306][T15241] exc_page_fault+0x45f/0x640 [ 2035.553991][T15241] asm_exc_page_fault+0x26/0x30 [ 2035.558883][T15241] RIP: 0033:0x7f2feb928871 [ 2035.563293][T15241] Code: 12 00 4c 29 e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 <49> 89 57 08 48 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 12 0a 00 e8 [ 2035.582886][T15241] RSP: 002b:00007ffce8db91b0 EFLAGS: 00010206 [ 2035.588934][T15241] RAX: 0000000000020801 RBX: 00007f2feba575e0 RCX: 0000555556a42800 [ 2035.596886][T15241] RDX: 0000000000000121 RSI: 0000000000000000 RDI: 0000000000000004 [ 2035.604842][T15241] RBP: 0000000000000110 R08: 0000000000000003 R09: 00007f2feba57640 [ 2035.612812][T15241] R10: 0000000000020022 R11: 0000000000000120 R12: 0000000000000010 [ 2035.620836][T15241] R13: 0000000000000120 R14: 0000000000000012 R15: 0000555556a426e0 [ 2035.628860][T15241] [ 2035.631999][T15241] memory: usage 307160kB, limit 307200kB, failcnt 8795 [ 2035.638872][T15241] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2035.645791][T15241] Memory cgroup stats for /syz4: [ 2035.646031][T15241] anon 327680 [ 2035.646031][T15241] file 7786496 [ 2035.646031][T15241] kernel 306413568 [ 2035.646031][T15241] kernel_stack 16384 [ 2035.646031][T15241] pagetables 69632 [ 2035.646031][T15241] sec_pagetables 0 [ 2035.646031][T15241] percpu 10869568 [ 2035.646031][T15241] sock 0 [ 2035.646031][T15241] vmalloc 0 [ 2035.646031][T15241] shmem 7782400 [ 2035.646031][T15241] file_mapped 77824 [ 2035.646031][T15241] file_dirty 0 [ 2035.646031][T15241] file_writeback 0 [ 2035.646031][T15241] swapcached 0 [ 2035.646031][T15241] inactive_anon 8024064 [ 2035.646031][T15241] active_anon 86016 [ 2035.646031][T15241] inactive_file 4096 [ 2035.646031][T15241] active_file 0 [ 2035.646031][T15241] unevictable 0 [ 2035.646031][T15241] slab_reclaimable 33960 [ 2035.646031][T15241] slab_unreclaimable 295367432 [ 2035.646031][T15241] slab 295401392 [ 2035.646031][T15241] workingset_refault_anon 0 [ 2035.646031][T15241] workingset_refault_file 6 [ 2035.646031][T15241] workingset_activate_anon 0 [ 2035.646031][T15241] workingset_activate_file 0 [ 2035.646031][T15241] workingset_restore_anon 0 [ 2035.646031][T15241] workingset_restore_file 0 [ 2035.646031][T15241] workingset_nodereclaim 0 [ 2035.646031][T15241] pgscan 569 [ 2035.646031][T15241] pgsteal 31 [ 2035.646031][T15241] pgscan_kswapd 0 [ 2035.646031][T15241] pgscan_direct 569 [ 2035.646031][T15241] pgscan_khugepaged 0 [ 2035.646031][T15241] pgsteal_kswapd 0 [ 2035.646031][T15241] pgsteal_direct 31 [ 2035.646031][T15241] pgsteal_khugepaged 0 [ 2035.646031][T15241] pgfault 363915 [ 2035.646031][T15241] pgmajfault 31 [ 2035.646031][T15241] pgrefill 590 [ 2035.646031][T15241] pgactivate 12881 [ 2035.646031][T15241] pgdeactivate 603 [ 2035.646031][T15241] pglazyfree 0 [ 2035.646031][T15241] pglazyfreed 0 [ 2035.810168][T15241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15241,uid=0 [ 2035.825502][T15241] Memory cgroup out of memory: Killed process 15241 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:10:55 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x700000000000000}, 0x0) 02:10:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:55 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:55 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xbd, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:55 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x800000000000000}, 0x0) 02:10:55 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 2035.923144][T15251] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2035.933383][T15251] CPU: 1 PID: 15251 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2035.942100][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2035.952152][T15251] Call Trace: [ 2035.955492][T15251] [ 2035.958450][T15251] dump_stack_lvl+0xda/0x130 [ 2035.963079][T15251] dump_stack+0x15/0x20 [ 2035.967304][T15251] dump_header+0x95/0x3c0 02:10:55 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 2035.971656][T15251] oom_kill_process+0xe3/0x3e0 [ 2035.976425][T15251] out_of_memory+0x9f0/0xc30 [ 2035.981037][T15251] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2035.987181][T15251] mem_cgroup_out_of_memory+0x139/0x190 [ 2035.994214][T15251] try_charge_memcg+0x759/0xd20 [ 2035.999074][T15251] charge_memcg+0x51/0x200 [ 2036.003493][T15251] __mem_cgroup_charge+0x29/0xa0 [ 2036.008431][T15251] do_wp_page+0xb96/0x1fb0 [ 2036.012856][T15251] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2036.018137][T15251] handle_mm_fault+0x64e/0x21d0 [ 2036.023001][T15251] exc_page_fault+0x45f/0x640 [ 2036.027808][T15251] asm_exc_page_fault+0x26/0x30 [ 2036.032643][T15251] RIP: 0033:0x7f2feb907610 [ 2036.037034][T15251] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2036.056694][T15251] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2036.062889][T15251] RAX: 00000000a65c9964 RBX: 00007f2feba7a018 RCX: 0000001b2f820000 [ 2036.070862][T15251] RDX: 0000000000000000 RSI: 0000001b2f820018 RDI: 0000000008e2224e [ 2036.078809][T15251] RBP: 00000000a65c9964 R08: 0000000000001964 R09: 00000000a65c9968 [ 2036.086891][T15251] R10: 00007ffce8db9470 R11: 0000000000000246 R12: 00007f2feba6e000 [ 2036.094849][T15251] R13: 0000000000000001 R14: 000000000000000c R15: ffffffff81930738 [ 2036.102826][T15251] ? security_is_socket_class+0x8/0x530 [ 2036.108423][T15251] [ 2036.111607][T15251] memory: usage 307200kB, limit 307200kB, failcnt 8872 [ 2036.118455][T15251] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2036.125302][T15251] Memory cgroup stats for /syz4: [ 2036.125527][T15251] anon 368640 [ 2036.125527][T15251] file 7786496 [ 2036.125527][T15251] kernel 306409472 [ 2036.125527][T15251] kernel_stack 32768 [ 2036.125527][T15251] pagetables 69632 [ 2036.125527][T15251] sec_pagetables 0 [ 2036.125527][T15251] percpu 10869376 [ 2036.125527][T15251] sock 0 [ 2036.125527][T15251] vmalloc 0 [ 2036.125527][T15251] shmem 7782400 [ 2036.125527][T15251] file_mapped 77824 [ 2036.125527][T15251] file_dirty 0 [ 2036.125527][T15251] file_writeback 0 [ 2036.125527][T15251] swapcached 0 [ 2036.125527][T15251] inactive_anon 8065024 [ 2036.125527][T15251] active_anon 86016 [ 2036.125527][T15251] inactive_file 0 [ 2036.125527][T15251] active_file 4096 [ 2036.125527][T15251] unevictable 0 [ 2036.125527][T15251] slab_reclaimable 33560 [ 2036.125527][T15251] slab_unreclaimable 295356816 [ 2036.125527][T15251] slab 295390376 [ 2036.125527][T15251] workingset_refault_anon 0 [ 2036.125527][T15251] workingset_refault_file 6 [ 2036.125527][T15251] workingset_activate_anon 0 [ 2036.125527][T15251] workingset_activate_file 0 [ 2036.125527][T15251] workingset_restore_anon 0 [ 2036.125527][T15251] workingset_restore_file 0 [ 2036.125527][T15251] workingset_nodereclaim 0 [ 2036.125527][T15251] pgscan 594 [ 2036.125527][T15251] pgsteal 31 [ 2036.125527][T15251] pgscan_kswapd 0 [ 2036.125527][T15251] pgscan_direct 594 [ 2036.125527][T15251] pgscan_khugepaged 0 [ 2036.125527][T15251] pgsteal_kswapd 0 [ 2036.125527][T15251] pgsteal_direct 31 [ 2036.125527][T15251] pgsteal_khugepaged 0 [ 2036.125527][T15251] pgfault 363967 [ 2036.125527][T15251] pgmajfault 31 [ 2036.125527][T15251] pgrefill 614 [ 2036.125527][T15251] pgactivate 12906 [ 2036.125527][T15251] pgdeactivate 627 [ 2036.125527][T15251] pglazyfree 0 [ 2036.125527][T15251] pglazyfreed 0 [ 2036.291716][T15251] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15251,uid=0 [ 2036.307425][T15251] Memory cgroup out of memory: Killed process 15251 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:10:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x146, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:55 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xa03000000000000}, 0x0) 02:10:55 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xbe, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:55 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x5}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2036.332699][T15256] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2036.343060][T15256] CPU: 1 PID: 15256 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2036.346162][T15252] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2036.351774][T15256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2036.351788][T15256] Call Trace: [ 2036.351793][T15256] [ 2036.351798][T15256] dump_stack_lvl+0xda/0x130 [ 2036.351846][T15256] dump_stack+0x15/0x20 [ 2036.351875][T15256] dump_header+0x95/0x3c0 [ 2036.389694][T15256] oom_kill_process+0xe3/0x3e0 [ 2036.394500][T15256] out_of_memory+0x9f0/0xc30 [ 2036.399128][T15256] mem_cgroup_out_of_memory+0x139/0x190 [ 2036.404817][T15256] try_charge_memcg+0x759/0xd20 [ 2036.409732][T15256] ? mod_objcg_mlstate+0x183/0x1d0 [ 2036.414931][T15256] ? memcg_account_kmem+0x81/0x140 [ 2036.420437][T15256] obj_cgroup_charge_pages+0xab/0x130 [ 2036.425824][T15256] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2036.431389][T15256] memcg_charge_kernel_stack+0xee/0x290 [ 2036.436956][T15256] dup_task_struct+0x125/0x450 [ 2036.441838][T15256] copy_process+0x396/0x2100 [ 2036.447123][T15256] ? __rcu_read_unlock+0x4d/0x70 [ 2036.452095][T15256] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 2036.458025][T15256] kernel_clone+0x169/0x560 [ 2036.462569][T15256] __x64_sys_clone+0xdf/0x110 [ 2036.467252][T15256] do_syscall_64+0x41/0xc0 [ 2036.471740][T15256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2036.477659][T15256] RIP: 0033:0x7f0cbc4d2591 02:10:55 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x6}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2036.482083][T15256] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2036.501777][T15256] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2036.510312][T15256] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2036.518281][T15256] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2036.526256][T15256] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2036.534211][T15256] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2036.542199][T15256] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2036.550193][T15256] [ 2036.553351][T15256] memory: usage 307192kB, limit 307200kB, failcnt 2222 [ 2036.560210][T15256] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2036.567309][T15256] Memory cgroup stats for /syz3: [ 2036.567470][T15256] anon 151552 [ 2036.567470][T15256] file 114688 [ 2036.567470][T15256] kernel 314298368 [ 2036.567470][T15256] kernel_stack 32768 [ 2036.567470][T15256] pagetables 73728 [ 2036.567470][T15256] sec_pagetables 0 [ 2036.567470][T15256] percpu 11058688 [ 2036.567470][T15256] sock 0 [ 2036.567470][T15256] vmalloc 0 [ 2036.567470][T15256] shmem 114688 [ 2036.567470][T15256] file_mapped 114688 [ 2036.567470][T15256] file_dirty 0 [ 2036.567470][T15256] file_writeback 0 [ 2036.567470][T15256] swapcached 0 [ 2036.567470][T15256] inactive_anon 180224 [ 2036.567470][T15256] active_anon 86016 [ 2036.567470][T15256] inactive_file 0 [ 2036.567470][T15256] active_file 0 [ 2036.567470][T15256] unevictable 0 [ 2036.567470][T15256] slab_reclaimable 13480 [ 2036.567470][T15256] slab_unreclaimable 303070664 [ 2036.567470][T15256] slab 303084144 [ 2036.567470][T15256] workingset_refault_anon 0 [ 2036.567470][T15256] workingset_refault_file 1 [ 2036.567470][T15256] workingset_activate_anon 0 [ 2036.567470][T15256] workingset_activate_file 0 [ 2036.567470][T15256] workingset_restore_anon 0 [ 2036.567470][T15256] workingset_restore_file 0 [ 2036.567470][T15256] workingset_nodereclaim 0 [ 2036.567470][T15256] pgscan 61 [ 2036.567470][T15256] pgsteal 19 [ 2036.567470][T15256] pgscan_kswapd 0 [ 2036.567470][T15256] pgscan_direct 61 [ 2036.567470][T15256] pgscan_khugepaged 0 [ 2036.567470][T15256] pgsteal_kswapd 0 [ 2036.567470][T15256] pgsteal_direct 19 [ 2036.567470][T15256] pgsteal_khugepaged 0 [ 2036.567470][T15256] pgfault 896606 [ 2036.567470][T15256] pgmajfault 9 [ 2036.567470][T15256] pgrefill 70 [ 2036.567470][T15256] pgactivate 2368 [ 2036.567470][T15256] pgdeactivate 152 [ 2036.567470][T15256] pglazyfree 0 [ 2036.567470][T15256] pglazyfreed 0 [ 2036.732140][T15256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15256,uid=0 [ 2036.747741][T15256] Memory cgroup out of memory: Killed process 15256 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2036.770777][T15265] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2036.780979][T15265] CPU: 1 PID: 15265 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2036.789647][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2036.799708][T15265] Call Trace: [ 2036.802968][T15265] [ 2036.805913][T15265] dump_stack_lvl+0xda/0x130 [ 2036.810486][T15265] dump_stack+0x15/0x20 [ 2036.814619][T15265] dump_header+0x95/0x3c0 [ 2036.818937][T15265] oom_kill_process+0xe3/0x3e0 [ 2036.823683][T15265] out_of_memory+0x9f0/0xc30 [ 2036.828257][T15265] mem_cgroup_out_of_memory+0x139/0x190 [ 2036.833786][T15265] try_charge_memcg+0x759/0xd20 [ 2036.838635][T15265] ? memcg_account_kmem+0x81/0x140 [ 2036.843793][T15265] obj_cgroup_charge_pages+0xab/0x130 [ 2036.849200][T15265] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2036.854791][T15265] memcg_charge_kernel_stack+0xee/0x290 [ 2036.860342][T15265] dup_task_struct+0x2c6/0x450 [ 2036.865144][T15265] copy_process+0x396/0x2100 [ 2036.869746][T15265] ? __rcu_read_unlock+0x4d/0x70 [ 2036.874696][T15265] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 2036.880283][T15265] kernel_clone+0x169/0x560 [ 2036.884804][T15265] __x64_sys_clone+0xdf/0x110 [ 2036.889523][T15265] do_syscall_64+0x41/0xc0 [ 2036.893919][T15265] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2036.899865][T15265] RIP: 0033:0x7f2feb95b591 [ 2036.904269][T15265] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2036.924004][T15265] RSP: 002b:00007ffce8db9258 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2036.932397][T15265] RAX: ffffffffffffffda RBX: 00007f2feacac700 RCX: 00007f2feb95b591 [ 2036.940410][T15265] RDX: 00007f2feacac9d0 RSI: 00007f2feacac2f0 RDI: 00000000003d0f00 [ 2036.948381][T15265] RBP: 00007ffce8db94a0 R08: 00007f2feacac700 R09: 00007f2feacac700 [ 2036.956349][T15265] R10: 00007f2feacac9d0 R11: 0000000000000206 R12: 00007ffce8db930e [ 2036.964312][T15265] R13: 00007ffce8db930f R14: 00007f2feacac300 R15: 0000000000022000 [ 2036.972335][T15265] [ 2036.975470][T15265] memory: usage 307180kB, limit 307200kB, failcnt 8980 [ 2036.978983][T15257] __nla_validate_parse: 9 callbacks suppressed [ 2036.979050][T15257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2036.982320][T15265] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2036.982333][T15265] Memory cgroup stats for /syz4: [ 2036.982517][T15265] anon 344064 [ 2036.982517][T15265] file 7786496 [ 2036.982517][T15265] kernel 306421760 [ 2036.982517][T15265] kernel_stack 32768 [ 2036.982517][T15265] pagetables 69632 [ 2036.982517][T15265] sec_pagetables 0 [ 2036.982517][T15265] percpu 10869376 [ 2036.982517][T15265] sock 0 [ 2036.982517][T15265] vmalloc 0 [ 2036.982517][T15265] shmem 7782400 [ 2036.982517][T15265] file_mapped 77824 [ 2036.982517][T15265] file_dirty 0 [ 2036.982517][T15265] file_writeback 0 [ 2036.982517][T15265] swapcached 0 [ 2036.982517][T15265] inactive_anon 8040448 [ 2036.982517][T15265] active_anon 86016 [ 2036.982517][T15265] inactive_file 4096 [ 2036.982517][T15265] active_file 0 [ 2036.982517][T15265] unevictable 0 [ 2036.982517][T15265] slab_reclaimable 28456 [ 2036.982517][T15265] slab_unreclaimable 295366136 [ 2036.982517][T15265] slab 295394592 [ 2036.982517][T15265] workingset_refault_anon 0 [ 2036.982517][T15265] workingset_refault_file 6 [ 2036.982517][T15265] workingset_activate_anon 0 [ 2036.982517][T15265] workingset_activate_file 0 [ 2036.982517][T15265] workingset_restore_anon 0 [ 2036.982517][T15265] workingset_restore_file 0 [ 2036.982517][T15265] workingset_nodereclaim 0 [ 2036.982517][T15265] pgscan 632 [ 2036.982517][T15265] pgsteal 31 [ 2036.982517][T15265] pgscan_kswapd 0 [ 2036.982517][T15265] pgscan_direct 632 [ 2036.982517][T15265] pgscan_khugepaged 0 [ 2036.982517][T15265] pgsteal_kswapd 0 [ 2036.982517][T15265] pgsteal_direct 31 [ 2036.982517][T15265] pgsteal_khugepaged 0 [ 2036.982517][T15265] pgfault 364005 [ 2036.982517][T15265] pgmajfault 31 [ 2036.982517][T15265] pgrefill 653 [ 2036.982517][T15265] pgactivate 12944 [ 2036.982517][T15265] pgdeactivate 666 [ 2036.982517][T15265] pglazyfree 0 [ 2036.982517][T15265] pglazyfreed 0 [ 2037.168740][T15265] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15265,uid=0 02:10:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:56 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xb00000000000000}, 0x0) 02:10:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:56 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xbf, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x162, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:56 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x7}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2037.184048][T15265] Memory cgroup out of memory: Killed process 15265 (syz-executor.4) total-vm:46484kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2037.213651][T15275] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2037.221833][T15275] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:10:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:56 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xc00000000000000}, 0x0) 02:10:56 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xd00000000000000}, 0x0) [ 2037.274725][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2037.306945][T15283] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 02:10:56 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xe00000000000000}, 0x0) [ 2037.317228][T15283] CPU: 1 PID: 15283 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2037.325904][T15283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2037.335962][T15283] Call Trace: [ 2037.339237][T15283] [ 2037.342165][T15283] dump_stack_lvl+0xda/0x130 [ 2037.346812][T15283] dump_stack+0x15/0x20 [ 2037.351024][T15283] dump_header+0x95/0x3c0 [ 2037.355357][T15283] oom_kill_process+0xe3/0x3e0 [ 2037.360178][T15283] out_of_memory+0x9f0/0xc30 [ 2037.364773][T15283] ? try_to_free_mem_cgroup_pages+0x220/0x480 02:10:56 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 2037.370921][T15283] mem_cgroup_out_of_memory+0x139/0x190 [ 2037.376469][T15283] try_charge_memcg+0x759/0xd20 [ 2037.381326][T15283] charge_memcg+0x51/0x200 [ 2037.385748][T15283] __mem_cgroup_charge+0x29/0xa0 [ 2037.390695][T15283] do_wp_page+0xb96/0x1fb0 [ 2037.395139][T15283] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2037.400424][T15283] handle_mm_fault+0x64e/0x21d0 [ 2037.405357][T15283] exc_page_fault+0x45f/0x640 [ 2037.410109][T15283] asm_exc_page_fault+0x26/0x30 [ 2037.415084][T15283] RIP: 0033:0x7f2feb907610 02:10:56 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x1000000000000000}, 0x0) [ 2037.419491][T15283] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2037.439229][T15283] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2037.445293][T15283] RAX: 0000000042881cb3 RBX: 00007f2feba7a018 RCX: 0000001b2f820000 [ 2037.453264][T15283] RDX: 0000000000000000 RSI: 0000001b2f820018 RDI: 0000000008e2fbb4 [ 2037.461333][T15283] RBP: 0000000042881cb3 R08: 0000000000001cb3 R09: 0000000042881cb7 [ 2037.469339][T15283] R10: 00007ffce8db9470 R11: 0000000000000246 R12: 00007f2feba6e000 [ 2037.477345][T15283] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff81930a0c [ 2037.485311][T15283] ? security_is_socket_class+0x2dc/0x530 [ 2037.491017][T15283] [ 2037.494068][T15283] memory: usage 307200kB, limit 307200kB, failcnt 9057 [ 2037.500923][T15283] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2037.507823][T15283] Memory cgroup stats for /syz4: [ 2037.507936][T15283] anon 372736 [ 2037.507936][T15283] file 7782400 [ 2037.507936][T15283] kernel 306413568 [ 2037.507936][T15283] kernel_stack 32768 [ 2037.507936][T15283] pagetables 69632 [ 2037.507936][T15283] sec_pagetables 0 [ 2037.507936][T15283] percpu 10869376 [ 2037.507936][T15283] sock 0 [ 2037.507936][T15283] vmalloc 0 [ 2037.507936][T15283] shmem 7782400 [ 2037.507936][T15283] file_mapped 77824 [ 2037.507936][T15283] file_dirty 0 [ 2037.507936][T15283] file_writeback 0 [ 2037.507936][T15283] swapcached 0 [ 2037.507936][T15283] inactive_anon 8036352 [ 2037.507936][T15283] active_anon 86016 [ 2037.507936][T15283] inactive_file 0 [ 2037.507936][T15283] active_file 0 [ 2037.507936][T15283] unevictable 0 [ 2037.507936][T15283] slab_reclaimable 34824 [ 2037.507936][T15283] slab_unreclaimable 295362080 [ 2037.507936][T15283] slab 295396904 [ 2037.507936][T15283] workingset_refault_anon 0 [ 2037.507936][T15283] workingset_refault_file 6 [ 2037.507936][T15283] workingset_activate_anon 0 [ 2037.507936][T15283] workingset_activate_file 0 [ 2037.507936][T15283] workingset_restore_anon 0 [ 2037.507936][T15283] workingset_restore_file 0 [ 2037.507936][T15283] workingset_nodereclaim 0 [ 2037.507936][T15283] pgscan 633 [ 2037.507936][T15283] pgsteal 32 [ 2037.507936][T15283] pgscan_kswapd 0 [ 2037.507936][T15283] pgscan_direct 633 [ 2037.507936][T15283] pgscan_khugepaged 0 [ 2037.507936][T15283] pgsteal_kswapd 0 [ 2037.507936][T15283] pgsteal_direct 32 [ 2037.507936][T15283] pgsteal_khugepaged 0 [ 2037.507936][T15283] pgfault 364059 [ 2037.507936][T15283] pgmajfault 31 [ 2037.507936][T15283] pgrefill 653 [ 2037.507936][T15283] pgactivate 12944 [ 2037.507936][T15283] pgdeactivate 666 [ 2037.507936][T15283] pglazyfree 0 [ 2037.507936][T15283] pglazyfreed 0 [ 2037.671927][T15283] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15283,uid=0 [ 2037.687287][T15283] Memory cgroup out of memory: Killed process 15283 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2037.704622][T15284] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2037.714850][T15284] CPU: 0 PID: 15284 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2037.723514][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2037.733565][T15284] Call Trace: [ 2037.736824][T15284] [ 2037.739738][T15284] dump_stack_lvl+0xda/0x130 [ 2037.744312][T15284] dump_stack+0x15/0x20 [ 2037.748449][T15284] dump_header+0x95/0x3c0 [ 2037.752813][T15284] oom_kill_process+0xe3/0x3e0 [ 2037.757566][T15284] out_of_memory+0x9f0/0xc30 [ 2037.762186][T15284] mem_cgroup_out_of_memory+0x139/0x190 [ 2037.767742][T15284] try_charge_memcg+0x759/0xd20 [ 2037.772587][T15284] ? __rmqueue_pcplist+0x9d0/0xa50 [ 2037.777717][T15284] ? shrink_node+0x146c/0x14f0 [ 2037.782465][T15284] obj_cgroup_charge_pages+0xab/0x130 [ 2037.787832][T15284] obj_cgroup_charge+0xe9/0x140 [ 2037.792668][T15284] slab_pre_alloc_hook+0x112/0x180 [ 2037.797797][T15284] kmem_cache_alloc_node+0x5d/0x2e0 [ 2037.802981][T15284] ? dup_task_struct+0x60/0x450 [ 2037.807833][T15284] dup_task_struct+0x60/0x450 [ 2037.812575][T15284] copy_process+0x396/0x2100 [ 2037.817235][T15284] ? __rcu_read_unlock+0x4d/0x70 [ 2037.822155][T15284] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 2037.827716][T15284] kernel_clone+0x169/0x560 [ 2037.832205][T15284] __x64_sys_clone+0xdf/0x110 [ 2037.837024][T15284] do_syscall_64+0x41/0xc0 [ 2037.841451][T15284] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2037.847419][T15284] RIP: 0033:0x7f0cbc4d2591 [ 2037.851815][T15284] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2037.872061][T15284] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2037.880555][T15284] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2037.888616][T15284] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2037.896678][T15284] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2037.904650][T15284] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2037.912610][T15284] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2037.920672][T15284] [ 2037.923707][T15284] memory: usage 307184kB, limit 307200kB, failcnt 2385 [ 2037.930628][T15284] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2037.937520][T15284] Memory cgroup stats for /syz3: [ 2037.937886][T15284] anon 151552 [ 2037.937886][T15284] file 114688 [ 2037.937886][T15284] kernel 314290176 [ 2037.937886][T15284] kernel_stack 32768 [ 2037.937886][T15284] pagetables 73728 [ 2037.937886][T15284] sec_pagetables 0 [ 2037.937886][T15284] percpu 11058688 [ 2037.937886][T15284] sock 0 [ 2037.937886][T15284] vmalloc 0 [ 2037.937886][T15284] shmem 114688 [ 2037.937886][T15284] file_mapped 114688 [ 2037.937886][T15284] file_dirty 0 [ 2037.937886][T15284] file_writeback 0 [ 2037.937886][T15284] swapcached 0 [ 2037.937886][T15284] inactive_anon 180224 [ 2037.937886][T15284] active_anon 86016 [ 2037.937886][T15284] inactive_file 0 [ 2037.937886][T15284] active_file 0 [ 2037.937886][T15284] unevictable 0 [ 2037.937886][T15284] slab_reclaimable 14656 [ 2037.937886][T15284] slab_unreclaimable 303070920 [ 2037.937886][T15284] slab 303085576 [ 2037.937886][T15284] workingset_refault_anon 0 [ 2037.937886][T15284] workingset_refault_file 1 [ 2037.937886][T15284] workingset_activate_anon 0 [ 2037.937886][T15284] workingset_activate_file 0 [ 2037.937886][T15284] workingset_restore_anon 0 [ 2037.937886][T15284] workingset_restore_file 0 [ 2037.937886][T15284] workingset_nodereclaim 0 [ 2037.937886][T15284] pgscan 61 [ 2037.937886][T15284] pgsteal 19 [ 2037.937886][T15284] pgscan_kswapd 0 [ 2037.937886][T15284] pgscan_direct 61 [ 2037.937886][T15284] pgscan_khugepaged 0 [ 2037.937886][T15284] pgsteal_kswapd 0 [ 2037.937886][T15284] pgsteal_direct 19 [ 2037.937886][T15284] pgsteal_khugepaged 0 [ 2037.937886][T15284] pgfault 896668 [ 2037.937886][T15284] pgmajfault 9 [ 2037.937886][T15284] pgrefill 70 [ 2037.937886][T15284] pgactivate 2368 [ 2037.937886][T15284] pgdeactivate 152 [ 2037.937886][T15284] pglazyfree 0 [ 2037.937886][T15284] pglazyfreed 0 [ 2038.103700][T15284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15284,uid=0 [ 2038.119046][T15284] Memory cgroup out of memory: Killed process 15284 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2038.149420][T15287] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2038.157669][T15287] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2038.170519][T15290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:10:57 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x1100000000000000}, 0x0) 02:10:57 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc0, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:57 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x8}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:57 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x192, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x1200000000000000}, 0x0) 02:10:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x10000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:57 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x9}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2038.303852][T15306] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2038.312000][T15306] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2038.334766][T15309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2038.381052][T15303] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2038.391262][T15303] CPU: 0 PID: 15303 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2038.399952][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2038.410371][T15303] Call Trace: [ 2038.413728][T15303] [ 2038.416691][T15303] dump_stack_lvl+0xda/0x130 [ 2038.421288][T15303] dump_stack+0x15/0x20 [ 2038.425533][T15303] dump_header+0x95/0x3c0 02:10:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x2201000000000000}, 0x0) 02:10:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x2500000000000000}, 0x0) 02:10:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x2f00000000000000}, 0x0) [ 2038.429870][T15303] oom_kill_process+0xe3/0x3e0 [ 2038.434649][T15303] out_of_memory+0x9f0/0xc30 [ 2038.439286][T15303] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2038.445428][T15303] mem_cgroup_out_of_memory+0x139/0x190 [ 2038.450997][T15303] try_charge_memcg+0x759/0xd20 [ 2038.456062][T15303] charge_memcg+0x51/0x200 [ 2038.460515][T15303] __mem_cgroup_charge+0x29/0xa0 [ 2038.466130][T15303] handle_mm_fault+0xcea/0x21d0 [ 2038.471068][T15303] exc_page_fault+0x45f/0x640 [ 2038.475853][T15303] asm_exc_page_fault+0x26/0x30 [ 2038.480771][T15303] RIP: 0033:0x7f2feb8f9de9 [ 2038.485185][T15303] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2038.504992][T15303] RSP: 002b:00007ffce8db9350 EFLAGS: 00010246 [ 2038.511079][T15303] RAX: 0000000020001140 RBX: 0000000000000000 RCX: 0000000000000000 [ 2038.519191][T15303] RDX: 0000000020000480 RSI: 0000000000000000 RDI: 0000555556a412e8 [ 2038.527179][T15303] RBP: 00007ffce8db9448 R08: 0000000000000000 R09: 0000000000000000 [ 2038.535236][T15303] R10: 00007f2feb4ce208 R11: 0000000000000246 R12: 00000000001f1961 [ 2038.543276][T15303] R13: 00007ffce8db9470 R14: 00007f2feba79f80 R15: 0000000000000032 [ 2038.551270][T15303] [ 2038.554329][T15303] memory: usage 307200kB, limit 307200kB, failcnt 9153 [ 2038.561210][T15303] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2038.568066][T15303] Memory cgroup stats for /syz4: [ 2038.568216][T15303] anon 380928 [ 2038.568216][T15303] file 7782400 [ 2038.568216][T15303] kernel 306409472 [ 2038.568216][T15303] kernel_stack 32768 [ 2038.568216][T15303] pagetables 77824 [ 2038.568216][T15303] sec_pagetables 0 [ 2038.568216][T15303] percpu 10869312 [ 2038.568216][T15303] sock 0 [ 2038.568216][T15303] vmalloc 0 [ 2038.568216][T15303] shmem 7782400 [ 2038.568216][T15303] file_mapped 77824 [ 2038.568216][T15303] file_dirty 0 [ 2038.568216][T15303] file_writeback 0 [ 2038.568216][T15303] swapcached 0 [ 2038.568216][T15303] inactive_anon 8069120 [ 2038.568216][T15303] active_anon 86016 [ 2038.568216][T15303] inactive_file 0 [ 2038.568216][T15303] active_file 0 [ 2038.568216][T15303] unevictable 0 [ 2038.568216][T15303] slab_reclaimable 30296 [ 2038.568216][T15303] slab_unreclaimable 295356752 [ 2038.568216][T15303] slab 295387048 [ 2038.568216][T15303] workingset_refault_anon 0 [ 2038.568216][T15303] workingset_refault_file 6 [ 2038.568216][T15303] workingset_activate_anon 0 [ 2038.568216][T15303] workingset_activate_file 0 [ 2038.568216][T15303] workingset_restore_anon 0 [ 2038.568216][T15303] workingset_restore_file 0 [ 2038.568216][T15303] workingset_nodereclaim 0 [ 2038.568216][T15303] pgscan 633 [ 2038.568216][T15303] pgsteal 32 [ 2038.568216][T15303] pgscan_kswapd 0 [ 2038.568216][T15303] pgscan_direct 633 [ 2038.568216][T15303] pgscan_khugepaged 0 [ 2038.568216][T15303] pgsteal_kswapd 0 [ 2038.568216][T15303] pgsteal_direct 32 [ 2038.568216][T15303] pgsteal_khugepaged 0 [ 2038.568216][T15303] pgfault 364115 [ 2038.568216][T15303] pgmajfault 31 [ 2038.568216][T15303] pgrefill 653 [ 2038.568216][T15303] pgactivate 12944 [ 2038.568216][T15303] pgdeactivate 666 [ 2038.568216][T15303] pglazyfree 0 [ 2038.568216][T15303] pglazyfreed 0 [ 2038.733886][T15303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15303,uid=0 [ 2038.750152][T15303] Memory cgroup out of memory: Killed process 15303 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2038.774488][T15312] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2038.784716][T15312] CPU: 0 PID: 15312 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2038.786613][T15318] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2038.793400][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2038.793412][T15312] Call Trace: [ 2038.793418][T15312] [ 2038.793424][T15312] dump_stack_lvl+0xda/0x130 [ 2038.801511][T15318] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2038.811937][T15312] dump_stack+0x15/0x20 [ 2038.811962][T15312] dump_header+0x95/0x3c0 [ 2038.840582][T15312] oom_kill_process+0xe3/0x3e0 [ 2038.845392][T15312] out_of_memory+0x9f0/0xc30 [ 2038.850257][T15312] mem_cgroup_out_of_memory+0x139/0x190 [ 2038.855802][T15312] try_charge_memcg+0x759/0xd20 [ 2038.860657][T15312] ? __rmqueue_pcplist+0x9d0/0xa50 [ 2038.865861][T15312] ? shrink_node+0x146c/0x14f0 [ 2038.870632][T15312] obj_cgroup_charge_pages+0xab/0x130 [ 2038.876060][T15312] obj_cgroup_charge+0xe9/0x140 [ 2038.880945][T15312] slab_pre_alloc_hook+0x112/0x180 [ 2038.886109][T15312] kmem_cache_alloc_node+0x5d/0x2e0 [ 2038.891321][T15312] ? dup_task_struct+0x60/0x450 [ 2038.896445][T15312] dup_task_struct+0x60/0x450 [ 2038.901157][T15312] copy_process+0x396/0x2100 [ 2038.906451][T15312] ? __rcu_read_unlock+0x4d/0x70 [ 2038.911377][T15312] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 2038.917005][T15312] kernel_clone+0x169/0x560 [ 2038.921588][T15312] __x64_sys_clone+0xdf/0x110 [ 2038.926334][T15312] do_syscall_64+0x41/0xc0 [ 2038.930753][T15312] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2038.936762][T15312] RIP: 0033:0x7f0cbc4d2591 [ 2038.941241][T15312] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2038.961194][T15312] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2038.969702][T15312] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2038.977683][T15312] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2038.985644][T15312] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2038.993651][T15312] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2039.001623][T15312] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2039.009592][T15312] [ 2039.012700][T15312] memory: usage 307188kB, limit 307200kB, failcnt 2549 [ 2039.016799][T15313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2039.019727][T15312] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2039.035919][T15312] Memory cgroup stats for /syz3: [ 2039.036045][T15312] anon 151552 [ 2039.036045][T15312] file 114688 [ 2039.036045][T15312] kernel 314294272 [ 2039.036045][T15312] kernel_stack 32768 [ 2039.036045][T15312] pagetables 73728 [ 2039.036045][T15312] sec_pagetables 0 [ 2039.036045][T15312] percpu 11058688 [ 2039.036045][T15312] sock 0 [ 2039.036045][T15312] vmalloc 0 [ 2039.036045][T15312] shmem 114688 [ 2039.036045][T15312] file_mapped 114688 [ 2039.036045][T15312] file_dirty 0 [ 2039.036045][T15312] file_writeback 0 [ 2039.036045][T15312] swapcached 0 [ 2039.036045][T15312] inactive_anon 180224 [ 2039.036045][T15312] active_anon 86016 [ 2039.036045][T15312] inactive_file 0 [ 2039.036045][T15312] active_file 0 [ 2039.036045][T15312] unevictable 0 [ 2039.036045][T15312] slab_reclaimable 13480 [ 2039.036045][T15312] slab_unreclaimable 303075040 [ 2039.036045][T15312] slab 303088520 [ 2039.036045][T15312] workingset_refault_anon 0 [ 2039.036045][T15312] workingset_refault_file 1 [ 2039.036045][T15312] workingset_activate_anon 0 [ 2039.036045][T15312] workingset_activate_file 0 [ 2039.036045][T15312] workingset_restore_anon 0 [ 2039.036045][T15312] workingset_restore_file 0 [ 2039.036045][T15312] workingset_nodereclaim 0 [ 2039.036045][T15312] pgscan 61 [ 2039.036045][T15312] pgsteal 19 [ 2039.036045][T15312] pgscan_kswapd 0 [ 2039.036045][T15312] pgscan_direct 61 [ 2039.036045][T15312] pgscan_khugepaged 0 [ 2039.036045][T15312] pgsteal_kswapd 0 [ 2039.036045][T15312] pgsteal_direct 19 [ 2039.036045][T15312] pgsteal_khugepaged 0 [ 2039.036045][T15312] pgfault 896730 [ 2039.036045][T15312] pgmajfault 9 [ 2039.036045][T15312] pgrefill 70 [ 2039.036045][T15312] pgactivate 2368 [ 2039.036045][T15312] pgdeactivate 152 [ 2039.036045][T15312] pglazyfree 0 [ 2039.036045][T15312] pglazyfreed 0 [ 2039.201685][T15312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15312,uid=0 [ 2039.216964][T15312] Memory cgroup out of memory: Killed process 15312 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:10:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x3a00000000000000}, 0x0) 02:10:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc1, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xa}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x11000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x19a, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x4800000000000000}, 0x0) 02:10:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xb}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x12000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x4c00000000000000}, 0x0) [ 2039.303956][T15332] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2039.312129][T15332] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2039.334786][T15328] Memory cgroup out of memory: Killed process 15328 (syz-executor.4) total-vm:46352kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:10:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc2, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc3, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2039.418962][T15348] Memory cgroup out of memory: Killed process 15348 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2039.453297][T15343] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2039.457807][T15337] Memory cgroup out of memory: Killed process 15337 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2039.490564][T15350] Memory cgroup out of memory: Killed process 15350 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:10:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xa00, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x4c6334a800000000}, 0x0) 02:10:59 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xc}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x25000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x1b2, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc4, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 2039.642710][T15356] oom_kill_process: 4 callbacks suppressed [ 2039.642721][T15356] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2039.658953][T15356] CPU: 1 PID: 15356 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2039.667777][T15356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2039.677929][T15356] Call Trace: [ 2039.681268][T15356] [ 2039.684192][T15356] dump_stack_lvl+0xda/0x130 [ 2039.688907][T15356] dump_stack+0x15/0x20 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x6558000000000000}, 0x0) 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x6800000000000000}, 0x0) 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x6c00000000000000}, 0x0) [ 2039.693103][T15356] dump_header+0x95/0x3c0 [ 2039.697536][T15356] oom_kill_process+0xe3/0x3e0 [ 2039.702311][T15356] out_of_memory+0x9f0/0xc30 [ 2039.706912][T15356] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2039.713141][T15356] mem_cgroup_out_of_memory+0x139/0x190 [ 2039.718716][T15356] try_charge_memcg+0x759/0xd20 [ 2039.723636][T15356] charge_memcg+0x51/0x200 [ 2039.728065][T15356] __mem_cgroup_charge+0x29/0xa0 [ 2039.733152][T15356] do_wp_page+0xb96/0x1fb0 [ 2039.737659][T15356] ? cgroup_rstat_updated+0x8c/0x1c0 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x7400000000000000}, 0x0) 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x7a00000000000000}, 0x0) [ 2039.743058][T15356] handle_mm_fault+0x64e/0x21d0 [ 2039.747988][T15356] exc_page_fault+0x45f/0x640 [ 2039.752753][T15356] asm_exc_page_fault+0x26/0x30 [ 2039.757790][T15356] RIP: 0033:0x7f2feb907610 [ 2039.762211][T15356] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2039.781822][T15356] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2039.787905][T15356] RAX: 000000002479a5ec RBX: 00007f2feba7a018 RCX: 0000001b2f820000 [ 2039.795864][T15356] RDX: 0000000000000000 RSI: 0000001b2f820018 RDI: 000000000a0bfef0 [ 2039.803890][T15356] RBP: 000000002479a5ec R08: 00000000000005ec R09: 000000002479a5f0 [ 2039.811904][T15356] R10: 00007ffce8db9470 R11: 0000000000000246 R12: 00007f2feba6e000 [ 2039.819862][T15356] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff83a31065 [ 2039.827900][T15356] ? __sock_create+0xc5/0x4e0 [ 2039.832575][T15356] [ 2039.835622][T15356] memory: usage 307200kB, limit 307200kB, failcnt 9461 [ 2039.842489][T15356] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2039.849398][T15356] Memory cgroup stats for /syz4: [ 2039.849735][T15356] anon 352256 [ 2039.849735][T15356] file 7782400 [ 2039.849735][T15356] kernel 306434048 [ 2039.849735][T15356] kernel_stack 32768 [ 2039.849735][T15356] pagetables 69632 [ 2039.849735][T15356] sec_pagetables 0 [ 2039.849735][T15356] percpu 10869504 [ 2039.849735][T15356] sock 0 [ 2039.849735][T15356] vmalloc 0 [ 2039.849735][T15356] shmem 7782400 [ 2039.849735][T15356] file_mapped 77824 [ 2039.849735][T15356] file_dirty 0 [ 2039.849735][T15356] file_writeback 0 [ 2039.849735][T15356] swapcached 0 [ 2039.849735][T15356] inactive_anon 8048640 [ 2039.849735][T15356] active_anon 86016 [ 2039.849735][T15356] inactive_file 0 [ 2039.849735][T15356] active_file 0 [ 2039.849735][T15356] unevictable 0 [ 2039.849735][T15356] slab_reclaimable 35224 [ 2039.849735][T15356] slab_unreclaimable 295375536 [ 2039.849735][T15356] slab 295410760 [ 2039.849735][T15356] workingset_refault_anon 0 [ 2039.849735][T15356] workingset_refault_file 6 [ 2039.849735][T15356] workingset_activate_anon 0 [ 2039.849735][T15356] workingset_activate_file 0 [ 2039.849735][T15356] workingset_restore_anon 0 [ 2039.849735][T15356] workingset_restore_file 0 [ 2039.849735][T15356] workingset_nodereclaim 0 [ 2039.849735][T15356] pgscan 633 [ 2039.849735][T15356] pgsteal 32 [ 2039.849735][T15356] pgscan_kswapd 0 [ 2039.849735][T15356] pgscan_direct 633 [ 2039.849735][T15356] pgscan_khugepaged 0 [ 2039.849735][T15356] pgsteal_kswapd 0 [ 2039.849735][T15356] pgsteal_direct 32 [ 2039.849735][T15356] pgsteal_khugepaged 0 [ 2039.849735][T15356] pgfault 364302 [ 2039.849735][T15356] pgmajfault 31 [ 2039.849735][T15356] pgrefill 653 [ 2039.849735][T15356] pgactivate 12944 [ 2039.849735][T15356] pgdeactivate 666 [ 2039.849735][T15356] pglazyfree 0 [ 2039.849735][T15356] pglazyfreed 0 [ 2040.014455][T15356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15356,uid=0 [ 2040.029817][T15356] Memory cgroup out of memory: Killed process 15356 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2040.047099][T15363] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2040.057349][T15363] CPU: 0 PID: 15363 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2040.066013][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2040.076118][T15363] Call Trace: [ 2040.079391][T15363] [ 2040.082323][T15363] dump_stack_lvl+0xda/0x130 [ 2040.086920][T15363] dump_stack+0x15/0x20 [ 2040.091171][T15363] dump_header+0x95/0x3c0 [ 2040.095488][T15363] oom_kill_process+0xe3/0x3e0 [ 2040.100242][T15363] out_of_memory+0x9f0/0xc30 [ 2040.104830][T15363] mem_cgroup_out_of_memory+0x139/0x190 [ 2040.110391][T15363] try_charge_memcg+0x759/0xd20 [ 2040.115243][T15363] ? obj_cgroup_charge_pages+0xed/0x130 [ 2040.120855][T15363] obj_cgroup_charge_pages+0xab/0x130 [ 2040.126232][T15363] obj_cgroup_charge+0xe9/0x140 [ 2040.131070][T15363] slab_pre_alloc_hook+0x112/0x180 [ 2040.136192][T15363] kmem_cache_alloc+0x58/0x260 [ 2040.140964][T15363] ? __anon_vma_prepare+0x45/0x2b0 [ 2040.146069][T15363] ? pte_alloc_one+0x90/0xc0 [ 2040.150733][T15363] __anon_vma_prepare+0x45/0x2b0 [ 2040.155741][T15363] handle_mm_fault+0x1d5f/0x21d0 [ 2040.160679][T15363] exc_page_fault+0x45f/0x640 [ 2040.165446][T15363] asm_exc_page_fault+0x26/0x30 [ 2040.170298][T15363] RIP: 0033:0x7f0cbc470de9 [ 2040.174706][T15363] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2040.194296][T15363] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2040.200345][T15363] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2040.208413][T15363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2040.216364][T15363] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2040.224314][T15363] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000001f1e85 [ 2040.232342][T15363] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2040.240382][T15363] [ 2040.243496][T15363] memory: usage 307192kB, limit 307200kB, failcnt 2827 [ 2040.247695][T15361] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2040.250350][T15363] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2040.250364][T15363] Memory cgroup stats for /syz3: [ 2040.265675][T15363] anon 139264 [ 2040.265675][T15363] file 114688 [ 2040.265675][T15363] kernel 314302464 [ 2040.265675][T15363] kernel_stack 32768 [ 2040.265675][T15363] pagetables 73728 [ 2040.265675][T15363] sec_pagetables 0 [ 2040.265675][T15363] percpu 11058816 [ 2040.265675][T15363] sock 0 [ 2040.265675][T15363] vmalloc 0 [ 2040.265675][T15363] shmem 114688 [ 2040.265675][T15363] file_mapped 114688 [ 2040.265675][T15363] file_dirty 0 [ 2040.265675][T15363] file_writeback 0 [ 2040.265675][T15363] swapcached 0 [ 2040.265675][T15363] inactive_anon 167936 [ 2040.265675][T15363] active_anon 86016 [ 2040.265675][T15363] inactive_file 0 [ 2040.265675][T15363] active_file 0 [ 2040.265675][T15363] unevictable 0 [ 2040.265675][T15363] slab_reclaimable 16056 [ 2040.265675][T15363] slab_unreclaimable 303072536 [ 2040.265675][T15363] slab 303088592 [ 2040.265675][T15363] workingset_refault_anon 0 [ 2040.265675][T15363] workingset_refault_file 1 [ 2040.265675][T15363] workingset_activate_anon 0 [ 2040.265675][T15363] workingset_activate_file 0 [ 2040.265675][T15363] workingset_restore_anon 0 [ 2040.265675][T15363] workingset_restore_file 0 [ 2040.265675][T15363] workingset_nodereclaim 0 [ 2040.265675][T15363] pgscan 61 [ 2040.265675][T15363] pgsteal 19 [ 2040.265675][T15363] pgscan_kswapd 0 [ 2040.265675][T15363] pgscan_direct 61 [ 2040.265675][T15363] pgscan_khugepaged 0 [ 2040.265675][T15363] pgsteal_kswapd 0 [ 2040.265675][T15363] pgsteal_direct 19 [ 2040.265675][T15363] pgsteal_khugepaged 0 [ 2040.265675][T15363] pgfault 896849 [ 2040.265675][T15363] pgmajfault 9 [ 2040.265675][T15363] pgrefill 70 [ 2040.265675][T15363] pgactivate 2368 [ 2040.265675][T15363] pgdeactivate 152 [ 2040.265675][T15363] pglazyfree 0 [ 2040.265675][T15363] pglazyfreed 0 [ 2040.429026][T15363] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15363,uid=0 02:10:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xc00, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x8100000000000000}, 0x0) 02:10:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc5, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:59 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xd}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:10:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x1ee, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x81ffffff00000000}, 0x0) [ 2040.444370][T15363] Memory cgroup out of memory: Killed process 15363 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2040.478133][T15384] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:10:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x65580000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:10:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x8847000000000000}, 0x0) 02:11:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xe}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2040.554272][T15378] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2040.564519][T15378] CPU: 1 PID: 15378 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2040.573246][T15378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2040.583329][T15378] Call Trace: [ 2040.586602][T15378] [ 2040.589523][T15378] dump_stack_lvl+0xda/0x130 [ 2040.594108][T15378] dump_stack+0x15/0x20 [ 2040.598254][T15378] dump_header+0x95/0x3c0 02:11:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x8848000000000000}, 0x0) 02:11:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) [ 2040.602669][T15378] oom_kill_process+0xe3/0x3e0 [ 2040.607502][T15378] out_of_memory+0x9f0/0xc30 [ 2040.612166][T15378] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2040.618301][T15378] mem_cgroup_out_of_memory+0x139/0x190 [ 2040.623864][T15378] try_charge_memcg+0x759/0xd20 [ 2040.628752][T15378] charge_memcg+0x51/0x200 [ 2040.633216][T15378] __mem_cgroup_charge+0x29/0xa0 [ 2040.638260][T15378] do_wp_page+0xb96/0x1fb0 [ 2040.642690][T15378] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2040.648073][T15378] handle_mm_fault+0x64e/0x21d0 [ 2040.652991][T15378] exc_page_fault+0x45f/0x640 [ 2040.657673][T15378] asm_exc_page_fault+0x26/0x30 [ 2040.662640][T15378] RIP: 0033:0x7f2feb907610 [ 2040.667049][T15378] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2040.686639][T15378] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2040.692684][T15378] RAX: 00000000c301b5fc RBX: 00007f2feba7a018 RCX: 0000001b2f820000 [ 2040.700692][T15378] RDX: 0000000000000000 RSI: 0000001b2f820018 RDI: 0000000008e062e9 [ 2040.708713][T15378] RBP: 00000000c301b5fc R08: 00000000000015fc R09: 00000000c301b600 [ 2040.716726][T15378] R10: 00007ffce8db9470 R11: 0000000000000246 R12: 00007f2feba6e000 [ 2040.724682][T15378] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff818fe770 [ 2040.732646][T15378] ? selinux_socket_create+0x30/0x180 [ 2040.738014][T15378] [ 2040.741164][T15378] memory: usage 307200kB, limit 307200kB, failcnt 9546 [ 2040.748007][T15378] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2040.754994][T15378] Memory cgroup stats for /syz4: [ 2040.755197][T15378] anon 360448 [ 2040.755197][T15378] file 7782400 [ 2040.755197][T15378] kernel 306429952 [ 2040.755197][T15378] kernel_stack 32768 [ 2040.755197][T15378] pagetables 69632 [ 2040.755197][T15378] sec_pagetables 0 [ 2040.755197][T15378] percpu 10869504 [ 2040.755197][T15378] sock 0 [ 2040.755197][T15378] vmalloc 0 [ 2040.755197][T15378] shmem 7782400 [ 2040.755197][T15378] file_mapped 77824 [ 2040.755197][T15378] file_dirty 0 [ 2040.755197][T15378] file_writeback 0 [ 2040.755197][T15378] swapcached 0 [ 2040.755197][T15378] inactive_anon 8056832 [ 2040.755197][T15378] active_anon 86016 [ 2040.755197][T15378] inactive_file 0 [ 2040.755197][T15378] active_file 0 [ 2040.755197][T15378] unevictable 0 [ 2040.755197][T15378] slab_reclaimable 29320 [ 2040.755197][T15378] slab_unreclaimable 295375272 [ 2040.755197][T15378] slab 295404592 [ 2040.755197][T15378] workingset_refault_anon 0 [ 2040.755197][T15378] workingset_refault_file 6 [ 2040.755197][T15378] workingset_activate_anon 0 [ 2040.755197][T15378] workingset_activate_file 0 [ 2040.755197][T15378] workingset_restore_anon 0 [ 2040.755197][T15378] workingset_restore_file 0 [ 2040.755197][T15378] workingset_nodereclaim 0 [ 2040.755197][T15378] pgscan 633 [ 2040.755197][T15378] pgsteal 32 [ 2040.755197][T15378] pgscan_kswapd 0 [ 2040.755197][T15378] pgscan_direct 633 [ 2040.755197][T15378] pgscan_khugepaged 0 [ 2040.755197][T15378] pgsteal_kswapd 0 [ 2040.755197][T15378] pgsteal_direct 32 [ 2040.755197][T15378] pgsteal_khugepaged 0 [ 2040.755197][T15378] pgfault 364350 [ 2040.755197][T15378] pgmajfault 31 [ 2040.755197][T15378] pgrefill 653 [ 2040.755197][T15378] pgactivate 12944 [ 2040.755197][T15378] pgdeactivate 666 [ 2040.755197][T15378] pglazyfree 0 [ 2040.755197][T15378] pglazyfreed 0 [ 2040.924106][T15378] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15378,uid=0 [ 2040.939390][T15378] Memory cgroup out of memory: Killed process 15378 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2040.956718][T15386] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2040.966970][T15386] CPU: 0 PID: 15386 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2040.975633][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2040.985748][T15386] Call Trace: [ 2040.989039][T15386] [ 2040.992033][T15386] dump_stack_lvl+0xda/0x130 [ 2040.996689][T15386] dump_stack+0x15/0x20 [ 2041.000823][T15386] dump_header+0x95/0x3c0 [ 2041.005136][T15386] oom_kill_process+0xe3/0x3e0 [ 2041.009887][T15386] out_of_memory+0x9f0/0xc30 [ 2041.014483][T15386] mem_cgroup_out_of_memory+0x139/0x190 [ 2041.020023][T15386] try_charge_memcg+0x759/0xd20 [ 2041.024891][T15386] ? shrink_slab+0x4d0/0x520 [ 2041.029555][T15386] ? mem_cgroup_iter+0x298/0x370 [ 2041.034477][T15386] ? vmpressure+0xbf/0x240 [ 2041.038904][T15386] obj_cgroup_charge_pages+0xab/0x130 [ 2041.044261][T15386] obj_cgroup_charge+0xe9/0x140 [ 2041.049147][T15386] slab_pre_alloc_hook+0x112/0x180 [ 2041.054257][T15386] kmem_cache_alloc_node+0x5d/0x2e0 [ 2041.059509][T15386] ? dup_task_struct+0x60/0x450 [ 2041.064417][T15386] dup_task_struct+0x60/0x450 [ 2041.069121][T15386] copy_process+0x396/0x2100 [ 2041.073705][T15386] kernel_clone+0x169/0x560 [ 2041.078219][T15386] __x64_sys_clone+0xdf/0x110 [ 2041.082975][T15386] do_syscall_64+0x41/0xc0 [ 2041.087431][T15386] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2041.093358][T15386] RIP: 0033:0x7f0cbc4d2591 [ 2041.097779][T15386] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2041.117445][T15386] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2041.125912][T15386] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2041.133878][T15386] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2041.141838][T15386] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2041.149796][T15386] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2041.157781][T15386] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2041.165793][T15386] [ 2041.168831][T15386] memory: usage 307200kB, limit 307200kB, failcnt 2921 [ 2041.175683][T15386] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2041.182522][T15386] Memory cgroup stats for /syz3: [ 2041.182691][T15386] anon 151552 [ 2041.182691][T15386] file 114688 [ 2041.182691][T15386] kernel 314306560 [ 2041.182691][T15386] kernel_stack 32768 [ 2041.182691][T15386] pagetables 73728 [ 2041.182691][T15386] sec_pagetables 0 [ 2041.182691][T15386] percpu 11058816 [ 2041.182691][T15386] sock 0 [ 2041.182691][T15386] vmalloc 0 [ 2041.182691][T15386] shmem 114688 [ 2041.182691][T15386] file_mapped 114688 [ 2041.182691][T15386] file_dirty 0 [ 2041.182691][T15386] file_writeback 0 [ 2041.182691][T15386] swapcached 0 [ 2041.182691][T15386] inactive_anon 180224 [ 2041.182691][T15386] active_anon 86016 [ 2041.182691][T15386] inactive_file 0 [ 2041.182691][T15386] active_file 0 [ 2041.182691][T15386] unevictable 0 [ 2041.182691][T15386] slab_reclaimable 13480 [ 2041.182691][T15386] slab_unreclaimable 303078984 [ 2041.182691][T15386] slab 303092464 [ 2041.182691][T15386] workingset_refault_anon 0 [ 2041.182691][T15386] workingset_refault_file 1 [ 2041.182691][T15386] workingset_activate_anon 0 [ 2041.182691][T15386] workingset_activate_file 0 [ 2041.182691][T15386] workingset_restore_anon 0 [ 2041.182691][T15386] workingset_restore_file 0 [ 2041.182691][T15386] workingset_nodereclaim 0 [ 2041.182691][T15386] pgscan 61 [ 2041.182691][T15386] pgsteal 19 [ 2041.182691][T15386] pgscan_kswapd 0 [ 2041.182691][T15386] pgscan_direct 61 [ 2041.182691][T15386] pgscan_khugepaged 0 [ 2041.182691][T15386] pgsteal_kswapd 0 [ 2041.182691][T15386] pgsteal_direct 19 [ 2041.182691][T15386] pgsteal_khugepaged 0 [ 2041.182691][T15386] pgfault 896911 [ 2041.182691][T15386] pgmajfault 9 [ 2041.182691][T15386] pgrefill 70 [ 2041.182691][T15386] pgactivate 2368 [ 2041.182691][T15386] pgdeactivate 152 [ 2041.182691][T15386] pglazyfree 0 [ 2041.182691][T15386] pglazyfreed 0 [ 2041.346035][T15386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15386,uid=0 [ 2041.361336][T15386] Memory cgroup out of memory: Killed process 15386 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x9403000000000000}, 0x0) 02:11:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x203, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xf}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:00 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc6, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7c4b0000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2041.449892][T15397] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:11:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x9a02000000000000}, 0x0) [ 2041.506864][T15405] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2041.544626][T15413] syz-executor.3 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2041.555819][T15413] CPU: 1 PID: 15413 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2041.564504][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2041.574553][T15413] Call Trace: [ 2041.577827][T15413] [ 2041.580783][T15413] dump_stack_lvl+0xda/0x130 [ 2041.585444][T15413] dump_stack+0x15/0x20 [ 2041.589719][T15413] dump_header+0x95/0x3c0 [ 2041.594057][T15413] oom_kill_process+0xe3/0x3e0 [ 2041.598844][T15413] out_of_memory+0x9f0/0xc30 02:11:01 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x10}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xc200000000000000}, 0x0) 02:11:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xeaffffff00000000}, 0x0) [ 2041.603520][T15413] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2041.609648][T15413] mem_cgroup_out_of_memory+0x139/0x190 [ 2041.615196][T15413] try_charge_memcg+0x759/0xd20 [ 2041.620127][T15413] ? sidtab_context_to_sid+0x5b/0x5b0 [ 2041.626322][T15413] ? xa_load+0xb9/0xe0 [ 2041.630429][T15413] obj_cgroup_charge_pages+0xab/0x130 [ 2041.635838][T15413] obj_cgroup_charge+0xe9/0x140 [ 2041.640768][T15413] slab_pre_alloc_hook+0x112/0x180 [ 2041.645956][T15413] kmem_cache_alloc+0x58/0x260 [ 2041.650809][T15413] ? __alloc_file+0x2e/0x150 02:11:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 02:11:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xf603000000000000}, 0x0) [ 2041.655467][T15413] ? inode_doinit_with_dentry+0x93/0x840 [ 2041.661215][T15413] __alloc_file+0x2e/0x150 [ 2041.665702][T15413] alloc_empty_file+0xba/0x1a0 [ 2041.670531][T15413] alloc_file+0x3a/0x2f0 [ 2041.674848][T15413] alloc_file_pseudo+0x103/0x160 [ 2041.679867][T15413] sock_alloc_file+0x9c/0x1b0 [ 2041.684592][T15413] __sys_socket+0x103/0x220 [ 2041.689111][T15413] __x64_sys_socket+0x3f/0x50 [ 2041.693787][T15413] do_syscall_64+0x41/0xc0 [ 2041.698220][T15413] ? syscall_exit_to_user_mode+0x26/0x140 [ 2041.703962][T15413] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2041.709957][T15413] RIP: 0033:0x7f0cbc4d1169 [ 2041.714439][T15413] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2041.734086][T15413] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2041.742495][T15413] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2041.750586][T15413] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2041.758555][T15413] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2041.766512][T15413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2041.774486][T15413] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2041.782446][T15413] [ 2041.785565][T15413] memory: usage 307200kB, limit 307200kB, failcnt 3077 [ 2041.792438][T15413] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2041.799277][T15413] Memory cgroup stats for /syz3: [ 2041.799491][T15413] anon 143360 [ 2041.799491][T15413] file 114688 [ 2041.799491][T15413] kernel 314306560 [ 2041.799491][T15413] kernel_stack 32768 [ 2041.799491][T15413] pagetables 73728 [ 2041.799491][T15413] sec_pagetables 0 [ 2041.799491][T15413] percpu 11058816 [ 2041.799491][T15413] sock 0 [ 2041.799491][T15413] vmalloc 0 [ 2041.799491][T15413] shmem 114688 [ 2041.799491][T15413] file_mapped 114688 [ 2041.799491][T15413] file_dirty 0 [ 2041.799491][T15413] file_writeback 0 [ 2041.799491][T15413] swapcached 0 [ 2041.799491][T15413] inactive_anon 151552 [ 2041.799491][T15413] active_anon 86016 [ 2041.799491][T15413] inactive_file 0 [ 2041.799491][T15413] active_file 0 [ 2041.799491][T15413] unevictable 0 [ 2041.799491][T15413] slab_reclaimable 21512 [ 2041.799491][T15413] slab_unreclaimable 303077384 [ 2041.799491][T15413] slab 303098896 [ 2041.799491][T15413] workingset_refault_anon 0 [ 2041.799491][T15413] workingset_refault_file 1 [ 2041.799491][T15413] workingset_activate_anon 0 [ 2041.799491][T15413] workingset_activate_file 0 [ 2041.799491][T15413] workingset_restore_anon 0 [ 2041.799491][T15413] workingset_restore_file 0 [ 2041.799491][T15413] workingset_nodereclaim 0 [ 2041.799491][T15413] pgscan 61 [ 2041.799491][T15413] pgsteal 19 [ 2041.799491][T15413] pgscan_kswapd 0 [ 2041.799491][T15413] pgscan_direct 61 [ 2041.799491][T15413] pgscan_khugepaged 0 [ 2041.799491][T15413] pgsteal_kswapd 0 [ 2041.799491][T15413] pgsteal_direct 19 [ 2041.799491][T15413] pgsteal_khugepaged 0 [ 2041.799491][T15413] pgfault 896973 [ 2041.799491][T15413] pgmajfault 9 [ 2041.799491][T15413] pgrefill 70 [ 2041.799491][T15413] pgactivate 2368 [ 2041.799491][T15413] pgdeactivate 152 [ 2041.799491][T15413] pglazyfree 0 [ 2041.799491][T15413] pglazyfreed 0 [ 2041.967295][T15413] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15412,uid=0 [ 2041.982525][T15413] Memory cgroup out of memory: Killed process 15412 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4788, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2041.999799][T15402] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2042.010146][T15402] CPU: 0 PID: 15402 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2042.018824][T15402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2042.028880][T15402] Call Trace: [ 2042.032157][T15402] [ 2042.035160][T15402] dump_stack_lvl+0xda/0x130 [ 2042.039757][T15402] dump_stack+0x15/0x20 [ 2042.043957][T15402] dump_header+0x95/0x3c0 [ 2042.048278][T15402] oom_kill_process+0xe3/0x3e0 [ 2042.053024][T15402] out_of_memory+0x9f0/0xc30 [ 2042.057636][T15402] mem_cgroup_out_of_memory+0x139/0x190 [ 2042.063238][T15402] try_charge_memcg+0x759/0xd20 [ 2042.068129][T15402] charge_memcg+0x51/0x200 [ 2042.072562][T15402] __mem_cgroup_charge+0x29/0xa0 [ 2042.077583][T15402] handle_mm_fault+0xcea/0x21d0 [ 2042.082458][T15402] exc_page_fault+0x45f/0x640 [ 2042.087177][T15402] asm_exc_page_fault+0x26/0x30 [ 2042.092058][T15402] RIP: 0033:0x7f2feb90996f [ 2042.096472][T15402] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 10 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 2042.116192][T15402] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2042.122286][T15402] RAX: 00007f2feac8c000 RBX: 0000000000021000 RCX: 00007f2feb95a277 [ 2042.130345][T15402] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f2feac8d000 [ 2042.138306][T15402] RBP: 00007ffce8db9380 R08: 00000000ffffffff R09: 00007f2feacac700 [ 2042.146353][T15402] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffce8db94a0 [ 2042.154310][T15402] R13: 00007f2feacac700 R14: 0000000000000000 R15: 0000000000022000 [ 2042.162273][T15402] [ 2042.165302][T15402] memory: usage 307200kB, limit 307200kB, failcnt 9659 [ 2042.172184][T15402] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2042.179010][T15402] Memory cgroup stats for /syz4: [ 2042.179232][T15402] anon 380928 [ 2042.179232][T15402] file 7782400 [ 2042.179232][T15402] kernel 306397184 [ 2042.179232][T15402] kernel_stack 32768 [ 2042.179232][T15402] pagetables 77824 [ 2042.179232][T15402] sec_pagetables 0 [ 2042.179232][T15402] percpu 10869248 [ 2042.179232][T15402] sock 0 [ 2042.179232][T15402] vmalloc 0 [ 2042.179232][T15402] shmem 7782400 [ 2042.179232][T15402] file_mapped 77824 [ 2042.179232][T15402] file_dirty 0 [ 2042.179232][T15402] file_writeback 0 [ 2042.179232][T15402] swapcached 0 [ 2042.179232][T15402] inactive_anon 8077312 [ 2042.179232][T15402] active_anon 86016 [ 2042.179232][T15402] inactive_file 0 [ 2042.179232][T15402] active_file 0 [ 2042.179232][T15402] unevictable 0 [ 2042.179232][T15402] slab_reclaimable 29320 [ 2042.179232][T15402] slab_unreclaimable 295350720 [ 2042.179232][T15402] slab 295380040 [ 2042.179232][T15402] workingset_refault_anon 0 [ 2042.179232][T15402] workingset_refault_file 6 [ 2042.179232][T15402] workingset_activate_anon 0 [ 2042.179232][T15402] workingset_activate_file 0 [ 2042.179232][T15402] workingset_restore_anon 0 [ 2042.179232][T15402] workingset_restore_file 0 [ 2042.179232][T15402] workingset_nodereclaim 0 [ 2042.179232][T15402] pgscan 633 [ 2042.179232][T15402] pgsteal 32 [ 2042.179232][T15402] pgscan_kswapd 0 [ 2042.179232][T15402] pgscan_direct 633 [ 2042.179232][T15402] pgscan_khugepaged 0 [ 2042.179232][T15402] pgsteal_kswapd 0 [ 2042.179232][T15402] pgsteal_direct 32 [ 2042.179232][T15402] pgsteal_khugepaged 0 [ 2042.179232][T15402] pgfault 364406 [ 2042.179232][T15402] pgmajfault 31 [ 2042.179232][T15402] pgrefill 653 [ 2042.179232][T15402] pgactivate 12944 [ 2042.179232][T15402] pgdeactivate 666 [ 2042.179232][T15402] pglazyfree 0 [ 2042.179232][T15402] pglazyfreed 0 [ 2042.343072][T15402] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15402,uid=0 02:11:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc7, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xfe03000000000000}, 0x0) [ 2042.358334][T15402] Memory cgroup out of memory: Killed process 15402 (syz-executor.4) total-vm:46484kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2042.384032][T15427] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2042.394295][T15427] CPU: 1 PID: 15427 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2042.403039][T15427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2042.413097][T15427] Call Trace: [ 2042.416432][T15427] [ 2042.419402][T15427] dump_stack_lvl+0xda/0x130 [ 2042.424074][T15427] dump_stack+0x15/0x20 [ 2042.428231][T15427] dump_header+0x95/0x3c0 [ 2042.432561][T15427] oom_kill_process+0xe3/0x3e0 [ 2042.437358][T15427] out_of_memory+0x9f0/0xc30 [ 2042.442012][T15427] mem_cgroup_out_of_memory+0x139/0x190 [ 2042.447560][T15427] try_charge_memcg+0x759/0xd20 [ 2042.452403][T15427] charge_memcg+0x51/0x200 [ 2042.456807][T15427] __mem_cgroup_charge+0x29/0xa0 [ 2042.461754][T15427] do_wp_page+0xb96/0x1fb0 [ 2042.466175][T15427] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2042.471518][T15427] handle_mm_fault+0x64e/0x21d0 [ 2042.476487][T15427] exc_page_fault+0x45f/0x640 [ 2042.481243][T15427] asm_exc_page_fault+0x26/0x30 [ 2042.486088][T15427] RIP: 0033:0x7f0cbc47e610 [ 2042.490497][T15427] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2042.510112][T15427] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2042.516172][T15427] RAX: 0000000042881cb3 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2042.524195][T15427] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e2fbb4 [ 2042.532158][T15427] RBP: 0000000042881cb3 R08: 0000000000001cb3 R09: 0000000042881cb7 [ 2042.540183][T15427] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2042.548214][T15427] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff81930a0c [ 2042.556204][T15427] ? security_is_socket_class+0x2dc/0x530 [ 2042.562011][T15427] [ 2042.565058][T15427] memory: usage 307200kB, limit 307200kB, failcnt 3179 [ 2042.571985][T15427] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2042.578880][T15427] Memory cgroup stats for /syz3: [ 2042.579104][T15427] anon 135168 [ 2042.579104][T15427] file 114688 [ 2042.579104][T15427] kernel 314306560 [ 2042.579104][T15427] kernel_stack 32768 [ 2042.579104][T15427] pagetables 65536 [ 2042.579104][T15427] sec_pagetables 0 [ 2042.579104][T15427] percpu 11058752 [ 2042.579104][T15427] sock 0 [ 2042.579104][T15427] vmalloc 0 [ 2042.579104][T15427] shmem 114688 [ 2042.579104][T15427] file_mapped 114688 [ 2042.579104][T15427] file_dirty 0 [ 2042.579104][T15427] file_writeback 0 [ 2042.579104][T15427] swapcached 0 [ 2042.579104][T15427] inactive_anon 163840 [ 2042.579104][T15427] active_anon 86016 [ 2042.579104][T15427] inactive_file 0 [ 2042.579104][T15427] active_file 0 [ 2042.579104][T15427] unevictable 0 [ 2042.579104][T15427] slab_reclaimable 30360 [ 2042.579104][T15427] slab_unreclaimable 303078136 [ 2042.579104][T15427] slab 303108496 [ 2042.579104][T15427] workingset_refault_anon 0 [ 2042.579104][T15427] workingset_refault_file 1 [ 2042.579104][T15427] workingset_activate_anon 0 [ 2042.579104][T15427] workingset_activate_file 0 [ 2042.579104][T15427] workingset_restore_anon 0 [ 2042.579104][T15427] workingset_restore_file 0 [ 2042.579104][T15427] workingset_nodereclaim 0 [ 2042.579104][T15427] pgscan 61 [ 2042.579104][T15427] pgsteal 19 [ 2042.579104][T15427] pgscan_kswapd 0 [ 2042.579104][T15427] pgscan_direct 61 [ 2042.579104][T15427] pgscan_khugepaged 0 [ 2042.579104][T15427] pgsteal_kswapd 0 [ 2042.579104][T15427] pgsteal_direct 19 [ 2042.579104][T15427] pgsteal_khugepaged 0 [ 2042.579104][T15427] pgfault 897029 [ 2042.579104][T15427] pgmajfault 9 [ 2042.579104][T15427] pgrefill 70 [ 2042.579104][T15427] pgactivate 2368 [ 2042.579104][T15427] pgdeactivate 152 [ 2042.579104][T15427] pglazyfree 0 [ 2042.579104][T15427] pglazyfreed 0 [ 2042.747225][T15427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15427,uid=0 [ 2042.762494][T15427] Memory cgroup out of memory: Killed process 15427 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2042.779796][T15430] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2042.790016][T15430] CPU: 0 PID: 15430 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2042.798690][T15430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2042.808738][T15430] Call Trace: [ 2042.812009][T15430] [ 2042.812663][T15434] __nla_validate_parse: 11 callbacks suppressed [ 2042.812675][T15434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2042.814929][T15430] dump_stack_lvl+0xda/0x130 [ 2042.835083][T15430] dump_stack+0x15/0x20 [ 2042.839269][T15430] dump_header+0x95/0x3c0 [ 2042.843596][T15430] oom_kill_process+0xe3/0x3e0 [ 2042.848354][T15430] out_of_memory+0x9f0/0xc30 [ 2042.852989][T15430] mem_cgroup_out_of_memory+0x139/0x190 02:11:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x268, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:02 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xfeffffff00000000}, 0x0) 02:11:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4888, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2042.858650][T15430] try_charge_memcg+0x759/0xd20 [ 2042.863536][T15430] charge_memcg+0x51/0x200 [ 2042.867962][T15430] __mem_cgroup_charge+0x29/0xa0 [ 2042.872925][T15430] do_wp_page+0xb96/0x1fb0 [ 2042.877352][T15430] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2042.882717][T15430] handle_mm_fault+0x64e/0x21d0 [ 2042.887591][T15430] exc_page_fault+0x45f/0x640 [ 2042.892283][T15430] asm_exc_page_fault+0x26/0x30 [ 2042.897245][T15430] RIP: 0033:0x7f2feb907610 [ 2042.901721][T15430] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2042.921395][T15430] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2042.927461][T15430] RAX: 000000002d408a59 RBX: 00007f2feba7a018 RCX: 0000001b2f820000 [ 2042.935433][T15430] RDX: 0000000000000000 RSI: 0000001b2f820018 RDI: 0000000008e179b5 [ 2042.943471][T15430] RBP: 000000002d408a59 R08: 0000000000000a59 R09: 000000002d408a5d [ 2042.951464][T15430] R10: 00007ffce8db9470 R11: 0000000000000246 R12: 00007f2feba6e000 [ 2042.959500][T15430] R13: 0000000000000001 R14: 0000000000000008 R15: ffffffff81928445 [ 2042.967461][T15430] ? security_transition_sid+0x25/0x80 [ 2042.972927][T15430] [ 2042.976059][T15430] memory: usage 307200kB, limit 307200kB, failcnt 9732 [ 2042.982950][T15430] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2042.989773][T15430] Memory cgroup stats for /syz4: [ 2042.989987][T15430] anon 364544 [ 2042.989987][T15430] file 7782400 [ 2042.989987][T15430] kernel 306425856 [ 2042.989987][T15430] kernel_stack 32768 [ 2042.989987][T15430] pagetables 69632 [ 2042.989987][T15430] sec_pagetables 0 [ 2042.989987][T15430] percpu 10869312 [ 2042.989987][T15430] sock 0 [ 2042.989987][T15430] vmalloc 0 [ 2042.989987][T15430] shmem 7782400 [ 2042.989987][T15430] file_mapped 77824 [ 2042.989987][T15430] file_dirty 0 [ 2042.989987][T15430] file_writeback 0 [ 2042.989987][T15430] swapcached 0 [ 2042.989987][T15430] inactive_anon 8060928 [ 2042.989987][T15430] active_anon 86016 [ 2042.989987][T15430] inactive_file 0 [ 2042.989987][T15430] active_file 0 [ 2042.989987][T15430] unevictable 0 [ 2042.989987][T15430] slab_reclaimable 48352 [ 2042.989987][T15430] slab_unreclaimable 295363304 [ 2042.989987][T15430] slab 295411656 [ 2042.989987][T15430] workingset_refault_anon 0 [ 2042.989987][T15430] workingset_refault_file 6 [ 2042.989987][T15430] workingset_activate_anon 0 [ 2042.989987][T15430] workingset_activate_file 0 [ 2042.989987][T15430] workingset_restore_anon 0 [ 2042.989987][T15430] workingset_restore_file 0 [ 2042.989987][T15430] workingset_nodereclaim 0 [ 2042.989987][T15430] pgscan 633 [ 2042.989987][T15430] pgsteal 32 [ 2042.989987][T15430] pgscan_kswapd 0 [ 2042.989987][T15430] pgscan_direct 633 [ 2042.989987][T15430] pgscan_khugepaged 0 [ 2042.989987][T15430] pgsteal_kswapd 0 [ 2042.989987][T15430] pgsteal_direct 32 [ 2042.989987][T15430] pgsteal_khugepaged 0 [ 2042.989987][T15430] pgfault 364457 [ 2042.989987][T15430] pgmajfault 31 [ 2042.989987][T15430] pgrefill 653 [ 2042.989987][T15430] pgactivate 12944 [ 2042.989987][T15430] pgdeactivate 666 [ 2042.989987][T15430] pglazyfree 0 [ 2042.989987][T15430] pglazyfreed 0 [ 2043.002401][T15418] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2043.153914][T15430] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15430,uid=0 [ 2043.162169][T15418] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2043.177319][T15430] Memory cgroup out of memory: Killed process 15430 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:02 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x11}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:02 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xff7f000000000000}, 0x0) 02:11:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x81ffffff, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x298, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc8, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2043.225233][T15438] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2043.237362][T15438] CPU: 0 PID: 15438 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2043.246044][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2043.256194][T15438] Call Trace: [ 2043.259481][T15438] [ 2043.262478][T15438] dump_stack_lvl+0xda/0x130 [ 2043.267140][T15438] dump_stack+0x15/0x20 [ 2043.271358][T15438] dump_header+0x95/0x3c0 02:11:02 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 02:11:02 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 2043.275706][T15438] oom_kill_process+0xe3/0x3e0 [ 2043.280472][T15438] out_of_memory+0x9f0/0xc30 [ 2043.285087][T15438] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2043.291310][T15438] mem_cgroup_out_of_memory+0x139/0x190 [ 2043.296910][T15438] try_charge_memcg+0x759/0xd20 [ 2043.301833][T15438] obj_cgroup_charge_pages+0xab/0x130 [ 2043.307213][T15438] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2043.312914][T15438] __alloc_pages+0x1bb/0x340 [ 2043.317601][T15438] alloc_pages+0x3e1/0x4e0 02:11:02 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2043.322070][T15438] __pmd_alloc+0x4b/0x300 [ 2043.326408][T15438] handle_mm_fault+0x1c07/0x21d0 [ 2043.331411][T15438] exc_page_fault+0x45f/0x640 [ 2043.336133][T15438] asm_exc_page_fault+0x26/0x30 [ 2043.341008][T15438] RIP: 0033:0x7f0cbc470de9 [ 2043.345416][T15438] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2043.365021][T15438] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2043.371108][T15438] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2043.379064][T15438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2043.387090][T15438] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2043.395088][T15438] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000001f2b37 [ 2043.403071][T15438] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2043.411038][T15438] [ 2043.414068][T15438] memory: usage 307180kB, limit 307200kB, failcnt 3276 02:11:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88470000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2043.415146][T15447] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2043.420906][T15438] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2043.420951][T15438] Memory cgroup stats for /syz3 [ 2043.428997][T15447] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2043.435819][T15438] : [ 2043.436061][T15438] anon 139264 [ 2043.436061][T15438] file 114688 [ 2043.436061][T15438] kernel 314298368 [ 2043.436061][T15438] kernel_stack 32768 [ 2043.436061][T15438] pagetables 65536 [ 2043.436061][T15438] sec_pagetables 0 [ 2043.436061][T15438] percpu 11058816 [ 2043.436061][T15438] sock 0 [ 2043.436061][T15438] vmalloc 0 [ 2043.436061][T15438] shmem 114688 [ 2043.436061][T15438] file_mapped 114688 [ 2043.436061][T15438] file_dirty 0 [ 2043.436061][T15438] file_writeback 0 [ 2043.436061][T15438] swapcached 0 [ 2043.436061][T15438] inactive_anon 167936 [ 2043.436061][T15438] active_anon 86016 [ 2043.436061][T15438] inactive_file 0 [ 2043.436061][T15438] active_file 0 [ 2043.436061][T15438] unevictable 0 [ 2043.436061][T15438] slab_reclaimable 10552 [ 2043.436061][T15438] slab_unreclaimable 303085104 [ 2043.436061][T15438] slab 303095656 [ 2043.436061][T15438] workingset_refault_anon 0 [ 2043.436061][T15438] workingset_refault_file 1 [ 2043.436061][T15438] workingset_activate_anon 0 [ 2043.436061][T15438] workingset_activate_file 0 [ 2043.436061][T15438] workingset_restore_anon 0 [ 2043.436061][T15438] workingset_restore_file 0 [ 2043.436061][T15438] workingset_nodereclaim 0 [ 2043.436061][T15438] pgscan 61 [ 2043.436061][T15438] pgsteal 19 [ 2043.436061][T15438] pgscan_kswapd 0 [ 2043.436061][T15438] pgscan_direct 61 [ 2043.436061][T15438] pgscan_khugepaged 0 [ 2043.436061][T15438] pgsteal_kswapd 0 [ 2043.436061][T15438] pgsteal_direct 19 [ 2043.436061][T15438] pgsteal_khugepaged 0 [ 2043.436061][T15438] pgfault 897086 [ 2043.436061][T15438] pgmajfault 9 [ 2043.436061][T15438] pgrefill 70 [ 2043.436061][T15438] pgactivate 2368 [ 2043.436061][T15438] pgdeactivate 152 [ 2043.436061][T15438] pglazyfree 0 [ 2043.436061][T15438] pglazyfreed 0 [ 2043.456917][T15449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2043.610538][T15438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15438,uid=0 [ 2043.610639][T15438] Memory cgroup out of memory: Killed process 15438 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2043.656113][T15444] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2043.666369][T15444] CPU: 1 PID: 15444 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 02:11:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x5865, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2043.675043][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2043.685095][T15444] Call Trace: [ 2043.688368][T15444] [ 2043.691290][T15444] dump_stack_lvl+0xda/0x130 [ 2043.695925][T15444] dump_stack+0x15/0x20 [ 2043.700114][T15444] dump_header+0x95/0x3c0 [ 2043.704444][T15444] oom_kill_process+0xe3/0x3e0 [ 2043.709257][T15444] out_of_memory+0x9f0/0xc30 [ 2043.713938][T15444] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2043.720039][T15444] mem_cgroup_out_of_memory+0x139/0x190 02:11:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x12}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2043.725592][T15444] try_charge_memcg+0x759/0xd20 [ 2043.730529][T15444] charge_memcg+0x51/0x200 [ 2043.735120][T15444] __mem_cgroup_charge+0x29/0xa0 [ 2043.740058][T15444] do_wp_page+0xb96/0x1fb0 [ 2043.744513][T15444] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2043.749801][T15444] handle_mm_fault+0x64e/0x21d0 [ 2043.754726][T15444] exc_page_fault+0x45f/0x640 [ 2043.759451][T15444] asm_exc_page_fault+0x26/0x30 [ 2043.764318][T15444] RIP: 0033:0x7f2feb907610 [ 2043.768774][T15444] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2043.788478][T15444] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2043.794522][T15444] RAX: 00000000bc690117 RBX: 00007f2feba7a018 RCX: 0000001b2f820000 [ 2043.802480][T15444] RDX: 0000000000000000 RSI: 0000001b2f820018 RDI: 000000000a0c033d [ 2043.810564][T15444] RBP: 00000000bc690117 R08: 0000000000000117 R09: 00000000bc69011b [ 2043.818516][T15444] R10: 00007ffce8db9470 R11: 0000000000000246 R12: 00007f2feba6e000 [ 2043.826498][T15444] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff818e690f [ 2043.834516][T15444] ? security_socket_create+0x1f/0x80 [ 2043.839876][T15444] [ 2043.843112][T15444] memory: usage 307192kB, limit 307200kB, failcnt 9821 [ 2043.849950][T15444] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2043.856831][T15444] Memory cgroup stats for /syz4: [ 2043.857145][T15444] anon 356352 [ 2043.857145][T15444] file 7782400 [ 2043.857145][T15444] kernel 306425856 [ 2043.857145][T15444] kernel_stack 32768 [ 2043.857145][T15444] pagetables 69632 [ 2043.857145][T15444] sec_pagetables 0 [ 2043.857145][T15444] percpu 10869312 [ 2043.857145][T15444] sock 0 [ 2043.857145][T15444] vmalloc 0 [ 2043.857145][T15444] shmem 7782400 [ 2043.857145][T15444] file_mapped 77824 [ 2043.857145][T15444] file_dirty 0 [ 2043.857145][T15444] file_writeback 0 [ 2043.857145][T15444] swapcached 0 [ 2043.857145][T15444] inactive_anon 8044544 [ 2043.857145][T15444] active_anon 86016 [ 2043.857145][T15444] inactive_file 0 [ 2043.857145][T15444] active_file 0 [ 2043.857145][T15444] unevictable 0 [ 2043.857145][T15444] slab_reclaimable 47576 [ 2043.857145][T15444] slab_unreclaimable 295361576 [ 2043.857145][T15444] slab 295409152 [ 2043.857145][T15444] workingset_refault_anon 0 [ 2043.857145][T15444] workingset_refault_file 6 [ 2043.857145][T15444] workingset_activate_anon 0 [ 2043.857145][T15444] workingset_activate_file 0 [ 2043.857145][T15444] workingset_restore_anon 0 [ 2043.857145][T15444] workingset_restore_file 0 [ 2043.857145][T15444] workingset_nodereclaim 0 [ 2043.857145][T15444] pgscan 633 [ 2043.857145][T15444] pgsteal 32 [ 2043.857145][T15444] pgscan_kswapd 0 [ 2043.857145][T15444] pgscan_direct 633 [ 2043.857145][T15444] pgscan_khugepaged 0 [ 2043.857145][T15444] pgsteal_kswapd 0 [ 2043.857145][T15444] pgsteal_direct 32 [ 2043.857145][T15444] pgsteal_khugepaged 0 [ 2043.857145][T15444] pgfault 364503 [ 2043.857145][T15444] pgmajfault 31 [ 2043.857145][T15444] pgrefill 653 [ 2043.857145][T15444] pgactivate 12944 [ 2043.857145][T15444] pgdeactivate 666 [ 2043.857145][T15444] pglazyfree 0 [ 2043.857145][T15444] pglazyfreed 0 02:11:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xc9, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2b6, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2044.021020][T15444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15444,uid=0 [ 2044.036434][T15444] Memory cgroup out of memory: Killed process 15444 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2044.053727][T15461] Memory cgroup out of memory: Killed process 15461 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:11:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xca, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88480000, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2044.127745][T15464] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2044.128042][T15465] Memory cgroup out of memory: Killed process 15465 (syz-executor.4) total-vm:46352kB, anon-rss:468kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2044.135949][T15464] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:03 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 2044.175107][T15468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2044.204656][T15466] Memory cgroup out of memory: Killed process 15466 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x25}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6558, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xcb, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2044.211688][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2044.237152][T15471] Memory cgroup out of memory: Killed process 15471 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xcc, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2044.309816][T15481] Memory cgroup out of memory: Killed process 15481 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2044.327171][T15480] Memory cgroup out of memory: Killed process 15480 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88a8ffff, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2044.361042][T15484] Memory cgroup out of memory: Killed process 15484 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:03 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x3}, 0x0) 02:11:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2c6, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x48}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8847, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xcd, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xeaffffff, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2044.402467][T15478] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2044.410640][T15478] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2044.417602][T15486] Memory cgroup out of memory: Killed process 15486 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:11:03 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) 02:11:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xce, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2044.503655][T15496] Memory cgroup out of memory: Killed process 15496 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2044.521186][T15494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:11:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8848, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2044.543011][T15498] Memory cgroup out of memory: Killed process 15498 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2044.563823][T15505] Memory cgroup out of memory: Killed process 15505 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xcf, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2044.601921][T15506] Memory cgroup out of memory: Killed process 15506 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2044.657060][T15509] oom_kill_process: 12 callbacks suppressed [ 2044.657073][T15509] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2044.673185][T15509] CPU: 1 PID: 15509 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2044.681906][T15509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2044.691950][T15509] Call Trace: [ 2044.695252][T15509] [ 2044.698166][T15509] dump_stack_lvl+0xda/0x130 [ 2044.702786][T15509] dump_stack+0x15/0x20 [ 2044.706918][T15509] dump_header+0x95/0x3c0 [ 2044.711231][T15509] oom_kill_process+0xe3/0x3e0 [ 2044.715991][T15509] out_of_memory+0x9f0/0xc30 [ 2044.720588][T15509] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2044.726683][T15509] mem_cgroup_out_of_memory+0x139/0x190 [ 2044.732225][T15509] try_charge_memcg+0x759/0xd20 [ 2044.737120][T15509] ? mod_objcg_mlstate+0x183/0x1d0 [ 2044.742269][T15509] ? memcg_account_kmem+0x81/0x140 [ 2044.747366][T15509] obj_cgroup_charge_pages+0xab/0x130 [ 2044.752741][T15509] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2044.758485][T15509] memcg_charge_kernel_stack+0xee/0x290 [ 2044.764021][T15509] dup_task_struct+0x125/0x450 [ 2044.768847][T15509] copy_process+0x396/0x2100 [ 2044.773450][T15509] kernel_clone+0x169/0x560 [ 2044.778029][T15509] __x64_sys_clone+0xdf/0x110 [ 2044.782703][T15509] do_syscall_64+0x41/0xc0 [ 2044.787151][T15509] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2044.793038][T15509] RIP: 0033:0x7f0cbc4d2591 [ 2044.797437][T15509] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2044.817043][T15509] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2044.825531][T15509] RAX: ffffffffffffffda RBX: 00007f0cbb844700 RCX: 00007f0cbc4d2591 [ 2044.833532][T15509] RDX: 00007f0cbb8449d0 RSI: 00007f0cbb8442f0 RDI: 00000000003d0f00 [ 2044.841491][T15509] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb844700 R09: 00007f0cbb844700 [ 2044.849454][T15509] R10: 00007f0cbb8449d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2044.857416][T15509] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2044.865371][T15509] [ 2044.868404][T15509] memory: usage 307196kB, limit 307200kB, failcnt 3848 [ 2044.875253][T15509] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2044.882114][T15509] Memory cgroup stats for /syz3: [ 2044.882414][T15509] anon 94208 [ 2044.882414][T15509] file 118784 [ 2044.882414][T15509] kernel 314355712 [ 2044.882414][T15509] kernel_stack 16384 [ 2044.882414][T15509] pagetables 65536 [ 2044.882414][T15509] sec_pagetables 0 [ 2044.882414][T15509] percpu 11059136 [ 2044.882414][T15509] sock 0 [ 2044.882414][T15509] vmalloc 0 [ 2044.882414][T15509] shmem 114688 [ 2044.882414][T15509] file_mapped 114688 [ 2044.882414][T15509] file_dirty 0 [ 2044.882414][T15509] file_writeback 0 [ 2044.882414][T15509] swapcached 0 [ 2044.882414][T15509] inactive_anon 122880 [ 2044.882414][T15509] active_anon 86016 [ 2044.882414][T15509] inactive_file 4096 [ 2044.882414][T15509] active_file 0 [ 2044.882414][T15509] unevictable 0 [ 2044.882414][T15509] slab_reclaimable 27168 [ 2044.882414][T15509] slab_unreclaimable 303112720 [ 2044.882414][T15509] slab 303139888 [ 2044.882414][T15509] workingset_refault_anon 0 [ 2044.882414][T15509] workingset_refault_file 2 [ 2044.882414][T15509] workingset_activate_anon 0 [ 2044.882414][T15509] workingset_activate_file 0 [ 2044.882414][T15509] workingset_restore_anon 0 [ 2044.882414][T15509] workingset_restore_file 0 [ 2044.882414][T15509] workingset_nodereclaim 0 [ 2044.882414][T15509] pgscan 95 [ 2044.882414][T15509] pgsteal 19 [ 2044.882414][T15509] pgscan_kswapd 0 [ 2044.882414][T15509] pgscan_direct 95 [ 2044.882414][T15509] pgscan_khugepaged 0 [ 2044.882414][T15509] pgsteal_kswapd 0 [ 2044.882414][T15509] pgsteal_direct 19 [ 2044.882414][T15509] pgsteal_khugepaged 0 [ 2044.882414][T15509] pgfault 897448 [ 2044.882414][T15509] pgmajfault 9 [ 2044.882414][T15509] pgrefill 105 [ 2044.882414][T15509] pgactivate 2402 [ 2044.882414][T15509] pgdeactivate 187 [ 2044.882414][T15509] pglazyfree 0 [ 2044.882414][T15509] pglazyfreed 0 [ 2045.045931][T15509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15509,uid=0 [ 2045.061166][T15509] Memory cgroup out of memory: Killed process 15509 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2045.078452][T15508] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2045.088772][T15508] CPU: 0 PID: 15508 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2045.092628][T15495] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2045.097432][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2045.105598][T15495] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2045.115506][T15508] Call Trace: [ 2045.115514][T15508] [ 2045.115520][T15508] dump_stack_lvl+0xda/0x130 [ 2045.115542][T15508] dump_stack+0x15/0x20 [ 2045.115556][T15508] dump_header+0x95/0x3c0 [ 2045.144099][T15508] oom_kill_process+0xe3/0x3e0 [ 2045.148878][T15508] out_of_memory+0x9f0/0xc30 [ 2045.153475][T15508] mem_cgroup_out_of_memory+0x139/0x190 02:11:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x4c}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2045.155626][T15513] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2045.159018][T15508] try_charge_memcg+0x759/0xd20 [ 2045.172015][T15508] charge_memcg+0x51/0x200 [ 2045.176434][T15508] __mem_cgroup_charge+0x29/0xa0 [ 2045.181384][T15508] handle_mm_fault+0xcea/0x21d0 [ 2045.186286][T15508] exc_page_fault+0x45f/0x640 [ 2045.190966][T15508] asm_exc_page_fault+0x26/0x30 [ 2045.195844][T15508] RIP: 0033:0x7f2feb90996f [ 2045.200258][T15508] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 10 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 2045.219877][T15508] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2045.225941][T15508] RAX: 00007f2feacad000 RBX: 0000000000021000 RCX: 00007f2feb95a277 [ 2045.233980][T15508] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f2feacae000 [ 2045.241947][T15508] RBP: 00007ffce8db9380 R08: 00000000ffffffff R09: 00007f2feaccd700 [ 2045.249963][T15508] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffce8db94a0 02:11:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2d8, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x60}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2045.258072][T15508] R13: 00007f2feaccd700 R14: 0000000000000000 R15: 0000000000022000 [ 2045.266087][T15508] [ 2045.269205][T15508] memory: usage 307176kB, limit 307200kB, failcnt 10381 [ 2045.276150][T15508] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2045.283042][T15508] Memory cgroup stats for /syz4: [ 2045.283258][T15508] anon 319488 [ 2045.283258][T15508] file 7782400 [ 2045.283258][T15508] kernel 306438144 [ 2045.283258][T15508] kernel_stack 16384 [ 2045.283258][T15508] pagetables 69632 [ 2045.283258][T15508] sec_pagetables 0 02:11:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2045.283258][T15508] percpu 10869696 [ 2045.283258][T15508] sock 0 [ 2045.283258][T15508] vmalloc 0 [ 2045.283258][T15508] shmem 7782400 [ 2045.283258][T15508] file_mapped 77824 [ 2045.283258][T15508] file_dirty 0 [ 2045.283258][T15508] file_writeback 0 [ 2045.283258][T15508] swapcached 0 [ 2045.283258][T15508] inactive_anon 8011776 [ 2045.283258][T15508] active_anon 86016 [ 2045.283258][T15508] inactive_file 0 [ 2045.283258][T15508] active_file 0 [ 2045.283258][T15508] unevictable 0 [ 2045.283258][T15508] slab_reclaimable 33848 02:11:04 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 2045.283258][T15508] slab_unreclaimable 295385912 [ 2045.283258][T15508] slab 295419760 [ 2045.283258][T15508] workingset_refault_anon 0 [ 2045.283258][T15508] workingset_refault_file 6 [ 2045.283258][T15508] workingset_activate_anon 0 [ 2045.283258][T15508] workingset_activate_file 0 [ 2045.283258][T15508] workingset_restore_anon 0 [ 2045.283258][T15508] workingset_restore_file 0 [ 2045.283258][T15508] workingset_nodereclaim 0 [ 2045.283258][T15508] pgscan 633 [ 2045.283258][T15508] pgsteal 32 [ 2045.283258][T15508] pgscan_kswapd 0 [ 2045.283258][T15508] pgscan_direct 633 [ 2045.283258][T15508] pgscan_khugepaged 0 [ 2045.283258][T15508] pgsteal_kswapd 0 [ 2045.283258][T15508] pgsteal_direct 32 [ 2045.283258][T15508] pgsteal_khugepaged 0 [ 2045.283258][T15508] pgfault 364790 [ 2045.283258][T15508] pgmajfault 31 [ 2045.283258][T15508] pgrefill 653 [ 2045.283258][T15508] pgactivate 12944 [ 2045.283258][T15508] pgdeactivate 666 [ 2045.283258][T15508] pglazyfree 0 [ 2045.283258][T15508] pglazyfreed 0 [ 2045.447164][T15508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15508,uid=0 [ 2045.462449][T15508] Memory cgroup out of memory: Killed process 15508 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2045.480384][T15511] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2045.490551][T15511] CPU: 0 PID: 15511 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2045.499357][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 02:11:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2ea, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2045.509421][T15511] Call Trace: [ 2045.512813][T15511] [ 2045.515738][T15511] dump_stack_lvl+0xda/0x130 [ 2045.520330][T15511] dump_stack+0x15/0x20 [ 2045.524477][T15511] dump_header+0x95/0x3c0 [ 2045.528874][T15511] oom_kill_process+0xe3/0x3e0 [ 2045.533694][T15511] out_of_memory+0x9f0/0xc30 [ 2045.538325][T15511] mem_cgroup_out_of_memory+0x139/0x190 [ 2045.543884][T15511] try_charge_memcg+0x759/0xd20 [ 2045.546355][T15521] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2045.548783][T15511] ? shrink_slab+0x4d0/0x520 02:11:05 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x6}, 0x0) 02:11:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x68}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd0, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2045.561430][T15511] ? mem_cgroup_iter+0x298/0x370 [ 2045.566481][T15511] ? vmpressure+0xbf/0x240 [ 2045.570915][T15511] obj_cgroup_charge_pages+0xab/0x130 [ 2045.576293][T15511] obj_cgroup_charge+0xe9/0x140 [ 2045.582660][T15511] slab_pre_alloc_hook+0x112/0x180 [ 2045.587907][T15511] kmem_cache_alloc_node+0x5d/0x2e0 [ 2045.593115][T15511] ? dup_task_struct+0x60/0x450 [ 2045.597978][T15511] dup_task_struct+0x60/0x450 [ 2045.602745][T15511] copy_process+0x396/0x2100 [ 2045.607347][T15511] kernel_clone+0x169/0x560 [ 2045.611929][T15511] __x64_sys_clone+0xdf/0x110 [ 2045.616651][T15511] do_syscall_64+0x41/0xc0 [ 2045.621100][T15511] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2045.626999][T15511] RIP: 0033:0x7f0cbc4d2591 [ 2045.631410][T15511] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2045.651019][T15511] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2045.659478][T15511] RAX: ffffffffffffffda RBX: 00007f0cbb844700 RCX: 00007f0cbc4d2591 [ 2045.667436][T15511] RDX: 00007f0cbb8449d0 RSI: 00007f0cbb8442f0 RDI: 00000000003d0f00 [ 2045.675419][T15511] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb844700 R09: 00007f0cbb844700 [ 2045.683379][T15511] R10: 00007f0cbb8449d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2045.691401][T15511] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2045.699460][T15511] [ 2045.702497][T15511] memory: usage 307172kB, limit 307200kB, failcnt 3908 02:11:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfeffffff, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2045.703141][T15527] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2045.709328][T15511] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2045.724351][T15511] Memory cgroup stats for /syz3: [ 2045.724566][T15511] anon 94208 [ 2045.724566][T15511] file 118784 [ 2045.724566][T15511] kernel 314331136 [ 2045.724566][T15511] kernel_stack 16384 [ 2045.724566][T15511] pagetables 65536 [ 2045.724566][T15511] sec_pagetables 0 [ 2045.724566][T15511] percpu 11059136 [ 2045.724566][T15511] sock 0 [ 2045.724566][T15511] vmalloc 0 [ 2045.724566][T15511] shmem 114688 02:11:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x6c}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2045.724566][T15511] file_mapped 114688 [ 2045.724566][T15511] file_dirty 0 [ 2045.724566][T15511] file_writeback 0 [ 2045.724566][T15511] swapcached 0 [ 2045.724566][T15511] inactive_anon 122880 [ 2045.724566][T15511] active_anon 86016 [ 2045.724566][T15511] inactive_file 4096 [ 2045.724566][T15511] active_file 0 [ 2045.724566][T15511] unevictable 0 [ 2045.724566][T15511] slab_reclaimable 15592 [ 2045.724566][T15511] slab_unreclaimable 303106896 [ 2045.724566][T15511] slab 303122488 [ 2045.724566][T15511] workingset_refault_anon 0 [ 2045.724566][T15511] workingset_refault_file 2 [ 2045.724566][T15511] workingset_activate_anon 0 [ 2045.724566][T15511] workingset_activate_file 0 [ 2045.724566][T15511] workingset_restore_anon 0 [ 2045.724566][T15511] workingset_restore_file 0 [ 2045.724566][T15511] workingset_nodereclaim 0 [ 2045.724566][T15511] pgscan 112 [ 2045.724566][T15511] pgsteal 19 [ 2045.724566][T15511] pgscan_kswapd 0 [ 2045.724566][T15511] pgscan_direct 112 [ 2045.724566][T15511] pgscan_khugepaged 0 [ 2045.724566][T15511] pgsteal_kswapd 0 [ 2045.724566][T15511] pgsteal_direct 19 [ 2045.724566][T15511] pgsteal_khugepaged 0 [ 2045.724566][T15511] pgfault 897485 [ 2045.724566][T15511] pgmajfault 9 [ 2045.724566][T15511] pgrefill 122 [ 2045.724566][T15511] pgactivate 2419 [ 2045.724566][T15511] pgdeactivate 204 [ 2045.724566][T15511] pglazyfree 0 [ 2045.724566][T15511] pglazyfreed 0 [ 2045.888274][T15511] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15511,uid=0 02:11:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2045.903547][T15511] Memory cgroup out of memory: Killed process 15511 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2045.937806][T15524] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2045.948155][T15524] CPU: 0 PID: 15524 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 02:11:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:05 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x7}, 0x0) [ 2045.956829][T15524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2045.966882][T15524] Call Trace: [ 2045.970157][T15524] [ 2045.973079][T15524] dump_stack_lvl+0xda/0x130 [ 2045.977799][T15524] dump_stack+0x15/0x20 [ 2045.981951][T15524] dump_header+0x95/0x3c0 [ 2045.986315][T15524] oom_kill_process+0xe3/0x3e0 [ 2045.991120][T15524] out_of_memory+0x9f0/0xc30 [ 2045.995754][T15524] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2046.001823][T15524] mem_cgroup_out_of_memory+0x139/0x190 [ 2046.007449][T15524] try_charge_memcg+0x759/0xd20 [ 2046.012317][T15524] charge_memcg+0x51/0x200 [ 2046.016744][T15524] __mem_cgroup_charge+0x29/0xa0 [ 2046.021719][T15524] handle_mm_fault+0xcea/0x21d0 [ 2046.026652][T15524] exc_page_fault+0x45f/0x640 [ 2046.031386][T15524] asm_exc_page_fault+0x26/0x30 [ 2046.036328][T15524] RIP: 0033:0x7f2feb90996f [ 2046.040730][T15524] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 10 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 2046.060333][T15524] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2046.066461][T15524] RAX: 00007f2feacad000 RBX: 0000000000021000 RCX: 00007f2feb95a277 [ 2046.074453][T15524] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f2feacae000 [ 2046.082406][T15524] RBP: 00007ffce8db9380 R08: 00000000ffffffff R09: 00007f2feaccd700 [ 2046.090458][T15524] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffce8db94a0 [ 2046.098489][T15524] R13: 00007f2feaccd700 R14: 0000000000000000 R15: 0000000000022000 [ 2046.106460][T15524] 02:11:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffa888, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x74}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2046.109545][T15524] memory: usage 307180kB, limit 307200kB, failcnt 10455 [ 2046.110196][T15534] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2046.116522][T15524] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2046.131446][T15524] Memory cgroup stats for /syz4: [ 2046.131692][T15524] anon 319488 [ 2046.131692][T15524] file 7782400 [ 2046.131692][T15524] kernel 306429952 [ 2046.131692][T15524] kernel_stack 16384 [ 2046.131692][T15524] pagetables 69632 [ 2046.131692][T15524] sec_pagetables 0 [ 2046.131692][T15524] percpu 10869632 [ 2046.131692][T15524] sock 0 [ 2046.131692][T15524] vmalloc 0 [ 2046.131692][T15524] shmem 7782400 [ 2046.131692][T15524] file_mapped 77824 [ 2046.131692][T15524] file_dirty 0 [ 2046.131692][T15524] file_writeback 0 [ 2046.131692][T15524] swapcached 0 [ 2046.131692][T15524] inactive_anon 8011776 [ 2046.131692][T15524] active_anon 86016 [ 2046.131692][T15524] inactive_file 0 [ 2046.131692][T15524] active_file 0 [ 2046.131692][T15524] unevictable 0 [ 2046.131692][T15524] slab_reclaimable 28344 [ 2046.131692][T15524] slab_unreclaimable 295384424 [ 2046.131692][T15524] slab 295412768 [ 2046.131692][T15524] workingset_refault_anon 0 [ 2046.131692][T15524] workingset_refault_file 6 [ 2046.131692][T15524] workingset_activate_anon 0 [ 2046.131692][T15524] workingset_activate_file 0 [ 2046.131692][T15524] workingset_restore_anon 0 [ 2046.131692][T15524] workingset_restore_file 0 [ 2046.131692][T15524] workingset_nodereclaim 0 [ 2046.131692][T15524] pgscan 633 [ 2046.131692][T15524] pgsteal 32 [ 2046.131692][T15524] pgscan_kswapd 0 [ 2046.131692][T15524] pgscan_direct 633 [ 2046.131692][T15524] pgscan_khugepaged 0 [ 2046.131692][T15524] pgsteal_kswapd 0 [ 2046.131692][T15524] pgsteal_direct 32 [ 2046.131692][T15524] pgsteal_khugepaged 0 [ 2046.131692][T15524] pgfault 364822 [ 2046.131692][T15524] pgmajfault 31 [ 2046.131692][T15524] pgrefill 653 [ 2046.131692][T15524] pgactivate 12944 [ 2046.131692][T15524] pgdeactivate 666 [ 2046.131692][T15524] pglazyfree 0 [ 2046.131692][T15524] pglazyfreed 0 [ 2046.165299][T15545] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:11:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd1, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x7a}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2046.296781][T15524] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15524,uid=0 [ 2046.296843][T15524] Memory cgroup out of memory: Killed process 15524 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2046.318662][T15547] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2046.348740][T15547] CPU: 0 PID: 15547 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2046.357411][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2046.368050][T15547] Call Trace: [ 2046.371348][T15547] [ 2046.374365][T15547] dump_stack_lvl+0xda/0x130 [ 2046.378979][T15547] dump_stack+0x15/0x20 [ 2046.383208][T15547] dump_header+0x95/0x3c0 [ 2046.387545][T15547] oom_kill_process+0xe3/0x3e0 [ 2046.392296][T15547] out_of_memory+0x9f0/0xc30 [ 2046.397479][T15547] mem_cgroup_out_of_memory+0x139/0x190 [ 2046.403099][T15547] try_charge_memcg+0x759/0xd20 [ 2046.407975][T15547] ? memcg_account_kmem+0x81/0x140 [ 2046.413090][T15547] obj_cgroup_charge_pages+0xab/0x130 [ 2046.418450][T15547] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2046.423984][T15547] memcg_charge_kernel_stack+0xee/0x290 [ 2046.429582][T15547] dup_task_struct+0x2c6/0x450 [ 2046.434332][T15547] copy_process+0x396/0x2100 [ 2046.438991][T15547] kernel_clone+0x169/0x560 [ 2046.443534][T15547] __x64_sys_clone+0xdf/0x110 [ 2046.448297][T15547] do_syscall_64+0x41/0xc0 [ 2046.452776][T15547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2046.458678][T15547] RIP: 0033:0x7f2feb95b591 [ 2046.463151][T15547] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2046.482741][T15547] RSP: 002b:00007ffce8db9258 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2046.491144][T15547] RAX: ffffffffffffffda RBX: 00007f2feaccd700 RCX: 00007f2feb95b591 [ 2046.499104][T15547] RDX: 00007f2feaccd9d0 RSI: 00007f2feaccd2f0 RDI: 00000000003d0f00 [ 2046.507105][T15547] RBP: 00007ffce8db94a0 R08: 00007f2feaccd700 R09: 00007f2feaccd700 [ 2046.515101][T15547] R10: 00007f2feaccd9d0 R11: 0000000000000206 R12: 00007ffce8db930e [ 2046.523129][T15547] R13: 00007ffce8db930f R14: 00007f2feaccd300 R15: 0000000000022000 [ 2046.531101][T15547] [ 2046.534208][T15547] memory: usage 307172kB, limit 307200kB, failcnt 10518 [ 2046.541209][T15547] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2046.548062][T15547] Memory cgroup stats for /syz4: [ 2046.548336][T15547] anon 331776 [ 2046.548336][T15547] file 7782400 [ 2046.548336][T15547] kernel 306429952 [ 2046.548336][T15547] kernel_stack 16384 [ 2046.548336][T15547] pagetables 69632 [ 2046.548336][T15547] sec_pagetables 0 [ 2046.548336][T15547] percpu 10869440 [ 2046.548336][T15547] sock 0 [ 2046.548336][T15547] vmalloc 0 [ 2046.548336][T15547] shmem 7782400 [ 2046.548336][T15547] file_mapped 77824 [ 2046.548336][T15547] file_dirty 0 [ 2046.548336][T15547] file_writeback 0 [ 2046.548336][T15547] swapcached 0 [ 2046.548336][T15547] inactive_anon 8007680 [ 2046.548336][T15547] active_anon 86016 [ 2046.548336][T15547] inactive_file 0 [ 2046.548336][T15547] active_file 0 [ 2046.548336][T15547] unevictable 0 [ 2046.548336][T15547] slab_reclaimable 45824 [ 2046.548336][T15547] slab_unreclaimable 295370808 [ 2046.548336][T15547] slab 295416632 [ 2046.548336][T15547] workingset_refault_anon 0 [ 2046.548336][T15547] workingset_refault_file 6 [ 2046.548336][T15547] workingset_activate_anon 0 [ 2046.548336][T15547] workingset_activate_file 0 [ 2046.548336][T15547] workingset_restore_anon 0 [ 2046.548336][T15547] workingset_restore_file 0 [ 2046.548336][T15547] workingset_nodereclaim 0 [ 2046.548336][T15547] pgscan 633 [ 2046.548336][T15547] pgsteal 32 [ 2046.548336][T15547] pgscan_kswapd 0 [ 2046.548336][T15547] pgscan_direct 633 [ 2046.548336][T15547] pgscan_khugepaged 0 [ 2046.548336][T15547] pgsteal_kswapd 0 [ 2046.548336][T15547] pgsteal_direct 32 [ 2046.548336][T15547] pgsteal_khugepaged 0 [ 2046.548336][T15547] pgfault 364856 [ 2046.548336][T15547] pgmajfault 31 [ 2046.548336][T15547] pgrefill 653 [ 2046.548336][T15547] pgactivate 12944 [ 2046.548336][T15547] pgdeactivate 666 [ 2046.548336][T15547] pglazyfree 0 [ 2046.548336][T15547] pglazyfreed 0 02:11:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd2, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2046.712383][T15547] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15547,uid=0 [ 2046.727741][T15547] Memory cgroup out of memory: Killed process 15547 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2046.767081][T15554] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2046.777301][T15554] CPU: 0 PID: 15554 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2046.785971][T15554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2046.796067][T15554] Call Trace: [ 2046.799418][T15554] [ 2046.802438][T15554] dump_stack_lvl+0xda/0x130 [ 2046.807048][T15554] dump_stack+0x15/0x20 [ 2046.811246][T15554] dump_header+0x95/0x3c0 02:11:06 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 2046.815614][T15554] oom_kill_process+0xe3/0x3e0 [ 2046.820479][T15554] out_of_memory+0x9f0/0xc30 [ 2046.825157][T15554] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2046.831229][T15554] mem_cgroup_out_of_memory+0x139/0x190 [ 2046.836787][T15554] try_charge_memcg+0x759/0xd20 [ 2046.841636][T15554] charge_memcg+0x51/0x200 [ 2046.846050][T15554] __mem_cgroup_charge+0x29/0xa0 [ 2046.850983][T15554] do_wp_page+0xb96/0x1fb0 [ 2046.855410][T15554] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2046.860702][T15554] ? futex_wake+0x273/0x2f0 [ 2046.865260][T15554] handle_mm_fault+0x64e/0x21d0 [ 2046.870222][T15554] exc_page_fault+0x45f/0x640 [ 2046.874990][T15554] asm_exc_page_fault+0x26/0x30 [ 2046.879921][T15554] RIP: 0033:0x7f2feb904fdd [ 2046.884315][T15554] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 2046.903947][T15554] RSP: 002b:00007ffce8db9390 EFLAGS: 00010217 [ 2046.909994][T15554] RAX: 0000000000000000 RBX: 00007f2feba79f8c RCX: 00007f2feb95a169 [ 2046.918008][T15554] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2feba79f88 [ 2046.926035][T15554] RBP: 00007f2feba79f80 R08: 00007f2feaccd700 R09: 0000000000000000 [ 2046.934059][T15554] R10: 00007f2feaccd700 R11: 0000000000000246 R12: 00007f2feba79f8c [ 2046.942067][T15554] R13: 00007f2feb4ce060 R14: 00007f2feba79f80 R15: 0000000000000000 [ 2046.950029][T15554] [ 2046.953060][T15554] memory: usage 307200kB, limit 307200kB, failcnt 10598 [ 2046.960024][T15554] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2046.966953][T15554] Memory cgroup stats for /syz4: [ 2046.967177][T15554] anon 335872 [ 2046.967177][T15554] file 7782400 [ 2046.967177][T15554] kernel 306450432 [ 2046.967177][T15554] kernel_stack 32768 [ 2046.967177][T15554] pagetables 69632 [ 2046.967177][T15554] sec_pagetables 0 [ 2046.967177][T15554] percpu 10869376 [ 2046.967177][T15554] sock 0 [ 2046.967177][T15554] vmalloc 0 [ 2046.967177][T15554] shmem 7782400 [ 2046.967177][T15554] file_mapped 77824 [ 2046.967177][T15554] file_dirty 0 [ 2046.967177][T15554] file_writeback 0 [ 2046.967177][T15554] swapcached 0 [ 2046.967177][T15554] inactive_anon 7983104 [ 2046.967177][T15554] active_anon 86016 [ 2046.967177][T15554] inactive_file 0 [ 2046.967177][T15554] active_file 0 [ 2046.967177][T15554] unevictable 0 [ 2046.967177][T15554] slab_reclaimable 63304 [ 2046.967177][T15554] slab_unreclaimable 295370240 [ 2046.967177][T15554] slab 295433544 [ 2046.967177][T15554] workingset_refault_anon 0 [ 2046.967177][T15554] workingset_refault_file 6 [ 2046.967177][T15554] workingset_activate_anon 0 [ 2046.967177][T15554] workingset_activate_file 0 [ 2046.967177][T15554] workingset_restore_anon 0 [ 2046.967177][T15554] workingset_restore_file 0 [ 2046.967177][T15554] workingset_nodereclaim 0 [ 2046.967177][T15554] pgscan 633 [ 2046.967177][T15554] pgsteal 32 [ 2046.967177][T15554] pgscan_kswapd 0 [ 2046.967177][T15554] pgscan_direct 633 [ 2046.967177][T15554] pgscan_khugepaged 0 [ 2046.967177][T15554] pgsteal_kswapd 0 [ 2046.967177][T15554] pgsteal_direct 32 [ 2046.967177][T15554] pgsteal_khugepaged 0 [ 2046.967177][T15554] pgfault 364893 [ 2046.967177][T15554] pgmajfault 31 [ 2046.967177][T15554] pgrefill 653 [ 2046.967177][T15554] pgactivate 12944 [ 2046.967177][T15554] pgdeactivate 666 [ 2046.967177][T15554] pglazyfree 0 [ 2046.967177][T15554] pglazyfreed 0 [ 2047.130972][T15554] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15554,uid=0 [ 2047.146290][T15554] Memory cgroup out of memory: Killed process 15554 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2047.152499][T15555] socket: no more sockets 02:11:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd3, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2047.167908][T15536] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2047.178100][T15536] CPU: 1 PID: 15536 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2047.186844][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2047.196967][T15536] Call Trace: [ 2047.200234][T15536] [ 2047.203147][T15536] dump_stack_lvl+0xda/0x130 [ 2047.207756][T15536] dump_stack+0x15/0x20 [ 2047.211925][T15536] dump_header+0x95/0x3c0 [ 2047.216256][T15536] oom_kill_process+0xe3/0x3e0 [ 2047.221011][T15536] out_of_memory+0x9f0/0xc30 [ 2047.225666][T15536] mem_cgroup_out_of_memory+0x139/0x190 [ 2047.231202][T15536] try_charge_memcg+0x759/0xd20 [ 2047.236058][T15536] ? mod_objcg_mlstate+0x183/0x1d0 [ 2047.241194][T15536] ? memcg_account_kmem+0x81/0x140 [ 2047.246289][T15536] obj_cgroup_charge_pages+0xab/0x130 [ 2047.251742][T15536] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2047.257297][T15536] memcg_charge_kernel_stack+0xa5/0x290 [ 2047.262825][T15536] dup_task_struct+0x125/0x450 [ 2047.267631][T15536] copy_process+0x396/0x2100 [ 2047.272216][T15536] ? __rcu_read_unlock+0x4d/0x70 [ 2047.277173][T15536] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 2047.282722][T15536] kernel_clone+0x169/0x560 [ 2047.287255][T15536] __x64_sys_clone+0xdf/0x110 [ 2047.292042][T15536] do_syscall_64+0x41/0xc0 [ 2047.296452][T15536] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2047.302402][T15536] RIP: 0033:0x7f0cbc4d2591 [ 2047.306803][T15536] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2047.326399][T15536] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2047.335210][T15536] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2047.343252][T15536] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2047.351280][T15536] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2047.359300][T15536] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2047.367348][T15536] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2047.375326][T15536] [ 2047.378469][T15536] memory: usage 307200kB, limit 307200kB, failcnt 4018 [ 2047.385373][T15536] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2047.392221][T15536] Memory cgroup stats for /syz3: [ 2047.392491][T15536] anon 151552 [ 2047.392491][T15536] file 118784 [ 2047.392491][T15536] kernel 314290176 [ 2047.392491][T15536] kernel_stack 32768 [ 2047.392491][T15536] pagetables 73728 [ 2047.392491][T15536] sec_pagetables 0 [ 2047.392491][T15536] percpu 11058688 [ 2047.392491][T15536] sock 0 [ 2047.392491][T15536] vmalloc 0 [ 2047.392491][T15536] shmem 114688 [ 2047.392491][T15536] file_mapped 114688 [ 2047.392491][T15536] file_dirty 0 [ 2047.392491][T15536] file_writeback 0 [ 2047.392491][T15536] swapcached 0 [ 2047.392491][T15536] inactive_anon 180224 [ 2047.392491][T15536] active_anon 86016 [ 2047.392491][T15536] inactive_file 4096 [ 2047.392491][T15536] active_file 0 [ 2047.392491][T15536] unevictable 0 [ 2047.392491][T15536] slab_reclaimable 13592 [ 2047.392491][T15536] slab_unreclaimable 303069872 [ 2047.392491][T15536] slab 303083464 [ 2047.392491][T15536] workingset_refault_anon 0 [ 2047.392491][T15536] workingset_refault_file 2 [ 2047.392491][T15536] workingset_activate_anon 0 [ 2047.392491][T15536] workingset_activate_file 0 [ 2047.392491][T15536] workingset_restore_anon 0 [ 2047.392491][T15536] workingset_restore_file 0 [ 2047.392491][T15536] workingset_nodereclaim 0 [ 2047.392491][T15536] pgscan 149 [ 2047.392491][T15536] pgsteal 19 [ 2047.392491][T15536] pgscan_kswapd 0 [ 2047.392491][T15536] pgscan_direct 149 [ 2047.392491][T15536] pgscan_khugepaged 0 [ 2047.392491][T15536] pgsteal_kswapd 0 [ 2047.392491][T15536] pgsteal_direct 19 [ 2047.392491][T15536] pgsteal_khugepaged 0 [ 2047.392491][T15536] pgfault 897547 [ 2047.392491][T15536] pgmajfault 9 [ 2047.392491][T15536] pgrefill 159 [ 2047.392491][T15536] pgactivate 2456 [ 2047.392491][T15536] pgdeactivate 241 [ 2047.392491][T15536] pglazyfree 0 [ 2047.392491][T15536] pglazyfreed 0 [ 2047.558123][T15536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15536,uid=0 [ 2047.573517][T15536] Memory cgroup out of memory: Killed process 15536 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2047.590846][T15558] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2047.603021][T15558] CPU: 0 PID: 15558 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 02:11:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x302, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2047.611693][T15558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2047.621740][T15558] Call Trace: [ 2047.625011][T15558] [ 2047.627980][T15558] dump_stack_lvl+0xda/0x130 [ 2047.632633][T15558] dump_stack+0x15/0x20 [ 2047.636787][T15558] dump_header+0x95/0x3c0 [ 2047.641117][T15558] oom_kill_process+0xe3/0x3e0 [ 2047.645884][T15558] out_of_memory+0x9f0/0xc30 [ 2047.650482][T15558] mem_cgroup_out_of_memory+0x139/0x190 [ 2047.656094][T15558] try_charge_memcg+0x759/0xd20 [ 2047.661034][T15558] obj_cgroup_charge_pages+0xab/0x130 [ 2047.666414][T15558] obj_cgroup_charge+0xe9/0x140 [ 2047.671279][T15558] slab_pre_alloc_hook+0x112/0x180 [ 2047.676454][T15558] __kmem_cache_alloc_node+0x46/0x250 [ 2047.681821][T15558] ? copy_semundo+0x8d/0x170 [ 2047.686410][T15558] kmalloc_trace+0x2a/0xa0 [ 2047.690822][T15558] copy_semundo+0x8d/0x170 [ 2047.695231][T15558] copy_process+0xe7b/0x2100 [ 2047.699818][T15558] kernel_clone+0x169/0x560 [ 2047.704309][T15558] __x64_sys_clone+0xdf/0x110 [ 2047.709019][T15558] do_syscall_64+0x41/0xc0 [ 2047.713447][T15558] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2047.719358][T15558] RIP: 0033:0x7f2feb95b591 [ 2047.723800][T15558] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2047.743395][T15558] RSP: 002b:00007ffce8db9258 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2047.751865][T15558] RAX: ffffffffffffffda RBX: 00007f2feaccd700 RCX: 00007f2feb95b591 [ 2047.759891][T15558] RDX: 00007f2feaccd9d0 RSI: 00007f2feaccd2f0 RDI: 00000000003d0f00 [ 2047.767851][T15558] RBP: 00007ffce8db94a0 R08: 00007f2feaccd700 R09: 00007f2feaccd700 [ 2047.775916][T15558] R10: 00007f2feaccd9d0 R11: 0000000000000206 R12: 00007ffce8db930e [ 2047.783867][T15558] R13: 00007ffce8db930f R14: 00007f2feaccd300 R15: 0000000000022000 [ 2047.791864][T15558] [ 2047.795028][T15558] memory: usage 307200kB, limit 307200kB, failcnt 10667 [ 2047.802010][T15558] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2047.808915][T15558] Memory cgroup stats for /syz4: [ 2047.809280][T15558] anon 331776 [ 2047.809280][T15558] file 7782400 [ 2047.809280][T15558] kernel 306425856 [ 2047.809280][T15558] kernel_stack 32768 [ 2047.809280][T15558] pagetables 69632 [ 2047.809280][T15558] sec_pagetables 0 [ 2047.809280][T15558] percpu 10869376 [ 2047.809280][T15558] sock 0 [ 2047.809280][T15558] vmalloc 0 [ 2047.809280][T15558] shmem 7782400 [ 2047.809280][T15558] file_mapped 77824 [ 2047.809280][T15558] file_dirty 0 [ 2047.809280][T15558] file_writeback 0 [ 2047.809280][T15558] swapcached 0 [ 2047.809280][T15558] inactive_anon 7983104 [ 2047.809280][T15558] active_anon 86016 [ 2047.809280][T15558] inactive_file 0 [ 2047.809280][T15558] active_file 0 [ 2047.809280][T15558] unevictable 0 [ 2047.809280][T15558] slab_reclaimable 45824 [ 2047.809280][T15558] slab_unreclaimable 295363600 [ 2047.809280][T15558] slab 295409424 [ 2047.809280][T15558] workingset_refault_anon 0 [ 2047.809280][T15558] workingset_refault_file 6 [ 2047.809280][T15558] workingset_activate_anon 0 [ 2047.809280][T15558] workingset_activate_file 0 [ 2047.809280][T15558] workingset_restore_anon 0 [ 2047.809280][T15558] workingset_restore_file 0 [ 2047.809280][T15558] workingset_nodereclaim 0 [ 2047.809280][T15558] pgscan 633 [ 2047.809280][T15558] pgsteal 32 [ 2047.809280][T15558] pgscan_kswapd 0 [ 2047.809280][T15558] pgscan_direct 633 [ 2047.809280][T15558] pgscan_khugepaged 0 [ 2047.809280][T15558] pgsteal_kswapd 0 [ 2047.809280][T15558] pgsteal_direct 32 [ 2047.809280][T15558] pgsteal_khugepaged 0 [ 2047.809280][T15558] pgfault 364927 [ 2047.809280][T15558] pgmajfault 31 [ 2047.809280][T15558] pgrefill 653 [ 2047.809280][T15558] pgactivate 12944 [ 2047.809280][T15558] pgdeactivate 666 [ 2047.809280][T15558] pglazyfree 0 [ 2047.809280][T15558] pglazyfreed 0 [ 2047.973176][T15558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15558,uid=0 [ 2047.988463][T15558] Memory cgroup out of memory: Killed process 15558 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff81, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:07 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x300}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd4, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 2048.044518][T15560] __nla_validate_parse: 10 callbacks suppressed [ 2048.044587][T15560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2048.096224][T15563] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2048.106429][T15563] CPU: 1 PID: 15563 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2048.115106][T15563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2048.125238][T15563] Call Trace: [ 2048.128512][T15563] [ 2048.131441][T15563] dump_stack_lvl+0xda/0x130 [ 2048.136030][T15563] dump_stack+0x15/0x20 [ 2048.140176][T15563] dump_header+0x95/0x3c0 [ 2048.144548][T15563] oom_kill_process+0xe3/0x3e0 [ 2048.149310][T15563] out_of_memory+0x9f0/0xc30 [ 2048.153913][T15563] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2048.160038][T15563] mem_cgroup_out_of_memory+0x139/0x190 [ 2048.165705][T15563] try_charge_memcg+0x759/0xd20 [ 2048.170563][T15563] charge_memcg+0x51/0x200 [ 2048.174973][T15563] __mem_cgroup_charge+0x29/0xa0 [ 2048.179963][T15563] do_wp_page+0xb96/0x1fb0 [ 2048.184368][T15563] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2048.189665][T15563] handle_mm_fault+0x64e/0x21d0 [ 2048.194505][T15563] exc_page_fault+0x45f/0x640 [ 2048.199179][T15563] asm_exc_page_fault+0x26/0x30 [ 2048.204153][T15563] RIP: 0033:0x7f2feb907610 [ 2048.208546][T15563] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2048.228281][T15563] RSP: 002b:00007ffce8db92b0 EFLAGS: 00010246 [ 2048.234360][T15563] RAX: 000000002d408a59 RBX: 00007f2feba7a018 RCX: 0000001b2f820000 [ 2048.242314][T15563] RDX: 0000000000000000 RSI: 0000001b2f820018 RDI: 0000000008e179b5 [ 2048.250287][T15563] RBP: 000000002d408a59 R08: 0000000000000a59 R09: 000000002d408a5d [ 2048.258262][T15563] R10: 00007ffce8db9470 R11: 0000000000000246 R12: 00007f2feba6e000 [ 2048.266211][T15563] R13: 0000000000000001 R14: 0000000000000008 R15: ffffffff81928445 [ 2048.274209][T15563] ? security_transition_sid+0x25/0x80 [ 2048.279690][T15563] [ 2048.282788][T15563] memory: usage 307200kB, limit 307200kB, failcnt 10741 [ 2048.289710][T15563] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2048.296611][T15563] Memory cgroup stats for /syz4: [ 2048.296997][T15563] anon 364544 [ 2048.296997][T15563] file 7782400 [ 2048.296997][T15563] kernel 306421760 [ 2048.296997][T15563] kernel_stack 32768 [ 2048.296997][T15563] pagetables 69632 [ 2048.296997][T15563] sec_pagetables 0 [ 2048.296997][T15563] percpu 10869440 [ 2048.296997][T15563] sock 0 [ 2048.296997][T15563] vmalloc 0 [ 2048.296997][T15563] shmem 7782400 [ 2048.296997][T15563] file_mapped 77824 [ 2048.296997][T15563] file_dirty 0 [ 2048.296997][T15563] file_writeback 0 [ 2048.296997][T15563] swapcached 0 [ 2048.296997][T15563] inactive_anon 8036352 [ 2048.296997][T15563] active_anon 86016 [ 2048.296997][T15563] inactive_file 0 [ 2048.296997][T15563] active_file 0 [ 2048.296997][T15563] unevictable 0 [ 2048.296997][T15563] slab_reclaimable 34824 [ 2048.296997][T15563] slab_unreclaimable 295368808 [ 2048.296997][T15563] slab 295403632 [ 2048.296997][T15563] workingset_refault_anon 0 [ 2048.296997][T15563] workingset_refault_file 6 [ 2048.296997][T15563] workingset_activate_anon 0 [ 2048.296997][T15563] workingset_activate_file 0 [ 2048.296997][T15563] workingset_restore_anon 0 [ 2048.296997][T15563] workingset_restore_file 0 [ 2048.296997][T15563] workingset_nodereclaim 0 [ 2048.296997][T15563] pgscan 633 [ 2048.296997][T15563] pgsteal 32 [ 2048.296997][T15563] pgscan_kswapd 0 [ 2048.296997][T15563] pgscan_direct 633 [ 2048.296997][T15563] pgscan_khugepaged 0 [ 2048.296997][T15563] pgsteal_kswapd 0 [ 2048.296997][T15563] pgsteal_direct 32 [ 2048.296997][T15563] pgsteal_khugepaged 0 [ 2048.296997][T15563] pgfault 364977 [ 2048.296997][T15563] pgmajfault 31 [ 2048.296997][T15563] pgrefill 653 [ 2048.296997][T15563] pgactivate 12944 [ 2048.296997][T15563] pgdeactivate 666 [ 2048.296997][T15563] pglazyfree 0 [ 2048.296997][T15563] pglazyfreed 0 [ 2048.460955][T15563] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15563,uid=0 [ 2048.476424][T15563] Memory cgroup out of memory: Killed process 15563 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x386, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd5, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2048.493714][T15570] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2048.503957][T15570] CPU: 0 PID: 15570 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2048.512674][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2048.522835][T15570] Call Trace: [ 2048.526117][T15570] [ 2048.529048][T15570] dump_stack_lvl+0xda/0x130 [ 2048.533648][T15570] dump_stack+0x15/0x20 [ 2048.537811][T15570] dump_header+0x95/0x3c0 [ 2048.542149][T15570] oom_kill_process+0xe3/0x3e0 [ 2048.546965][T15570] out_of_memory+0x9f0/0xc30 [ 2048.551569][T15570] mem_cgroup_out_of_memory+0x139/0x190 [ 2048.557503][T15570] try_charge_memcg+0x759/0xd20 [ 2048.562390][T15570] ? memcg_account_kmem+0x81/0x140 [ 2048.567501][T15570] obj_cgroup_charge_pages+0xab/0x130 [ 2048.572888][T15570] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2048.578430][T15570] memcg_charge_kernel_stack+0x137/0x290 [ 2048.584118][T15570] dup_task_struct+0x2c6/0x450 [ 2048.588897][T15570] copy_process+0x396/0x2100 [ 2048.593621][T15570] kernel_clone+0x169/0x560 [ 2048.598194][T15570] __x64_sys_clone+0xdf/0x110 [ 2048.602934][T15570] do_syscall_64+0x41/0xc0 [ 2048.607332][T15570] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2048.613245][T15570] RIP: 0033:0x7f0cbc4d2591 [ 2048.617689][T15570] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2048.637288][T15570] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2048.645688][T15570] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2048.653654][T15570] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2048.661605][T15570] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2048.669565][T15570] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2048.677641][T15570] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2048.685616][T15570] [ 2048.688746][T15570] memory: usage 307200kB, limit 307200kB, failcnt 4175 02:11:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffea, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x500}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2048.693701][T15571] validate_nla: 1 callbacks suppressed [ 2048.693712][T15571] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2048.695584][T15570] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2048.695597][T15570] Memory cgroup stats for [ 2048.701052][T15571] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2048.729629][T15570] /syz3: [ 2048.729888][T15570] anon 151552 [ 2048.729888][T15570] file 114688 [ 2048.729888][T15570] kernel 314306560 [ 2048.729888][T15570] kernel_stack 32768 02:11:08 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 2048.729888][T15570] pagetables 73728 [ 2048.729888][T15570] sec_pagetables 0 [ 2048.729888][T15570] percpu 11058688 [ 2048.729888][T15570] sock 0 [ 2048.729888][T15570] vmalloc 0 [ 2048.729888][T15570] shmem 114688 [ 2048.729888][T15570] file_mapped 114688 [ 2048.729888][T15570] file_dirty 0 [ 2048.729888][T15570] file_writeback 0 [ 2048.729888][T15570] swapcached 0 [ 2048.729888][T15570] inactive_anon 180224 [ 2048.729888][T15570] active_anon 86016 [ 2048.729888][T15570] inactive_file 0 [ 2048.729888][T15570] active_file 0 [ 2048.729888][T15570] unevictable 0 [ 2048.729888][T15570] slab_reclaimable 18984 [ 2048.729888][T15570] slab_unreclaimable 303072984 [ 2048.729888][T15570] slab 303091968 [ 2048.729888][T15570] workingset_refault_anon 0 [ 2048.729888][T15570] workingset_refault_file 2 [ 2048.729888][T15570] workingset_activate_anon 0 [ 2048.729888][T15570] workingset_activate_file 0 [ 2048.729888][T15570] workingset_restore_anon 0 [ 2048.729888][T15570] workingset_restore_file 0 [ 2048.729888][T15570] workingset_nodereclaim 0 [ 2048.729888][T15570] pgscan 185 [ 2048.729888][T15570] pgsteal 20 [ 2048.729888][T15570] pgscan_kswapd 0 [ 2048.729888][T15570] pgscan_direct 185 [ 2048.729888][T15570] pgscan_khugepaged 0 [ 2048.729888][T15570] pgsteal_kswapd 0 [ 2048.729888][T15570] pgsteal_direct 20 [ 2048.729888][T15570] pgsteal_khugepaged 0 [ 2048.729888][T15570] pgfault 897609 [ 2048.729888][T15570] pgmajfault 9 [ 2048.729888][T15570] pgrefill 194 [ 2048.729888][T15570] pgactivate 2491 [ 2048.729888][T15570] pgdeactivate 276 [ 2048.729888][T15570] pglazyfree 0 [ 2048.729888][T15570] pglazyfreed 0 02:11:08 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xb}, 0x0) [ 2048.843591][T15572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2048.891425][T15570] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15570,uid=0 [ 2048.916179][T15570] Memory cgroup out of memory: Killed process 15570 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2048.919775][T15575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:11:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd6, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2048.947554][T15573] Memory cgroup out of memory: Killed process 15573 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd7, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2049.015602][T15588] Memory cgroup out of memory: Killed process 15588 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2049.042663][T15580] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2049.050885][T15580] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3bc, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd8, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x600}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2049.055123][T15590] Memory cgroup out of memory: Killed process 15590 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2049.088165][T15586] Memory cgroup out of memory: Killed process 15586 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2049.131541][T15596] Memory cgroup out of memory: Killed process 15596 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2049.139147][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xd9, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:08 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc}, 0x0) 02:11:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xda, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2049.181453][T15600] Memory cgroup out of memory: Killed process 15600 (syz-executor.4) total-vm:46352kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xdb, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2049.232818][T15603] Memory cgroup out of memory: Killed process 15603 (syz-executor.4) total-vm:46220kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 2049.252694][T15595] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:11:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffe, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xdc, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2049.274843][T15604] Memory cgroup out of memory: Killed process 15604 (syz-executor.4) total-vm:46220kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xdd, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2049.331651][T15607] Memory cgroup out of memory: Killed process 15607 (syz-executor.4) total-vm:46220kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3e6, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x700}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2049.376183][T15598] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2049.376459][T15610] Memory cgroup out of memory: Killed process 15610 (syz-executor.4) total-vm:46220kB, anon-rss:376kB, file-rss:8704kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 2049.384276][T15598] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xde, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:08 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xd}, 0x0) 02:11:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0f0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2049.435863][T15608] Memory cgroup out of memory: Killed process 15608 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2049.453296][T15615] Memory cgroup out of memory: Killed process 3155 (syz-executor.4) total-vm:42380kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 2049.476599][T15609] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400100001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="c00e00001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2049.560874][T15614] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2049.568978][T15614] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e03f03001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x900}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00f0ff7f1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2049.653164][T15628] Memory cgroup out of memory: Killed process 15628 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:11:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3ea, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="effdffff1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2049.706406][T15630] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:11:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xdf, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000100030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xc000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:09 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xe}, 0x0) 02:11:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xa00}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2049.806580][T15644] selinux_netlink_send: 57 callbacks suppressed [ 2049.806595][T15644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=15644 comm=syz-executor.1 [ 2049.844562][T15645] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2049.878569][T15642] oom_kill_process: 13 callbacks suppressed [ 2049.878581][T15642] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2049.894791][T15642] CPU: 0 PID: 15642 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2049.903529][T15642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2049.913646][T15642] Call Trace: [ 2049.916958][T15642] [ 2049.919939][T15642] dump_stack_lvl+0xda/0x130 [ 2049.924533][T15642] dump_stack+0x15/0x20 [ 2049.928719][T15642] dump_header+0x95/0x3c0 [ 2049.933154][T15642] oom_kill_process+0xe3/0x3e0 [ 2049.937944][T15642] out_of_memory+0x9f0/0xc30 [ 2049.942532][T15642] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2049.948616][T15642] mem_cgroup_out_of_memory+0x139/0x190 [ 2049.954167][T15642] try_charge_memcg+0x759/0xd20 [ 2049.959148][T15642] charge_memcg+0x51/0x200 [ 2049.963719][T15642] __mem_cgroup_charge+0x29/0xa0 [ 2049.968691][T15642] handle_mm_fault+0xcea/0x21d0 [ 2049.973557][T15642] exc_page_fault+0x45f/0x640 02:11:09 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 2049.978245][T15642] asm_exc_page_fault+0x26/0x30 [ 2049.983128][T15642] RIP: 0033:0x7f0cbc470de9 [ 2049.987799][T15642] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2050.007417][T15642] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2050.013484][T15642] RAX: 0000000020001140 RBX: 0000000000000000 RCX: 0000000000000000 [ 2050.021573][T15642] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 000055555612b2e8 02:11:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000200030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xb00}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2050.029578][T15642] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2050.037621][T15642] R10: 00007f0cbc045910 R11: 0000000000000246 R12: 00000000001f461a [ 2050.045588][T15642] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2050.053636][T15642] [ 2050.056816][T15642] memory: usage 307200kB, limit 307200kB, failcnt 4695 [ 2050.063752][T15642] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2050.070616][T15642] Memory cgroup stats for /syz3: [ 2050.070919][T15642] anon 143360 02:11:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3f2, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2050.070919][T15642] file 114688 [ 2050.070919][T15642] kernel 314314752 [ 2050.070919][T15642] kernel_stack 32768 [ 2050.070919][T15642] pagetables 73728 [ 2050.070919][T15642] sec_pagetables 0 [ 2050.070919][T15642] percpu 11058880 [ 2050.070919][T15642] sock 0 [ 2050.070919][T15642] vmalloc 0 [ 2050.070919][T15642] shmem 114688 [ 2050.070919][T15642] file_mapped 114688 [ 2050.070919][T15642] file_dirty 0 [ 2050.070919][T15642] file_writeback 0 [ 2050.070919][T15642] swapcached 0 [ 2050.070919][T15642] inactive_anon 126976 [ 2050.070919][T15642] active_anon 86016 [ 2050.070919][T15642] inactive_file 0 [ 2050.070919][T15642] active_file 0 [ 2050.070919][T15642] unevictable 0 [ 2050.070919][T15642] slab_reclaimable 13480 [ 2050.070919][T15642] slab_unreclaimable 303085232 [ 2050.070919][T15642] slab 303098712 [ 2050.070919][T15642] workingset_refault_anon 0 [ 2050.070919][T15642] workingset_refault_file 2 [ 2050.070919][T15642] workingset_activate_anon 0 [ 2050.070919][T15642] workingset_activate_file 0 [ 2050.070919][T15642] workingset_restore_anon 0 [ 2050.070919][T15642] workingset_restore_file 0 [ 2050.070919][T15642] workingset_nodereclaim 0 [ 2050.070919][T15642] pgscan 185 [ 2050.070919][T15642] pgsteal 20 [ 2050.070919][T15642] pgscan_kswapd 0 [ 2050.070919][T15642] pgscan_direct 185 [ 2050.070919][T15642] pgscan_khugepaged 0 [ 2050.070919][T15642] pgsteal_kswapd 0 [ 2050.070919][T15642] pgsteal_direct 20 [ 2050.070919][T15642] pgsteal_khugepaged 0 [ 2050.070919][T15642] pgfault 897844 [ 2050.070919][T15642] pgmajfault 9 [ 2050.070919][T15642] pgrefill 194 [ 2050.070919][T15642] pgactivate 2491 [ 2050.070919][T15642] pgdeactivate 276 [ 2050.070919][T15642] pglazyfree 0 [ 2050.070919][T15642] pglazyfreed 0 [ 2050.234642][T15642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15642,uid=0 [ 2050.249960][T15642] Memory cgroup out of memory: Killed process 15642 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:09 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) 02:11:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000400030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2050.277599][T15655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=15655 comm=syz-executor.1 [ 2050.314086][T15652] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2050.386873][T15662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=15662 comm=syz-executor.1 [ 2050.417212][T15658] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2050.429404][T15658] CPU: 1 PID: 15658 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2050.438141][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2050.448202][T15658] Call Trace: [ 2050.451479][T15658] [ 2050.454541][T15658] dump_stack_lvl+0xda/0x130 [ 2050.459133][T15658] dump_stack+0x15/0x20 [ 2050.463372][T15658] dump_header+0x95/0x3c0 [ 2050.467703][T15658] oom_kill_process+0xe3/0x3e0 [ 2050.472498][T15658] out_of_memory+0x9f0/0xc30 [ 2050.477118][T15658] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2050.483343][T15658] mem_cgroup_out_of_memory+0x139/0x190 [ 2050.488934][T15658] try_charge_memcg+0x759/0xd20 [ 2050.493880][T15658] obj_cgroup_charge_pages+0xab/0x130 [ 2050.499296][T15658] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2050.504880][T15658] __alloc_pages+0x1bb/0x340 [ 2050.509486][T15658] alloc_pages+0x3e1/0x4e0 [ 2050.513955][T15658] pte_alloc_one+0x2d/0xc0 [ 2050.518474][T15658] __pte_alloc+0x33/0x1f0 [ 2050.523019][T15658] handle_mm_fault+0x1ce0/0x21d0 [ 2050.528040][T15658] exc_page_fault+0x45f/0x640 [ 2050.532784][T15658] asm_exc_page_fault+0x26/0x30 [ 2050.537653][T15658] RIP: 0033:0x7f0cbc470de9 [ 2050.542146][T15658] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2050.561815][T15658] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2050.567954][T15658] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2050.576119][T15658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2050.584092][T15658] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2050.592067][T15658] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000001f4851 [ 2050.600083][T15658] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2050.608060][T15658] [ 2050.611315][T15658] memory: usage 307200kB, limit 307200kB, failcnt 4774 [ 2050.618165][T15658] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2050.625030][T15658] Memory cgroup stats for /syz3: [ 2050.625289][T15658] anon 139264 [ 2050.625289][T15658] file 114688 [ 2050.625289][T15658] kernel 314318848 [ 2050.625289][T15658] kernel_stack 32768 [ 2050.625289][T15658] pagetables 69632 [ 2050.625289][T15658] sec_pagetables 0 [ 2050.625289][T15658] percpu 11058944 [ 2050.625289][T15658] sock 0 [ 2050.625289][T15658] vmalloc 0 [ 2050.625289][T15658] shmem 114688 [ 2050.625289][T15658] file_mapped 114688 [ 2050.625289][T15658] file_dirty 0 [ 2050.625289][T15658] file_writeback 0 [ 2050.625289][T15658] swapcached 0 [ 2050.625289][T15658] inactive_anon 163840 [ 2050.625289][T15658] active_anon 86016 [ 2050.625289][T15658] inactive_file 0 [ 2050.625289][T15658] active_file 0 [ 2050.625289][T15658] unevictable 0 [ 2050.625289][T15658] slab_reclaimable 10552 [ 2050.625289][T15658] slab_unreclaimable 303090992 [ 2050.625289][T15658] slab 303101544 [ 2050.625289][T15658] workingset_refault_anon 0 [ 2050.625289][T15658] workingset_refault_file 2 [ 2050.625289][T15658] workingset_activate_anon 0 [ 2050.625289][T15658] workingset_activate_file 0 [ 2050.625289][T15658] workingset_restore_anon 0 [ 2050.625289][T15658] workingset_restore_file 0 [ 2050.625289][T15658] workingset_nodereclaim 0 [ 2050.625289][T15658] pgscan 185 [ 2050.625289][T15658] pgsteal 20 [ 2050.625289][T15658] pgscan_kswapd 0 [ 2050.625289][T15658] pgscan_direct 185 [ 2050.625289][T15658] pgscan_khugepaged 0 [ 2050.625289][T15658] pgsteal_kswapd 0 [ 2050.625289][T15658] pgsteal_direct 20 [ 2050.625289][T15658] pgsteal_khugepaged 0 [ 2050.625289][T15658] pgfault 897904 [ 2050.625289][T15658] pgmajfault 9 [ 2050.625289][T15658] pgrefill 194 [ 2050.625289][T15658] pgactivate 2491 [ 2050.625289][T15658] pgdeactivate 276 [ 2050.625289][T15658] pglazyfree 0 [ 2050.625289][T15658] pglazyfreed 0 [ 2050.789038][T15658] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15658,uid=0 [ 2050.804296][T15658] Memory cgroup out of memory: Killed process 15658 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2051.119750][ T23] audit: type=1400 audit(1681783870.568:406): avc: denied { read } for pid=2783 comm="dhcpcd" name="n26" dev="tmpfs" ino=133050 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2051.141544][ T23] audit: type=1400 audit(1681783870.568:407): avc: denied { open } for pid=2783 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=133050 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2051.169586][ T23] audit: type=1400 audit(1681783870.568:408): avc: denied { getattr } for pid=2783 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=133050 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2051.197166][ T23] audit: type=1400 audit(1681783870.648:409): avc: denied { search } for pid=15665 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2051.221771][ T23] audit: type=1400 audit(1681783870.648:410): avc: denied { read } for pid=15666 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2051.244755][ T23] audit: type=1400 audit(1681783870.648:411): avc: denied { open } for pid=15666 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2051.269719][ T23] audit: type=1400 audit(1681783870.648:412): avc: denied { getattr } for pid=15666 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2051.316178][ T23] audit: type=1400 audit(1681783870.768:413): avc: denied { write } for pid=15665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=336 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2051.339345][ T23] audit: type=1400 audit(1681783870.768:414): avc: denied { add_name } for pid=15665 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2051.361875][ T23] audit: type=1400 audit(1681783870.768:415): avc: denied { create } for pid=15665 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2052.377613][T17249] hsr_slave_0: left promiscuous mode [ 2052.383244][T17249] hsr_slave_1: left promiscuous mode [ 2052.388725][T17249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2052.409702][T17249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2052.428359][T17249] bridge_slave_0: left allmulticast mode [ 2052.434021][T17249] bridge_slave_0: left promiscuous mode [ 2052.439638][T17249] bridge0: port 1(bridge_slave_0) entered disabled state [ 2052.499844][T17249] veth1_vlan: left allmulticast mode [ 2088.863793][T17249] bond2 (unregistering): Released all slaves [ 2088.874048][T17249] bond1 (unregistering): Released all slaves [ 2088.946048][T17249] team0 (unregistering): Port device team_slave_1 removed [ 2088.959105][T17249] team0 (unregistering): Port device team_slave_0 removed [ 2088.973333][T17249] 0ªX (unregistering): (slave bond_slave_1): Releasing backup interface [ 2088.987909][T17249] 0ªX (unregistering): (slave bond_slave_0): Releasing backup interface [ 2089.057740][T17249] 0ªX (unregistering): Released all slaves [ 2089.551451][T15752] chnl_net:caif_netlink_parms(): no params data found [ 2089.675362][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 2089.682448][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.691824][T15752] bridge_slave_0: entered allmulticast mode [ 2089.706825][T15752] bridge_slave_0: entered promiscuous mode [ 2089.719651][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 2089.726807][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.739742][T15752] bridge_slave_1: entered allmulticast mode [ 2089.752135][T15752] bridge_slave_1: entered promiscuous mode [ 2089.816284][T15752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2089.842731][T15752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2089.901831][T15752] team0: Port device team_slave_0 added [ 2089.919801][T15752] team0: Port device team_slave_1 added [ 2089.971356][T15752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2089.978359][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2090.004309][T15752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2090.026969][T15752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2090.034009][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2090.059900][T15752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2090.134873][T15752] hsr_slave_0: entered promiscuous mode [ 2090.148984][T15752] hsr_slave_1: entered promiscuous mode [ 2090.159035][T15752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2090.166586][T15752] Cannot create hsr debugfs directory [ 2090.998904][T15752] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2091.015868][T15752] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2091.031586][T15752] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2091.045314][T15752] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2091.166856][T15752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2091.197900][ T886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2091.207486][ T886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2091.226196][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 2091.245555][ T886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2091.258356][ T886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2091.266894][ T886] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.273948][ T886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2091.296417][ T886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2091.307694][ T886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2091.326069][ T886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2091.339212][ T886] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.346308][ T886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2091.370018][ T886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2091.394432][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2091.414303][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2091.426738][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2091.447398][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2091.459053][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2091.474164][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2091.502490][ T2124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2091.513548][ T2124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2091.525017][ T2124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2091.535734][ T2124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2091.551446][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2091.622381][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2091.633055][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2091.645304][T15752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2091.725991][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2091.737118][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2091.844410][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2091.856291][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2091.866612][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2091.878269][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2091.890402][T15752] veth0_vlan: entered promiscuous mode [ 2091.910007][T15752] veth1_vlan: entered promiscuous mode [ 2091.946892][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2091.961992][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2091.973185][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2091.983432][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2092.001812][T15752] veth0_macvtap: entered promiscuous mode [ 2092.017949][T15752] veth1_macvtap: entered promiscuous mode [ 2092.047193][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.057662][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.067568][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.078064][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.087875][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.098300][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.108128][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.118543][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.139650][T15752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2092.149335][T15975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2092.159274][T15975] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2092.169061][T15975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2092.181242][T15975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2092.197384][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2092.207874][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.217741][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2092.228151][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.237998][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2092.248424][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.258263][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2092.268731][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.289524][T15752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2092.301229][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2092.311644][ T3218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2092.332645][T15752] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.341500][T15752] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.350254][T15752] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.359020][T15752] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 02:11:51 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe0, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:51 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xc00}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000800030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3f6, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x10000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:51 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x0) 02:11:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000a00030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2092.462312][T16122] __nla_validate_parse: 7 callbacks suppressed [ 2092.462325][T16122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2092.478081][T16123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=16123 comm=syz-executor.1 [ 2092.558185][T16136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=16136 comm=syz-executor.1 02:11:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700200001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700300001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:52 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x12}, 0x0) 02:11:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700400001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:52 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe1, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:52 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xd00}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2092.649894][T16119] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2092.658065][T16119] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2092.683834][T16130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700500001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700600001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2092.774278][T16130] syz-executor.3 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 2092.785511][T16130] CPU: 1 PID: 16130 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2092.794198][T16130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2092.804353][T16130] Call Trace: [ 2092.807636][T16130] [ 2092.810646][T16130] dump_stack_lvl+0xda/0x130 [ 2092.815257][T16130] dump_stack+0x15/0x20 [ 2092.819419][T16130] dump_header+0x95/0x3c0 [ 2092.823771][T16130] oom_kill_process+0xe3/0x3e0 [ 2092.828579][T16130] out_of_memory+0x9f0/0xc30 [ 2092.833321][T16130] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2092.839402][T16130] mem_cgroup_out_of_memory+0x139/0x190 [ 2092.845177][T16130] try_charge_memcg+0x759/0xd20 [ 2092.850032][T16130] ? delete_node+0x407/0x450 [ 2092.854622][T16130] obj_cgroup_charge_pages+0xab/0x130 [ 2092.859978][T16130] obj_cgroup_charge+0xe9/0x140 [ 2092.864815][T16130] slab_pre_alloc_hook+0x112/0x180 [ 2092.870013][T16130] ? neigh_sysctl_register+0x62/0x3a0 [ 2092.875379][T16130] __kmem_cache_alloc_node+0x46/0x250 [ 2092.880728][T16130] ? __stack_depot_save+0x7d/0x710 [ 2092.885857][T16130] ? neigh_sysctl_register+0x62/0x3a0 [ 2092.891217][T16130] __kmalloc_node_track_caller+0x96/0x1a0 [ 2092.896954][T16130] kmemdup+0x2a/0x60 [ 2092.900845][T16130] neigh_sysctl_register+0x62/0x3a0 [ 2092.906041][T16130] ? ref_tracker_alloc+0x199/0x2e0 [ 2092.911137][T16130] ? inetdev_init+0x198/0x360 [ 2092.915888][T16130] ? inetdev_event+0x318/0xaf0 [ 2092.920698][T16130] ? raw_notifier_call_chain+0x54/0xb0 [ 2092.926230][T16130] ? call_netdevice_notifiers+0xc8/0x130 [ 2092.931851][T16130] ? netlink_sendmsg+0x665/0x770 [ 2092.936769][T16130] ? ____sys_sendmsg+0x375/0x4c0 [ 2092.941802][T16130] devinet_sysctl_register+0x75/0x130 [ 2092.947192][T16130] inetdev_init+0x1f5/0x360 [ 2092.951701][T16130] inetdev_event+0x318/0xaf0 [ 2092.956276][T16130] ? netdev_upper_walk+0x160/0x160 [ 2092.961369][T16130] ? add_default_gids+0xb0/0xb0 [ 2092.966199][T16130] ? is_ndev_for_default_gid_filter+0x140/0x140 [ 2092.972483][T16130] ? enum_all_gids_of_dev_cb+0x320/0x320 [ 2092.978097][T16130] ? del_netdev_ips+0x30/0x30 [ 2092.982756][T16130] raw_notifier_call_chain+0x54/0xb0 [ 2092.988094][T16130] call_netdevice_notifiers+0xc8/0x130 [ 2092.993550][T16130] register_netdevice+0xb37/0xcd0 [ 2092.998576][T16130] veth_newlink+0x408/0x840 [ 2093.003115][T16130] ? veth_validate+0x100/0x100 [ 2093.007885][T16130] rtnl_newlink+0xe5a/0x15a0 [ 2093.012474][T16130] ? mutex_spin_on_owner+0xc6/0x170 [ 2093.017657][T16130] ? __list_del_entry_valid+0x5f/0xe0 [ 2093.023010][T16130] ? _raw_spin_unlock+0x26/0x40 [ 2093.027853][T16130] ? __mutex_lock+0x21c/0x8d0 [ 2093.032532][T16130] ? rtnl_setlink+0x2d0/0x2d0 [ 2093.037192][T16130] rtnetlink_rcv_msg+0x807/0x8c0 [ 2093.042159][T16130] ? cmp_ex_search+0x56/0x60 [ 2093.046854][T16130] ? bsearch+0x92/0xb0 [ 2093.051000][T16130] ? search_extable+0x80/0x80 [ 2093.055675][T16130] ? copy_user_enhanced_fast_string+0x27/0x40 [ 2093.061797][T16130] ? search_extable+0x54/0x80 [ 2093.066548][T16130] ? copy_user_enhanced_fast_string+0x27/0x40 [ 2093.072608][T16130] ? copy_user_enhanced_fast_string+0x27/0x40 [ 2093.078672][T16130] ? kmem_cache_free+0x178/0x280 [ 2093.083655][T16130] ? nlmon_xmit+0x4b/0x60 [ 2093.088023][T16130] ? __kfree_skb+0x102/0x140 [ 2093.092637][T16130] ? consume_skb+0x57/0x180 [ 2093.097123][T16130] ? nlmon_xmit+0x4b/0x60 [ 2093.101517][T16130] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 2093.106785][T16130] ? ref_tracker_free+0x3a1/0x400 [ 2093.111790][T16130] ? local_bh_enable+0x1f/0x20 [ 2093.116568][T16130] ? __dev_queue_xmit+0xbba/0x1e60 [ 2093.121798][T16130] netlink_rcv_skb+0x126/0x220 [ 2093.126590][T16130] ? rtnetlink_bind+0x60/0x60 [ 2093.131297][T16130] rtnetlink_rcv+0x1c/0x20 [ 2093.135772][T16130] netlink_unicast+0x56f/0x640 [ 2093.140609][T16130] netlink_sendmsg+0x665/0x770 [ 2093.145463][T16130] ? netlink_getsockopt+0x710/0x710 [ 2093.151226][T16130] ____sys_sendmsg+0x375/0x4c0 [ 2093.155980][T16130] __sys_sendmsg+0x1e3/0x270 [ 2093.160631][T16130] __x64_sys_sendmsg+0x46/0x50 [ 2093.165445][T16130] do_syscall_64+0x41/0xc0 [ 2093.169917][T16130] ? syscall_exit_to_user_mode+0x26/0x140 [ 2093.175689][T16130] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2093.182397][T16130] RIP: 0033:0x7f0cbc4d1169 [ 2093.186814][T16130] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2093.206404][T16130] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2093.214821][T16130] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2093.222853][T16130] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 2093.231075][T16130] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2093.239037][T16130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2093.246992][T16130] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2093.254955][T16130] [ 2093.257978][T16130] memory: usage 307200kB, limit 307200kB, failcnt 4861 [ 2093.264818][T16130] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2093.271763][T16130] Memory cgroup stats for /syz3: [ 2093.272005][T16130] anon 151552 [ 2093.272005][T16130] file 114688 [ 2093.272005][T16130] kernel 314306560 [ 2093.272005][T16130] kernel_stack 49152 [ 2093.272005][T16130] pagetables 73728 [ 2093.272005][T16130] sec_pagetables 0 [ 2093.272005][T16130] percpu 11058624 [ 2093.272005][T16130] sock 0 [ 2093.272005][T16130] vmalloc 0 [ 2093.272005][T16130] shmem 114688 [ 2093.272005][T16130] file_mapped 114688 [ 2093.272005][T16130] file_dirty 0 [ 2093.272005][T16130] file_writeback 0 [ 2093.272005][T16130] swapcached 0 [ 2093.272005][T16130] inactive_anon 180224 [ 2093.272005][T16130] active_anon 86016 [ 2093.272005][T16130] inactive_file 0 [ 2093.272005][T16130] active_file 0 [ 2093.272005][T16130] unevictable 0 [ 2093.272005][T16130] slab_reclaimable 13480 [ 2093.272005][T16130] slab_unreclaimable 303076408 [ 2093.272005][T16130] slab 303089888 [ 2093.272005][T16130] workingset_refault_anon 0 [ 2093.272005][T16130] workingset_refault_file 2 [ 2093.272005][T16130] workingset_activate_anon 0 [ 2093.272005][T16130] workingset_activate_file 0 [ 2093.272005][T16130] workingset_restore_anon 0 [ 2093.272005][T16130] workingset_restore_file 0 [ 2093.272005][T16130] workingset_nodereclaim 0 [ 2093.272005][T16130] pgscan 185 [ 2093.272005][T16130] pgsteal 20 [ 2093.272005][T16130] pgscan_kswapd 0 [ 2093.272005][T16130] pgscan_direct 185 [ 2093.272005][T16130] pgscan_khugepaged 0 [ 2093.272005][T16130] pgsteal_kswapd 0 [ 2093.272005][T16130] pgsteal_direct 20 [ 2093.272005][T16130] pgsteal_khugepaged 0 [ 2093.272005][T16130] pgfault 897966 [ 2093.272005][T16130] pgmajfault 9 [ 2093.272005][T16130] pgrefill 194 [ 2093.272005][T16130] pgactivate 2491 02:11:52 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3f8, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2093.272005][T16130] pgdeactivate 276 [ 2093.272005][T16130] pglazyfree 0 [ 2093.272005][T16130] pglazyfreed 0 [ 2093.435708][T16130] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16120,uid=0 [ 2093.450989][T16130] Memory cgroup out of memory: Killed process 16130 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x34dc4cb9, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700700001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x25}, 0x0) 02:11:53 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xe00}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2093.522845][T16158] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2093.531092][T16158] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe2, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700800001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700900001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2093.570437][T16176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700a00001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2093.668121][T16181] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2093.678416][T16181] CPU: 1 PID: 16181 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2093.687088][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2093.697143][T16181] Call Trace: [ 2093.700416][T16181] [ 2093.703346][T16181] dump_stack_lvl+0xda/0x130 [ 2093.707959][T16181] dump_stack+0x15/0x20 [ 2093.712191][T16181] dump_header+0x95/0x3c0 [ 2093.716620][T16181] oom_kill_process+0xe3/0x3e0 [ 2093.721460][T16181] out_of_memory+0x9f0/0xc30 [ 2093.726048][T16181] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2093.732119][T16181] mem_cgroup_out_of_memory+0x139/0x190 [ 2093.737674][T16181] try_charge_memcg+0x759/0xd20 [ 2093.742560][T16181] obj_cgroup_charge_pages+0xab/0x130 [ 2093.747932][T16181] obj_cgroup_charge+0xe9/0x140 [ 2093.752790][T16181] slab_pre_alloc_hook+0x112/0x180 [ 2093.757913][T16181] kmem_cache_alloc+0x58/0x260 [ 2093.762742][T16181] ? alloc_pid+0x71/0x6b0 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700b00001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700c00001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700d00001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2093.767080][T16181] ? local_bh_enable+0x1f/0x20 [ 2093.771879][T16181] alloc_pid+0x71/0x6b0 [ 2093.776055][T16181] ? copy_thread+0x191/0x250 [ 2093.780668][T16181] copy_process+0x1055/0x2100 [ 2093.785416][T16181] ? __rcu_read_unlock+0x4d/0x70 [ 2093.790361][T16181] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 2093.795989][T16181] kernel_clone+0x169/0x560 [ 2093.800503][T16181] __x64_sys_clone+0xdf/0x110 [ 2093.805195][T16181] do_syscall_64+0x41/0xc0 [ 2093.809637][T16181] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2093.815548][T16181] RIP: 0033:0x7f0cbc4d2591 [ 2093.820035][T16181] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2093.839643][T16181] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2093.848054][T16181] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2093.856023][T16181] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2093.864044][T16181] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2093.872076][T16181] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2093.880035][T16181] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2093.888011][T16181] [ 2093.891232][T16181] memory: usage 307200kB, limit 307200kB, failcnt 4979 [ 2093.898071][T16181] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2093.904914][T16181] Memory cgroup stats for /syz3: [ 2093.905191][T16181] anon 151552 [ 2093.905191][T16181] file 114688 [ 2093.905191][T16181] kernel 314306560 [ 2093.905191][T16181] kernel_stack 49152 [ 2093.905191][T16181] pagetables 73728 [ 2093.905191][T16181] sec_pagetables 0 [ 2093.905191][T16181] percpu 11058688 [ 2093.905191][T16181] sock 0 [ 2093.905191][T16181] vmalloc 0 [ 2093.905191][T16181] shmem 114688 [ 2093.905191][T16181] file_mapped 114688 [ 2093.905191][T16181] file_dirty 0 [ 2093.905191][T16181] file_writeback 0 [ 2093.905191][T16181] swapcached 0 [ 2093.905191][T16181] inactive_anon 172032 [ 2093.905191][T16181] active_anon 86016 [ 2093.905191][T16181] inactive_file 0 [ 2093.905191][T16181] active_file 0 [ 2093.905191][T16181] unevictable 0 [ 2093.905191][T16181] slab_reclaimable 13480 [ 2093.905191][T16181] slab_unreclaimable 303072720 [ 2093.905191][T16181] slab 303086200 [ 2093.905191][T16181] workingset_refault_anon 0 [ 2093.905191][T16181] workingset_refault_file 2 [ 2093.905191][T16181] workingset_activate_anon 0 [ 2093.905191][T16181] workingset_activate_file 0 [ 2093.905191][T16181] workingset_restore_anon 0 [ 2093.905191][T16181] workingset_restore_file 0 [ 2093.905191][T16181] workingset_nodereclaim 0 [ 2093.905191][T16181] pgscan 185 [ 2093.905191][T16181] pgsteal 20 [ 2093.905191][T16181] pgscan_kswapd 0 [ 2093.905191][T16181] pgscan_direct 185 [ 2093.905191][T16181] pgscan_khugepaged 0 [ 2093.905191][T16181] pgsteal_kswapd 0 [ 2093.905191][T16181] pgsteal_direct 20 [ 2093.905191][T16181] pgsteal_khugepaged 0 [ 2093.905191][T16181] pgfault 898031 [ 2093.905191][T16181] pgmajfault 9 [ 2093.905191][T16181] pgrefill 194 [ 2093.905191][T16181] pgactivate 2491 [ 2093.905191][T16181] pgdeactivate 276 [ 2093.905191][T16181] pglazyfree 0 [ 2093.905191][T16181] pglazyfreed 0 [ 2094.068969][T16181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16181,uid=0 [ 2094.084246][T16181] Memory cgroup out of memory: Killed process 16181 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3fa, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2094.138994][T16187] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2094.147164][T16187] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2094.157455][T16185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700e00001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:53 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2f}, 0x0) 02:11:53 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xf00}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:53 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe3, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700f00001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2094.240344][T16221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2094.340955][T16239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="701000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="701100001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="701200001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="702500001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2094.422963][T16239] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2094.435305][T16239] CPU: 1 PID: 16239 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2094.443987][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2094.454119][T16239] Call Trace: [ 2094.457390][T16239] [ 2094.460322][T16239] dump_stack_lvl+0xda/0x130 [ 2094.464931][T16239] dump_stack+0x15/0x20 [ 2094.469087][T16239] dump_header+0x95/0x3c0 02:11:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="706000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2094.473470][T16239] oom_kill_process+0xe3/0x3e0 [ 2094.478311][T16239] out_of_memory+0x9f0/0xc30 [ 2094.482977][T16239] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2094.489087][T16239] mem_cgroup_out_of_memory+0x139/0x190 [ 2094.494669][T16239] try_charge_memcg+0x759/0xd20 [ 2094.499576][T16239] ? __radix_tree_replace+0x1c1/0x1f0 [ 2094.504992][T16239] obj_cgroup_charge_pages+0xab/0x130 [ 2094.510378][T16239] obj_cgroup_charge+0xe9/0x140 [ 2094.515250][T16239] slab_pre_alloc_hook+0x112/0x180 [ 2094.520377][T16239] __kmem_cache_alloc_node+0x46/0x250 [ 2094.525762][T16239] ? __register_sysctl_table+0x93/0xc80 [ 2094.531338][T16239] __kmalloc+0x95/0x1a0 [ 2094.535516][T16239] __register_sysctl_table+0x93/0xc80 [ 2094.540960][T16239] register_net_sysctl+0x19d/0x1b0 [ 2094.546157][T16239] neigh_sysctl_register+0x326/0x3a0 [ 2094.551455][T16239] ? netlink_sendmsg+0x665/0x770 [ 2094.556481][T16239] ? ____sys_sendmsg+0x375/0x4c0 [ 2094.561413][T16239] devinet_sysctl_register+0x75/0x130 [ 2094.566771][T16239] inetdev_init+0x1f5/0x360 [ 2094.571283][T16239] inetdev_event+0x318/0xaf0 [ 2094.575971][T16239] ? netdev_upper_walk+0x160/0x160 [ 2094.581073][T16239] ? add_default_gids+0xb0/0xb0 [ 2094.585954][T16239] ? is_ndev_for_default_gid_filter+0x140/0x140 [ 2094.592183][T16239] ? enum_all_gids_of_dev_cb+0x320/0x320 [ 2094.597824][T16239] ? del_netdev_ips+0x30/0x30 [ 2094.602555][T16239] raw_notifier_call_chain+0x54/0xb0 [ 2094.607826][T16239] call_netdevice_notifiers+0xc8/0x130 [ 2094.613278][T16239] register_netdevice+0xb37/0xcd0 [ 2094.618319][T16239] veth_newlink+0x408/0x840 [ 2094.622868][T16239] ? veth_validate+0x100/0x100 [ 2094.627642][T16239] rtnl_newlink+0xe5a/0x15a0 [ 2094.632295][T16239] ? __mutex_lock+0x54/0x8d0 [ 2094.636872][T16239] ? rtnl_setlink+0x2d0/0x2d0 [ 2094.641539][T16239] rtnetlink_rcv_msg+0x807/0x8c0 [ 2094.646518][T16239] ? cmp_ex_search+0x56/0x60 [ 2094.651133][T16239] ? bsearch+0x92/0xb0 [ 2094.655195][T16239] ? search_extable+0x80/0x80 [ 2094.659921][T16239] ? copy_user_enhanced_fast_string+0x27/0x40 [ 2094.666015][T16239] ? search_extable+0x54/0x80 [ 2094.670741][T16239] ? copy_user_enhanced_fast_string+0x27/0x40 [ 2094.676816][T16239] ? copy_user_enhanced_fast_string+0x27/0x40 [ 2094.682936][T16239] ? kmem_cache_free+0x178/0x280 [ 2094.687884][T16239] ? nlmon_xmit+0x4b/0x60 [ 2094.692251][T16239] ? __kfree_skb+0x102/0x140 [ 2094.696850][T16239] ? consume_skb+0x57/0x180 [ 2094.701353][T16239] ? nlmon_xmit+0x4b/0x60 [ 2094.705735][T16239] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 2094.711083][T16239] ? ref_tracker_free+0x3a1/0x400 [ 2094.716120][T16239] ? local_bh_enable+0x1f/0x20 [ 2094.720931][T16239] ? __dev_queue_xmit+0xbba/0x1e60 [ 2094.726035][T16239] netlink_rcv_skb+0x126/0x220 [ 2094.730786][T16239] ? rtnetlink_bind+0x60/0x60 [ 2094.735454][T16239] rtnetlink_rcv+0x1c/0x20 [ 2094.739880][T16239] netlink_unicast+0x56f/0x640 [ 2094.744640][T16239] netlink_sendmsg+0x665/0x770 [ 2094.749477][T16239] ? netlink_getsockopt+0x710/0x710 [ 2094.754720][T16239] ____sys_sendmsg+0x375/0x4c0 [ 2094.759495][T16239] __sys_sendmsg+0x1e3/0x270 [ 2094.764142][T16239] __x64_sys_sendmsg+0x46/0x50 [ 2094.768908][T16239] do_syscall_64+0x41/0xc0 [ 2094.773374][T16239] ? syscall_exit_to_user_mode+0x26/0x140 [ 2094.779082][T16239] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2094.784968][T16239] RIP: 0033:0x7f0cbc4d1169 [ 2094.789419][T16239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2094.809084][T16239] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2094.817481][T16239] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2094.825439][T16239] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 2094.838193][T16239] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2094.846158][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2094.854111][T16239] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2094.862102][T16239] [ 2094.865150][T16239] memory: usage 307200kB, limit 307200kB, failcnt 5167 [ 2094.872004][T16239] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2094.878877][T16239] Memory cgroup stats for /syz3: [ 2094.879086][T16239] anon 143360 [ 2094.879086][T16239] file 114688 [ 2094.879086][T16239] kernel 314314752 [ 2094.879086][T16239] kernel_stack 32768 [ 2094.879086][T16239] pagetables 73728 [ 2094.879086][T16239] sec_pagetables 0 [ 2094.879086][T16239] percpu 11058752 [ 2094.879086][T16239] sock 0 [ 2094.879086][T16239] vmalloc 0 [ 2094.879086][T16239] shmem 114688 [ 2094.879086][T16239] file_mapped 114688 [ 2094.879086][T16239] file_dirty 0 [ 2094.879086][T16239] file_writeback 0 [ 2094.879086][T16239] swapcached 0 [ 2094.879086][T16239] inactive_anon 172032 [ 2094.879086][T16239] active_anon 86016 [ 2094.879086][T16239] inactive_file 0 [ 2094.879086][T16239] active_file 0 [ 2094.879086][T16239] unevictable 0 [ 2094.879086][T16239] slab_reclaimable 13480 [ 2094.879086][T16239] slab_unreclaimable 303094408 [ 2094.879086][T16239] slab 303107888 [ 2094.879086][T16239] workingset_refault_anon 0 [ 2094.879086][T16239] workingset_refault_file 2 [ 2094.879086][T16239] workingset_activate_anon 0 [ 2094.879086][T16239] workingset_activate_file 0 [ 2094.879086][T16239] workingset_restore_anon 0 [ 2094.879086][T16239] workingset_restore_file 0 [ 2094.879086][T16239] workingset_nodereclaim 0 [ 2094.879086][T16239] pgscan 185 [ 2094.879086][T16239] pgsteal 20 [ 2094.879086][T16239] pgscan_kswapd 0 [ 2094.879086][T16239] pgscan_direct 185 [ 2094.879086][T16239] pgscan_khugepaged 0 [ 2094.879086][T16239] pgsteal_kswapd 0 [ 2094.879086][T16239] pgsteal_direct 20 [ 2094.879086][T16239] pgsteal_khugepaged 0 [ 2094.879086][T16239] pgfault 898092 [ 2094.879086][T16239] pgmajfault 9 [ 2094.879086][T16239] pgrefill 194 [ 2094.879086][T16239] pgactivate 2491 [ 2094.879086][T16239] pgdeactivate 276 [ 2094.879086][T16239] pglazyfree 0 [ 2094.879086][T16239] pglazyfreed 0 [ 2095.042859][T16239] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16238,uid=0 [ 2095.058164][T16239] Memory cgroup out of memory: Killed process 16238 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:54 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3fc, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2095.096687][T16232] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2095.104874][T16232] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x65580000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700003001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:54 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x3a}, 0x0) 02:11:54 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1100}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2095.140100][T16239] syz-executor.3 (16239) used greatest stack depth: 8624 bytes left 02:11:54 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe4, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700005001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700006001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2095.267105][T16275] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2095.277315][T16275] CPU: 1 PID: 16275 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2095.285987][T16275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2095.296034][T16275] Call Trace: [ 2095.299308][T16275] [ 2095.302261][T16275] dump_stack_lvl+0xda/0x130 [ 2095.306862][T16275] dump_stack+0x15/0x20 [ 2095.311053][T16275] dump_header+0x95/0x3c0 [ 2095.315443][T16275] oom_kill_process+0xe3/0x3e0 [ 2095.320240][T16275] out_of_memory+0x9f0/0xc30 [ 2095.324845][T16275] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2095.330777][T16274] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2095.330907][T16275] mem_cgroup_out_of_memory+0x139/0x190 [ 2095.344643][T16275] try_charge_memcg+0x759/0xd20 [ 2095.349509][T16275] ? __rmqueue_pcplist+0x9d0/0xa50 [ 2095.354691][T16275] ? shrink_node+0x146c/0x14f0 [ 2095.359468][T16275] obj_cgroup_charge_pages+0xab/0x130 02:11:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700007001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:54 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x0) 02:11:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700009001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:54 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3fe, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:54 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1200}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2095.364916][T16275] obj_cgroup_charge+0xe9/0x140 [ 2095.370041][T16275] slab_pre_alloc_hook+0x112/0x180 [ 2095.375173][T16275] kmem_cache_alloc_node+0x5d/0x2e0 [ 2095.380372][T16275] ? dup_task_struct+0x60/0x450 [ 2095.385239][T16275] dup_task_struct+0x60/0x450 [ 2095.389947][T16275] copy_process+0x396/0x2100 [ 2095.394563][T16275] ? __rcu_read_unlock+0x4d/0x70 [ 2095.399516][T16275] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 2095.405058][T16275] kernel_clone+0x169/0x560 [ 2095.409570][T16275] __x64_sys_clone+0xdf/0x110 [ 2095.414330][T16275] do_syscall_64+0x41/0xc0 [ 2095.418792][T16275] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2095.424709][T16275] RIP: 0033:0x7f0cbc4d2591 [ 2095.429120][T16275] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2095.448790][T16275] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2095.457201][T16275] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2095.465246][T16275] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2095.473223][T16275] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2095.481239][T16275] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2095.489209][T16275] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2095.497225][T16275] [ 2095.500343][T16275] memory: usage 307200kB, limit 307200kB, failcnt 5335 [ 2095.507184][T16275] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2095.514040][T16275] Memory cgroup stats for /syz3: [ 2095.514400][T16275] anon 151552 [ 2095.514400][T16275] file 114688 [ 2095.514400][T16275] kernel 314306560 [ 2095.514400][T16275] kernel_stack 32768 [ 2095.514400][T16275] pagetables 73728 [ 2095.514400][T16275] sec_pagetables 0 [ 2095.514400][T16275] percpu 11058816 [ 2095.514400][T16275] sock 0 [ 2095.514400][T16275] vmalloc 0 [ 2095.514400][T16275] shmem 114688 [ 2095.514400][T16275] file_mapped 114688 [ 2095.514400][T16275] file_dirty 0 [ 2095.514400][T16275] file_writeback 0 [ 2095.514400][T16275] swapcached 0 [ 2095.514400][T16275] inactive_anon 172032 [ 2095.514400][T16275] active_anon 86016 [ 2095.514400][T16275] inactive_file 0 [ 2095.514400][T16275] active_file 0 [ 2095.514400][T16275] unevictable 0 [ 2095.514400][T16275] slab_reclaimable 13480 [ 2095.514400][T16275] slab_unreclaimable 303082072 [ 2095.514400][T16275] slab 303095552 [ 2095.514400][T16275] workingset_refault_anon 0 [ 2095.514400][T16275] workingset_refault_file 2 [ 2095.514400][T16275] workingset_activate_anon 0 [ 2095.514400][T16275] workingset_activate_file 0 [ 2095.514400][T16275] workingset_restore_anon 0 [ 2095.514400][T16275] workingset_restore_file 0 [ 2095.514400][T16275] workingset_nodereclaim 0 [ 2095.514400][T16275] pgscan 185 [ 2095.514400][T16275] pgsteal 20 [ 2095.514400][T16275] pgscan_kswapd 0 [ 2095.514400][T16275] pgscan_direct 185 [ 2095.514400][T16275] pgscan_khugepaged 0 [ 2095.514400][T16275] pgsteal_kswapd 0 [ 2095.514400][T16275] pgsteal_direct 20 [ 2095.514400][T16275] pgsteal_khugepaged 0 [ 2095.514400][T16275] pgfault 898154 [ 2095.514400][T16275] pgmajfault 9 [ 2095.514400][T16275] pgrefill 194 [ 2095.514400][T16275] pgactivate 2491 02:11:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000a001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:55 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe5, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:55 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 02:11:55 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2500}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2095.514400][T16275] pgdeactivate 276 [ 2095.514400][T16275] pglazyfree 0 [ 2095.514400][T16275] pglazyfreed 0 [ 2095.678576][T16275] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16275,uid=0 [ 2095.693898][T16275] Memory cgroup out of memory: Killed process 16275 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000b001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000c001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2095.732178][T16323] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:11:55 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x4800}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000d001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000e001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:55 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe6, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2095.869737][T16330] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 2095.889964][T16330] CPU: 1 PID: 16330 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2095.898654][T16330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2095.908797][T16330] Call Trace: [ 2095.912091][T16330] [ 2095.915108][T16330] dump_stack_lvl+0xda/0x130 [ 2095.919702][T16330] dump_stack+0x15/0x20 [ 2095.923868][T16330] warn_alloc+0x140/0x1b0 [ 2095.928287][T16330] ? __rcu_read_unlock+0x4d/0x70 [ 2095.933234][T16330] __vmalloc_node_range+0xc7c/0xeb0 [ 2095.938557][T16330] kvmalloc_node+0x121/0x160 [ 2095.943162][T16330] ? alloc_netdev_mqs+0x89/0x870 [ 2095.948113][T16330] alloc_netdev_mqs+0x89/0x870 [ 2095.952887][T16330] ? cfv_alloc_and_copy_to_shm+0x290/0x290 [ 2095.958756][T16330] rtnl_create_link+0x226/0x7f0 [ 2095.963737][T16330] rtnl_newlink+0xda3/0x15a0 [ 2095.968346][T16330] ? __list_del_entry_valid+0x5f/0xe0 [ 2095.973732][T16330] ? _raw_spin_unlock+0x26/0x40 [ 2095.978583][T16330] ? __mutex_lock+0x21c/0x8d0 [ 2095.983281][T16330] ? rtnl_setlink+0x2d0/0x2d0 [ 2095.988651][T16330] rtnetlink_rcv_msg+0x807/0x8c0 [ 2095.993604][T16330] ? __blk_flush_plug+0x23f/0x280 [ 2095.998635][T16330] ? xas_load+0x37c/0x390 [ 2096.002971][T16330] ? __rcu_read_unlock+0x33/0x70 [ 2096.007971][T16330] ? kmem_cache_free+0x178/0x280 [ 2096.012950][T16330] ? nlmon_xmit+0x4b/0x60 [ 2096.017345][T16330] ? __kfree_skb+0x102/0x140 [ 2096.021941][T16330] ? consume_skb+0x57/0x180 [ 2096.026431][T16330] ? nlmon_xmit+0x4b/0x60 [ 2096.030821][T16330] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 2096.036095][T16330] ? ref_tracker_free+0x3a1/0x400 [ 2096.041126][T16330] ? local_bh_enable+0x1f/0x20 [ 2096.045891][T16330] ? __dev_queue_xmit+0xbba/0x1e60 [ 2096.051055][T16330] netlink_rcv_skb+0x126/0x220 [ 2096.055895][T16330] ? rtnetlink_bind+0x60/0x60 [ 2096.060566][T16330] rtnetlink_rcv+0x1c/0x20 [ 2096.064996][T16330] netlink_unicast+0x56f/0x640 [ 2096.069802][T16330] netlink_sendmsg+0x665/0x770 [ 2096.074554][T16330] ? netlink_getsockopt+0x710/0x710 [ 2096.079797][T16330] ____sys_sendmsg+0x375/0x4c0 [ 2096.084558][T16330] __sys_sendmsg+0x1e3/0x270 [ 2096.089198][T16330] __x64_sys_sendmsg+0x46/0x50 [ 2096.093970][T16330] do_syscall_64+0x41/0xc0 [ 2096.098374][T16330] ? syscall_exit_to_user_mode+0x26/0x140 [ 2096.104096][T16330] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2096.109976][T16330] RIP: 0033:0x7f0cbc4d1169 [ 2096.114367][T16330] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2096.133961][T16330] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2096.142407][T16330] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2096.150392][T16330] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 2096.158386][T16330] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2096.166390][T16330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2096.174344][T16330] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2096.182297][T16330] [ 2096.185473][T16330] Mem-Info: [ 2096.188603][T16330] active_anon:7224 inactive_anon:99030 isolated_anon:0 [ 2096.188603][T16330] active_file:10845 inactive_file:8683 isolated_file:0 [ 2096.188603][T16330] unevictable:0 dirty:0 writeback:0 [ 2096.188603][T16330] slab_reclaimable:16865 slab_unreclaimable:438764 [ 2096.188603][T16330] mapped:20094 shmem:11154 pagetables:811 [ 2096.188603][T16330] sec_pagetables:0 bounce:0 [ 2096.188603][T16330] kernel_misc_reclaimable:0 [ 2096.188603][T16330] free:1356333 free_pcp:2722 free_cma:0 [ 2096.233816][T16330] Node 0 active_anon:28896kB inactive_anon:396120kB active_file:43380kB inactive_file:34732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80376kB dirty:0kB writeback:0kB shmem:44616kB writeback_tmp:0kB kernel_stack:3024kB pagetables:3244kB sec_pagetables:0kB all_unreclaimable? no [ 2096.261894][T16330] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2096.288795][T16330] lowmem_reserve[]: 0 2896 7874 7874 [ 2096.294134][T16330] Node 0 DMA32 free:2965464kB boost:0kB min:4172kB low:7136kB high:10100kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2969224kB mlocked:0kB bounce:0kB free_pcp:3760kB local_pcp:1956kB free_cma:0kB [ 2096.322863][T16330] lowmem_reserve[]: 0 0 4978 4978 [ 2096.327935][T16330] Node 0 Normal free:2444508kB boost:0kB min:7172kB low:12268kB high:17364kB reserved_highatomic:0KB active_anon:28896kB inactive_anon:396120kB active_file:43380kB inactive_file:34732kB unevictable:0kB writepending:0kB present:5242880kB managed:5098224kB mlocked:0kB bounce:0kB free_pcp:7124kB local_pcp:4452kB free_cma:0kB [ 2096.358420][T16330] lowmem_reserve[]: 0 0 0 0 [ 2096.362956][T16330] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2096.375630][T16330] Node 0 DMA32: 2*4kB (M) 0*8kB 1*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 722*4096kB (M) = 2965464kB [ 2096.391376][T16330] Node 0 Normal: 51233*4kB (UM) 16455*8kB (UM) 4648*16kB (UME) 1095*32kB (UM) 449*64kB (UM) 201*128kB (UM) 34*256kB (UME) 8*512kB (UME) 2*1024kB (UE) 0*2048kB 471*4096kB (UM) = 2444508kB [ 2096.409803][T16330] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB 02:11:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x81ffffff, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000f001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:55 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x60}, 0x0) 02:11:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700011001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2096.419125][T16330] 30686 total pagecache pages [ 2096.423853][T16330] 0 pages in swap cache [ 2096.427992][T16330] Free swap = 0kB [ 2096.431710][T16330] Total swap = 0kB [ 2096.435417][T16330] 2097051 pages RAM [ 2096.439239][T16330] 0 pages HighMem/MovableOnly [ 2096.444038][T16330] 76349 pages reserved 02:11:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700012001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700025001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="708847001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2096.523898][T16340] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2096.575148][T16362] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2096.585410][T16362] CPU: 0 PID: 16362 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2096.594079][T16362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2096.604129][T16362] Call Trace: [ 2096.607400][T16362] [ 2096.610330][T16362] dump_stack_lvl+0xda/0x130 [ 2096.614942][T16362] dump_stack+0x15/0x20 [ 2096.619169][T16362] dump_header+0x95/0x3c0 02:11:56 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:56 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe7, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="708848001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2096.623491][T16362] oom_kill_process+0xe3/0x3e0 [ 2096.628257][T16362] out_of_memory+0x9f0/0xc30 [ 2096.632902][T16362] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2096.638991][T16362] mem_cgroup_out_of_memory+0x139/0x190 [ 2096.644595][T16362] try_charge_memcg+0x759/0xd20 [ 2096.649595][T16362] ? __rmqueue_pcplist+0x9d0/0xa50 [ 2096.654717][T16362] ? shrink_node+0x146c/0x14f0 [ 2096.659568][T16362] obj_cgroup_charge_pages+0xab/0x130 [ 2096.664949][T16362] obj_cgroup_charge+0xe9/0x140 [ 2096.669831][T16362] slab_pre_alloc_hook+0x112/0x180 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="707c4b001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2096.675030][T16362] kmem_cache_alloc_node+0x5d/0x2e0 [ 2096.680229][T16362] ? dup_task_struct+0x60/0x450 [ 2096.685091][T16362] dup_task_struct+0x60/0x450 [ 2096.689786][T16362] copy_process+0x396/0x2100 [ 2096.694526][T16362] ? __rcu_read_unlock+0x4d/0x70 [ 2096.699523][T16362] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 2096.705076][T16362] kernel_clone+0x169/0x560 [ 2096.709591][T16362] __x64_sys_clone+0xdf/0x110 [ 2096.714426][T16362] do_syscall_64+0x41/0xc0 [ 2096.718860][T16362] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2096.724758][T16362] RIP: 0033:0x7f0cbc4d2591 [ 2096.729169][T16362] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2096.748822][T16362] RSP: 002b:00007fff8ab2be58 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2096.757249][T16362] RAX: ffffffffffffffda RBX: 00007f0cbb823700 RCX: 00007f0cbc4d2591 [ 2096.765218][T16362] RDX: 00007f0cbb8239d0 RSI: 00007f0cbb8232f0 RDI: 00000000003d0f00 [ 2096.773191][T16362] RBP: 00007fff8ab2c0a0 R08: 00007f0cbb823700 R09: 00007f0cbb823700 [ 2096.781157][T16362] R10: 00007f0cbb8239d0 R11: 0000000000000206 R12: 00007fff8ab2bf0e [ 2096.789171][T16362] R13: 00007fff8ab2bf0f R14: 00007f0cbb823300 R15: 0000000000022000 [ 2096.797177][T16362] [ 2096.800322][T16362] memory: usage 307196kB, limit 307200kB, failcnt 5556 [ 2096.807164][T16362] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2096.814173][T16362] Memory cgroup stats for /syz3: [ 2096.814475][T16362] anon 151552 [ 2096.814475][T16362] file 118784 [ 2096.814475][T16362] kernel 314298368 [ 2096.814475][T16362] kernel_stack 32768 [ 2096.814475][T16362] pagetables 73728 [ 2096.814475][T16362] sec_pagetables 0 [ 2096.814475][T16362] percpu 11058752 [ 2096.814475][T16362] sock 0 [ 2096.814475][T16362] vmalloc 0 [ 2096.814475][T16362] shmem 114688 [ 2096.814475][T16362] file_mapped 114688 [ 2096.814475][T16362] file_dirty 0 [ 2096.814475][T16362] file_writeback 0 [ 2096.814475][T16362] swapcached 0 [ 2096.814475][T16362] inactive_anon 180224 [ 2096.814475][T16362] active_anon 86016 [ 2096.814475][T16362] inactive_file 4096 [ 2096.814475][T16362] active_file 0 [ 2096.814475][T16362] unevictable 0 [ 2096.814475][T16362] slab_reclaimable 13592 [ 2096.814475][T16362] slab_unreclaimable 303075344 [ 2096.814475][T16362] slab 303088936 [ 2096.814475][T16362] workingset_refault_anon 0 [ 2096.814475][T16362] workingset_refault_file 3 [ 2096.814475][T16362] workingset_activate_anon 0 [ 2096.814475][T16362] workingset_activate_file 0 [ 2096.814475][T16362] workingset_restore_anon 0 [ 2096.814475][T16362] workingset_restore_file 0 [ 2096.814475][T16362] workingset_nodereclaim 0 [ 2096.814475][T16362] pgscan 208 [ 2096.814475][T16362] pgsteal 20 [ 2096.814475][T16362] pgscan_kswapd 0 [ 2096.814475][T16362] pgscan_direct 208 [ 2096.814475][T16362] pgscan_khugepaged 0 [ 2096.814475][T16362] pgsteal_kswapd 0 [ 2096.814475][T16362] pgsteal_direct 20 [ 2096.814475][T16362] pgsteal_khugepaged 0 [ 2096.814475][T16362] pgfault 898275 [ 2096.814475][T16362] pgmajfault 9 [ 2096.814475][T16362] pgrefill 220 [ 2096.814475][T16362] pgactivate 2516 [ 2096.814475][T16362] pgdeactivate 302 [ 2096.814475][T16362] pglazyfree 0 [ 2096.814475][T16362] pglazyfreed 0 [ 2096.978269][T16362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16362,uid=0 [ 2096.993575][T16362] Memory cgroup out of memory: Killed process 16362 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x88470000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="706558001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:56 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x68}, 0x0) 02:11:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:56 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x6000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2097.123123][T16381] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700060001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:56 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe8, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2097.216585][T16411] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2097.228796][T16411] CPU: 0 PID: 16411 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2097.237565][T16411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2097.247663][T16411] Call Trace: [ 2097.250996][T16411] [ 2097.253989][T16411] dump_stack_lvl+0xda/0x130 [ 2097.258621][T16411] dump_stack+0x15/0x20 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="705865001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2097.262801][T16411] dump_header+0x95/0x3c0 [ 2097.267131][T16411] oom_kill_process+0xe3/0x3e0 [ 2097.271956][T16411] out_of_memory+0x9f0/0xc30 [ 2097.276543][T16411] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2097.282620][T16411] mem_cgroup_out_of_memory+0x139/0x190 [ 2097.288257][T16411] try_charge_memcg+0x759/0xd20 [ 2097.293138][T16411] obj_cgroup_charge_pages+0xab/0x130 [ 2097.298521][T16411] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2097.304096][T16411] __alloc_pages+0x1bb/0x340 [ 2097.308744][T16411] alloc_pages+0x3e1/0x4e0 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="704b7c001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700081001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2097.313270][T16411] __pmd_alloc+0x4b/0x300 [ 2097.317615][T16411] handle_mm_fault+0x1c07/0x21d0 [ 2097.322629][T16411] exc_page_fault+0x45f/0x640 [ 2097.327313][T16411] asm_exc_page_fault+0x26/0x30 [ 2097.332181][T16411] RIP: 0033:0x7f0cbc470de9 [ 2097.336620][T16411] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2097.356307][T16411] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="704788001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="704888001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2097.362378][T16411] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2097.370348][T16411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2097.378320][T16411] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2097.386287][T16411] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000001fff27 [ 2097.394338][T16411] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2097.402329][T16411] [ 2097.405387][T16411] memory: usage 307200kB, limit 307200kB, failcnt 5689 [ 2097.412248][T16411] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2097.419081][T16411] Memory cgroup stats for /syz3: [ 2097.419550][T16411] anon 139264 [ 2097.419550][T16411] file 118784 [ 2097.419550][T16411] kernel 314314752 [ 2097.419550][T16411] kernel_stack 32768 [ 2097.419550][T16411] pagetables 65536 [ 2097.419550][T16411] sec_pagetables 0 [ 2097.419550][T16411] percpu 11058752 [ 2097.419550][T16411] sock 0 [ 2097.419550][T16411] vmalloc 0 [ 2097.419550][T16411] shmem 114688 [ 2097.419550][T16411] file_mapped 114688 [ 2097.419550][T16411] file_dirty 0 [ 2097.419550][T16411] file_writeback 0 [ 2097.419550][T16411] swapcached 0 [ 2097.419550][T16411] inactive_anon 167936 [ 2097.419550][T16411] active_anon 86016 [ 2097.419550][T16411] inactive_file 0 [ 2097.419550][T16411] active_file 4096 [ 2097.419550][T16411] unevictable 0 [ 2097.419550][T16411] slab_reclaimable 32624 [ 2097.419550][T16411] slab_unreclaimable 303082208 [ 2097.419550][T16411] slab 303114832 [ 2097.419550][T16411] workingset_refault_anon 0 [ 2097.419550][T16411] workingset_refault_file 3 [ 2097.419550][T16411] workingset_activate_anon 0 [ 2097.419550][T16411] workingset_activate_file 0 [ 2097.419550][T16411] workingset_restore_anon 0 [ 2097.419550][T16411] workingset_restore_file 0 [ 2097.419550][T16411] workingset_nodereclaim 0 [ 2097.419550][T16411] pgscan 259 [ 2097.419550][T16411] pgsteal 20 [ 2097.419550][T16411] pgscan_kswapd 0 [ 2097.419550][T16411] pgscan_direct 259 [ 2097.419550][T16411] pgscan_khugepaged 0 [ 2097.419550][T16411] pgsteal_kswapd 0 [ 2097.419550][T16411] pgsteal_direct 20 [ 2097.419550][T16411] pgsteal_khugepaged 0 [ 2097.419550][T16411] pgfault 898335 [ 2097.419550][T16411] pgmajfault 9 [ 2097.419550][T16411] pgrefill 271 [ 2097.419550][T16411] pgactivate 2568 [ 2097.419550][T16411] pgdeactivate 353 [ 2097.419550][T16411] pglazyfree 0 [ 2097.419550][T16411] pglazyfreed 0 [ 2097.584414][T16411] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16411,uid=0 [ 2097.599705][T16411] Memory cgroup out of memory: Killed process 16411 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:11:57 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x88480000, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000007b00030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2097.639088][T16435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=16435 comm=syz-executor.1 [ 2097.669397][T16409] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2097.671801][T16434] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2097.677501][T16409] __nla_validate_parse: 12 callbacks suppressed [ 2097.677535][T16409] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2097.687621][T16434] CPU: 1 PID: 16434 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2097.687643][T16434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2097.687663][T16434] Call Trace: [ 2097.687669][T16434] [ 2097.687675][T16434] dump_stack_lvl+0xda/0x130 [ 2097.732675][T16434] dump_stack+0x15/0x20 02:11:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 02:11:57 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:57 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x6800}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="707fffffff00030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:57 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xe9, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2097.736880][T16434] dump_header+0x95/0x3c0 [ 2097.741208][T16434] oom_kill_process+0xe3/0x3e0 [ 2097.746177][T16434] out_of_memory+0x9f0/0xc30 [ 2097.750770][T16434] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2097.756866][T16434] mem_cgroup_out_of_memory+0x139/0x190 [ 2097.762419][T16434] try_charge_memcg+0x759/0xd20 [ 2097.767279][T16434] charge_memcg+0x51/0x200 [ 2097.771709][T16434] __mem_cgroup_charge+0x29/0xa0 [ 2097.776649][T16434] do_wp_page+0xb96/0x1fb0 [ 2097.781077][T16434] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2097.786369][T16434] handle_mm_fault+0x64e/0x21d0 [ 2097.787018][T16443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2097.791228][T16434] exc_page_fault+0x45f/0x640 [ 2097.791254][T16434] asm_exc_page_fault+0x26/0x30 [ 2097.791344][T16434] RIP: 0033:0x7f0cbc47e610 [ 2097.791357][T16434] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 02:11:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x74}, 0x0) [ 2097.791373][T16434] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2097.791415][T16434] RAX: 0000000042881cb3 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2097.791427][T16434] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e2fbb4 [ 2097.791439][T16434] RBP: 0000000042881cb3 R08: 0000000000001cb3 R09: 0000000042881cb7 [ 2097.791452][T16434] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2097.791464][T16434] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff81930a0c [ 2097.791477][T16434] ? security_is_socket_class+0x2dc/0x530 [ 2097.791502][T16434] 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700002001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700003001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700004001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2097.791607][T16434] memory: usage 307184kB, limit 307200kB, failcnt 5766 [ 2097.895981][T16434] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2097.902837][T16434] Memory cgroup stats for /syz3: [ 2097.903188][T16434] anon 135168 [ 2097.903188][T16434] file 118784 [ 2097.903188][T16434] kernel 314298368 [ 2097.903188][T16434] kernel_stack 32768 [ 2097.903188][T16434] pagetables 65536 [ 2097.903188][T16434] sec_pagetables 0 [ 2097.903188][T16434] percpu 11058816 [ 2097.903188][T16434] sock 0 [ 2097.903188][T16434] vmalloc 0 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700005001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2097.903188][T16434] shmem 114688 [ 2097.903188][T16434] file_mapped 114688 [ 2097.903188][T16434] file_dirty 0 [ 2097.903188][T16434] file_writeback 0 [ 2097.903188][T16434] swapcached 0 [ 2097.903188][T16434] inactive_anon 163840 [ 2097.903188][T16434] active_anon 86016 [ 2097.903188][T16434] inactive_file 4096 [ 2097.903188][T16434] active_file 0 [ 2097.903188][T16434] unevictable 0 [ 2097.903188][T16434] slab_reclaimable 16568 [ 2097.903188][T16434] slab_unreclaimable 303076656 [ 2097.903188][T16434] slab 303093224 [ 2097.903188][T16434] workingset_refault_anon 0 [ 2097.903188][T16434] workingset_refault_file 3 [ 2097.903188][T16434] workingset_activate_anon 0 [ 2097.903188][T16434] workingset_activate_file 0 [ 2097.903188][T16434] workingset_restore_anon 0 [ 2097.903188][T16434] workingset_restore_file 0 [ 2097.903188][T16434] workingset_nodereclaim 0 [ 2097.903188][T16434] pgscan 281 [ 2097.903188][T16434] pgsteal 20 [ 2097.903188][T16434] pgscan_kswapd 0 [ 2097.903188][T16434] pgscan_direct 281 [ 2097.903188][T16434] pgscan_khugepaged 0 [ 2097.903188][T16434] pgsteal_kswapd 0 [ 2097.903188][T16434] pgsteal_direct 20 [ 2097.903188][T16434] pgsteal_khugepaged 0 [ 2097.903188][T16434] pgfault 898391 [ 2097.903188][T16434] pgmajfault 9 [ 2097.903188][T16434] pgrefill 294 [ 2097.903188][T16434] pgactivate 2590 [ 2097.903188][T16434] pgdeactivate 376 [ 2097.903188][T16434] pglazyfree 0 [ 2097.903188][T16434] pglazyfreed 0 [ 2098.067031][T16434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16434,uid=0 02:11:57 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x88a8ffff, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700006001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700007001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:57 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xa00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2098.082318][T16434] Memory cgroup out of memory: Killed process 16434 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2098.117063][T16445] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2098.125267][T16445] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:57 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700008001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2098.234809][T16460] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2098.245131][T16460] CPU: 1 PID: 16460 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2098.250481][T16478] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2098.253787][T16460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2098.253799][T16460] Call Trace: [ 2098.253881][T16460] 02:11:57 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xea, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:57 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x7a}, 0x0) 02:11:57 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x7400}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700009001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2098.261957][T16478] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2098.271950][T16460] dump_stack_lvl+0xda/0x130 [ 2098.271975][T16460] dump_stack+0x15/0x20 [ 2098.296216][T16460] dump_header+0x95/0x3c0 [ 2098.300426][T16464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2098.300547][T16460] oom_kill_process+0xe3/0x3e0 [ 2098.314561][T16460] out_of_memory+0x9f0/0xc30 [ 2098.319190][T16460] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2098.325369][T16460] mem_cgroup_out_of_memory+0x139/0x190 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000a001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000b001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2098.330935][T16460] try_charge_memcg+0x759/0xd20 [ 2098.335839][T16460] charge_memcg+0x51/0x200 [ 2098.340262][T16460] __mem_cgroup_charge+0x29/0xa0 [ 2098.345291][T16460] handle_mm_fault+0xcea/0x21d0 [ 2098.350153][T16460] exc_page_fault+0x45f/0x640 [ 2098.354918][T16460] asm_exc_page_fault+0x26/0x30 [ 2098.359861][T16460] RIP: 0033:0x7f0cbc48096f [ 2098.364331][T16460] Code: ff ff 4d 89 cd 48 85 c0 74 19 8b 95 44 ff ff ff 48 29 c6 48 01 c7 e8 10 09 05 00 85 c0 0f 85 0b 03 00 00 48 8b 85 48 ff ff ff <41> c7 45 18 01 00 00 00 4c 89 ef 49 89 85 90 06 00 00 48 8b 85 50 [ 2098.384091][T16460] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2098.390207][T16460] RAX: 00007f0cbb803000 RBX: 0000000000021000 RCX: 00007f0cbc4d1277 [ 2098.398184][T16460] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0cbb804000 [ 2098.400154][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2098.406148][T16460] RBP: 00007fff8ab2bf80 R08: 00000000ffffffff R09: 00007f0cbb823700 [ 2098.406163][T16460] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff8ab2c0a0 [ 2098.406175][T16460] R13: 00007f0cbb823700 R14: 0000000000000000 R15: 0000000000022000 [ 2098.406193][T16460] [ 2098.442618][T16460] memory: usage 307200kB, limit 307200kB, failcnt 5880 [ 2098.449466][T16460] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2098.456321][T16460] Memory cgroup stats for /syz3: [ 2098.456678][T16460] anon 147456 [ 2098.456678][T16460] file 114688 [ 2098.456678][T16460] kernel 314310656 [ 2098.456678][T16460] kernel_stack 32768 [ 2098.456678][T16460] pagetables 73728 [ 2098.456678][T16460] sec_pagetables 0 [ 2098.456678][T16460] percpu 11058816 [ 2098.456678][T16460] sock 0 [ 2098.456678][T16460] vmalloc 0 [ 2098.456678][T16460] shmem 114688 [ 2098.456678][T16460] file_mapped 114688 [ 2098.456678][T16460] file_dirty 0 [ 2098.456678][T16460] file_writeback 0 [ 2098.456678][T16460] swapcached 0 [ 2098.456678][T16460] inactive_anon 176128 [ 2098.456678][T16460] active_anon 86016 [ 2098.456678][T16460] inactive_file 0 [ 2098.456678][T16460] active_file 0 [ 2098.456678][T16460] unevictable 0 [ 2098.456678][T16460] slab_reclaimable 13480 [ 2098.456678][T16460] slab_unreclaimable 303083104 [ 2098.456678][T16460] slab 303096584 [ 2098.456678][T16460] workingset_refault_anon 0 [ 2098.456678][T16460] workingset_refault_file 3 [ 2098.456678][T16460] workingset_activate_anon 0 [ 2098.456678][T16460] workingset_activate_file 0 [ 2098.456678][T16460] workingset_restore_anon 0 [ 2098.456678][T16460] workingset_restore_file 0 [ 2098.456678][T16460] workingset_nodereclaim 0 [ 2098.456678][T16460] pgscan 282 [ 2098.456678][T16460] pgsteal 21 [ 2098.456678][T16460] pgscan_kswapd 0 [ 2098.456678][T16460] pgscan_direct 282 [ 2098.456678][T16460] pgscan_khugepaged 0 [ 2098.456678][T16460] pgsteal_kswapd 0 [ 2098.456678][T16460] pgsteal_direct 21 [ 2098.456678][T16460] pgsteal_khugepaged 0 [ 2098.456678][T16460] pgfault 898453 [ 2098.456678][T16460] pgmajfault 9 [ 2098.456678][T16460] pgrefill 294 [ 2098.456678][T16460] pgactivate 2590 [ 2098.456678][T16460] pgdeactivate 376 [ 2098.456678][T16460] pglazyfree 0 [ 2098.456678][T16460] pglazyfreed 0 [ 2098.620250][T16460] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16460,uid=0 02:11:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xb94cdc34, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000c001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xeb, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2098.635579][T16460] Memory cgroup out of memory: Killed process 16460 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2098.660537][T16487] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2098.668632][T16487] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2098.716410][T16505] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2098.728544][T16505] CPU: 1 PID: 16505 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2098.737217][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2098.747283][T16505] Call Trace: [ 2098.750607][T16505] [ 2098.753538][T16505] dump_stack_lvl+0xda/0x130 [ 2098.758157][T16505] dump_stack+0x15/0x20 [ 2098.762320][T16505] dump_header+0x95/0x3c0 [ 2098.766686][T16505] oom_kill_process+0xe3/0x3e0 [ 2098.771453][T16505] out_of_memory+0x9f0/0xc30 [ 2098.776061][T16505] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2098.782137][T16505] mem_cgroup_out_of_memory+0x139/0x190 [ 2098.787691][T16505] try_charge_memcg+0x759/0xd20 [ 2098.792555][T16505] obj_cgroup_charge_pages+0xab/0x130 [ 2098.797934][T16505] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2098.803489][T16505] __alloc_pages+0x1bb/0x340 [ 2098.808102][T16505] alloc_pages+0x3e1/0x4e0 [ 2098.812746][T16505] pte_alloc_one+0x2d/0xc0 [ 2098.817214][T16505] __pte_alloc+0x33/0x1f0 [ 2098.821556][T16505] handle_mm_fault+0x1ce0/0x21d0 [ 2098.826570][T16505] exc_page_fault+0x45f/0x640 [ 2098.831270][T16505] asm_exc_page_fault+0x26/0x30 [ 2098.836167][T16505] RIP: 0033:0x7f0cbc470de9 [ 2098.840675][T16505] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2098.860449][T16505] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 02:11:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xb00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000d001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xec, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc2}, 0x0) [ 2098.866629][T16505] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2098.874667][T16505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2098.882661][T16505] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2098.890642][T16505] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 000000000020050a [ 2098.898667][T16505] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2098.903777][T16530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2098.906778][T16505] [ 2098.906822][T16505] memory: usage 307196kB, limit 307200kB, failcnt 5969 [ 2098.926119][T16505] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2098.933066][T16505] Memory cgroup stats for /syz3: [ 2098.933432][T16505] anon 139264 [ 2098.933432][T16505] file 114688 [ 2098.933432][T16505] kernel 314314752 [ 2098.933432][T16505] kernel_stack 32768 [ 2098.933432][T16505] pagetables 69632 [ 2098.933432][T16505] sec_pagetables 0 [ 2098.933432][T16505] percpu 11058880 [ 2098.933432][T16505] sock 0 [ 2098.933432][T16505] vmalloc 0 [ 2098.933432][T16505] shmem 114688 [ 2098.933432][T16505] file_mapped 114688 [ 2098.933432][T16505] file_dirty 0 [ 2098.933432][T16505] file_writeback 0 [ 2098.933432][T16505] swapcached 0 [ 2098.933432][T16505] inactive_anon 143360 [ 2098.933432][T16505] active_anon 86016 [ 2098.933432][T16505] inactive_file 0 [ 2098.933432][T16505] active_file 0 [ 2098.933432][T16505] unevictable 0 [ 2098.933432][T16505] slab_reclaimable 10952 [ 2098.933432][T16505] slab_unreclaimable 303088384 [ 2098.933432][T16505] slab 303099336 02:11:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x122}, 0x0) 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000e001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2098.933432][T16505] workingset_refault_anon 0 [ 2098.933432][T16505] workingset_refault_file 3 [ 2098.933432][T16505] workingset_activate_anon 0 [ 2098.933432][T16505] workingset_activate_file 0 [ 2098.933432][T16505] workingset_restore_anon 0 [ 2098.933432][T16505] workingset_restore_file 0 [ 2098.933432][T16505] workingset_nodereclaim 0 [ 2098.933432][T16505] pgscan 282 [ 2098.933432][T16505] pgsteal 21 [ 2098.933432][T16505] pgscan_kswapd 0 [ 2098.933432][T16505] pgscan_direct 282 [ 2098.933432][T16505] pgscan_khugepaged 0 [ 2098.933432][T16505] pgsteal_kswapd 0 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000f001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700010001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2098.933432][T16505] pgsteal_direct 21 [ 2098.933432][T16505] pgsteal_khugepaged 0 [ 2098.933432][T16505] pgfault 898510 [ 2098.933432][T16505] pgmajfault 9 [ 2098.933432][T16505] pgrefill 294 [ 2098.933432][T16505] pgactivate 2590 [ 2098.933432][T16505] pgdeactivate 376 [ 2098.933432][T16505] pglazyfree 0 [ 2098.933432][T16505] pglazyfreed 0 [ 2099.098072][T16505] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16505,uid=0 02:11:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xeaffffff, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700011001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700012001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2099.113409][T16505] Memory cgroup out of memory: Killed process 16505 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:11:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xc00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2099.167813][T16543] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2099.175961][T16543] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:11:58 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x8100}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700025001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:58 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xed, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:58 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x29a}, 0x0) [ 2099.224095][T16557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2099.257695][T16558] syz-executor.3 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700060001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2099.268875][T16558] CPU: 0 PID: 16558 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2099.277602][T16558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2099.287652][T16558] Call Trace: [ 2099.290930][T16558] [ 2099.293855][T16558] dump_stack_lvl+0xda/0x130 [ 2099.298524][T16558] dump_stack+0x15/0x20 [ 2099.302674][T16558] dump_header+0x95/0x3c0 [ 2099.307040][T16558] oom_kill_process+0xe3/0x3e0 [ 2099.311827][T16558] out_of_memory+0x9f0/0xc30 [ 2099.316423][T16558] ? try_to_free_mem_cgroup_pages+0x220/0x480 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000031000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000051000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000061000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2099.322511][T16558] mem_cgroup_out_of_memory+0x139/0x190 [ 2099.328069][T16558] try_charge_memcg+0x759/0xd20 [ 2099.333002][T16558] ? sidtab_context_to_sid+0x5b/0x5b0 [ 2099.338430][T16558] ? xa_load+0xb9/0xe0 [ 2099.342507][T16558] obj_cgroup_charge_pages+0xab/0x130 [ 2099.347922][T16558] obj_cgroup_charge+0xe9/0x140 [ 2099.352872][T16558] slab_pre_alloc_hook+0x112/0x180 [ 2099.358026][T16558] kmem_cache_alloc+0x58/0x260 [ 2099.362884][T16558] ? __alloc_file+0x2e/0x150 [ 2099.367481][T16558] ? inode_doinit_with_dentry+0x93/0x840 [ 2099.373214][T16558] __alloc_file+0x2e/0x150 [ 2099.377636][T16558] alloc_empty_file+0xba/0x1a0 [ 2099.382883][T16558] alloc_file+0x3a/0x2f0 [ 2099.387140][T16558] alloc_file_pseudo+0x103/0x160 [ 2099.392118][T16558] sock_alloc_file+0x9c/0x1b0 [ 2099.396828][T16558] __sys_socket+0x103/0x220 [ 2099.401322][T16558] __x64_sys_socket+0x3f/0x50 [ 2099.406074][T16558] do_syscall_64+0x41/0xc0 [ 2099.410472][T16558] ? syscall_exit_to_user_mode+0x26/0x140 [ 2099.416178][T16558] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2099.422190][T16558] RIP: 0033:0x7f0cbc4d1169 [ 2099.426612][T16558] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2099.446219][T16558] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2099.454663][T16558] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2099.462619][T16558] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2099.470639][T16558] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2099.478601][T16558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.486557][T16558] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2099.494520][T16558] [ 2099.498136][T16558] memory: usage 307200kB, limit 307200kB, failcnt 6082 [ 2099.505114][T16558] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2099.511958][T16558] Memory cgroup stats for /syz3: [ 2099.512233][T16558] anon 143360 [ 2099.512233][T16558] file 114688 [ 2099.512233][T16558] kernel 314314752 [ 2099.512233][T16558] kernel_stack 32768 [ 2099.512233][T16558] pagetables 73728 [ 2099.512233][T16558] sec_pagetables 0 [ 2099.512233][T16558] percpu 11058880 [ 2099.512233][T16558] sock 0 [ 2099.512233][T16558] vmalloc 0 [ 2099.512233][T16558] shmem 114688 [ 2099.512233][T16558] file_mapped 114688 [ 2099.512233][T16558] file_dirty 0 [ 2099.512233][T16558] file_writeback 0 [ 2099.512233][T16558] swapcached 0 [ 2099.512233][T16558] inactive_anon 172032 [ 2099.512233][T16558] active_anon 86016 [ 2099.512233][T16558] inactive_file 0 [ 2099.512233][T16558] active_file 0 [ 2099.512233][T16558] unevictable 0 [ 2099.512233][T16558] slab_reclaimable 11528 [ 2099.512233][T16558] slab_unreclaimable 303088560 [ 2099.512233][T16558] slab 303100088 [ 2099.512233][T16558] workingset_refault_anon 0 [ 2099.512233][T16558] workingset_refault_file 3 [ 2099.512233][T16558] workingset_activate_anon 0 [ 2099.512233][T16558] workingset_activate_file 0 [ 2099.512233][T16558] workingset_restore_anon 0 [ 2099.512233][T16558] workingset_restore_file 0 [ 2099.512233][T16558] workingset_nodereclaim 0 [ 2099.512233][T16558] pgscan 282 [ 2099.512233][T16558] pgsteal 21 [ 2099.512233][T16558] pgscan_kswapd 0 [ 2099.512233][T16558] pgscan_direct 282 [ 2099.512233][T16558] pgscan_khugepaged 0 [ 2099.512233][T16558] pgsteal_kswapd 0 [ 2099.512233][T16558] pgsteal_direct 21 [ 2099.512233][T16558] pgsteal_khugepaged 0 [ 2099.512233][T16558] pgfault 898572 [ 2099.512233][T16558] pgmajfault 9 [ 2099.512233][T16558] pgrefill 294 [ 2099.512233][T16558] pgactivate 2590 [ 2099.512233][T16558] pgdeactivate 376 [ 2099.512233][T16558] pglazyfree 0 02:11:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000071000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2099.512233][T16558] pglazyfreed 0 [ 2099.677740][T16558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16555,uid=0 [ 2099.692999][T16558] Memory cgroup out of memory: Killed process 16555 (syz-executor.3) total-vm:46484kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:11:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000091000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2099.745024][T16564] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2099.756032][T16576] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2099.766278][T16576] CPU: 0 PID: 16576 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2099.774952][T16576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2099.785178][T16576] Call Trace: [ 2099.788456][T16576] [ 2099.791396][T16576] dump_stack_lvl+0xda/0x130 [ 2099.796057][T16576] dump_stack+0x15/0x20 [ 2099.800210][T16576] dump_header+0x95/0x3c0 [ 2099.804599][T16576] oom_kill_process+0xe3/0x3e0 [ 2099.809416][T16576] out_of_memory+0x9f0/0xc30 [ 2099.814134][T16576] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2099.820209][T16576] mem_cgroup_out_of_memory+0x139/0x190 [ 2099.825843][T16576] try_charge_memcg+0x759/0xd20 [ 2099.830751][T16576] charge_memcg+0x51/0x200 [ 2099.835189][T16576] __mem_cgroup_charge+0x29/0xa0 [ 2099.840152][T16576] do_wp_page+0xb96/0x1fb0 02:11:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xd00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:11:59 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x82da}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000a1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xee, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 2099.844581][T16576] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2099.849878][T16576] handle_mm_fault+0x64e/0x21d0 [ 2099.854801][T16576] exc_page_fault+0x45f/0x640 [ 2099.859479][T16576] asm_exc_page_fault+0x26/0x30 [ 2099.864430][T16576] RIP: 0033:0x7f0cbc47e610 [ 2099.865104][T16587] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:11:59 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x83da}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000b1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:11:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xef, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:59 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xda82}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2099.868875][T16576] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2099.868900][T16576] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2099.868915][T16576] RAX: 00000000c301b5fc RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2099.905927][T16593] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2099.910935][T16576] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e062e9 [ 2099.910950][T16576] RBP: 00000000c301b5fc R08: 00000000000015fc R09: 00000000c301b600 [ 2099.910981][T16576] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2099.910992][T16576] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff818fe770 [ 2099.911004][T16576] ? selinux_socket_create+0x30/0x180 [ 2099.956315][T16576] [ 2099.959399][T16576] memory: usage 307200kB, limit 307200kB, failcnt 6161 [ 2099.966266][T16576] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2099.973170][T16576] Memory cgroup stats for /syz3: [ 2099.973464][T16576] anon 122880 [ 2099.973464][T16576] file 114688 [ 2099.973464][T16576] kernel 314335232 [ 2099.973464][T16576] kernel_stack 32768 [ 2099.973464][T16576] pagetables 65536 [ 2099.973464][T16576] sec_pagetables 0 [ 2099.973464][T16576] percpu 11058880 [ 2099.973464][T16576] sock 0 [ 2099.973464][T16576] vmalloc 0 [ 2099.973464][T16576] shmem 114688 [ 2099.973464][T16576] file_mapped 114688 [ 2099.973464][T16576] file_dirty 0 [ 2099.973464][T16576] file_writeback 0 [ 2099.973464][T16576] swapcached 0 [ 2099.973464][T16576] inactive_anon 151552 [ 2099.973464][T16576] active_anon 86016 [ 2099.973464][T16576] inactive_file 0 [ 2099.973464][T16576] active_file 0 [ 2099.973464][T16576] unevictable 0 [ 2099.973464][T16576] slab_reclaimable 29584 [ 2099.973464][T16576] slab_unreclaimable 303095376 [ 2099.973464][T16576] slab 303124960 [ 2099.973464][T16576] workingset_refault_anon 0 [ 2099.973464][T16576] workingset_refault_file 3 [ 2099.973464][T16576] workingset_activate_anon 0 [ 2099.973464][T16576] workingset_activate_file 0 [ 2099.973464][T16576] workingset_restore_anon 0 [ 2099.973464][T16576] workingset_restore_file 0 [ 2099.973464][T16576] workingset_nodereclaim 0 [ 2099.973464][T16576] pgscan 282 [ 2099.973464][T16576] pgsteal 21 [ 2099.973464][T16576] pgscan_kswapd 0 [ 2099.973464][T16576] pgscan_direct 282 [ 2099.973464][T16576] pgscan_khugepaged 0 [ 2099.973464][T16576] pgsteal_kswapd 0 [ 2099.973464][T16576] pgsteal_direct 21 [ 2099.973464][T16576] pgsteal_khugepaged 0 [ 2099.973464][T16576] pgfault 898625 [ 2099.973464][T16576] pgmajfault 9 [ 2099.973464][T16576] pgrefill 294 [ 2099.973464][T16576] pgactivate 2590 [ 2099.973464][T16576] pgdeactivate 376 [ 2099.973464][T16576] pglazyfree 0 [ 2099.973464][T16576] pglazyfreed 0 02:11:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfeffffff, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:11:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xf0, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:11:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000c1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2100.141941][T16576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16576,uid=0 [ 2100.157273][T16576] Memory cgroup out of memory: Killed process 16576 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2100.249048][T16603] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2100.259370][T16603] CPU: 1 PID: 16603 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2100.268048][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2100.278094][T16603] Call Trace: [ 2100.281368][T16603] [ 2100.284366][T16603] dump_stack_lvl+0xda/0x130 [ 2100.288943][T16603] dump_stack+0x15/0x20 [ 2100.293096][T16603] dump_header+0x95/0x3c0 [ 2100.297445][T16603] oom_kill_process+0xe3/0x3e0 [ 2100.302272][T16603] out_of_memory+0x9f0/0xc30 [ 2100.306850][T16603] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2100.312941][T16603] mem_cgroup_out_of_memory+0x139/0x190 [ 2100.318577][T16603] try_charge_memcg+0x759/0xd20 [ 2100.323467][T16603] charge_memcg+0x51/0x200 [ 2100.327877][T16603] __mem_cgroup_charge+0x29/0xa0 [ 2100.332869][T16603] do_wp_page+0xb96/0x1fb0 [ 2100.337273][T16603] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2100.342614][T16603] handle_mm_fault+0x64e/0x21d0 [ 2100.347507][T16603] exc_page_fault+0x45f/0x640 [ 2100.352240][T16603] asm_exc_page_fault+0x26/0x30 [ 2100.357193][T16603] RIP: 0033:0x7f0cbc47e610 [ 2100.361594][T16603] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2100.381214][T16603] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2100.387257][T16603] RAX: 0000000042881cb3 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2100.395206][T16603] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e2fbb4 [ 2100.403159][T16603] RBP: 0000000042881cb3 R08: 0000000000001cb3 R09: 0000000042881cb7 [ 2100.411190][T16603] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2100.419151][T16603] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff81930a0c [ 2100.427102][T16603] ? security_is_socket_class+0x2dc/0x530 [ 2100.432825][T16603] [ 2100.436009][T16603] memory: usage 307180kB, limit 307200kB, failcnt 6235 [ 2100.442861][T16603] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2100.449739][T16603] Memory cgroup stats for /syz3: [ 2100.450066][T16603] anon 135168 [ 2100.450066][T16603] file 114688 [ 2100.450066][T16603] kernel 314302464 [ 2100.450066][T16603] kernel_stack 32768 [ 2100.450066][T16603] pagetables 65536 [ 2100.450066][T16603] sec_pagetables 0 [ 2100.450066][T16603] percpu 11058880 [ 2100.450066][T16603] sock 0 [ 2100.450066][T16603] vmalloc 0 [ 2100.450066][T16603] shmem 114688 [ 2100.450066][T16603] file_mapped 114688 [ 2100.450066][T16603] file_dirty 0 [ 2100.450066][T16603] file_writeback 0 [ 2100.450066][T16603] swapcached 0 [ 2100.450066][T16603] inactive_anon 106496 [ 2100.450066][T16603] active_anon 86016 [ 2100.450066][T16603] inactive_file 0 [ 2100.450066][T16603] active_file 0 [ 2100.450066][T16603] unevictable 0 [ 2100.450066][T16603] slab_reclaimable 10552 [ 2100.450066][T16603] slab_unreclaimable 303084264 [ 2100.450066][T16603] slab 303094816 [ 2100.450066][T16603] workingset_refault_anon 0 [ 2100.450066][T16603] workingset_refault_file 3 [ 2100.450066][T16603] workingset_activate_anon 0 [ 2100.450066][T16603] workingset_activate_file 0 [ 2100.450066][T16603] workingset_restore_anon 0 [ 2100.450066][T16603] workingset_restore_file 0 [ 2100.450066][T16603] workingset_nodereclaim 0 [ 2100.450066][T16603] pgscan 282 [ 2100.450066][T16603] pgsteal 21 [ 2100.450066][T16603] pgscan_kswapd 0 [ 2100.450066][T16603] pgscan_direct 282 [ 2100.450066][T16603] pgscan_khugepaged 0 [ 2100.450066][T16603] pgsteal_kswapd 0 [ 2100.450066][T16603] pgsteal_direct 21 [ 2100.450066][T16603] pgsteal_khugepaged 0 [ 2100.450066][T16603] pgfault 898684 [ 2100.450066][T16603] pgmajfault 9 [ 2100.450066][T16603] pgrefill 294 [ 2100.450066][T16603] pgactivate 2590 [ 2100.450066][T16603] pgdeactivate 376 [ 2100.450066][T16603] pglazyfree 0 [ 2100.450066][T16603] pglazyfreed 0 [ 2100.459474][T16601] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2100.613504][T16603] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16603,uid=0 02:12:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xe00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x30a}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000d1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffa888, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000e1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xda83}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2100.613614][T16603] Memory cgroup out of memory: Killed process 16603 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000f1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:00 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xf1, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2100.717096][T16613] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2100.727347][T16613] CPU: 1 PID: 16613 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2100.736026][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2100.746102][T16613] Call Trace: [ 2100.749457][T16613] [ 2100.752430][T16613] dump_stack_lvl+0xda/0x130 [ 2100.757026][T16613] dump_stack+0x15/0x20 [ 2100.761179][T16613] dump_header+0x95/0x3c0 [ 2100.765593][T16613] oom_kill_process+0xe3/0x3e0 [ 2100.770400][T16613] out_of_memory+0x9f0/0xc30 [ 2100.775065][T16613] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2100.781133][T16613] mem_cgroup_out_of_memory+0x139/0x190 [ 2100.786720][T16613] try_charge_memcg+0x759/0xd20 [ 2100.791625][T16613] charge_memcg+0x51/0x200 [ 2100.796126][T16613] __mem_cgroup_charge+0x29/0xa0 [ 2100.801076][T16613] do_wp_page+0xb96/0x1fb0 [ 2100.805515][T16613] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2100.810807][T16613] handle_mm_fault+0x64e/0x21d0 02:12:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x394}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000111000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000121000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000251000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2100.815685][T16613] exc_page_fault+0x45f/0x640 [ 2100.820363][T16613] asm_exc_page_fault+0x26/0x30 [ 2100.825376][T16613] RIP: 0033:0x7f0cbc47e610 [ 2100.829882][T16613] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2100.849569][T16613] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2100.855702][T16613] RAX: 000000002d408a59 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2100.863678][T16613] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e179b5 [ 2100.871658][T16613] RBP: 000000002d408a59 R08: 0000000000000a59 R09: 000000002d408a5d [ 2100.879667][T16613] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2100.887624][T16613] R13: 0000000000000001 R14: 0000000000000008 R15: ffffffff81928445 [ 2100.895576][T16613] ? security_transition_sid+0x25/0x80 [ 2100.901025][T16613] [ 2100.904074][T16613] memory: usage 307200kB, limit 307200kB, failcnt 6308 [ 2100.910950][T16613] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2100.917839][T16613] Memory cgroup stats for /syz3: [ 2100.918218][T16613] anon 126976 [ 2100.918218][T16613] file 114688 [ 2100.918218][T16613] kernel 314322944 [ 2100.918218][T16613] kernel_stack 32768 [ 2100.918218][T16613] pagetables 65536 [ 2100.918218][T16613] sec_pagetables 0 [ 2100.918218][T16613] percpu 11058880 [ 2100.918218][T16613] sock 0 [ 2100.918218][T16613] vmalloc 0 [ 2100.918218][T16613] shmem 114688 [ 2100.918218][T16613] file_mapped 114688 [ 2100.918218][T16613] file_dirty 0 [ 2100.918218][T16613] file_writeback 0 [ 2100.918218][T16613] swapcached 0 [ 2100.918218][T16613] inactive_anon 151552 [ 2100.918218][T16613] active_anon 86016 [ 2100.918218][T16613] inactive_file 0 [ 2100.918218][T16613] active_file 0 [ 2100.918218][T16613] unevictable 0 [ 2100.918218][T16613] slab_reclaimable 30184 [ 2100.918218][T16613] slab_unreclaimable 303086752 [ 2100.918218][T16613] slab 303116936 [ 2100.918218][T16613] workingset_refault_anon 0 [ 2100.918218][T16613] workingset_refault_file 3 [ 2100.918218][T16613] workingset_activate_anon 0 [ 2100.918218][T16613] workingset_activate_file 0 [ 2100.918218][T16613] workingset_restore_anon 0 [ 2100.918218][T16613] workingset_restore_file 0 [ 2100.918218][T16613] workingset_nodereclaim 0 [ 2100.918218][T16613] pgscan 282 [ 2100.918218][T16613] pgsteal 21 [ 2100.918218][T16613] pgscan_kswapd 0 [ 2100.918218][T16613] pgscan_direct 282 [ 2100.918218][T16613] pgscan_khugepaged 0 [ 2100.918218][T16613] pgsteal_kswapd 0 [ 2100.918218][T16613] pgsteal_direct 21 [ 2100.918218][T16613] pgsteal_khugepaged 0 [ 2100.918218][T16613] pgfault 898736 [ 2100.918218][T16613] pgmajfault 9 [ 2100.918218][T16613] pgrefill 294 [ 2100.918218][T16613] pgactivate 2590 [ 2100.918218][T16613] pgdeactivate 376 [ 2100.918218][T16613] pglazyfree 0 [ 2100.918218][T16613] pglazyfreed 0 [ 2101.081846][T16613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16613,uid=0 [ 2101.097248][T16613] Memory cgroup out of memory: Killed process 16613 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700088471000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x34000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700088481000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2101.122648][T16619] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:12:00 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x3f6}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70007c4b1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2101.209706][T16639] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2101.219959][T16639] CPU: 0 PID: 16639 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2101.228704][T16639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2101.238764][T16639] Call Trace: [ 2101.242101][T16639] [ 2101.245039][T16639] dump_stack_lvl+0xda/0x130 [ 2101.249707][T16639] dump_stack+0x15/0x20 [ 2101.253886][T16639] dump_header+0x95/0x3c0 [ 2101.258220][T16639] oom_kill_process+0xe3/0x3e0 [ 2101.263049][T16639] out_of_memory+0x9f0/0xc30 [ 2101.267700][T16639] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2101.273769][T16639] mem_cgroup_out_of_memory+0x139/0x190 [ 2101.279317][T16639] try_charge_memcg+0x759/0xd20 [ 2101.284246][T16639] obj_cgroup_charge_pages+0xab/0x130 [ 2101.289624][T16639] obj_cgroup_charge+0xe9/0x140 [ 2101.294605][T16639] slab_pre_alloc_hook+0x112/0x180 [ 2101.299722][T16639] kmem_cache_alloc_lru+0x54/0x260 [ 2101.304853][T16639] ? sock_alloc_inode+0x34/0xa0 02:12:00 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xf2, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700065581000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:00 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x400300}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000601000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700058651000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2101.309736][T16639] sock_alloc_inode+0x34/0xa0 [ 2101.314478][T16639] ? sockfs_init_fs_context+0x70/0x70 [ 2101.319866][T16639] alloc_inode+0x38/0x150 [ 2101.324281][T16639] new_inode_pseudo+0x17/0x70 [ 2101.328978][T16639] __sock_create+0x12b/0x4e0 [ 2101.333581][T16639] __sys_socket+0x9f/0x220 [ 2101.338048][T16639] __x64_sys_socket+0x3f/0x50 [ 2101.343328][T16639] do_syscall_64+0x41/0xc0 [ 2101.347800][T16639] ? syscall_exit_to_user_mode+0x26/0x140 [ 2101.353537][T16639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2101.359486][T16639] RIP: 0033:0x7f0cbc4d1169 [ 2101.363980][T16639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2101.384031][T16639] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2101.392428][T16639] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2101.400496][T16639] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2101.408458][T16639] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2101.416427][T16639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2101.424413][T16639] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2101.432376][T16639] [ 2101.435465][T16639] memory: usage 307200kB, limit 307200kB, failcnt 6387 [ 2101.442325][T16639] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2101.449163][T16639] Memory cgroup stats for /syz3: [ 2101.449285][T16639] anon 143360 [ 2101.449285][T16639] file 114688 [ 2101.449285][T16639] kernel 314314752 [ 2101.449285][T16639] kernel_stack 32768 [ 2101.449285][T16639] pagetables 73728 [ 2101.449285][T16639] sec_pagetables 0 [ 2101.449285][T16639] percpu 11058880 [ 2101.449285][T16639] sock 0 [ 2101.449285][T16639] vmalloc 0 [ 2101.449285][T16639] shmem 114688 [ 2101.449285][T16639] file_mapped 114688 [ 2101.449285][T16639] file_dirty 0 [ 2101.449285][T16639] file_writeback 0 [ 2101.449285][T16639] swapcached 0 [ 2101.449285][T16639] inactive_anon 172032 [ 2101.449285][T16639] active_anon 86016 [ 2101.449285][T16639] inactive_file 0 [ 2101.449285][T16639] active_file 0 [ 2101.449285][T16639] unevictable 0 [ 2101.449285][T16639] slab_reclaimable 11528 [ 2101.449285][T16639] slab_unreclaimable 303084704 [ 2101.449285][T16639] slab 303096232 [ 2101.449285][T16639] workingset_refault_anon 0 [ 2101.449285][T16639] workingset_refault_file 3 [ 2101.449285][T16639] workingset_activate_anon 0 [ 2101.449285][T16639] workingset_activate_file 0 [ 2101.449285][T16639] workingset_restore_anon 0 [ 2101.449285][T16639] workingset_restore_file 0 [ 2101.449285][T16639] workingset_nodereclaim 0 [ 2101.449285][T16639] pgscan 282 [ 2101.449285][T16639] pgsteal 21 [ 2101.449285][T16639] pgscan_kswapd 0 [ 2101.449285][T16639] pgscan_direct 282 [ 2101.449285][T16639] pgscan_khugepaged 0 [ 2101.449285][T16639] pgsteal_kswapd 0 [ 2101.449285][T16639] pgsteal_direct 21 [ 2101.449285][T16639] pgsteal_khugepaged 0 [ 2101.449285][T16639] pgfault 898796 [ 2101.449285][T16639] pgmajfault 9 [ 2101.449285][T16639] pgrefill 294 [ 2101.449285][T16639] pgactivate 2590 [ 2101.449285][T16639] pgdeactivate 376 [ 2101.449285][T16639] pglazyfree 0 [ 2101.449285][T16639] pglazyfreed 0 [ 2101.613384][T16639] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16634,uid=0 [ 2101.628664][T16639] Memory cgroup out of memory: Killed process 16634 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2101.651381][T16639] socket: no more sockets 02:12:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x1100, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70004b7c1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffff81, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000811000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x3fe}, 0x0) 02:12:01 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700047881000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xf3, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700048881000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2101.769108][T16660] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2101.781260][T16660] CPU: 1 PID: 16660 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2101.789956][T16660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2101.799998][T16660] Call Trace: [ 2101.803266][T16660] [ 2101.806190][T16660] dump_stack_lvl+0xda/0x130 [ 2101.810778][T16660] dump_stack+0x15/0x20 [ 2101.815080][T16660] dump_header+0x95/0x3c0 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000a00030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000021000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2101.819492][T16660] oom_kill_process+0xe3/0x3e0 [ 2101.824262][T16660] out_of_memory+0x9f0/0xc30 [ 2101.828858][T16660] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2101.834347][T16679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=16679 comm=syz-executor.1 [ 2101.834982][T16660] mem_cgroup_out_of_memory+0x139/0x190 [ 2101.853391][T16660] try_charge_memcg+0x759/0xd20 [ 2101.858244][T16660] obj_cgroup_charge_pages+0xab/0x130 [ 2101.863627][T16660] __memcg_kmem_charge_page+0x1d5/0x2c0 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000031000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2101.869214][T16660] __alloc_pages+0x1bb/0x340 [ 2101.873876][T16660] alloc_pages+0x3e1/0x4e0 [ 2101.878307][T16660] __pmd_alloc+0x4b/0x300 [ 2101.882671][T16660] handle_mm_fault+0x1c07/0x21d0 [ 2101.887625][T16660] exc_page_fault+0x45f/0x640 [ 2101.892309][T16660] asm_exc_page_fault+0x26/0x30 [ 2101.897290][T16660] RIP: 0033:0x7f0cbc470de9 [ 2101.901695][T16660] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2101.921402][T16660] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2101.927582][T16660] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2101.935543][T16660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2101.943506][T16660] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2101.951459][T16660] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000002010e4 [ 2101.959414][T16660] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2101.967400][T16660] [ 2101.970487][T16660] memory: usage 307188kB, limit 307200kB, failcnt 6531 [ 2101.977362][T16660] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2101.984215][T16660] Memory cgroup stats for /syz3: [ 2101.984571][T16660] anon 139264 [ 2101.984571][T16660] file 118784 [ 2101.984571][T16660] kernel 314302464 [ 2101.984571][T16660] kernel_stack 32768 [ 2101.984571][T16660] pagetables 65536 [ 2101.984571][T16660] sec_pagetables 0 [ 2101.984571][T16660] percpu 11058880 [ 2101.984571][T16660] sock 0 [ 2101.984571][T16660] vmalloc 0 [ 2101.984571][T16660] shmem 114688 [ 2101.984571][T16660] file_mapped 114688 [ 2101.984571][T16660] file_dirty 0 [ 2101.984571][T16660] file_writeback 0 [ 2101.984571][T16660] swapcached 0 [ 2101.984571][T16660] inactive_anon 167936 [ 2101.984571][T16660] active_anon 86016 [ 2101.984571][T16660] inactive_file 0 [ 2101.984571][T16660] active_file 4096 [ 2101.984571][T16660] unevictable 0 [ 2101.984571][T16660] slab_reclaimable 10664 [ 2101.984571][T16660] slab_unreclaimable 303084504 [ 2101.984571][T16660] slab 303095168 [ 2101.984571][T16660] workingset_refault_anon 0 [ 2101.984571][T16660] workingset_refault_file 4 [ 2101.984571][T16660] workingset_activate_anon 0 [ 2101.984571][T16660] workingset_activate_file 0 [ 2101.984571][T16660] workingset_restore_anon 0 [ 2101.984571][T16660] workingset_restore_file 0 [ 2101.984571][T16660] workingset_nodereclaim 0 [ 2101.984571][T16660] pgscan 310 [ 2101.984571][T16660] pgsteal 21 [ 2101.984571][T16660] pgscan_kswapd 0 [ 2101.984571][T16660] pgscan_direct 310 [ 2101.984571][T16660] pgscan_khugepaged 0 [ 2101.984571][T16660] pgsteal_kswapd 0 [ 2101.984571][T16660] pgsteal_direct 21 [ 2101.984571][T16660] pgsteal_khugepaged 0 [ 2101.984571][T16660] pgfault 898853 [ 2101.984571][T16660] pgmajfault 9 [ 2101.984571][T16660] pgrefill 325 [ 2101.984571][T16660] pgactivate 2621 [ 2101.984571][T16660] pgdeactivate 407 [ 2101.984571][T16660] pglazyfree 0 [ 2101.984571][T16660] pglazyfreed 0 [ 2102.149498][T16660] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16660,uid=0 [ 2102.164922][T16660] Memory cgroup out of memory: Killed process 16660 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x1200, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000041000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffea, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:01 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:01 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x500}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000051000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:01 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xf4, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:01 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000061000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000071000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2102.297988][T16688] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2102.308232][T16688] CPU: 0 PID: 16688 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2102.316901][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2102.326968][T16688] Call Trace: [ 2102.330320][T16688] [ 2102.333261][T16688] dump_stack_lvl+0xda/0x130 [ 2102.337860][T16688] dump_stack+0x15/0x20 [ 2102.342097][T16688] dump_header+0x95/0x3c0 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000081000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000091000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2102.346443][T16688] oom_kill_process+0xe3/0x3e0 [ 2102.351277][T16688] out_of_memory+0x9f0/0xc30 [ 2102.355888][T16688] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2102.362000][T16688] mem_cgroup_out_of_memory+0x139/0x190 [ 2102.367558][T16688] try_charge_memcg+0x759/0xd20 [ 2102.372507][T16688] obj_cgroup_charge_pages+0xab/0x130 [ 2102.377905][T16688] obj_cgroup_charge+0xe9/0x140 [ 2102.382805][T16688] slab_pre_alloc_hook+0x112/0x180 [ 2102.387945][T16688] kmem_cache_alloc_lru+0x54/0x260 [ 2102.393077][T16688] ? sock_alloc_inode+0x34/0xa0 [ 2102.397941][T16688] sock_alloc_inode+0x34/0xa0 [ 2102.402624][T16688] ? sockfs_init_fs_context+0x70/0x70 [ 2102.408058][T16688] alloc_inode+0x38/0x150 [ 2102.412419][T16688] new_inode_pseudo+0x17/0x70 [ 2102.417101][T16688] __sock_create+0x12b/0x4e0 [ 2102.421778][T16688] __sys_socket+0x9f/0x220 [ 2102.426202][T16688] __x64_sys_socket+0x3f/0x50 [ 2102.430886][T16688] do_syscall_64+0x41/0xc0 [ 2102.435319][T16688] ? syscall_exit_to_user_mode+0x26/0x140 [ 2102.441033][T16688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2102.447009][T16688] RIP: 0033:0x7f0cbc4d1169 [ 2102.451421][T16688] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2102.471131][T16688] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2102.479534][T16688] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2102.487498][T16688] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2102.495466][T16688] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2102.503479][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2102.511441][T16688] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2102.519427][T16688] [ 2102.522474][T16688] memory: usage 307200kB, limit 307200kB, failcnt 6615 [ 2102.529328][T16688] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2102.536198][T16688] Memory cgroup stats for /syz3: [ 2102.536615][T16688] anon 143360 [ 2102.536615][T16688] file 114688 [ 2102.536615][T16688] kernel 314314752 [ 2102.536615][T16688] kernel_stack 32768 [ 2102.536615][T16688] pagetables 73728 [ 2102.536615][T16688] sec_pagetables 0 [ 2102.536615][T16688] percpu 11058880 [ 2102.536615][T16688] sock 0 [ 2102.536615][T16688] vmalloc 0 [ 2102.536615][T16688] shmem 114688 [ 2102.536615][T16688] file_mapped 114688 [ 2102.536615][T16688] file_dirty 0 [ 2102.536615][T16688] file_writeback 0 [ 2102.536615][T16688] swapcached 0 [ 2102.536615][T16688] inactive_anon 172032 [ 2102.536615][T16688] active_anon 86016 [ 2102.536615][T16688] inactive_file 0 [ 2102.536615][T16688] active_file 0 [ 2102.536615][T16688] unevictable 0 [ 2102.536615][T16688] slab_reclaimable 11528 [ 2102.536615][T16688] slab_unreclaimable 303084704 [ 2102.536615][T16688] slab 303096232 [ 2102.536615][T16688] workingset_refault_anon 0 [ 2102.536615][T16688] workingset_refault_file 4 [ 2102.536615][T16688] workingset_activate_anon 0 [ 2102.536615][T16688] workingset_activate_file 0 [ 2102.536615][T16688] workingset_restore_anon 0 [ 2102.536615][T16688] workingset_restore_file 0 [ 2102.536615][T16688] workingset_nodereclaim 0 [ 2102.536615][T16688] pgscan 311 [ 2102.536615][T16688] pgsteal 22 [ 2102.536615][T16688] pgscan_kswapd 0 [ 2102.536615][T16688] pgscan_direct 311 [ 2102.536615][T16688] pgscan_khugepaged 0 [ 2102.536615][T16688] pgsteal_kswapd 0 [ 2102.536615][T16688] pgsteal_direct 22 [ 2102.536615][T16688] pgsteal_khugepaged 0 [ 2102.536615][T16688] pgfault 898913 [ 2102.536615][T16688] pgmajfault 9 [ 2102.536615][T16688] pgrefill 326 [ 2102.536615][T16688] pgactivate 2621 [ 2102.536615][T16688] pgdeactivate 408 [ 2102.536615][T16688] pglazyfree 0 [ 2102.536615][T16688] pglazyfreed 0 [ 2102.700362][T16688] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16684,uid=0 [ 2102.715858][T16688] Memory cgroup out of memory: Killed process 16684 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:12:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2500, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000a1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:02 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 02:12:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xf5, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:02 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x4000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000b1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2102.791290][T16699] validate_nla: 4 callbacks suppressed [ 2102.791359][T16699] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2102.804969][T16699] __nla_validate_parse: 14 callbacks suppressed [ 2102.804980][T16699] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000c1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2102.893331][T16716] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2102.900514][T16718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2102.903635][T16716] CPU: 0 PID: 16716 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2102.921551][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2102.931659][T16716] Call Trace: [ 2102.934930][T16716] [ 2102.937852][T16716] dump_stack_lvl+0xda/0x130 [ 2102.942469][T16716] dump_stack+0x15/0x20 [ 2102.946733][T16716] dump_header+0x95/0x3c0 [ 2102.951134][T16716] oom_kill_process+0xe3/0x3e0 [ 2102.956015][T16716] out_of_memory+0x9f0/0xc30 [ 2102.960675][T16716] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2102.966825][T16716] mem_cgroup_out_of_memory+0x139/0x190 [ 2102.972383][T16716] try_charge_memcg+0x759/0xd20 [ 2102.977247][T16716] obj_cgroup_charge_pages+0xab/0x130 [ 2102.982632][T16716] obj_cgroup_charge+0xe9/0x140 [ 2102.987536][T16716] slab_pre_alloc_hook+0x112/0x180 02:12:02 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x700}, 0x0) 02:12:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x2, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000d1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000e1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2102.992673][T16716] kmem_cache_alloc_lru+0x54/0x260 [ 2102.997858][T16716] ? sock_alloc_inode+0x34/0xa0 [ 2103.002714][T16716] sock_alloc_inode+0x34/0xa0 [ 2103.007478][T16716] ? sockfs_init_fs_context+0x70/0x70 [ 2103.012921][T16716] alloc_inode+0x38/0x150 [ 2103.017264][T16716] new_inode_pseudo+0x17/0x70 [ 2103.022035][T16716] __sock_create+0x12b/0x4e0 [ 2103.026714][T16716] __sys_socket+0x9f/0x220 [ 2103.031145][T16716] __x64_sys_socket+0x3f/0x50 [ 2103.035839][T16716] do_syscall_64+0x41/0xc0 [ 2103.040257][T16716] ? syscall_exit_to_user_mode+0x26/0x140 [ 2103.045989][T16716] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2103.051915][T16716] RIP: 0033:0x7f0cbc4d1169 [ 2103.056328][T16716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2103.075920][T16716] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2103.084326][T16716] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2103.092335][T16716] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2103.100299][T16716] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2103.108283][T16716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2103.116298][T16716] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2103.124330][T16716] [ 2103.127515][T16716] memory: usage 307200kB, limit 307200kB, failcnt 6729 [ 2103.134379][T16716] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2103.141264][T16716] Memory cgroup stats for /syz3: [ 2103.141523][T16716] anon 143360 [ 2103.141523][T16716] file 114688 [ 2103.141523][T16716] kernel 314314752 [ 2103.141523][T16716] kernel_stack 32768 [ 2103.141523][T16716] pagetables 73728 [ 2103.141523][T16716] sec_pagetables 0 [ 2103.141523][T16716] percpu 11058880 [ 2103.141523][T16716] sock 0 [ 2103.141523][T16716] vmalloc 0 [ 2103.141523][T16716] shmem 114688 [ 2103.141523][T16716] file_mapped 114688 [ 2103.141523][T16716] file_dirty 0 [ 2103.141523][T16716] file_writeback 0 [ 2103.141523][T16716] swapcached 0 [ 2103.141523][T16716] inactive_anon 172032 [ 2103.141523][T16716] active_anon 86016 [ 2103.141523][T16716] inactive_file 0 [ 2103.141523][T16716] active_file 0 [ 2103.141523][T16716] unevictable 0 [ 2103.141523][T16716] slab_reclaimable 11528 [ 2103.141523][T16716] slab_unreclaimable 303084704 [ 2103.141523][T16716] slab 303096232 [ 2103.141523][T16716] workingset_refault_anon 0 [ 2103.141523][T16716] workingset_refault_file 4 [ 2103.141523][T16716] workingset_activate_anon 0 [ 2103.141523][T16716] workingset_activate_file 0 [ 2103.141523][T16716] workingset_restore_anon 0 [ 2103.141523][T16716] workingset_restore_file 0 [ 2103.141523][T16716] workingset_nodereclaim 0 [ 2103.141523][T16716] pgscan 311 [ 2103.141523][T16716] pgsteal 22 [ 2103.141523][T16716] pgscan_kswapd 0 [ 2103.141523][T16716] pgscan_direct 311 [ 2103.141523][T16716] pgscan_khugepaged 0 [ 2103.141523][T16716] pgsteal_kswapd 0 [ 2103.141523][T16716] pgsteal_direct 22 [ 2103.141523][T16716] pgsteal_khugepaged 0 [ 2103.141523][T16716] pgfault 898973 [ 2103.141523][T16716] pgmajfault 9 [ 2103.141523][T16716] pgrefill 326 [ 2103.141523][T16716] pgactivate 2621 [ 2103.141523][T16716] pgdeactivate 408 [ 2103.141523][T16716] pglazyfree 0 [ 2103.141523][T16716] pglazyfreed 0 [ 2103.305991][T16716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16709,uid=0 [ 2103.321464][T16716] Memory cgroup out of memory: Killed process 16709 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:12:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000f1000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffffe, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:02 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x5000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000101000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2103.347176][T16721] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2103.355482][T16721] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:12:02 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x900}, 0x0) 02:12:02 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x3, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000111000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000121000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2103.416362][T16738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000251000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000601000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000007b00030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3a00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x5, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2103.501428][T16740] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2103.509584][T16740] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2103.519240][T16743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2103.521103][T16734] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2103.538764][T16734] CPU: 0 PID: 16734 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2103.547489][T16734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2103.556738][T16758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=16758 comm=syz-executor.1 [ 2103.557549][T16734] Call Trace: [ 2103.557557][T16734] [ 2103.576767][T16734] dump_stack_lvl+0xda/0x130 [ 2103.581380][T16734] dump_stack+0x15/0x20 [ 2103.585538][T16734] dump_header+0x95/0x3c0 [ 2103.589917][T16734] oom_kill_process+0xe3/0x3e0 [ 2103.594682][T16734] out_of_memory+0x9f0/0xc30 [ 2103.599290][T16734] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2103.605361][T16734] mem_cgroup_out_of_memory+0x139/0x190 [ 2103.610912][T16734] try_charge_memcg+0x759/0xd20 [ 2103.615814][T16734] charge_memcg+0x51/0x200 [ 2103.620237][T16734] __mem_cgroup_charge+0x29/0xa0 [ 2103.625185][T16734] handle_mm_fault+0xcea/0x21d0 [ 2103.630046][T16734] exc_page_fault+0x45f/0x640 [ 2103.632536][T16761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2103.634713][T16734] asm_exc_page_fault+0x26/0x30 [ 2103.634743][T16734] RIP: 0033:0x7f0cbc470de9 [ 2103.634786][T16734] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2103.672966][T16734] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2103.679037][T16734] RAX: 0000000020001140 RBX: 0000000000000000 RCX: 0000000000000000 [ 2103.687015][T16734] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2103.694977][T16734] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2103.702997][T16734] R10: 00007f0cbc045910 R11: 000000000005f3c6 R12: 0000000000201799 [ 2103.710960][T16734] R13: 00007fff8ab2c070 R14: 00007fff8ab2c090 R15: 0000000000000032 [ 2103.718990][T16734] [ 2103.722021][T16734] memory: usage 307200kB, limit 307200kB, failcnt 6846 [ 2103.728854][T16734] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2103.735715][T16734] Memory cgroup stats for /syz3: [ 2103.736014][T16734] anon 143360 [ 2103.736014][T16734] file 114688 [ 2103.736014][T16734] kernel 314314752 [ 2103.736014][T16734] kernel_stack 32768 [ 2103.736014][T16734] pagetables 73728 [ 2103.736014][T16734] sec_pagetables 0 [ 2103.736014][T16734] percpu 11058880 [ 2103.736014][T16734] sock 0 [ 2103.736014][T16734] vmalloc 0 [ 2103.736014][T16734] shmem 114688 [ 2103.736014][T16734] file_mapped 114688 [ 2103.736014][T16734] file_dirty 0 [ 2103.736014][T16734] file_writeback 0 [ 2103.736014][T16734] swapcached 0 [ 2103.736014][T16734] inactive_anon 172032 [ 2103.736014][T16734] active_anon 86016 [ 2103.736014][T16734] inactive_file 0 [ 2103.736014][T16734] active_file 0 [ 2103.736014][T16734] unevictable 0 [ 2103.736014][T16734] slab_reclaimable 13480 [ 2103.736014][T16734] slab_unreclaimable 303085232 [ 2103.736014][T16734] slab 303098712 [ 2103.736014][T16734] workingset_refault_anon 0 [ 2103.736014][T16734] workingset_refault_file 4 [ 2103.736014][T16734] workingset_activate_anon 0 [ 2103.736014][T16734] workingset_activate_file 0 [ 2103.736014][T16734] workingset_restore_anon 0 [ 2103.736014][T16734] workingset_restore_file 0 [ 2103.736014][T16734] workingset_nodereclaim 0 [ 2103.736014][T16734] pgscan 311 [ 2103.736014][T16734] pgsteal 22 [ 2103.736014][T16734] pgscan_kswapd 0 [ 2103.736014][T16734] pgscan_direct 311 [ 2103.736014][T16734] pgscan_khugepaged 0 [ 2103.736014][T16734] pgsteal_kswapd 0 [ 2103.736014][T16734] pgsteal_direct 22 [ 2103.736014][T16734] pgsteal_khugepaged 0 [ 2103.736014][T16734] pgfault 899034 [ 2103.736014][T16734] pgmajfault 9 [ 2103.736014][T16734] pgrefill 326 [ 2103.736014][T16734] pgactivate 2621 [ 2103.736014][T16734] pgdeactivate 408 [ 2103.736014][T16734] pglazyfree 0 [ 2103.736014][T16734] pglazyfreed 0 02:12:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0xf, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000200030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x6000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:03 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 2103.899533][T16734] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16734,uid=0 [ 2103.914839][T16734] Memory cgroup out of memory: Killed process 16734 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:12:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x6, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000400030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2103.956437][T16769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=16769 comm=syz-executor.1 [ 2103.995699][T16768] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:12:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x7, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2104.003856][T16768] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2104.006434][T16770] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2104.025163][T16770] CPU: 1 PID: 16770 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2104.033912][T16770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2104.035687][T16777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=16777 comm=syz-executor.1 02:12:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x7000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x8, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000800030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2104.043950][T16770] Call Trace: [ 2104.043957][T16770] [ 2104.043962][T16770] dump_stack_lvl+0xda/0x130 [ 2104.043984][T16770] dump_stack+0x15/0x20 [ 2104.044000][T16770] dump_header+0x95/0x3c0 [ 2104.076068][T16770] oom_kill_process+0xe3/0x3e0 [ 2104.080837][T16770] out_of_memory+0x9f0/0xc30 [ 2104.085499][T16770] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2104.091333][T16781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=16781 comm=syz-executor.1 02:12:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000a00030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2104.091591][T16770] mem_cgroup_out_of_memory+0x139/0x190 [ 2104.109863][T16770] try_charge_memcg+0x759/0xd20 [ 2104.114726][T16770] obj_cgroup_charge_pages+0xab/0x130 [ 2104.120115][T16770] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2104.124794][T16784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=16784 comm=syz-executor.1 [ 2104.125654][T16770] __alloc_pages+0x1bb/0x340 [ 2104.125680][T16770] alloc_pages+0x3e1/0x4e0 [ 2104.147557][T16770] pte_alloc_one+0x2d/0xc0 [ 2104.152154][T16770] __pte_alloc+0x33/0x1f0 [ 2104.156494][T16770] handle_mm_fault+0x1ce0/0x21d0 [ 2104.161454][T16770] exc_page_fault+0x45f/0x640 [ 2104.166152][T16770] asm_exc_page_fault+0x26/0x30 [ 2104.171011][T16770] RIP: 0033:0x7f0cbc470de9 [ 2104.175424][T16770] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2104.178717][T16785] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2104.195085][T16770] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2104.195103][T16770] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2104.195114][T16770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2104.195125][T16770] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2104.195135][T16770] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000002019ac [ 2104.195147][T16770] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2104.195212][T16770] [ 2104.203254][T16785] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2104.209392][T16770] memory: usage 307196kB, limit 307200kB, failcnt 6926 [ 2104.225847][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2104.233207][T16770] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2104.233220][T16770] Memory cgroup stats for /syz3: [ 2104.233616][T16770] anon 139264 [ 2104.233616][T16770] file 114688 [ 2104.233616][T16770] kernel 314306560 [ 2104.233616][T16770] kernel_stack 32768 [ 2104.233616][T16770] pagetables 69632 [ 2104.233616][T16770] sec_pagetables 0 [ 2104.233616][T16770] percpu 11058880 [ 2104.233616][T16770] sock 0 [ 2104.233616][T16770] vmalloc 0 [ 2104.233616][T16770] shmem 114688 [ 2104.233616][T16770] file_mapped 114688 [ 2104.233616][T16770] file_dirty 0 [ 2104.233616][T16770] file_writeback 0 [ 2104.233616][T16770] swapcached 0 [ 2104.233616][T16770] inactive_anon 167936 [ 2104.233616][T16770] active_anon 86016 [ 2104.233616][T16770] inactive_file 0 [ 2104.233616][T16770] active_file 0 [ 2104.233616][T16770] unevictable 0 [ 2104.233616][T16770] slab_reclaimable 16056 [ 2104.233616][T16770] slab_unreclaimable 303079264 [ 2104.233616][T16770] slab 303095320 [ 2104.233616][T16770] workingset_refault_anon 0 [ 2104.233616][T16770] workingset_refault_file 4 [ 2104.233616][T16770] workingset_activate_anon 0 [ 2104.233616][T16770] workingset_activate_file 0 [ 2104.233616][T16770] workingset_restore_anon 0 [ 2104.233616][T16770] workingset_restore_file 0 [ 2104.233616][T16770] workingset_nodereclaim 0 [ 2104.233616][T16770] pgscan 311 [ 2104.233616][T16770] pgsteal 22 [ 2104.233616][T16770] pgscan_kswapd 0 [ 2104.233616][T16770] pgscan_direct 311 [ 2104.233616][T16770] pgscan_khugepaged 0 [ 2104.233616][T16770] pgsteal_kswapd 0 [ 2104.233616][T16770] pgsteal_direct 22 [ 2104.233616][T16770] pgsteal_khugepaged 0 [ 2104.233616][T16770] pgfault 899091 [ 2104.233616][T16770] pgmajfault 9 [ 2104.233616][T16770] pgrefill 326 [ 2104.233616][T16770] pgactivate 2621 [ 2104.233616][T16770] pgdeactivate 408 [ 2104.233616][T16770] pglazyfree 0 [ 2104.233616][T16770] pglazyfreed 0 02:12:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x10, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000007b00030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:03 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xa03}, 0x0) 02:12:03 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x9, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2104.447880][T16770] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16770,uid=0 [ 2104.463305][T16770] Memory cgroup out of memory: Killed process 16770 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:12:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4601, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001002030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x9000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2104.497468][T16793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=16793 comm=syz-executor.1 [ 2104.513054][T16796] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2104.547909][T16801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=16801 comm=syz-executor.1 [ 2104.560857][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2104.560882][T16799] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2104.560901][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2104.560911][T16799] Call Trace: [ 2104.560916][T16799] [ 2104.560921][T16799] dump_stack_lvl+0xda/0x130 [ 2104.600591][T16799] dump_stack+0x15/0x20 [ 2104.600602][T16805] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2104.612867][T16799] dump_header+0x95/0x3c0 [ 2104.617203][T16799] oom_kill_process+0xe3/0x3e0 [ 2104.621980][T16799] out_of_memory+0x9f0/0xc30 [ 2104.626575][T16799] mem_cgroup_out_of_memory+0x139/0x190 [ 2104.632124][T16799] try_charge_memcg+0x759/0xd20 [ 2104.637000][T16799] obj_cgroup_charge_pages+0xab/0x130 [ 2104.642446][T16799] obj_cgroup_charge+0xe9/0x140 [ 2104.647336][T16799] slab_pre_alloc_hook+0x112/0x180 [ 2104.652468][T16799] kmem_cache_alloc_lru+0x54/0x260 [ 2104.657593][T16799] ? sock_alloc_inode+0x34/0xa0 [ 2104.662467][T16799] sock_alloc_inode+0x34/0xa0 [ 2104.667141][T16799] ? sockfs_init_fs_context+0x70/0x70 [ 2104.669341][T16807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=16807 comm=syz-executor.1 [ 2104.672499][T16799] alloc_inode+0x38/0x150 [ 2104.672523][T16799] new_inode_pseudo+0x17/0x70 [ 2104.672544][T16799] __sock_create+0x12b/0x4e0 [ 2104.699116][T16799] __sys_socket+0x9f/0x220 [ 2104.703570][T16799] __x64_sys_socket+0x3f/0x50 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001003030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001004030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001005030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001006030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2104.705258][T16809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=16809 comm=syz-executor.1 [ 2104.708245][T16799] do_syscall_64+0x41/0xc0 [ 2104.725726][T16799] ? syscall_exit_to_user_mode+0x26/0x140 [ 2104.731452][T16799] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2104.736946][T16811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=16811 comm=syz-executor.1 [ 2104.737419][T16799] RIP: 0033:0x7f0cbc4d1169 [ 2104.737436][T16799] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2104.774449][T16799] RSP: 002b:00007f0cbb844168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2104.782868][T16799] RAX: ffffffffffffffda RBX: 00007f0cbc5f0f80 RCX: 00007f0cbc4d1169 [ 2104.790882][T16799] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2104.798836][T16799] RBP: 00007f0cbc52cca1 R08: 0000000000000000 R09: 0000000000000000 [ 2104.806857][T16799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2104.814849][T16799] R13: 00007fff8ab2bf0f R14: 00007f0cbb844300 R15: 0000000000022000 [ 2104.822800][T16799] [ 2104.825972][T16799] memory: usage 307192kB, limit 307200kB, failcnt 7038 [ 2104.832838][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2104.839735][T16799] Memory cgroup stats for /syz3: [ 2104.840068][T16799] anon 143360 [ 2104.840068][T16799] file 114688 [ 2104.840068][T16799] kernel 314306560 [ 2104.840068][T16799] kernel_stack 32768 [ 2104.840068][T16799] pagetables 73728 [ 2104.840068][T16799] sec_pagetables 0 [ 2104.840068][T16799] percpu 11058880 [ 2104.840068][T16799] sock 0 [ 2104.840068][T16799] vmalloc 0 [ 2104.840068][T16799] shmem 114688 [ 2104.840068][T16799] file_mapped 114688 [ 2104.840068][T16799] file_dirty 0 [ 2104.840068][T16799] file_writeback 0 [ 2104.840068][T16799] swapcached 0 [ 2104.840068][T16799] inactive_anon 172032 [ 2104.840068][T16799] active_anon 86016 [ 2104.840068][T16799] inactive_file 0 [ 2104.840068][T16799] active_file 0 [ 2104.840068][T16799] unevictable 0 [ 2104.840068][T16799] slab_reclaimable 11528 [ 2104.840068][T16799] slab_unreclaimable 303079440 [ 2104.840068][T16799] slab 303090968 [ 2104.840068][T16799] workingset_refault_anon 0 [ 2104.840068][T16799] workingset_refault_file 4 [ 2104.840068][T16799] workingset_activate_anon 0 [ 2104.840068][T16799] workingset_activate_file 0 [ 2104.840068][T16799] workingset_restore_anon 0 [ 2104.840068][T16799] workingset_restore_file 0 [ 2104.840068][T16799] workingset_nodereclaim 0 [ 2104.840068][T16799] pgscan 311 [ 2104.840068][T16799] pgsteal 22 [ 2104.840068][T16799] pgscan_kswapd 0 [ 2104.840068][T16799] pgscan_direct 311 [ 2104.840068][T16799] pgscan_khugepaged 0 [ 2104.840068][T16799] pgsteal_kswapd 0 [ 2104.840068][T16799] pgsteal_direct 22 [ 2104.840068][T16799] pgsteal_khugepaged 0 [ 2104.840068][T16799] pgfault 899151 [ 2104.840068][T16799] pgmajfault 9 [ 2104.840068][T16799] pgrefill 326 [ 2104.840068][T16799] pgactivate 2621 [ 2104.840068][T16799] pgdeactivate 408 [ 2104.840068][T16799] pglazyfree 0 [ 2104.840068][T16799] pglazyfreed 0 02:12:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x140, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001007030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0xa, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xa000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:04 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 02:12:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4788, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001008030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2105.003568][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16790,uid=0 [ 2105.018842][T16799] Memory cgroup out of memory: Killed process 16790 (syz-executor.3) total-vm:46484kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:12:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0xb, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001009030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:04 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 02:12:04 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xb000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2105.106212][T16825] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2105.115569][T16815] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2105.125819][T16815] CPU: 0 PID: 16815 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2105.134495][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2105.144549][T16815] Call Trace: [ 2105.147819][T16815] [ 2105.150748][T16815] dump_stack_lvl+0xda/0x130 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100a030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2105.155339][T16815] dump_stack+0x15/0x20 [ 2105.159485][T16815] dump_header+0x95/0x3c0 [ 2105.163813][T16815] oom_kill_process+0xe3/0x3e0 [ 2105.168636][T16815] out_of_memory+0x9f0/0xc30 [ 2105.173282][T16815] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2105.179396][T16815] mem_cgroup_out_of_memory+0x139/0x190 [ 2105.184956][T16815] try_charge_memcg+0x759/0xd20 [ 2105.189825][T16815] charge_memcg+0x51/0x200 [ 2105.194246][T16815] __mem_cgroup_charge+0x29/0xa0 [ 2105.199199][T16815] handle_mm_fault+0xcea/0x21d0 [ 2105.204114][T16815] exc_page_fault+0x45f/0x640 [ 2105.208873][T16815] asm_exc_page_fault+0x26/0x30 [ 2105.213811][T16815] RIP: 0033:0x7f0cbc470de9 [ 2105.218497][T16815] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2105.238127][T16815] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2105.244235][T16815] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2105.252207][T16815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2105.260163][T16815] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2105.268129][T16815] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 0000000000201e0d [ 2105.276161][T16815] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2105.284204][T16815] [ 2105.287340][T16815] memory: usage 307196kB, limit 307200kB, failcnt 7109 [ 2105.294193][T16815] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2105.301089][T16815] Memory cgroup stats for /syz3: [ 2105.301449][T16815] anon 139264 [ 2105.301449][T16815] file 114688 [ 2105.301449][T16815] kernel 314314752 [ 2105.301449][T16815] kernel_stack 32768 [ 2105.301449][T16815] pagetables 73728 [ 2105.301449][T16815] sec_pagetables 0 [ 2105.301449][T16815] percpu 11058880 [ 2105.301449][T16815] sock 0 [ 2105.301449][T16815] vmalloc 0 [ 2105.301449][T16815] shmem 114688 [ 2105.301449][T16815] file_mapped 114688 [ 2105.301449][T16815] file_dirty 0 [ 2105.301449][T16815] file_writeback 0 [ 2105.301449][T16815] swapcached 0 [ 2105.301449][T16815] inactive_anon 167936 [ 2105.301449][T16815] active_anon 86016 [ 2105.301449][T16815] inactive_file 0 [ 2105.301449][T16815] active_file 0 [ 2105.301449][T16815] unevictable 0 [ 2105.301449][T16815] slab_reclaimable 11928 [ 2105.301449][T16815] slab_unreclaimable 303084440 [ 2105.301449][T16815] slab 303096368 [ 2105.301449][T16815] workingset_refault_anon 0 [ 2105.301449][T16815] workingset_refault_file 4 [ 2105.301449][T16815] workingset_activate_anon 0 [ 2105.301449][T16815] workingset_activate_file 0 [ 2105.301449][T16815] workingset_restore_anon 0 [ 2105.301449][T16815] workingset_restore_file 0 [ 2105.301449][T16815] workingset_nodereclaim 0 [ 2105.301449][T16815] pgscan 311 [ 2105.301449][T16815] pgsteal 22 [ 2105.301449][T16815] pgscan_kswapd 0 [ 2105.301449][T16815] pgscan_direct 311 [ 2105.301449][T16815] pgscan_khugepaged 0 [ 2105.301449][T16815] pgsteal_kswapd 0 [ 2105.301449][T16815] pgsteal_direct 22 [ 2105.301449][T16815] pgsteal_khugepaged 0 [ 2105.301449][T16815] pgfault 899208 [ 2105.301449][T16815] pgmajfault 9 [ 2105.301449][T16815] pgrefill 326 [ 2105.301449][T16815] pgactivate 2621 02:12:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0xec0, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:04 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xd00}, 0x0) 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100b030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100c030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2105.301449][T16815] pgdeactivate 408 [ 2105.301449][T16815] pglazyfree 0 [ 2105.301449][T16815] pglazyfreed 0 [ 2105.465039][T16815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16815,uid=0 [ 2105.480375][T16815] Memory cgroup out of memory: Killed process 16815 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:12:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100d030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2105.569932][T16845] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2105.578963][T16836] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2105.582963][T16845] CPU: 0 PID: 16845 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2105.599633][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2105.609683][T16845] Call Trace: [ 2105.612956][T16845] [ 2105.615885][T16845] dump_stack_lvl+0xda/0x130 02:12:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4800, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0xc, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xc000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:05 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xe00}, 0x0) [ 2105.620480][T16845] dump_stack+0x15/0x20 [ 2105.624636][T16845] dump_header+0x95/0x3c0 [ 2105.628965][T16845] oom_kill_process+0xe3/0x3e0 [ 2105.633724][T16845] out_of_memory+0x9f0/0xc30 [ 2105.638324][T16845] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2105.644434][T16845] mem_cgroup_out_of_memory+0x139/0x190 [ 2105.649989][T16845] try_charge_memcg+0x759/0xd20 [ 2105.654871][T16845] obj_cgroup_charge_pages+0xab/0x130 [ 2105.660279][T16845] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2105.665921][T16845] __alloc_pages+0x1bb/0x340 [ 2105.670517][T16845] alloc_pages+0x3e1/0x4e0 [ 2105.674984][T16845] pte_alloc_one+0x2d/0xc0 [ 2105.679518][T16845] __pte_alloc+0x33/0x1f0 [ 2105.683851][T16845] handle_mm_fault+0x1ce0/0x21d0 [ 2105.688800][T16845] exc_page_fault+0x45f/0x640 [ 2105.693479][T16845] asm_exc_page_fault+0x26/0x30 [ 2105.698392][T16845] RIP: 0033:0x7f0cbc470de9 02:12:05 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 2105.702826][T16845] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2105.722428][T16845] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2105.728659][T16845] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2105.736630][T16845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2105.745237][T16845] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2105.753209][T16845] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 0000000000201fd4 [ 2105.761185][T16845] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 02:12:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100e030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2105.769193][T16845] [ 2105.772618][T16845] memory: usage 307196kB, limit 307200kB, failcnt 7188 [ 2105.779520][T16845] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2105.786440][T16845] Memory cgroup stats for /syz3: [ 2105.786658][T16845] anon 139264 [ 2105.786658][T16845] file 114688 [ 2105.786658][T16845] kernel 314314752 [ 2105.786658][T16845] kernel_stack 32768 [ 2105.786658][T16845] pagetables 69632 [ 2105.786658][T16845] sec_pagetables 0 [ 2105.786658][T16845] percpu 11058880 [ 2105.786658][T16845] sock 0 02:12:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100f030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2105.786658][T16845] vmalloc 0 [ 2105.786658][T16845] shmem 114688 [ 2105.786658][T16845] file_mapped 114688 [ 2105.786658][T16845] file_dirty 0 [ 2105.786658][T16845] file_writeback 0 [ 2105.786658][T16845] swapcached 0 [ 2105.786658][T16845] inactive_anon 143360 [ 2105.786658][T16845] active_anon 86016 [ 2105.786658][T16845] inactive_file 0 [ 2105.786658][T16845] active_file 0 [ 2105.786658][T16845] unevictable 0 [ 2105.786658][T16845] slab_reclaimable 16056 [ 2105.786658][T16845] slab_unreclaimable 303084528 [ 2105.786658][T16845] slab 303100584 [ 2105.786658][T16845] workingset_refault_anon 0 [ 2105.786658][T16845] workingset_refault_file 4 [ 2105.786658][T16845] workingset_activate_anon 0 [ 2105.786658][T16845] workingset_activate_file 0 [ 2105.786658][T16845] workingset_restore_anon 0 [ 2105.786658][T16845] workingset_restore_file 0 [ 2105.786658][T16845] workingset_nodereclaim 0 [ 2105.786658][T16845] pgscan 311 [ 2105.786658][T16845] pgsteal 22 [ 2105.786658][T16845] pgscan_kswapd 0 [ 2105.786658][T16845] pgscan_direct 311 [ 2105.786658][T16845] pgscan_khugepaged 0 [ 2105.786658][T16845] pgsteal_kswapd 0 [ 2105.786658][T16845] pgsteal_direct 22 [ 2105.786658][T16845] pgsteal_khugepaged 0 [ 2105.786658][T16845] pgfault 899265 [ 2105.786658][T16845] pgmajfault 9 [ 2105.786658][T16845] pgrefill 326 [ 2105.786658][T16845] pgactivate 2621 [ 2105.786658][T16845] pgdeactivate 408 [ 2105.786658][T16845] pglazyfree 0 [ 2105.786658][T16845] pglazyfreed 0 [ 2105.952354][T16845] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16845,uid=0 02:12:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x33fe0, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xd000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001010030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001011030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2105.967667][T16845] Memory cgroup out of memory: Killed process 16845 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:12:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0xd, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4888, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:05 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1100}, 0x0) 02:12:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001012030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0xe, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2106.025633][T16871] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:12:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xe000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001025030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001060030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2106.148845][T16870] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2106.159132][T16870] CPU: 1 PID: 16870 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2106.167806][T16870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2106.177872][T16870] Call Trace: [ 2106.181159][T16870] [ 2106.184168][T16870] dump_stack_lvl+0xda/0x130 [ 2106.188769][T16870] dump_stack+0x15/0x20 [ 2106.193021][T16870] dump_header+0x95/0x3c0 [ 2106.197454][T16870] oom_kill_process+0xe3/0x3e0 [ 2106.202252][T16870] out_of_memory+0x9f0/0xc30 [ 2106.206888][T16870] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2106.213331][T16870] mem_cgroup_out_of_memory+0x139/0x190 [ 2106.218961][T16870] try_charge_memcg+0x759/0xd20 [ 2106.223874][T16870] charge_memcg+0x51/0x200 [ 2106.228283][T16870] __mem_cgroup_charge+0x29/0xa0 [ 2106.233421][T16870] handle_mm_fault+0xcea/0x21d0 [ 2106.238428][T16870] exc_page_fault+0x45f/0x640 [ 2106.243104][T16870] asm_exc_page_fault+0x26/0x30 [ 2106.248019][T16870] RIP: 0033:0x7f0cbc470de9 [ 2106.252414][T16870] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2106.272017][T16870] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2106.278098][T16870] RAX: 0000000020001140 RBX: 0000000000000000 RCX: 0000000000000000 [ 2106.286072][T16870] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2106.294099][T16870] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2106.302125][T16870] R10: 00007f0cbc045910 R11: 000000000005f588 R12: 00000000002021e2 [ 2106.310335][T16870] R13: 00007fff8ab2c070 R14: 00007fff8ab2c090 R15: 0000000000000032 [ 2106.318319][T16870] [ 2106.321410][T16870] memory: usage 307200kB, limit 307200kB, failcnt 7288 [ 2106.328236][T16870] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2106.335152][T16870] Memory cgroup stats for /syz3: [ 2106.335439][T16870] anon 143360 [ 2106.335439][T16870] file 114688 [ 2106.335439][T16870] kernel 314314752 [ 2106.335439][T16870] kernel_stack 32768 [ 2106.335439][T16870] pagetables 73728 [ 2106.335439][T16870] sec_pagetables 0 [ 2106.335439][T16870] percpu 11058880 [ 2106.335439][T16870] sock 0 [ 2106.335439][T16870] vmalloc 0 [ 2106.335439][T16870] shmem 114688 [ 2106.335439][T16870] file_mapped 114688 [ 2106.335439][T16870] file_dirty 0 [ 2106.335439][T16870] file_writeback 0 [ 2106.335439][T16870] swapcached 0 [ 2106.335439][T16870] inactive_anon 172032 [ 2106.335439][T16870] active_anon 86016 [ 2106.335439][T16870] inactive_file 0 [ 2106.335439][T16870] active_file 0 [ 2106.335439][T16870] unevictable 0 [ 2106.335439][T16870] slab_reclaimable 13480 [ 2106.335439][T16870] slab_unreclaimable 303085232 [ 2106.335439][T16870] slab 303098712 [ 2106.335439][T16870] workingset_refault_anon 0 [ 2106.335439][T16870] workingset_refault_file 4 [ 2106.335439][T16870] workingset_activate_anon 0 [ 2106.335439][T16870] workingset_activate_file 0 [ 2106.335439][T16870] workingset_restore_anon 0 [ 2106.335439][T16870] workingset_restore_file 0 [ 2106.335439][T16870] workingset_nodereclaim 0 [ 2106.335439][T16870] pgscan 311 [ 2106.335439][T16870] pgsteal 22 [ 2106.335439][T16870] pgscan_kswapd 0 [ 2106.335439][T16870] pgscan_direct 311 [ 2106.335439][T16870] pgscan_khugepaged 0 [ 2106.335439][T16870] pgsteal_kswapd 0 [ 2106.335439][T16870] pgsteal_direct 22 [ 2106.335439][T16870] pgsteal_khugepaged 0 [ 2106.335439][T16870] pgfault 899326 [ 2106.335439][T16870] pgmajfault 9 [ 2106.335439][T16870] pgrefill 326 [ 2106.335439][T16870] pgactivate 2621 [ 2106.335439][T16870] pgdeactivate 408 [ 2106.335439][T16870] pglazyfree 0 [ 2106.335439][T16870] pglazyfreed 0 02:12:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x7ffff000, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000050500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:05 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x10, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:05 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1200}, 0x0) 02:12:05 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xf000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4c00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000060500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2106.499848][T16870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16870,uid=0 [ 2106.515172][T16870] Memory cgroup out of memory: Killed process 16870 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2106.582013][T16902] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2106.594269][T16902] CPU: 0 PID: 16902 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2106.603509][T16902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2106.613846][T16902] Call Trace: [ 2106.617134][T16902] [ 2106.620125][T16902] dump_stack_lvl+0xda/0x130 [ 2106.624752][T16902] dump_stack+0x15/0x20 [ 2106.629112][T16902] dump_header+0x95/0x3c0 [ 2106.633748][T16902] oom_kill_process+0xe3/0x3e0 [ 2106.638530][T16902] out_of_memory+0x9f0/0xc30 [ 2106.643158][T16902] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2106.649246][T16902] mem_cgroup_out_of_memory+0x139/0x190 [ 2106.654871][T16902] try_charge_memcg+0x759/0xd20 [ 2106.660076][T16902] obj_cgroup_charge_pages+0xab/0x130 [ 2106.665461][T16902] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2106.671046][T16902] __alloc_pages+0x1bb/0x340 [ 2106.675745][T16902] alloc_pages+0x3e1/0x4e0 02:12:06 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2201}, 0x0) 02:12:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000090500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2106.680224][T16902] pte_alloc_one+0x2d/0xc0 [ 2106.684795][T16902] __pte_alloc+0x33/0x1f0 [ 2106.689161][T16902] handle_mm_fault+0x1ce0/0x21d0 [ 2106.694180][T16902] exc_page_fault+0x45f/0x640 [ 2106.698910][T16902] asm_exc_page_fault+0x26/0x30 [ 2106.703820][T16902] RIP: 0033:0x7f0cbc470de9 [ 2106.708399][T16902] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2106.728153][T16902] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2106.734271][T16902] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2106.742691][T16902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2106.750651][T16902] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2106.758629][T16902] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000002023c4 [ 2106.766673][T16902] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2106.774638][T16902] [ 2106.777731][T16902] memory: usage 307200kB, limit 307200kB, failcnt 7366 [ 2106.784596][T16902] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2106.791905][T16902] Memory cgroup stats for /syz3: [ 2106.792205][T16902] anon 139264 [ 2106.792205][T16902] file 114688 [ 2106.792205][T16902] kernel 314318848 [ 2106.792205][T16902] kernel_stack 32768 [ 2106.792205][T16902] pagetables 69632 [ 2106.792205][T16902] sec_pagetables 0 [ 2106.792205][T16902] percpu 11058880 [ 2106.792205][T16902] sock 0 [ 2106.792205][T16902] vmalloc 0 [ 2106.792205][T16902] shmem 114688 [ 2106.792205][T16902] file_mapped 114688 [ 2106.792205][T16902] file_dirty 0 [ 2106.792205][T16902] file_writeback 0 [ 2106.792205][T16902] swapcached 0 [ 2106.792205][T16902] inactive_anon 167936 [ 2106.792205][T16902] active_anon 86016 [ 2106.792205][T16902] inactive_file 0 [ 2106.792205][T16902] active_file 0 [ 2106.792205][T16902] unevictable 0 [ 2106.792205][T16902] slab_reclaimable 19560 [ 2106.792205][T16902] slab_unreclaimable 303085848 [ 2106.792205][T16902] slab 303105408 [ 2106.792205][T16902] workingset_refault_anon 0 [ 2106.792205][T16902] workingset_refault_file 4 [ 2106.792205][T16902] workingset_activate_anon 0 [ 2106.792205][T16902] workingset_activate_file 0 [ 2106.792205][T16902] workingset_restore_anon 0 [ 2106.792205][T16902] workingset_restore_file 0 [ 2106.792205][T16902] workingset_nodereclaim 0 [ 2106.792205][T16902] pgscan 311 [ 2106.792205][T16902] pgsteal 22 [ 2106.792205][T16902] pgscan_kswapd 0 [ 2106.792205][T16902] pgscan_direct 311 [ 2106.792205][T16902] pgscan_khugepaged 0 [ 2106.792205][T16902] pgsteal_kswapd 0 [ 2106.792205][T16902] pgsteal_direct 22 [ 2106.792205][T16902] pgsteal_khugepaged 0 [ 2106.792205][T16902] pgfault 899386 [ 2106.792205][T16902] pgmajfault 9 [ 2106.792205][T16902] pgrefill 326 [ 2106.792205][T16902] pgactivate 2621 [ 2106.792205][T16902] pgdeactivate 408 [ 2106.792205][T16902] pglazyfree 0 [ 2106.792205][T16902] pglazyfreed 0 [ 2106.956780][T16902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16902,uid=0 02:12:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x7b, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:06 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x11, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000a0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2106.972118][T16902] Memory cgroup out of memory: Killed process 16902 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:12:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x5865, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2107.050074][T16912] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2107.062347][T16912] CPU: 0 PID: 16912 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2107.071102][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2107.081158][T16912] Call Trace: [ 2107.084457][T16912] [ 2107.087386][T16912] dump_stack_lvl+0xda/0x130 [ 2107.092097][T16912] dump_stack+0x15/0x20 02:12:06 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2500}, 0x0) 02:12:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000b0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2107.096276][T16912] dump_header+0x95/0x3c0 [ 2107.100612][T16912] oom_kill_process+0xe3/0x3e0 [ 2107.105380][T16912] out_of_memory+0x9f0/0xc30 [ 2107.110003][T16912] mem_cgroup_out_of_memory+0x139/0x190 [ 2107.115623][T16912] try_charge_memcg+0x759/0xd20 [ 2107.120479][T16912] obj_cgroup_charge_pages+0xab/0x130 [ 2107.125899][T16912] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2107.131449][T16912] __alloc_pages+0x1bb/0x340 [ 2107.136045][T16912] alloc_pages+0x3e1/0x4e0 [ 2107.140474][T16912] pte_alloc_one+0x2d/0xc0 [ 2107.144905][T16912] __pte_alloc+0x33/0x1f0 02:12:06 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x11000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2107.149250][T16912] handle_mm_fault+0x1ce0/0x21d0 [ 2107.154241][T16912] exc_page_fault+0x45f/0x640 [ 2107.158985][T16912] asm_exc_page_fault+0x26/0x30 [ 2107.163848][T16912] RIP: 0033:0x7f0cbc470de9 [ 2107.168255][T16912] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2107.187886][T16912] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2107.193942][T16912] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2107.201892][T16912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2107.209843][T16912] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2107.217857][T16912] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 000000000020258d [ 2107.225827][T16912] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2107.233810][T16912] [ 2107.237054][T16912] memory: usage 307200kB, limit 307200kB, failcnt 7447 [ 2107.243981][T16912] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2107.250872][T16912] Memory cgroup stats for /syz3: [ 2107.251134][T16912] anon 139264 [ 2107.251134][T16912] file 114688 [ 2107.251134][T16912] kernel 314314752 [ 2107.251134][T16912] kernel_stack 32768 [ 2107.251134][T16912] pagetables 69632 [ 2107.251134][T16912] sec_pagetables 0 [ 2107.251134][T16912] percpu 11058944 [ 2107.251134][T16912] sock 0 [ 2107.251134][T16912] vmalloc 0 [ 2107.251134][T16912] shmem 114688 [ 2107.251134][T16912] file_mapped 114688 [ 2107.251134][T16912] file_dirty 0 [ 2107.251134][T16912] file_writeback 0 [ 2107.251134][T16912] swapcached 0 [ 2107.251134][T16912] inactive_anon 167936 [ 2107.251134][T16912] active_anon 86016 [ 2107.251134][T16912] inactive_file 0 [ 2107.251134][T16912] active_file 0 [ 2107.251134][T16912] unevictable 0 [ 2107.251134][T16912] slab_reclaimable 10552 [ 2107.251134][T16912] slab_unreclaimable 303085728 [ 2107.251134][T16912] slab 303096280 [ 2107.251134][T16912] workingset_refault_anon 0 [ 2107.251134][T16912] workingset_refault_file 4 [ 2107.251134][T16912] workingset_activate_anon 0 [ 2107.251134][T16912] workingset_activate_file 0 [ 2107.251134][T16912] workingset_restore_anon 0 [ 2107.251134][T16912] workingset_restore_file 0 [ 2107.251134][T16912] workingset_nodereclaim 0 [ 2107.251134][T16912] pgscan 311 [ 2107.251134][T16912] pgsteal 22 [ 2107.251134][T16912] pgscan_kswapd 0 [ 2107.251134][T16912] pgscan_direct 311 [ 2107.251134][T16912] pgscan_khugepaged 0 [ 2107.251134][T16912] pgsteal_kswapd 0 [ 2107.251134][T16912] pgsteal_direct 22 [ 2107.251134][T16912] pgsteal_khugepaged 0 [ 2107.251134][T16912] pgfault 899446 [ 2107.251134][T16912] pgmajfault 9 [ 2107.251134][T16912] pgrefill 326 02:12:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x12, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2107.251134][T16912] pgactivate 2621 [ 2107.251134][T16912] pgdeactivate 408 [ 2107.251134][T16912] pglazyfree 0 [ 2107.251134][T16912] pglazyfreed 0 [ 2107.416234][T16912] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16912,uid=0 [ 2107.431722][T16912] Memory cgroup out of memory: Killed process 16912 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:12:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2107.504052][T16930] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2107.517069][T16930] CPU: 1 PID: 16930 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2107.525777][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2107.535832][T16930] Call Trace: [ 2107.539893][T16930] [ 2107.542833][T16930] dump_stack_lvl+0xda/0x130 [ 2107.547541][T16930] dump_stack+0x15/0x20 02:12:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000110500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:06 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x12000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:06 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2f00}, 0x0) [ 2107.551713][T16930] dump_header+0x95/0x3c0 [ 2107.556054][T16930] oom_kill_process+0xe3/0x3e0 [ 2107.560822][T16930] out_of_memory+0x9f0/0xc30 [ 2107.565465][T16930] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2107.571617][T16930] mem_cgroup_out_of_memory+0x139/0x190 [ 2107.577183][T16930] try_charge_memcg+0x759/0xd20 [ 2107.582074][T16930] obj_cgroup_charge_pages+0xab/0x130 [ 2107.587461][T16930] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2107.593084][T16930] __alloc_pages+0x1bb/0x340 [ 2107.597929][T16930] alloc_pages+0x3e1/0x4e0 [ 2107.602359][T16930] __pmd_alloc+0x4b/0x300 [ 2107.606694][T16930] handle_mm_fault+0x1c07/0x21d0 [ 2107.611663][T16930] exc_page_fault+0x45f/0x640 [ 2107.616370][T16930] asm_exc_page_fault+0x26/0x30 [ 2107.621388][T16930] RIP: 0033:0x7f0cbc470de9 [ 2107.625846][T16930] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2107.645626][T16930] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2107.651922][T16930] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2107.659894][T16930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2107.667870][T16930] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2107.675851][T16930] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 000000000020275e [ 2107.683806][T16930] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2107.692570][T16930] [ 2107.695612][T16930] memory: usage 307184kB, limit 307200kB, failcnt 7521 02:12:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000130500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:07 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x25000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2107.702563][T16930] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2107.709484][T16930] Memory cgroup stats for /syz3: [ 2107.709894][T16930] anon 139264 [ 2107.709894][T16930] file 114688 [ 2107.709894][T16930] kernel 314302464 [ 2107.709894][T16930] kernel_stack 32768 [ 2107.709894][T16930] pagetables 65536 [ 2107.709894][T16930] sec_pagetables 0 [ 2107.709894][T16930] percpu 11058880 [ 2107.709894][T16930] sock 0 [ 2107.709894][T16930] vmalloc 0 [ 2107.709894][T16930] shmem 114688 [ 2107.709894][T16930] file_mapped 114688 [ 2107.709894][T16930] file_dirty 0 02:12:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2107.709894][T16930] file_writeback 0 [ 2107.709894][T16930] swapcached 0 [ 2107.709894][T16930] inactive_anon 167936 [ 2107.709894][T16930] active_anon 86016 [ 2107.709894][T16930] inactive_file 0 [ 2107.709894][T16930] active_file 0 [ 2107.709894][T16930] unevictable 0 [ 2107.709894][T16930] slab_reclaimable 10552 [ 2107.709894][T16930] slab_unreclaimable 303084504 [ 2107.709894][T16930] slab 303095056 [ 2107.709894][T16930] workingset_refault_anon 0 [ 2107.709894][T16930] workingset_refault_file 4 [ 2107.709894][T16930] workingset_activate_anon 0 02:12:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x3a00}, 0x0) [ 2107.709894][T16930] workingset_activate_file 0 [ 2107.709894][T16930] workingset_restore_anon 0 [ 2107.709894][T16930] workingset_restore_file 0 [ 2107.709894][T16930] workingset_nodereclaim 0 [ 2107.709894][T16930] pgscan 311 [ 2107.709894][T16930] pgsteal 22 [ 2107.709894][T16930] pgscan_kswapd 0 [ 2107.709894][T16930] pgscan_direct 311 [ 2107.709894][T16930] pgscan_khugepaged 0 [ 2107.709894][T16930] pgsteal_kswapd 0 [ 2107.709894][T16930] pgsteal_direct 22 [ 2107.709894][T16930] pgsteal_khugepaged 0 [ 2107.709894][T16930] pgfault 899503 [ 2107.709894][T16930] pgmajfault 9 [ 2107.709894][T16930] pgrefill 326 [ 2107.709894][T16930] pgactivate 2621 [ 2107.709894][T16930] pgdeactivate 408 [ 2107.709894][T16930] pglazyfree 0 [ 2107.709894][T16930] pglazyfreed 0 [ 2107.873972][T16930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16930,uid=0 02:12:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x2, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2107.889358][T16930] Memory cgroup out of memory: Killed process 16930 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6201, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:07 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4788}, 0x0) [ 2107.948688][T16953] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2107.958921][T16953] CPU: 1 PID: 16953 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2107.967677][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2107.977799][T16953] Call Trace: [ 2107.981072][T16953] [ 2107.983997][T16953] dump_stack_lvl+0xda/0x130 [ 2107.988992][T16953] dump_stack+0x15/0x20 [ 2107.993233][T16953] dump_header+0x95/0x3c0 [ 2107.997733][T16953] oom_kill_process+0xe3/0x3e0 [ 2108.002628][T16953] out_of_memory+0x9f0/0xc30 [ 2108.007226][T16953] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2108.013651][T16953] mem_cgroup_out_of_memory+0x139/0x190 [ 2108.019232][T16953] try_charge_memcg+0x759/0xd20 [ 2108.024137][T16953] charge_memcg+0x51/0x200 [ 2108.028646][T16953] __mem_cgroup_charge+0x29/0xa0 [ 2108.033633][T16953] do_wp_page+0xb96/0x1fb0 [ 2108.038527][T16953] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2108.043913][T16953] handle_mm_fault+0x64e/0x21d0 [ 2108.048792][T16953] exc_page_fault+0x45f/0x640 [ 2108.053454][T16953] asm_exc_page_fault+0x26/0x30 [ 2108.058929][T16953] RIP: 0033:0x7f0cbc47e610 [ 2108.063330][T16953] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2108.084189][T16953] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2108.090240][T16953] RAX: 00000000bc690117 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2108.098198][T16953] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c033d [ 2108.106170][T16953] RBP: 00000000bc690117 R08: 0000000000000117 R09: 00000000bc69011b [ 2108.114148][T16953] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2108.122101][T16953] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff818e690f [ 2108.130098][T16953] ? security_socket_create+0x1f/0x80 [ 2108.135496][T16953] [ 2108.138553][T16953] memory: usage 307184kB, limit 307200kB, failcnt 7591 02:12:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000050500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2108.140192][T16952] validate_nla: 5 callbacks suppressed [ 2108.140324][T16952] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2108.145479][T16953] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2108.150949][T16952] __nla_validate_parse: 18 callbacks suppressed [ 2108.150960][T16952] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2108.158948][T16953] Memory cgroup stats for /syz3: [ 2108.159372][T16953] anon 118784 [ 2108.159372][T16953] file 114688 [ 2108.159372][T16953] kernel 314322944 02:12:07 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2108.159372][T16953] kernel_stack 32768 [ 2108.159372][T16953] pagetables 65536 [ 2108.159372][T16953] sec_pagetables 0 [ 2108.159372][T16953] percpu 11058880 [ 2108.159372][T16953] sock 0 [ 2108.159372][T16953] vmalloc 0 [ 2108.159372][T16953] shmem 114688 [ 2108.159372][T16953] file_mapped 114688 [ 2108.159372][T16953] file_dirty 0 [ 2108.159372][T16953] file_writeback 0 [ 2108.159372][T16953] swapcached 0 [ 2108.159372][T16953] inactive_anon 147456 [ 2108.159372][T16953] active_anon 86016 [ 2108.159372][T16953] inactive_file 0 [ 2108.159372][T16953] active_file 0 [ 2108.159372][T16953] unevictable 0 [ 2108.159372][T16953] slab_reclaimable 28808 [ 2108.159372][T16953] slab_unreclaimable 303086752 [ 2108.159372][T16953] slab 303115560 [ 2108.159372][T16953] workingset_refault_anon 0 [ 2108.159372][T16953] workingset_refault_file 4 [ 2108.159372][T16953] workingset_activate_anon 0 [ 2108.159372][T16953] workingset_activate_file 0 [ 2108.159372][T16953] workingset_restore_anon 0 [ 2108.159372][T16953] workingset_restore_file 0 [ 2108.159372][T16953] workingset_nodereclaim 0 [ 2108.159372][T16953] pgscan 311 [ 2108.159372][T16953] pgsteal 22 [ 2108.159372][T16953] pgscan_kswapd 0 [ 2108.159372][T16953] pgscan_direct 311 [ 2108.159372][T16953] pgscan_khugepaged 0 [ 2108.159372][T16953] pgsteal_kswapd 0 [ 2108.159372][T16953] pgsteal_direct 22 [ 2108.159372][T16953] pgsteal_khugepaged 0 [ 2108.159372][T16953] pgfault 899554 [ 2108.159372][T16953] pgmajfault 9 [ 2108.159372][T16953] pgrefill 326 [ 2108.159372][T16953] pgactivate 2621 [ 2108.159372][T16953] pgdeactivate 408 [ 2108.159372][T16953] pglazyfree 0 [ 2108.159372][T16953] pglazyfreed 0 02:12:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000060500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2108.346310][T16953] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16953,uid=0 [ 2108.361618][T16953] Memory cgroup out of memory: Killed process 16953 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000080500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000090500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x0) [ 2108.417571][T16957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:12:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x5, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2108.455121][T16967] Memory cgroup out of memory: Killed process 16967 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x6, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2108.506120][T16976] Memory cgroup out of memory: Killed process 16976 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6558, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:08 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2108.552392][T16965] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2108.560733][T16965] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2108.565361][T16978] oom_kill_process: 2 callbacks suppressed [ 2108.565372][T16978] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2108.585969][T16978] CPU: 1 PID: 16978 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 02:12:08 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2108.594750][T16978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2108.598175][T16983] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2108.604791][T16978] Call Trace: [ 2108.604799][T16978] [ 2108.612884][T16983] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2108.616214][T16978] dump_stack_lvl+0xda/0x130 [ 2108.632928][T16978] dump_stack+0x15/0x20 [ 2108.637488][T16978] dump_header+0x95/0x3c0 [ 2108.641870][T16978] oom_kill_process+0xe3/0x3e0 [ 2108.646724][T16978] out_of_memory+0x9f0/0xc30 02:12:08 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4888}, 0x0) [ 2108.651341][T16978] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 2108.657180][T16978] mem_cgroup_out_of_memory+0x139/0x190 [ 2108.662801][T16978] try_charge_memcg+0x759/0xd20 [ 2108.667691][T16978] charge_memcg+0x51/0x200 [ 2108.672172][T16978] __mem_cgroup_charge+0x29/0xa0 [ 2108.677299][T16978] do_wp_page+0xb96/0x1fb0 [ 2108.681725][T16978] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2108.687103][T16978] handle_mm_fault+0x64e/0x21d0 [ 2108.692039][T16978] exc_page_fault+0x45f/0x640 [ 2108.696813][T16978] asm_exc_page_fault+0x26/0x30 [ 2108.701668][T16978] RIP: 0033:0x7f0cbc47e610 [ 2108.706417][T16978] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2108.727067][T16978] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2108.733126][T16978] RAX: 0000000091c3ec0c RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2108.741141][T16978] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c0740 02:12:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000a0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2108.749519][T16978] RBP: 0000000091c3ec0c R08: 0000000000000c0c R09: 0000000091c3ec10 [ 2108.757482][T16978] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2108.765527][T16978] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff83a3167b [ 2108.773569][T16978] ? __sys_socket+0x2b/0x220 [ 2108.778192][T16978] [ 2108.781260][T16978] memory: usage 307188kB, limit 307200kB, failcnt 7823 [ 2108.788478][T16978] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2108.795342][T16978] Memory cgroup stats for /syz3: [ 2108.795647][T16978] anon 110592 [ 2108.795647][T16978] file 114688 [ 2108.795647][T16978] kernel 314335232 [ 2108.795647][T16978] kernel_stack 32768 [ 2108.795647][T16978] pagetables 65536 [ 2108.795647][T16978] sec_pagetables 0 [ 2108.795647][T16978] percpu 11059072 [ 2108.795647][T16978] sock 0 [ 2108.795647][T16978] vmalloc 0 [ 2108.795647][T16978] shmem 114688 [ 2108.795647][T16978] file_mapped 114688 [ 2108.795647][T16978] file_dirty 0 [ 2108.795647][T16978] file_writeback 0 [ 2108.795647][T16978] swapcached 0 [ 2108.795647][T16978] inactive_anon 135168 [ 2108.795647][T16978] active_anon 86016 [ 2108.795647][T16978] inactive_file 0 [ 2108.795647][T16978] active_file 0 [ 2108.795647][T16978] unevictable 0 [ 2108.795647][T16978] slab_reclaimable 10552 [ 2108.795647][T16978] slab_unreclaimable 303104448 [ 2108.795647][T16978] slab 303115000 [ 2108.795647][T16978] workingset_refault_anon 0 [ 2108.795647][T16978] workingset_refault_file 4 [ 2108.795647][T16978] workingset_activate_anon 0 [ 2108.795647][T16978] workingset_activate_file 0 [ 2108.795647][T16978] workingset_restore_anon 0 [ 2108.795647][T16978] workingset_restore_file 0 [ 2108.795647][T16978] workingset_nodereclaim 0 [ 2108.795647][T16978] pgscan 311 [ 2108.795647][T16978] pgsteal 22 [ 2108.795647][T16978] pgscan_kswapd 0 [ 2108.795647][T16978] pgscan_direct 311 [ 2108.795647][T16978] pgscan_khugepaged 0 [ 2108.795647][T16978] pgsteal_kswapd 0 [ 2108.795647][T16978] pgsteal_direct 22 [ 2108.795647][T16978] pgsteal_khugepaged 0 [ 2108.795647][T16978] pgfault 899701 [ 2108.795647][T16978] pgmajfault 9 [ 2108.795647][T16978] pgrefill 326 [ 2108.795647][T16978] pgactivate 2621 [ 2108.795647][T16978] pgdeactivate 408 02:12:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x8, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:08 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 02:12:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000b0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2108.795647][T16978] pglazyfree 0 [ 2108.795647][T16978] pglazyfreed 0 [ 2108.825166][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2108.960347][T16978] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16978,uid=0 [ 2108.960431][T16978] Memory cgroup out of memory: Killed process 16978 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2109.056359][T16995] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2109.066674][T16995] CPU: 1 PID: 16995 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2109.075395][T16995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2109.085531][T16995] Call Trace: [ 2109.089260][T16995] [ 2109.092194][T16995] dump_stack_lvl+0xda/0x130 [ 2109.096795][T16995] dump_stack+0x15/0x20 [ 2109.100934][T16995] dump_header+0x95/0x3c0 [ 2109.105619][T16995] oom_kill_process+0xe3/0x3e0 [ 2109.110376][T16995] out_of_memory+0x9f0/0xc30 [ 2109.115240][T16995] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2109.121312][T16995] mem_cgroup_out_of_memory+0x139/0x190 [ 2109.126908][T16995] try_charge_memcg+0x759/0xd20 [ 2109.131747][T16995] charge_memcg+0x51/0x200 [ 2109.136224][T16995] __mem_cgroup_charge+0x29/0xa0 [ 2109.141212][T16995] do_wp_page+0xb96/0x1fb0 [ 2109.145675][T16995] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2109.151121][T16995] handle_mm_fault+0x64e/0x21d0 [ 2109.155977][T16995] exc_page_fault+0x45f/0x640 [ 2109.160642][T16995] asm_exc_page_fault+0x26/0x30 [ 2109.165536][T16995] RIP: 0033:0x7f0cbc47e610 [ 2109.170053][T16995] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2109.189980][T16995] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2109.196111][T16995] RAX: 0000000042881cb3 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2109.204064][T16995] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e2fbb4 [ 2109.212058][T16995] RBP: 0000000042881cb3 R08: 0000000000001cb3 R09: 0000000042881cb7 [ 2109.220022][T16995] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2109.227994][T16995] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff81930a0c [ 2109.235990][T16995] ? security_is_socket_class+0x2dc/0x530 [ 2109.241697][T16995] [ 2109.244805][T16995] memory: usage 307200kB, limit 307200kB, failcnt 7906 [ 2109.251795][T16995] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2109.258659][T16995] Memory cgroup stats for /syz3: [ 2109.258971][T16995] anon 135168 [ 2109.258971][T16995] file 114688 [ 2109.258971][T16995] kernel 314322944 [ 2109.258971][T16995] kernel_stack 32768 [ 2109.258971][T16995] pagetables 65536 [ 2109.258971][T16995] sec_pagetables 0 [ 2109.258971][T16995] percpu 11059008 [ 2109.258971][T16995] sock 0 [ 2109.258971][T16995] vmalloc 0 [ 2109.258971][T16995] shmem 114688 [ 2109.258971][T16995] file_mapped 114688 [ 2109.258971][T16995] file_dirty 0 [ 2109.258971][T16995] file_writeback 0 [ 2109.258971][T16995] swapcached 0 [ 2109.258971][T16995] inactive_anon 147456 [ 2109.258971][T16995] active_anon 86016 [ 2109.258971][T16995] inactive_file 0 [ 2109.258971][T16995] active_file 0 [ 2109.258971][T16995] unevictable 0 [ 2109.258971][T16995] slab_reclaimable 10552 [ 2109.258971][T16995] slab_unreclaimable 303097720 [ 2109.258971][T16995] slab 303108272 [ 2109.258971][T16995] workingset_refault_anon 0 [ 2109.258971][T16995] workingset_refault_file 4 [ 2109.258971][T16995] workingset_activate_anon 0 [ 2109.258971][T16995] workingset_activate_file 0 [ 2109.258971][T16995] workingset_restore_anon 0 [ 2109.258971][T16995] workingset_restore_file 0 [ 2109.258971][T16995] workingset_nodereclaim 0 [ 2109.258971][T16995] pgscan 311 [ 2109.258971][T16995] pgsteal 22 [ 2109.258971][T16995] pgscan_kswapd 0 [ 2109.258971][T16995] pgscan_direct 311 [ 2109.258971][T16995] pgscan_khugepaged 0 [ 2109.258971][T16995] pgsteal_kswapd 0 [ 2109.258971][T16995] pgsteal_direct 22 [ 2109.258971][T16995] pgsteal_khugepaged 0 [ 2109.258971][T16995] pgfault 899760 [ 2109.258971][T16995] pgmajfault 9 02:12:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xa, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2109.258971][T16995] pgrefill 326 [ 2109.258971][T16995] pgactivate 2621 [ 2109.258971][T16995] pgdeactivate 408 [ 2109.258971][T16995] pglazyfree 0 [ 2109.258971][T16995] pglazyfreed 0 [ 2109.423659][T16995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16995,uid=0 [ 2109.439087][T16995] Memory cgroup out of memory: Killed process 16995 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2109.489235][T16999] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2109.498583][T16989] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2109.499428][T16999] CPU: 1 PID: 16999 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2109.507511][T16989] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2109.516464][T16999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2109.516476][T16999] Call Trace: 02:12:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2109.516481][T16999] [ 2109.516487][T16999] dump_stack_lvl+0xda/0x130 [ 2109.546669][T16999] dump_stack+0x15/0x20 [ 2109.550826][T16999] dump_header+0x95/0x3c0 [ 2109.555166][T16999] oom_kill_process+0xe3/0x3e0 [ 2109.560009][T16999] out_of_memory+0x9f0/0xc30 [ 2109.564672][T16999] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2109.570740][T16999] mem_cgroup_out_of_memory+0x139/0x190 [ 2109.576285][T16999] try_charge_memcg+0x759/0xd20 [ 2109.581151][T16999] charge_memcg+0x51/0x200 02:12:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6600, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:09 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 02:12:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2109.585593][T16999] __mem_cgroup_charge+0x29/0xa0 [ 2109.590607][T16999] do_wp_page+0xb96/0x1fb0 [ 2109.595034][T16999] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2109.600410][T16999] handle_mm_fault+0x64e/0x21d0 [ 2109.605310][T16999] exc_page_fault+0x45f/0x640 [ 2109.610023][T16999] asm_exc_page_fault+0x26/0x30 [ 2109.614884][T16999] RIP: 0033:0x7f0cbc47e610 [ 2109.619311][T16999] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2109.638938][T16999] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2109.645050][T16999] RAX: 00000000430a51ea RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2109.653038][T16999] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000000000022 [ 2109.661011][T16999] RBP: 00000000430a51ea R08: 00000000000011ea R09: 00000000430a51ee [ 2109.668978][T16999] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2109.676962][T16999] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff83a31880 [ 2109.685047][T16999] ? __x64_sys_socket+0x10/0x50 02:12:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000100500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000110500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2109.689999][T16999] [ 2109.693131][T16999] memory: usage 307196kB, limit 307200kB, failcnt 7988 [ 2109.700092][T16999] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2109.706943][T16999] Memory cgroup stats for /syz3: [ 2109.707273][T16999] anon 106496 [ 2109.707273][T16999] file 114688 [ 2109.707273][T16999] kernel 314347520 [ 2109.707273][T16999] kernel_stack 32768 [ 2109.707273][T16999] pagetables 65536 [ 2109.707273][T16999] sec_pagetables 0 [ 2109.707273][T16999] percpu 11059008 [ 2109.707273][T16999] sock 0 [ 2109.707273][T16999] vmalloc 0 [ 2109.707273][T16999] shmem 114688 [ 2109.707273][T16999] file_mapped 114688 [ 2109.707273][T16999] file_dirty 0 [ 2109.707273][T16999] file_writeback 0 [ 2109.707273][T16999] swapcached 0 [ 2109.707273][T16999] inactive_anon 77824 [ 2109.707273][T16999] active_anon 86016 [ 2109.707273][T16999] inactive_file 0 [ 2109.707273][T16999] active_file 0 [ 2109.707273][T16999] unevictable 0 [ 2109.707273][T16999] slab_reclaimable 28808 [ 2109.707273][T16999] slab_unreclaimable 303099968 [ 2109.707273][T16999] slab 303128776 [ 2109.707273][T16999] workingset_refault_anon 0 [ 2109.707273][T16999] workingset_refault_file 4 [ 2109.707273][T16999] workingset_activate_anon 0 [ 2109.707273][T16999] workingset_activate_file 0 [ 2109.707273][T16999] workingset_restore_anon 0 [ 2109.707273][T16999] workingset_restore_file 0 [ 2109.707273][T16999] workingset_nodereclaim 0 [ 2109.707273][T16999] pgscan 311 [ 2109.707273][T16999] pgsteal 22 [ 2109.707273][T16999] pgscan_kswapd 0 [ 2109.707273][T16999] pgscan_direct 311 [ 2109.707273][T16999] pgscan_khugepaged 0 [ 2109.707273][T16999] pgsteal_kswapd 0 [ 2109.707273][T16999] pgsteal_direct 22 [ 2109.707273][T16999] pgsteal_khugepaged 0 [ 2109.707273][T16999] pgfault 899805 [ 2109.707273][T16999] pgmajfault 9 [ 2109.707273][T16999] pgrefill 326 [ 2109.707273][T16999] pgactivate 2621 [ 2109.707273][T16999] pgdeactivate 408 [ 2109.707273][T16999] pglazyfree 0 [ 2109.707273][T16999] pglazyfreed 0 [ 2109.871636][T16999] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16999,uid=0 02:12:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xc, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2109.887242][T16999] Memory cgroup out of memory: Killed process 16999 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2109.926359][T17008] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:12:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000130500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2109.934677][T17008] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2109.941240][T17016] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2109.954084][T17016] CPU: 1 PID: 17016 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2109.962874][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2109.972952][T17016] Call Trace: [ 2109.976224][T17016] [ 2109.979152][T17016] dump_stack_lvl+0xda/0x130 [ 2109.983765][T17016] dump_stack+0x15/0x20 02:12:09 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x6000}, 0x0) [ 2109.987228][T17010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2109.987914][T17016] dump_header+0x95/0x3c0 [ 2109.987949][T17016] oom_kill_process+0xe3/0x3e0 [ 2110.006586][T17016] out_of_memory+0x9f0/0xc30 [ 2110.011270][T17016] mem_cgroup_out_of_memory+0x139/0x190 [ 2110.017140][T17016] try_charge_memcg+0x759/0xd20 [ 2110.022130][T17016] charge_memcg+0x51/0x200 [ 2110.026587][T17016] __mem_cgroup_charge+0x29/0xa0 [ 2110.031569][T17016] do_wp_page+0xb96/0x1fb0 02:12:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2110.036145][T17016] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 2110.042636][T17016] ? cgroup_rstat_updated+0x1b0/0x1c0 [ 2110.048016][T17016] handle_mm_fault+0x64e/0x21d0 [ 2110.052901][T17016] exc_page_fault+0x45f/0x640 [ 2110.057838][T17016] asm_exc_page_fault+0x26/0x30 [ 2110.062773][T17016] RIP: 0033:0x7f0cbc47bfdd [ 2110.067230][T17016] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 2110.087082][T17016] RSP: 002b:00007fff8ab2bf90 EFLAGS: 00010217 [ 2110.093230][T17016] RAX: 0000000000000000 RBX: 00007f0cbc5f0f8c RCX: 00007f0cbc4d1169 [ 2110.101234][T17016] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0cbc5f0f88 [ 2110.109189][T17016] RBP: 00007f0cbc5f0f80 R08: 00007f0cbb844700 R09: 0000000000000000 [ 2110.117191][T17016] R10: 00007f0cbb844700 R11: 0000000000000246 R12: 00007f0cbc5f0f8c [ 2110.125258][T17016] R13: 00007f0cbc045060 R14: 00007f0cbc5f0f80 R15: 0000000000000000 [ 2110.133280][T17016] [ 2110.136338][T17016] memory: usage 307200kB, limit 307200kB, failcnt 8075 [ 2110.143429][T17016] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2110.150276][T17016] Memory cgroup stats for /syz3: [ 2110.150602][T17016] anon 98304 [ 2110.150602][T17016] file 114688 [ 2110.150602][T17016] kernel 314351616 [ 2110.150602][T17016] kernel_stack 32768 [ 2110.150602][T17016] pagetables 65536 [ 2110.150602][T17016] sec_pagetables 0 [ 2110.150602][T17016] percpu 11059072 [ 2110.150602][T17016] sock 0 [ 2110.150602][T17016] vmalloc 0 [ 2110.150602][T17016] shmem 114688 [ 2110.150602][T17016] file_mapped 114688 [ 2110.150602][T17016] file_dirty 0 [ 2110.150602][T17016] file_writeback 0 [ 2110.150602][T17016] swapcached 0 [ 2110.150602][T17016] inactive_anon 90112 [ 2110.150602][T17016] active_anon 86016 [ 2110.150602][T17016] inactive_file 0 [ 2110.150602][T17016] active_file 0 [ 2110.150602][T17016] unevictable 0 [ 2110.150602][T17016] slab_reclaimable 25264 [ 2110.150602][T17016] slab_unreclaimable 303100768 [ 2110.150602][T17016] slab 303126032 [ 2110.150602][T17016] workingset_refault_anon 0 [ 2110.150602][T17016] workingset_refault_file 4 [ 2110.150602][T17016] workingset_activate_anon 0 [ 2110.150602][T17016] workingset_activate_file 0 [ 2110.150602][T17016] workingset_restore_anon 0 [ 2110.150602][T17016] workingset_restore_file 0 [ 2110.150602][T17016] workingset_nodereclaim 0 [ 2110.150602][T17016] pgscan 311 [ 2110.150602][T17016] pgsteal 22 [ 2110.150602][T17016] pgscan_kswapd 0 [ 2110.150602][T17016] pgscan_direct 311 [ 2110.150602][T17016] pgscan_khugepaged 0 [ 2110.150602][T17016] pgsteal_kswapd 0 [ 2110.150602][T17016] pgsteal_direct 22 [ 2110.150602][T17016] pgsteal_khugepaged 0 [ 2110.150602][T17016] pgfault 899844 [ 2110.150602][T17016] pgmajfault 9 [ 2110.150602][T17016] pgrefill 326 [ 2110.150602][T17016] pgactivate 2621 [ 2110.150602][T17016] pgdeactivate 408 [ 2110.150602][T17016] pglazyfree 0 [ 2110.150602][T17016] pglazyfreed 0 [ 2110.315958][T17016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17016,uid=0 02:12:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6800, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:09 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x6558}, 0x0) 02:12:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xf, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2110.331455][T17016] Memory cgroup out of memory: Killed process 17016 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2110.336802][T17017] socket: no more sockets 02:12:09 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2110.405025][T17024] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2110.413180][T17024] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:12:09 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2110.474825][T17031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2110.475044][T17028] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2110.494365][T17028] CPU: 0 PID: 17028 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2110.503569][T17028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2110.513635][T17028] Call Trace: [ 2110.516908][T17028] [ 2110.519832][T17028] dump_stack_lvl+0xda/0x130 02:12:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x6800}, 0x0) [ 2110.524503][T17028] dump_stack+0x15/0x20 [ 2110.528757][T17028] dump_header+0x95/0x3c0 [ 2110.533135][T17028] oom_kill_process+0xe3/0x3e0 [ 2110.537976][T17028] out_of_memory+0x9f0/0xc30 [ 2110.542637][T17028] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2110.548718][T17028] mem_cgroup_out_of_memory+0x139/0x190 [ 2110.554266][T17028] try_charge_memcg+0x759/0xd20 [ 2110.559126][T17028] charge_memcg+0x51/0x200 [ 2110.563592][T17028] __mem_cgroup_charge+0x29/0xa0 [ 2110.568613][T17028] do_wp_page+0xb96/0x1fb0 [ 2110.573062][T17028] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 2110.578956][T17028] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2110.584301][T17028] handle_mm_fault+0x64e/0x21d0 [ 2110.589183][T17028] exc_page_fault+0x45f/0x640 [ 2110.593882][T17028] asm_exc_page_fault+0x26/0x30 [ 2110.598748][T17028] RIP: 0033:0x7f0cbc47e610 [ 2110.603178][T17028] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2110.623475][T17028] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2110.629808][T17028] RAX: 0000000042881cb3 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2110.637815][T17028] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e2fbb4 [ 2110.645831][T17028] RBP: 0000000042881cb3 R08: 0000000000001cb3 R09: 0000000042881cb7 [ 2110.653890][T17028] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2110.662316][T17028] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff81930a0c [ 2110.670389][T17028] ? security_is_socket_class+0x2dc/0x530 [ 2110.676110][T17028] [ 2110.679158][T17028] memory: usage 307192kB, limit 307200kB, failcnt 8178 [ 2110.686024][T17028] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2110.692874][T17028] Memory cgroup stats for /syz3: [ 2110.693179][T17028] anon 135168 [ 2110.693179][T17028] file 114688 [ 2110.693179][T17028] kernel 314302464 [ 2110.693179][T17028] kernel_stack 32768 [ 2110.693179][T17028] pagetables 65536 [ 2110.693179][T17028] sec_pagetables 0 [ 2110.693179][T17028] percpu 11058880 [ 2110.693179][T17028] sock 0 [ 2110.693179][T17028] vmalloc 0 [ 2110.693179][T17028] shmem 114688 [ 2110.693179][T17028] file_mapped 114688 [ 2110.693179][T17028] file_dirty 0 [ 2110.693179][T17028] file_writeback 0 [ 2110.693179][T17028] swapcached 0 [ 2110.693179][T17028] inactive_anon 163840 [ 2110.693179][T17028] active_anon 86016 [ 2110.693179][T17028] inactive_file 0 [ 2110.693179][T17028] active_file 0 [ 2110.693179][T17028] unevictable 0 [ 2110.693179][T17028] slab_reclaimable 10552 [ 2110.693179][T17028] slab_unreclaimable 303085968 [ 2110.693179][T17028] slab 303096520 [ 2110.693179][T17028] workingset_refault_anon 0 [ 2110.693179][T17028] workingset_refault_file 4 [ 2110.693179][T17028] workingset_activate_anon 0 [ 2110.693179][T17028] workingset_activate_file 0 [ 2110.693179][T17028] workingset_restore_anon 0 [ 2110.693179][T17028] workingset_restore_file 0 [ 2110.693179][T17028] workingset_nodereclaim 0 [ 2110.693179][T17028] pgscan 311 [ 2110.693179][T17028] pgsteal 22 [ 2110.693179][T17028] pgscan_kswapd 0 [ 2110.693179][T17028] pgscan_direct 311 [ 2110.693179][T17028] pgscan_khugepaged 0 [ 2110.693179][T17028] pgsteal_kswapd 0 [ 2110.693179][T17028] pgsteal_direct 22 [ 2110.693179][T17028] pgsteal_khugepaged 0 [ 2110.693179][T17028] pgfault 899903 [ 2110.693179][T17028] pgmajfault 9 [ 2110.693179][T17028] pgrefill 326 [ 2110.693179][T17028] pgactivate 2621 [ 2110.693179][T17028] pgdeactivate 408 [ 2110.693179][T17028] pglazyfree 0 [ 2110.693179][T17028] pglazyfreed 0 [ 2110.858082][T17028] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17028,uid=0 02:12:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x10, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2110.873609][T17028] Memory cgroup out of memory: Killed process 17028 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:10 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6802, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2110.932506][T17037] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2110.936533][T17041] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2110.950839][T17041] CPU: 0 PID: 17041 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2110.959624][T17041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2110.969775][T17041] Call Trace: [ 2110.973058][T17041] [ 2110.976002][T17041] dump_stack_lvl+0xda/0x130 02:12:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) [ 2110.980592][T17041] dump_stack+0x15/0x20 [ 2110.984746][T17041] dump_header+0x95/0x3c0 [ 2110.989078][T17041] oom_kill_process+0xe3/0x3e0 [ 2110.993906][T17041] out_of_memory+0x9f0/0xc30 [ 2110.998594][T17041] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2111.003684][T17048] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2111.004834][T17041] mem_cgroup_out_of_memory+0x139/0x190 [ 2111.018847][T17041] try_charge_memcg+0x759/0xd20 [ 2111.023928][T17041] charge_memcg+0x51/0x200 02:12:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2111.028557][T17041] __mem_cgroup_charge+0x29/0xa0 [ 2111.033498][T17041] do_wp_page+0xb96/0x1fb0 [ 2111.038033][T17041] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2111.043440][T17041] handle_mm_fault+0x64e/0x21d0 [ 2111.048665][T17041] exc_page_fault+0x45f/0x640 [ 2111.053613][T17041] asm_exc_page_fault+0x26/0x30 [ 2111.059015][T17041] RIP: 0033:0x7f0cbc47e610 [ 2111.063716][T17041] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 02:12:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x7400}, 0x0) [ 2111.079061][T17053] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2111.083459][T17041] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2111.083477][T17041] RAX: 00000000c301b5fc RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2111.083489][T17041] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e062e9 [ 2111.083500][T17041] RBP: 00000000c301b5fc R08: 00000000000015fc R09: 00000000c301b600 [ 2111.083512][T17041] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 02:12:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x81ffffff}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2111.130539][T17041] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff818fe770 [ 2111.138621][T17041] ? selinux_socket_create+0x30/0x180 [ 2111.144016][T17041] [ 2111.147158][T17041] memory: usage 307180kB, limit 307200kB, failcnt 8252 [ 2111.154025][T17041] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2111.160916][T17041] Memory cgroup stats for /syz3: [ 2111.161160][T17041] anon 122880 [ 2111.161160][T17041] file 114688 [ 2111.161160][T17041] kernel 314314752 [ 2111.161160][T17041] kernel_stack 32768 [ 2111.161160][T17041] pagetables 65536 [ 2111.161160][T17041] sec_pagetables 0 [ 2111.161160][T17041] percpu 11058880 [ 2111.161160][T17041] sock 0 [ 2111.161160][T17041] vmalloc 0 [ 2111.161160][T17041] shmem 114688 [ 2111.161160][T17041] file_mapped 114688 [ 2111.161160][T17041] file_dirty 0 [ 2111.161160][T17041] file_writeback 0 [ 2111.161160][T17041] swapcached 0 [ 2111.161160][T17041] inactive_anon 114688 [ 2111.161160][T17041] active_anon 86016 [ 2111.161160][T17041] inactive_file 0 [ 2111.161160][T17041] active_file 0 [ 2111.161160][T17041] unevictable 0 [ 2111.161160][T17041] slab_reclaimable 19160 [ 2111.161160][T17041] slab_unreclaimable 303086088 [ 2111.161160][T17041] slab 303105248 [ 2111.161160][T17041] workingset_refault_anon 0 [ 2111.161160][T17041] workingset_refault_file 4 [ 2111.161160][T17041] workingset_activate_anon 0 [ 2111.161160][T17041] workingset_activate_file 0 [ 2111.161160][T17041] workingset_restore_anon 0 [ 2111.161160][T17041] workingset_restore_file 0 [ 2111.161160][T17041] workingset_nodereclaim 0 [ 2111.161160][T17041] pgscan 311 [ 2111.161160][T17041] pgsteal 22 [ 2111.161160][T17041] pgscan_kswapd 0 [ 2111.161160][T17041] pgscan_direct 311 [ 2111.161160][T17041] pgscan_khugepaged 0 [ 2111.161160][T17041] pgsteal_kswapd 0 [ 2111.161160][T17041] pgsteal_direct 22 [ 2111.161160][T17041] pgsteal_khugepaged 0 [ 2111.161160][T17041] pgfault 899953 [ 2111.161160][T17041] pgmajfault 9 [ 2111.161160][T17041] pgrefill 326 [ 2111.161160][T17041] pgactivate 2621 [ 2111.161160][T17041] pgdeactivate 408 [ 2111.161160][T17041] pglazyfree 0 [ 2111.161160][T17041] pglazyfreed 0 02:12:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x60, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2111.327040][T17041] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17041,uid=0 [ 2111.342446][T17041] Memory cgroup out of memory: Killed process 17041 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2111.393321][T17062] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2111.403617][T17062] CPU: 0 PID: 17062 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2111.412295][T17062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2111.422471][T17062] Call Trace: [ 2111.425744][T17062] [ 2111.426399][T17058] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2111.428678][T17062] dump_stack_lvl+0xda/0x130 02:12:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) 02:12:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x82da0000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6a00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2111.441372][T17062] dump_stack+0x15/0x20 [ 2111.445598][T17062] dump_header+0x95/0x3c0 [ 2111.450104][T17062] oom_kill_process+0xe3/0x3e0 [ 2111.455159][T17062] out_of_memory+0x9f0/0xc30 [ 2111.459808][T17062] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2111.465999][T17062] mem_cgroup_out_of_memory+0x139/0x190 [ 2111.471654][T17062] try_charge_memcg+0x759/0xd20 [ 2111.476558][T17062] charge_memcg+0x51/0x200 [ 2111.480992][T17062] __mem_cgroup_charge+0x29/0xa0 [ 2111.485942][T17062] do_wp_page+0xb96/0x1fb0 [ 2111.490468][T17062] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2111.495770][T17062] handle_mm_fault+0x64e/0x21d0 [ 2111.500950][T17062] exc_page_fault+0x45f/0x640 [ 2111.505637][T17062] asm_exc_page_fault+0x26/0x30 [ 2111.510560][T17062] RIP: 0033:0x7f0cbc47e610 [ 2111.515411][T17062] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2111.535021][T17062] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2111.541100][T17062] RAX: 00000000bc690117 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2111.549273][T17062] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c033d [ 2111.557243][T17062] RBP: 00000000bc690117 R08: 0000000000000117 R09: 00000000bc69011b [ 2111.565312][T17062] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2111.573278][T17062] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff818e690f [ 2111.581259][T17062] ? security_socket_create+0x1f/0x80 [ 2111.587059][T17062] 02:12:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2111.590166][T17062] memory: usage 307184kB, limit 307200kB, failcnt 8322 [ 2111.597044][T17062] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2111.604049][T17062] Memory cgroup stats for /syz3: [ 2111.604340][T17062] anon 118784 [ 2111.604340][T17062] file 114688 [ 2111.604340][T17062] kernel 314314752 [ 2111.604340][T17062] kernel_stack 32768 [ 2111.604340][T17062] pagetables 65536 [ 2111.604340][T17062] sec_pagetables 0 [ 2111.604340][T17062] percpu 11058880 [ 2111.604340][T17062] sock 0 [ 2111.604340][T17062] vmalloc 0 [ 2111.604340][T17062] shmem 114688 02:12:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2111.604340][T17062] file_mapped 114688 [ 2111.604340][T17062] file_dirty 0 [ 2111.604340][T17062] file_writeback 0 [ 2111.604340][T17062] swapcached 0 [ 2111.604340][T17062] inactive_anon 102400 [ 2111.604340][T17062] active_anon 86016 [ 2111.604340][T17062] inactive_file 0 [ 2111.604340][T17062] active_file 0 [ 2111.604340][T17062] unevictable 0 [ 2111.604340][T17062] slab_reclaimable 21536 [ 2111.604340][T17062] slab_unreclaimable 303086352 [ 2111.604340][T17062] slab 303107888 [ 2111.604340][T17062] workingset_refault_anon 0 [ 2111.604340][T17062] workingset_refault_file 4 [ 2111.604340][T17062] workingset_activate_anon 0 [ 2111.604340][T17062] workingset_activate_file 0 [ 2111.604340][T17062] workingset_restore_anon 0 [ 2111.604340][T17062] workingset_restore_file 0 [ 2111.604340][T17062] workingset_nodereclaim 0 [ 2111.604340][T17062] pgscan 311 [ 2111.604340][T17062] pgsteal 22 [ 2111.604340][T17062] pgscan_kswapd 0 [ 2111.604340][T17062] pgscan_direct 311 [ 2111.604340][T17062] pgscan_khugepaged 0 [ 2111.604340][T17062] pgsteal_kswapd 0 [ 2111.604340][T17062] pgsteal_direct 22 [ 2111.604340][T17062] pgsteal_khugepaged 0 [ 2111.604340][T17062] pgfault 900001 [ 2111.604340][T17062] pgmajfault 9 [ 2111.604340][T17062] pgrefill 326 [ 2111.604340][T17062] pgactivate 2621 [ 2111.604340][T17062] pgdeactivate 408 [ 2111.604340][T17062] pglazyfree 0 [ 2111.604340][T17062] pglazyfreed 0 [ 2111.769380][T17062] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17062,uid=0 02:12:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x500, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x83da0000}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2111.784634][T17062] Memory cgroup out of memory: Killed process 17062 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2111.844582][T17075] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2111.855327][T17075] CPU: 0 PID: 17075 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2111.864090][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2111.874156][T17075] Call Trace: [ 2111.877450][T17075] [ 2111.880415][T17075] dump_stack_lvl+0xda/0x130 [ 2111.885037][T17075] dump_stack+0x15/0x20 [ 2111.889197][T17075] dump_header+0x95/0x3c0 02:12:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x6c00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:11 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 02:12:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2111.894115][T17075] oom_kill_process+0xe3/0x3e0 [ 2111.898937][T17075] out_of_memory+0x9f0/0xc30 [ 2111.903537][T17075] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2111.909617][T17075] mem_cgroup_out_of_memory+0x139/0x190 [ 2111.915199][T17075] try_charge_memcg+0x759/0xd20 [ 2111.920065][T17075] charge_memcg+0x51/0x200 [ 2111.924542][T17075] __mem_cgroup_charge+0x29/0xa0 [ 2111.929517][T17075] do_wp_page+0xb96/0x1fb0 [ 2111.933961][T17075] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2111.939286][T17075] handle_mm_fault+0x64e/0x21d0 02:12:11 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8847}, 0x0) 02:12:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xb2fae6f6}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2111.944223][T17075] exc_page_fault+0x45f/0x640 [ 2111.948927][T17075] asm_exc_page_fault+0x26/0x30 [ 2111.953827][T17075] RIP: 0033:0x7f0cbc47e610 [ 2111.958320][T17075] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2111.978451][T17075] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2111.984544][T17075] RAX: 00000000bc690117 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 02:12:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2111.992599][T17075] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c033d [ 2112.000740][T17075] RBP: 00000000bc690117 R08: 0000000000000117 R09: 00000000bc69011b [ 2112.009514][T17075] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2112.017846][T17075] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff818e690f [ 2112.025920][T17075] ? security_socket_create+0x1f/0x80 [ 2112.031394][T17075] [ 2112.034530][T17075] memory: usage 307176kB, limit 307200kB, failcnt 8391 02:12:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030b00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2112.041385][T17075] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2112.048576][T17075] Memory cgroup stats for /syz3: [ 2112.048838][T17075] anon 118784 [ 2112.048838][T17075] file 114688 [ 2112.048838][T17075] kernel 314314752 [ 2112.048838][T17075] kernel_stack 32768 [ 2112.048838][T17075] pagetables 65536 [ 2112.048838][T17075] sec_pagetables 0 [ 2112.048838][T17075] percpu 11058880 [ 2112.048838][T17075] sock 0 [ 2112.048838][T17075] vmalloc 0 [ 2112.048838][T17075] shmem 114688 [ 2112.048838][T17075] file_mapped 114688 [ 2112.048838][T17075] file_dirty 0 02:12:11 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8848}, 0x0) [ 2112.048838][T17075] file_writeback 0 [ 2112.048838][T17075] swapcached 0 [ 2112.048838][T17075] inactive_anon 139264 [ 2112.048838][T17075] active_anon 86016 [ 2112.048838][T17075] inactive_file 0 [ 2112.048838][T17075] active_file 0 [ 2112.048838][T17075] unevictable 0 [ 2112.048838][T17075] slab_reclaimable 19560 [ 2112.048838][T17075] slab_unreclaimable 303086088 [ 2112.048838][T17075] slab 303105648 [ 2112.048838][T17075] workingset_refault_anon 0 [ 2112.048838][T17075] workingset_refault_file 4 [ 2112.048838][T17075] workingset_activate_anon 0 [ 2112.048838][T17075] workingset_activate_file 0 [ 2112.048838][T17075] workingset_restore_anon 0 [ 2112.048838][T17075] workingset_restore_file 0 [ 2112.048838][T17075] workingset_nodereclaim 0 [ 2112.048838][T17075] pgscan 311 [ 2112.048838][T17075] pgsteal 22 [ 2112.048838][T17075] pgscan_kswapd 0 [ 2112.048838][T17075] pgscan_direct 311 [ 2112.048838][T17075] pgscan_khugepaged 0 [ 2112.048838][T17075] pgsteal_kswapd 0 [ 2112.048838][T17075] pgsteal_direct 22 [ 2112.048838][T17075] pgsteal_khugepaged 0 [ 2112.048838][T17075] pgfault 900052 [ 2112.048838][T17075] pgmajfault 9 [ 2112.048838][T17075] pgrefill 326 [ 2112.048838][T17075] pgactivate 2621 [ 2112.048838][T17075] pgdeactivate 408 [ 2112.048838][T17075] pglazyfree 0 [ 2112.048838][T17075] pglazyfreed 0 [ 2112.214478][T17075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17075,uid=0 02:12:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x600, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:11 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x9403}, 0x0) [ 2112.229938][T17075] Memory cgroup out of memory: Killed process 17075 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2112.286334][T17100] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2112.296568][T17100] CPU: 0 PID: 17100 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2112.305306][T17100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2112.315487][T17100] Call Trace: [ 2112.318764][T17100] [ 2112.321703][T17100] dump_stack_lvl+0xda/0x130 [ 2112.326590][T17100] dump_stack+0x15/0x20 [ 2112.330779][T17100] dump_header+0x95/0x3c0 02:12:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x7400, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xeaffffff}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:11 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x9a02}, 0x0) 02:12:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000031000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2112.335942][T17100] oom_kill_process+0xe3/0x3e0 [ 2112.340835][T17100] out_of_memory+0x9f0/0xc30 [ 2112.346311][T17100] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2112.352391][T17100] mem_cgroup_out_of_memory+0x139/0x190 [ 2112.358117][T17100] try_charge_memcg+0x759/0xd20 [ 2112.363474][T17100] charge_memcg+0x51/0x200 [ 2112.367923][T17100] __mem_cgroup_charge+0x29/0xa0 [ 2112.372968][T17100] do_wp_page+0xb96/0x1fb0 [ 2112.377404][T17100] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2112.382697][T17100] handle_mm_fault+0x64e/0x21d0 [ 2112.387572][T17100] exc_page_fault+0x45f/0x640 [ 2112.392374][T17100] asm_exc_page_fault+0x26/0x30 [ 2112.397565][T17100] RIP: 0033:0x7f0cbc47e610 [ 2112.402005][T17100] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2112.421647][T17100] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2112.427767][T17100] RAX: 00000000bc690117 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 02:12:11 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc200}, 0x0) [ 2112.435990][T17100] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c033d [ 2112.444140][T17100] RBP: 00000000bc690117 R08: 0000000000000117 R09: 00000000bc69011b [ 2112.452457][T17100] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2112.460426][T17100] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff818e690f [ 2112.468401][T17100] ? security_socket_create+0x1f/0x80 [ 2112.473779][T17100] [ 2112.476814][T17100] memory: usage 307192kB, limit 307200kB, failcnt 8455 02:12:11 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2112.483674][T17100] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2112.490525][T17100] Memory cgroup stats for /syz3: [ 2112.490899][T17100] anon 118784 [ 2112.490899][T17100] file 114688 [ 2112.490899][T17100] kernel 314327040 [ 2112.490899][T17100] kernel_stack 32768 [ 2112.490899][T17100] pagetables 65536 [ 2112.490899][T17100] sec_pagetables 0 [ 2112.490899][T17100] percpu 11058880 [ 2112.490899][T17100] sock 0 [ 2112.490899][T17100] vmalloc 0 [ 2112.490899][T17100] shmem 114688 [ 2112.490899][T17100] file_mapped 114688 [ 2112.490899][T17100] file_dirty 0 [ 2112.490899][T17100] file_writeback 0 [ 2112.490899][T17100] swapcached 0 [ 2112.490899][T17100] inactive_anon 106496 [ 2112.490899][T17100] active_anon 86016 [ 2112.490899][T17100] inactive_file 0 [ 2112.490899][T17100] active_file 0 [ 2112.490899][T17100] unevictable 0 [ 2112.490899][T17100] slab_reclaimable 28808 [ 2112.490899][T17100] slab_unreclaimable 303086752 [ 2112.490899][T17100] slab 303115560 [ 2112.490899][T17100] workingset_refault_anon 0 [ 2112.490899][T17100] workingset_refault_file 4 [ 2112.490899][T17100] workingset_activate_anon 0 [ 2112.490899][T17100] workingset_activate_file 0 [ 2112.490899][T17100] workingset_restore_anon 0 [ 2112.490899][T17100] workingset_restore_file 0 [ 2112.490899][T17100] workingset_nodereclaim 0 [ 2112.490899][T17100] pgscan 311 [ 2112.490899][T17100] pgsteal 22 [ 2112.490899][T17100] pgscan_kswapd 0 [ 2112.490899][T17100] pgscan_direct 311 [ 2112.490899][T17100] pgscan_khugepaged 0 [ 2112.490899][T17100] pgsteal_kswapd 0 [ 2112.490899][T17100] pgsteal_direct 22 [ 2112.490899][T17100] pgsteal_khugepaged 0 [ 2112.490899][T17100] pgfault 900100 02:12:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xa00, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2112.490899][T17100] pgmajfault 9 [ 2112.490899][T17100] pgrefill 326 [ 2112.490899][T17100] pgactivate 2621 [ 2112.490899][T17100] pgdeactivate 408 [ 2112.490899][T17100] pglazyfree 0 [ 2112.490899][T17100] pglazyfreed 0 [ 2112.655329][T17100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17100,uid=0 [ 2112.670611][T17100] Memory cgroup out of memory: Killed process 17100 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x7a00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2112.720234][T17122] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2112.730652][T17122] CPU: 0 PID: 17122 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2112.739659][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2112.749801][T17122] Call Trace: [ 2112.753074][T17122] [ 2112.755998][T17122] dump_stack_lvl+0xda/0x130 [ 2112.760862][T17122] dump_stack+0x15/0x20 [ 2112.765043][T17122] dump_header+0x95/0x3c0 02:12:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000031100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2112.769380][T17122] oom_kill_process+0xe3/0x3e0 [ 2112.774249][T17122] out_of_memory+0x9f0/0xc30 [ 2112.778975][T17122] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2112.785054][T17122] mem_cgroup_out_of_memory+0x139/0x190 [ 2112.790649][T17122] try_charge_memcg+0x759/0xd20 [ 2112.795513][T17122] charge_memcg+0x51/0x200 [ 2112.799965][T17122] __mem_cgroup_charge+0x29/0xa0 [ 2112.804966][T17122] do_wp_page+0xb96/0x1fb0 [ 2112.809477][T17122] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2112.814770][T17122] handle_mm_fault+0x64e/0x21d0 02:12:12 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:12 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xf603}, 0x0) [ 2112.819693][T17122] exc_page_fault+0x45f/0x640 [ 2112.824373][T17122] asm_exc_page_fault+0x26/0x30 [ 2112.829239][T17122] RIP: 0033:0x7f0cbc47e610 [ 2112.833659][T17122] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2112.853276][T17122] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2112.859371][T17122] RAX: 000000002479a5ec RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2112.867358][T17122] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0bfef0 [ 2112.875352][T17122] RBP: 000000002479a5ec R08: 00000000000005ec R09: 000000002479a5f0 [ 2112.883322][T17122] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2112.891387][T17122] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff83a31065 [ 2112.899369][T17122] ? __sock_create+0xc5/0x4e0 [ 2112.904049][T17122] [ 2112.907190][T17122] memory: usage 307180kB, limit 307200kB, failcnt 8524 [ 2112.914077][T17122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2112.920991][T17122] Memory cgroup stats for /syz3: [ 2112.921201][T17122] anon 114688 [ 2112.921201][T17122] file 114688 [ 2112.921201][T17122] kernel 314322944 [ 2112.921201][T17122] kernel_stack 32768 [ 2112.921201][T17122] pagetables 65536 [ 2112.921201][T17122] sec_pagetables 0 [ 2112.921201][T17122] percpu 11058944 [ 2112.921201][T17122] sock 0 [ 2112.921201][T17122] vmalloc 0 [ 2112.921201][T17122] shmem 114688 [ 2112.921201][T17122] file_mapped 114688 [ 2112.921201][T17122] file_dirty 0 [ 2112.921201][T17122] file_writeback 0 [ 2112.921201][T17122] swapcached 0 [ 2112.921201][T17122] inactive_anon 143360 [ 2112.921201][T17122] active_anon 86016 [ 2112.921201][T17122] inactive_file 0 [ 2112.921201][T17122] active_file 0 [ 2112.921201][T17122] unevictable 0 [ 2112.921201][T17122] slab_reclaimable 19560 [ 2112.921201][T17122] slab_unreclaimable 303092576 [ 2112.921201][T17122] slab 303112136 [ 2112.921201][T17122] workingset_refault_anon 0 [ 2112.921201][T17122] workingset_refault_file 4 [ 2112.921201][T17122] workingset_activate_anon 0 [ 2112.921201][T17122] workingset_activate_file 0 [ 2112.921201][T17122] workingset_restore_anon 0 [ 2112.921201][T17122] workingset_restore_file 0 [ 2112.921201][T17122] workingset_nodereclaim 0 [ 2112.921201][T17122] pgscan 311 [ 2112.921201][T17122] pgsteal 22 [ 2112.921201][T17122] pgscan_kswapd 0 [ 2112.921201][T17122] pgscan_direct 311 [ 2112.921201][T17122] pgscan_khugepaged 0 [ 2112.921201][T17122] pgsteal_kswapd 0 [ 2112.921201][T17122] pgsteal_direct 22 [ 2112.921201][T17122] pgsteal_khugepaged 0 [ 2112.921201][T17122] pgfault 900149 [ 2112.921201][T17122] pgmajfault 9 02:12:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xc00, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2112.921201][T17122] pgrefill 326 [ 2112.921201][T17122] pgactivate 2621 [ 2112.921201][T17122] pgdeactivate 408 [ 2112.921201][T17122] pglazyfree 0 [ 2112.921201][T17122] pglazyfreed 0 [ 2113.086569][T17122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17122,uid=0 [ 2113.102162][T17122] Memory cgroup out of memory: Killed process 17122 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000031300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xf00, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:12 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xfe03}, 0x0) 02:12:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2113.157530][T17136] Memory cgroup out of memory: Killed process 17136 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2113.173566][T17132] validate_nla: 4 callbacks suppressed [ 2113.173578][T17132] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2113.188468][T17132] __nla_validate_parse: 13 callbacks suppressed [ 2113.188480][T17132] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 02:12:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xf6e6fab2}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:12 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000032500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:12 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xff7f}, 0x0) 02:12:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x4788, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2113.237202][T17141] Memory cgroup out of memory: Killed process 17141 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2113.276728][T17145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:12:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x4888, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2113.335386][T17155] Memory cgroup out of memory: Killed process 17155 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2113.371448][T17147] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:12:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xfeffffff}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x5865, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:12 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2113.379594][T17147] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2113.381014][T17157] Memory cgroup out of memory: Killed process 17157 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8603, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x6000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:12 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 2113.467522][T17159] Memory cgroup out of memory: Killed process 17159 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2113.474671][T17168] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:12:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x6558, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2113.531735][T17170] Memory cgroup out of memory: Killed process 17170 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2113.588983][T17163] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2113.592324][T17174] oom_kill_process: 6 callbacks suppressed [ 2113.592336][T17174] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2113.597121][T17163] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2113.622405][T17174] CPU: 0 PID: 17174 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2113.631347][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2113.641483][T17174] Call Trace: [ 2113.644758][T17174] [ 2113.647704][T17174] dump_stack_lvl+0xda/0x130 [ 2113.652301][T17174] dump_stack+0x15/0x20 [ 2113.656440][T17174] dump_header+0x95/0x3c0 [ 2113.661050][T17174] oom_kill_process+0xe3/0x3e0 [ 2113.665900][T17174] out_of_memory+0x9f0/0xc30 [ 2113.670741][T17174] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2113.677063][T17174] mem_cgroup_out_of_memory+0x139/0x190 [ 2113.682775][T17174] try_charge_memcg+0x759/0xd20 [ 2113.688142][T17174] charge_memcg+0x51/0x200 [ 2113.692561][T17174] __mem_cgroup_charge+0x29/0xa0 [ 2113.697504][T17174] do_wp_page+0xb96/0x1fb0 [ 2113.701912][T17174] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2113.707355][T17174] handle_mm_fault+0x64e/0x21d0 [ 2113.712220][T17174] exc_page_fault+0x45f/0x640 [ 2113.716930][T17174] asm_exc_page_fault+0x26/0x30 [ 2113.721773][T17174] RIP: 0033:0x7f0cbc4809b2 [ 2113.726199][T17174] Code: 49 89 85 98 06 00 00 48 8b 85 70 ff ff ff 49 89 85 a0 06 00 00 49 8d 85 10 03 00 00 49 89 85 10 05 00 00 48 8b 05 96 9d c9 00 00 01 00 00 00 41 c7 85 1c 06 00 00 ff ff ff ff c7 05 93 dd c9 [ 2113.745828][T17174] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2113.751912][T17174] RAX: 00007f0cbd11f7e8 RBX: 0000000000021000 RCX: 00007f0cbc4d1277 [ 2113.759866][T17174] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f0cbb844700 [ 2113.767876][T17174] RBP: 00007fff8ab2bf80 R08: 00000000ffffffff R09: 00007f0cbb844700 [ 2113.775918][T17174] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff8ab2c0a0 02:12:13 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8847, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2113.783940][T17174] R13: 00007f0cbb844700 R14: 0000000000000000 R15: 0000000000022000 [ 2113.791974][T17174] [ 2113.795044][T17174] memory: usage 307180kB, limit 307200kB, failcnt 9010 [ 2113.801926][T17174] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2113.808768][T17174] Memory cgroup stats for /syz3: [ 2113.809026][T17174] anon 86016 [ 2113.809026][T17174] file 114688 [ 2113.809026][T17174] kernel 314351616 [ 2113.809026][T17174] kernel_stack 16384 [ 2113.809026][T17174] pagetables 65536 [ 2113.809026][T17174] sec_pagetables 0 [ 2113.809026][T17174] percpu 11059264 [ 2113.809026][T17174] sock 0 [ 2113.809026][T17174] vmalloc 0 [ 2113.809026][T17174] shmem 114688 [ 2113.809026][T17174] file_mapped 114688 [ 2113.809026][T17174] file_dirty 0 [ 2113.809026][T17174] file_writeback 0 [ 2113.809026][T17174] swapcached 0 [ 2113.809026][T17174] inactive_anon 90112 [ 2113.809026][T17174] active_anon 86016 [ 2113.809026][T17174] inactive_file 0 [ 2113.809026][T17174] active_file 0 [ 2113.809026][T17174] unevictable 0 [ 2113.809026][T17174] slab_reclaimable 15080 [ 2113.809026][T17174] slab_unreclaimable 303120352 [ 2113.809026][T17174] slab 303135432 [ 2113.809026][T17174] workingset_refault_anon 0 [ 2113.809026][T17174] workingset_refault_file 4 [ 2113.809026][T17174] workingset_activate_anon 0 [ 2113.809026][T17174] workingset_activate_file 0 [ 2113.809026][T17174] workingset_restore_anon 0 [ 2113.809026][T17174] workingset_restore_file 0 [ 2113.809026][T17174] workingset_nodereclaim 0 [ 2113.809026][T17174] pgscan 311 [ 2113.809026][T17174] pgsteal 22 [ 2113.809026][T17174] pgscan_kswapd 0 [ 2113.809026][T17174] pgscan_direct 311 [ 2113.809026][T17174] pgscan_khugepaged 0 [ 2113.809026][T17174] pgsteal_kswapd 0 [ 2113.809026][T17174] pgsteal_direct 22 [ 2113.809026][T17174] pgsteal_khugepaged 0 [ 2113.809026][T17174] pgfault 900437 [ 2113.809026][T17174] pgmajfault 9 [ 2113.809026][T17174] pgrefill 326 [ 2113.809026][T17174] pgactivate 2621 [ 2113.809026][T17174] pgdeactivate 408 [ 2113.809026][T17174] pglazyfree 0 [ 2113.809026][T17174] pglazyfreed 0 [ 2113.972502][T17174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17174,uid=0 02:12:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x8100, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:13 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2113.987788][T17174] Memory cgroup out of memory: Killed process 17174 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2114.039100][T17184] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2114.049356][T17184] CPU: 0 PID: 17184 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2114.058034][T17184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2114.068148][T17184] Call Trace: [ 2114.071427][T17184] [ 2114.073832][T17178] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2114.074347][T17184] dump_stack_lvl+0xda/0x130 02:12:13 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 02:12:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2114.082451][T17178] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2114.086971][T17184] dump_stack+0x15/0x20 [ 2114.100292][T17182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2114.100310][T17184] dump_header+0x95/0x3c0 [ 2114.113950][T17184] oom_kill_process+0xe3/0x3e0 [ 2114.118737][T17184] out_of_memory+0x9f0/0xc30 [ 2114.123368][T17184] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2114.129440][T17184] mem_cgroup_out_of_memory+0x139/0x190 02:12:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2114.135002][T17184] try_charge_memcg+0x759/0xd20 [ 2114.139861][T17184] charge_memcg+0x51/0x200 [ 2114.144354][T17184] __mem_cgroup_charge+0x29/0xa0 [ 2114.149292][T17184] do_wp_page+0xb96/0x1fb0 [ 2114.153764][T17184] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2114.159111][T17184] handle_mm_fault+0x64e/0x21d0 [ 2114.163988][T17184] exc_page_fault+0x45f/0x640 [ 2114.168715][T17184] asm_exc_page_fault+0x26/0x30 [ 2114.173678][T17184] RIP: 0033:0x7f0cbc49f871 [ 2114.178121][T17184] Code: 12 00 4c 29 e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 <49> 89 57 08 48 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 12 0a 00 e8 [ 2114.197736][T17184] RSP: 002b:00007fff8ab2bdb0 EFLAGS: 00010206 [ 2114.203794][T17184] RAX: 0000000000020801 RBX: 00007f0cbc5ce5e0 RCX: 000055555612c800 [ 2114.211931][T17184] RDX: 0000000000000121 RSI: 0000000000000000 RDI: 0000000000000004 [ 2114.219898][T17184] RBP: 0000000000000110 R08: 0000000000000003 R09: 00007f0cbc5ce640 [ 2114.227985][T17184] R10: 0000000000020022 R11: 0000000000000120 R12: 0000000000000010 [ 2114.235948][T17184] R13: 0000000000000120 R14: 0000000000000012 R15: 000055555612c6e0 [ 2114.243922][T17184] [ 2114.246954][T17184] memory: usage 307200kB, limit 307200kB, failcnt 9071 [ 2114.253801][T17184] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2114.260659][T17184] Memory cgroup stats for /syz3: [ 2114.261128][T17184] anon 90112 [ 2114.261128][T17184] file 114688 [ 2114.261128][T17184] kernel 314368000 [ 2114.261128][T17184] kernel_stack 16384 [ 2114.261128][T17184] pagetables 65536 [ 2114.261128][T17184] sec_pagetables 0 [ 2114.261128][T17184] percpu 11059264 [ 2114.261128][T17184] sock 0 [ 2114.261128][T17184] vmalloc 0 [ 2114.261128][T17184] shmem 114688 [ 2114.261128][T17184] file_mapped 114688 [ 2114.261128][T17184] file_dirty 0 [ 2114.261128][T17184] file_writeback 0 [ 2114.261128][T17184] swapcached 0 [ 2114.261128][T17184] inactive_anon 118784 [ 2114.261128][T17184] active_anon 86016 [ 2114.261128][T17184] inactive_file 0 [ 2114.261128][T17184] active_file 0 [ 2114.261128][T17184] unevictable 0 [ 2114.261128][T17184] slab_reclaimable 28432 [ 2114.261128][T17184] slab_unreclaimable 303122072 [ 2114.261128][T17184] slab 303150504 [ 2114.261128][T17184] workingset_refault_anon 0 [ 2114.261128][T17184] workingset_refault_file 4 [ 2114.261128][T17184] workingset_activate_anon 0 [ 2114.261128][T17184] workingset_activate_file 0 [ 2114.261128][T17184] workingset_restore_anon 0 [ 2114.261128][T17184] workingset_restore_file 0 [ 2114.261128][T17184] workingset_nodereclaim 0 [ 2114.261128][T17184] pgscan 311 [ 2114.261128][T17184] pgsteal 22 [ 2114.261128][T17184] pgscan_kswapd 0 [ 2114.261128][T17184] pgscan_direct 311 [ 2114.261128][T17184] pgscan_khugepaged 0 [ 2114.261128][T17184] pgsteal_kswapd 0 [ 2114.261128][T17184] pgsteal_direct 22 [ 2114.261128][T17184] pgsteal_khugepaged 0 [ 2114.261128][T17184] pgfault 900474 [ 2114.261128][T17184] pgmajfault 9 [ 2114.261128][T17184] pgrefill 326 [ 2114.261128][T17184] pgactivate 2621 [ 2114.261128][T17184] pgdeactivate 408 [ 2114.261128][T17184] pglazyfree 0 [ 2114.261128][T17184] pglazyfreed 0 [ 2114.425080][T17184] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17184,uid=0 02:12:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x8847, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:13 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2114.440334][T17184] Memory cgroup out of memory: Killed process 17184 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x8848, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2114.490709][T17193] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2114.501034][T17193] CPU: 0 PID: 17193 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2114.509731][T17193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2114.515113][T17190] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2114.519783][T17193] Call Trace: [ 2114.519791][T17193] 02:12:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2114.527893][T17190] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2114.531124][T17193] dump_stack_lvl+0xda/0x130 [ 2114.531147][T17193] dump_stack+0x15/0x20 [ 2114.531161][T17193] dump_header+0x95/0x3c0 [ 2114.556899][T17193] oom_kill_process+0xe3/0x3e0 [ 2114.561666][T17193] out_of_memory+0x9f0/0xc30 [ 2114.566260][T17193] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2114.572327][T17193] mem_cgroup_out_of_memory+0x139/0x190 [ 2114.577928][T17193] try_charge_memcg+0x759/0xd20 [ 2114.582866][T17193] charge_memcg+0x51/0x200 02:12:14 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 02:12:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xffffffea}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2114.587362][T17193] __mem_cgroup_charge+0x29/0xa0 [ 2114.592354][T17193] do_wp_page+0xb96/0x1fb0 [ 2114.596771][T17193] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2114.602064][T17193] handle_mm_fault+0x64e/0x21d0 [ 2114.606958][T17193] exc_page_fault+0x45f/0x640 [ 2114.611706][T17193] asm_exc_page_fault+0x26/0x30 [ 2114.616571][T17193] RIP: 0033:0x7f0cbc49f871 [ 2114.620990][T17193] Code: 12 00 4c 29 e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 <49> 89 57 08 48 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 12 0a 00 e8 02:12:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2114.639411][T17203] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2114.640716][T17193] RSP: 002b:00007fff8ab2bdb0 EFLAGS: 00010206 [ 2114.640734][T17193] RAX: 0000000000020801 RBX: 00007f0cbc5ce5e0 RCX: 000055555612c800 [ 2114.648789][T17203] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2114.654817][T17193] RDX: 0000000000000121 RSI: 0000000000000000 RDI: 0000000000000004 [ 2114.654831][T17193] RBP: 0000000000000110 R08: 0000000000000003 R09: 00007f0cbc5ce640 02:12:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2114.654842][T17193] R10: 0000000000020022 R11: 0000000000000120 R12: 0000000000000010 [ 2114.695880][T17193] R13: 0000000000000120 R14: 0000000000000012 R15: 000055555612c6e0 [ 2114.703881][T17193] [ 2114.705728][T17206] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2114.707063][T17193] memory: usage 307188kB, limit 307200kB, failcnt 9125 [ 2114.715038][T17206] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2114.721873][T17193] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 02:12:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0xfffffffe}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2114.737944][T17193] Memory cgroup stats for /syz3: [ 2114.738426][T17193] anon 90112 [ 2114.738426][T17193] file 114688 [ 2114.738426][T17193] kernel 314355712 [ 2114.738426][T17193] kernel_stack 16384 [ 2114.738426][T17193] pagetables 65536 [ 2114.738426][T17193] sec_pagetables 0 [ 2114.738426][T17193] percpu 11059264 [ 2114.738426][T17193] sock 0 [ 2114.738426][T17193] vmalloc 0 [ 2114.738426][T17193] shmem 114688 [ 2114.738426][T17193] file_mapped 114688 [ 2114.738426][T17193] file_dirty 0 [ 2114.738426][T17193] file_writeback 0 [ 2114.738426][T17193] swapcached 0 [ 2114.738426][T17193] inactive_anon 86016 [ 2114.738426][T17193] active_anon 86016 [ 2114.738426][T17193] inactive_file 0 [ 2114.738426][T17193] active_file 0 [ 2114.738426][T17193] unevictable 0 [ 2114.738426][T17193] slab_reclaimable 18584 [ 2114.738426][T17193] slab_unreclaimable 303121672 [ 2114.738426][T17193] slab 303140256 [ 2114.738426][T17193] workingset_refault_anon 0 [ 2114.738426][T17193] workingset_refault_file 4 [ 2114.738426][T17193] workingset_activate_anon 0 [ 2114.738426][T17193] workingset_activate_file 0 [ 2114.738426][T17193] workingset_restore_anon 0 [ 2114.738426][T17193] workingset_restore_file 0 [ 2114.738426][T17193] workingset_nodereclaim 0 [ 2114.738426][T17193] pgscan 311 [ 2114.738426][T17193] pgsteal 22 [ 2114.738426][T17193] pgscan_kswapd 0 [ 2114.738426][T17193] pgscan_direct 311 [ 2114.738426][T17193] pgscan_khugepaged 0 [ 2114.738426][T17193] pgsteal_kswapd 0 [ 2114.738426][T17193] pgsteal_direct 22 [ 2114.738426][T17193] pgsteal_khugepaged 0 [ 2114.738426][T17193] pgfault 900511 [ 2114.738426][T17193] pgmajfault 9 [ 2114.738426][T17193] pgrefill 326 [ 2114.738426][T17193] pgactivate 2621 [ 2114.738426][T17193] pgdeactivate 408 [ 2114.738426][T17193] pglazyfree 0 [ 2114.738426][T17193] pglazyfreed 0 [ 2114.766554][T17209] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2114.902611][T17193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17193,uid=0 02:12:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x8848, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x4, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2114.902675][T17193] Memory cgroup out of memory: Killed process 17193 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2114.939539][T17213] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2114.953636][T17213] CPU: 0 PID: 17213 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2114.962344][T17213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2114.972395][T17213] Call Trace: [ 2114.975666][T17213] [ 2114.978665][T17213] dump_stack_lvl+0xda/0x130 [ 2114.983261][T17213] dump_stack+0x15/0x20 [ 2114.987444][T17213] dump_header+0x95/0x3c0 02:12:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4c}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2114.991780][T17213] oom_kill_process+0xe3/0x3e0 [ 2114.996543][T17213] out_of_memory+0x9f0/0xc30 [ 2115.001143][T17213] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2115.007347][T17213] mem_cgroup_out_of_memory+0x139/0x190 [ 2115.012906][T17213] try_charge_memcg+0x759/0xd20 [ 2115.017760][T17213] charge_memcg+0x51/0x200 [ 2115.022230][T17213] __mem_cgroup_charge+0x29/0xa0 [ 2115.027171][T17213] do_wp_page+0xb96/0x1fb0 [ 2115.031703][T17213] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2115.037002][T17213] handle_mm_fault+0x64e/0x21d0 02:12:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x68}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2115.041876][T17213] exc_page_fault+0x45f/0x640 [ 2115.046560][T17213] asm_exc_page_fault+0x26/0x30 [ 2115.051429][T17213] RIP: 0033:0x7f0cbc49f871 [ 2115.055844][T17213] Code: 12 00 4c 29 e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 <49> 89 57 08 48 89 41 08 49 83 c7 10 eb b3 48 8d 3d 6a 12 0a 00 e8 [ 2115.075677][T17213] RSP: 002b:00007fff8ab2bdb0 EFLAGS: 00010206 [ 2115.081748][T17213] RAX: 0000000000020801 RBX: 00007f0cbc5ce5e0 RCX: 000055555612c800 [ 2115.089989][T17213] RDX: 0000000000000121 RSI: 0000000000000000 RDI: 0000000000000004 [ 2115.097975][T17213] RBP: 0000000000000110 R08: 0000000000000003 R09: 00007f0cbc5ce640 [ 2115.105960][T17213] R10: 0000000000020022 R11: 0000000000000120 R12: 0000000000000010 [ 2115.113963][T17213] R13: 0000000000000120 R14: 0000000000000012 R15: 000055555612c6e0 [ 2115.122012][T17213] [ 2115.125230][T17213] memory: usage 307200kB, limit 307200kB, failcnt 9186 [ 2115.132136][T17213] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2115.138991][T17213] Memory cgroup stats for /syz3: [ 2115.139278][T17213] anon 90112 [ 2115.139278][T17213] file 114688 [ 2115.139278][T17213] kernel 314368000 [ 2115.139278][T17213] kernel_stack 16384 [ 2115.139278][T17213] pagetables 65536 [ 2115.139278][T17213] sec_pagetables 0 [ 2115.139278][T17213] percpu 11059264 [ 2115.139278][T17213] sock 0 [ 2115.139278][T17213] vmalloc 0 [ 2115.139278][T17213] shmem 114688 [ 2115.139278][T17213] file_mapped 114688 [ 2115.139278][T17213] file_dirty 0 [ 2115.139278][T17213] file_writeback 0 [ 2115.139278][T17213] swapcached 0 [ 2115.139278][T17213] inactive_anon 90112 [ 2115.139278][T17213] active_anon 86016 [ 2115.139278][T17213] inactive_file 0 [ 2115.139278][T17213] active_file 0 [ 2115.139278][T17213] unevictable 0 [ 2115.139278][T17213] slab_reclaimable 28432 [ 2115.139278][T17213] slab_unreclaimable 303122072 [ 2115.139278][T17213] slab 303150504 [ 2115.139278][T17213] workingset_refault_anon 0 [ 2115.139278][T17213] workingset_refault_file 4 [ 2115.139278][T17213] workingset_activate_anon 0 [ 2115.139278][T17213] workingset_activate_file 0 [ 2115.139278][T17213] workingset_restore_anon 0 [ 2115.139278][T17213] workingset_restore_file 0 [ 2115.139278][T17213] workingset_nodereclaim 0 [ 2115.139278][T17213] pgscan 311 [ 2115.139278][T17213] pgsteal 22 [ 2115.139278][T17213] pgscan_kswapd 0 [ 2115.139278][T17213] pgscan_direct 311 [ 2115.139278][T17213] pgscan_khugepaged 0 [ 2115.139278][T17213] pgsteal_kswapd 0 [ 2115.139278][T17213] pgsteal_direct 22 [ 2115.139278][T17213] pgsteal_khugepaged 0 [ 2115.139278][T17213] pgfault 900548 [ 2115.139278][T17213] pgmajfault 9 [ 2115.139278][T17213] pgrefill 326 [ 2115.139278][T17213] pgactivate 2621 [ 2115.139278][T17213] pgdeactivate 408 [ 2115.139278][T17213] pglazyfree 0 [ 2115.139278][T17213] pglazyfreed 0 [ 2115.304427][T17213] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17213,uid=0 [ 2115.319779][T17213] Memory cgroup out of memory: Killed process 17213 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x9201, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x1000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x8, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:14 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 02:12:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:14 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x6c}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2115.440908][T17224] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2115.451188][T17224] CPU: 1 PID: 17224 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2115.459876][T17224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2115.469948][T17224] Call Trace: [ 2115.473271][T17224] [ 2115.476204][T17224] dump_stack_lvl+0xda/0x130 [ 2115.480779][T17224] dump_stack+0x15/0x20 [ 2115.484984][T17224] dump_header+0x95/0x3c0 [ 2115.489348][T17224] oom_kill_process+0xe3/0x3e0 [ 2115.494105][T17224] out_of_memory+0x9f0/0xc30 [ 2115.498748][T17224] mem_cgroup_out_of_memory+0x139/0x190 [ 2115.504296][T17224] try_charge_memcg+0x759/0xd20 [ 2115.509197][T17224] charge_memcg+0x51/0x200 [ 2115.513664][T17224] __mem_cgroup_charge+0x29/0xa0 [ 2115.518625][T17224] do_wp_page+0xb96/0x1fb0 [ 2115.523286][T17224] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2115.528569][T17224] handle_mm_fault+0x64e/0x21d0 [ 2115.533482][T17224] exc_page_fault+0x45f/0x640 [ 2115.538477][T17224] asm_exc_page_fault+0x26/0x30 [ 2115.543361][T17224] RIP: 0033:0x7f0cbc47e610 [ 2115.547805][T17224] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2115.567397][T17224] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2115.573666][T17224] RAX: 000000002479a5ec RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2115.581738][T17224] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0bfef0 [ 2115.589834][T17224] RBP: 000000002479a5ec R08: 00000000000005ec R09: 000000002479a5f0 [ 2115.597791][T17224] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2115.605782][T17224] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff83a31065 [ 2115.613741][T17224] ? __sock_create+0xc5/0x4e0 [ 2115.618481][T17224] [ 2115.621585][T17224] memory: usage 307200kB, limit 307200kB, failcnt 9259 [ 2115.628565][T17224] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2115.635422][T17224] Memory cgroup stats for /syz3: [ 2115.635728][T17224] anon 114688 [ 2115.635728][T17224] file 114688 [ 2115.635728][T17224] kernel 314318848 [ 2115.635728][T17224] kernel_stack 32768 [ 2115.635728][T17224] pagetables 65536 [ 2115.635728][T17224] sec_pagetables 0 [ 2115.635728][T17224] percpu 11058944 [ 2115.635728][T17224] sock 0 [ 2115.635728][T17224] vmalloc 0 [ 2115.635728][T17224] shmem 114688 [ 2115.635728][T17224] file_mapped 114688 [ 2115.635728][T17224] file_dirty 0 [ 2115.635728][T17224] file_writeback 0 [ 2115.635728][T17224] swapcached 0 [ 2115.635728][T17224] inactive_anon 131072 [ 2115.635728][T17224] active_anon 86016 [ 2115.635728][T17224] inactive_file 0 [ 2115.635728][T17224] active_file 0 [ 2115.635728][T17224] unevictable 0 [ 2115.635728][T17224] slab_reclaimable 16056 [ 2115.635728][T17224] slab_unreclaimable 303094184 [ 2115.635728][T17224] slab 303110240 [ 2115.635728][T17224] workingset_refault_anon 0 [ 2115.635728][T17224] workingset_refault_file 4 [ 2115.635728][T17224] workingset_activate_anon 0 [ 2115.635728][T17224] workingset_activate_file 0 [ 2115.635728][T17224] workingset_restore_anon 0 [ 2115.635728][T17224] workingset_restore_file 0 [ 2115.635728][T17224] workingset_nodereclaim 0 [ 2115.635728][T17224] pgscan 311 [ 2115.635728][T17224] pgsteal 22 [ 2115.635728][T17224] pgscan_kswapd 0 [ 2115.635728][T17224] pgscan_direct 311 [ 2115.635728][T17224] pgscan_khugepaged 0 [ 2115.635728][T17224] pgsteal_kswapd 0 [ 2115.635728][T17224] pgsteal_direct 22 [ 2115.635728][T17224] pgsteal_khugepaged 0 [ 2115.635728][T17224] pgfault 900597 [ 2115.635728][T17224] pgmajfault 9 [ 2115.635728][T17224] pgrefill 326 [ 2115.635728][T17224] pgactivate 2621 02:12:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2115.635728][T17224] pgdeactivate 408 [ 2115.635728][T17224] pglazyfree 0 [ 2115.635728][T17224] pglazyfreed 0 [ 2115.799390][T17224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17224,uid=0 [ 2115.814807][T17224] Memory cgroup out of memory: Killed process 17224 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:15 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:15 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x74}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2115.915723][T17238] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2115.927943][T17238] CPU: 1 PID: 17238 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2115.936780][T17238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2115.946828][T17238] Call Trace: [ 2115.950113][T17238] [ 2115.953116][T17238] dump_stack_lvl+0xda/0x130 [ 2115.957777][T17238] dump_stack+0x15/0x20 02:12:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x9802, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:15 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2115.961930][T17238] dump_header+0x95/0x3c0 [ 2115.966278][T17238] oom_kill_process+0xe3/0x3e0 [ 2115.971065][T17238] out_of_memory+0x9f0/0xc30 [ 2115.975668][T17238] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2115.981744][T17238] mem_cgroup_out_of_memory+0x139/0x190 [ 2115.987309][T17238] try_charge_memcg+0x759/0xd20 [ 2115.992280][T17238] obj_cgroup_charge_pages+0xab/0x130 [ 2115.997667][T17238] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2116.003309][T17238] __alloc_pages+0x1bb/0x340 [ 2116.008075][T17238] alloc_pages+0x3e1/0x4e0 [ 2116.012533][T17238] pte_alloc_one+0x2d/0xc0 [ 2116.016944][T17238] __pte_alloc+0x33/0x1f0 [ 2116.021280][T17238] handle_mm_fault+0x1ce0/0x21d0 [ 2116.026233][T17238] exc_page_fault+0x45f/0x640 [ 2116.030909][T17238] asm_exc_page_fault+0x26/0x30 [ 2116.035804][T17238] RIP: 0033:0x7f0cbc470de9 [ 2116.040220][T17238] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2116.060722][T17238] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2116.066792][T17238] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2116.074815][T17238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2116.082804][T17238] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2116.090773][T17238] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 000000000020482f [ 2116.098934][T17238] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2116.106915][T17238] [ 2116.110232][T17238] memory: usage 307200kB, limit 307200kB, failcnt 9333 [ 2116.117246][T17238] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2116.124096][T17238] Memory cgroup stats for /syz3: [ 2116.124338][T17238] anon 139264 [ 2116.124338][T17238] file 114688 [ 2116.124338][T17238] kernel 314306560 [ 2116.124338][T17238] kernel_stack 32768 [ 2116.124338][T17238] pagetables 69632 [ 2116.124338][T17238] sec_pagetables 0 [ 2116.124338][T17238] percpu 11058880 [ 2116.124338][T17238] sock 0 [ 2116.124338][T17238] vmalloc 0 [ 2116.124338][T17238] shmem 114688 [ 2116.124338][T17238] file_mapped 114688 [ 2116.124338][T17238] file_dirty 0 [ 2116.124338][T17238] file_writeback 0 [ 2116.124338][T17238] swapcached 0 [ 2116.124338][T17238] inactive_anon 167936 [ 2116.124338][T17238] active_anon 86016 [ 2116.124338][T17238] inactive_file 0 [ 2116.124338][T17238] active_file 0 [ 2116.124338][T17238] unevictable 0 [ 2116.124338][T17238] slab_reclaimable 10552 [ 2116.124338][T17238] slab_unreclaimable 303085728 [ 2116.124338][T17238] slab 303096280 [ 2116.124338][T17238] workingset_refault_anon 0 [ 2116.124338][T17238] workingset_refault_file 4 [ 2116.124338][T17238] workingset_activate_anon 0 [ 2116.124338][T17238] workingset_activate_file 0 [ 2116.124338][T17238] workingset_restore_anon 0 [ 2116.124338][T17238] workingset_restore_file 0 [ 2116.124338][T17238] workingset_nodereclaim 0 [ 2116.124338][T17238] pgscan 311 [ 2116.124338][T17238] pgsteal 22 [ 2116.124338][T17238] pgscan_kswapd 0 [ 2116.124338][T17238] pgscan_direct 311 [ 2116.124338][T17238] pgscan_khugepaged 0 [ 2116.124338][T17238] pgsteal_kswapd 0 [ 2116.124338][T17238] pgsteal_direct 22 [ 2116.124338][T17238] pgsteal_khugepaged 0 [ 2116.124338][T17238] pgfault 900657 [ 2116.124338][T17238] pgmajfault 9 [ 2116.124338][T17238] pgrefill 326 [ 2116.124338][T17238] pgactivate 2621 [ 2116.124338][T17238] pgdeactivate 408 [ 2116.124338][T17238] pglazyfree 0 [ 2116.124338][T17238] pglazyfreed 0 [ 2116.288984][T17238] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17238,uid=0 02:12:15 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:15 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2116.304408][T17238] Memory cgroup out of memory: Killed process 17238 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:12:15 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050b00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:15 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7a}}, {0x2, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x9a01, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:15 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x2c, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:15 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) [ 2116.406184][T17254] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2116.418515][T17254] CPU: 1 PID: 17254 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2116.427377][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2116.437682][T17254] Call Trace: [ 2116.440991][T17254] [ 2116.443933][T17254] dump_stack_lvl+0xda/0x130 [ 2116.448604][T17254] dump_stack+0x15/0x20 [ 2116.452759][T17254] dump_header+0x95/0x3c0 [ 2116.457131][T17254] oom_kill_process+0xe3/0x3e0 [ 2116.462053][T17254] out_of_memory+0x9f0/0xc30 [ 2116.466708][T17254] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2116.472925][T17254] mem_cgroup_out_of_memory+0x139/0x190 [ 2116.478490][T17254] try_charge_memcg+0x759/0xd20 [ 2116.483341][T17254] obj_cgroup_charge_pages+0xab/0x130 [ 2116.488718][T17254] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2116.494338][T17254] __alloc_pages+0x1bb/0x340 [ 2116.498953][T17254] alloc_pages+0x3e1/0x4e0 [ 2116.503387][T17254] __pmd_alloc+0x4b/0x300 [ 2116.507991][T17254] handle_mm_fault+0x1c07/0x21d0 [ 2116.512953][T17254] exc_page_fault+0x45f/0x640 [ 2116.517631][T17254] asm_exc_page_fault+0x26/0x30 [ 2116.522480][T17254] RIP: 0033:0x7f0cbc470de9 [ 2116.526886][T17254] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2116.546570][T17254] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2116.552646][T17254] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2116.560598][T17254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2116.568553][T17254] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2116.576525][T17254] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 0000000000204a18 [ 2116.584499][T17254] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2116.592461][T17254] [ 2116.595610][T17254] memory: usage 307200kB, limit 307200kB, failcnt 9427 02:12:16 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2116.602473][T17254] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2116.609311][T17254] Memory cgroup stats for /syz3: [ 2116.609650][T17254] anon 139264 [ 2116.609650][T17254] file 114688 [ 2116.609650][T17254] kernel 314310656 [ 2116.609650][T17254] kernel_stack 32768 [ 2116.609650][T17254] pagetables 65536 [ 2116.609650][T17254] sec_pagetables 0 [ 2116.609650][T17254] percpu 11058880 [ 2116.609650][T17254] sock 0 [ 2116.609650][T17254] vmalloc 0 [ 2116.609650][T17254] shmem 114688 [ 2116.609650][T17254] file_mapped 114688 [ 2116.609650][T17254] file_dirty 0 [ 2116.609650][T17254] file_writeback 0 [ 2116.609650][T17254] swapcached 0 [ 2116.609650][T17254] inactive_anon 167936 [ 2116.609650][T17254] active_anon 86016 [ 2116.609650][T17254] inactive_file 0 [ 2116.609650][T17254] active_file 0 [ 2116.609650][T17254] unevictable 0 [ 2116.609650][T17254] slab_reclaimable 16056 [ 2116.609650][T17254] slab_unreclaimable 303084768 [ 2116.609650][T17254] slab 303100824 [ 2116.609650][T17254] workingset_refault_anon 0 [ 2116.609650][T17254] workingset_refault_file 4 [ 2116.609650][T17254] workingset_activate_anon 0 [ 2116.609650][T17254] workingset_activate_file 0 [ 2116.609650][T17254] workingset_restore_anon 0 [ 2116.609650][T17254] workingset_restore_file 0 [ 2116.609650][T17254] workingset_nodereclaim 0 [ 2116.609650][T17254] pgscan 311 [ 2116.609650][T17254] pgsteal 22 [ 2116.609650][T17254] pgscan_kswapd 0 [ 2116.609650][T17254] pgscan_direct 311 [ 2116.609650][T17254] pgscan_khugepaged 0 [ 2116.609650][T17254] pgsteal_kswapd 0 [ 2116.609650][T17254] pgsteal_direct 22 [ 2116.609650][T17254] pgsteal_khugepaged 0 [ 2116.609650][T17254] pgfault 900717 [ 2116.609650][T17254] pgmajfault 9 [ 2116.609650][T17254] pgrefill 326 [ 2116.609650][T17254] pgactivate 2621 [ 2116.609650][T17254] pgdeactivate 408 [ 2116.609650][T17254] pglazyfree 0 [ 2116.609650][T17254] pglazyfreed 0 [ 2116.634640][T17264] netlink: 'syz-executor.0': attribute type 44 has an invalid length. [ 2116.773189][T17254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17254,uid=0 02:12:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x5000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x3, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2116.773257][T17254] Memory cgroup out of memory: Killed process 17254 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2116.781443][T17264] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2116.844132][T17272] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2116.854354][T17272] CPU: 1 PID: 17272 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2116.863094][T17272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2116.873178][T17272] Call Trace: [ 2116.876450][T17272] [ 2116.879370][T17272] dump_stack_lvl+0xda/0x130 [ 2116.883956][T17272] dump_stack+0x15/0x20 [ 2116.888112][T17272] dump_header+0x95/0x3c0 [ 2116.892442][T17272] oom_kill_process+0xe3/0x3e0 [ 2116.897249][T17272] out_of_memory+0x9f0/0xc30 [ 2116.901911][T17272] ? try_to_free_mem_cgroup_pages+0x220/0x480 02:12:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x4, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:16 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 02:12:16 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2116.907979][T17272] mem_cgroup_out_of_memory+0x139/0x190 [ 2116.913539][T17272] try_charge_memcg+0x759/0xd20 [ 2116.918445][T17272] charge_memcg+0x51/0x200 [ 2116.922860][T17272] __mem_cgroup_charge+0x29/0xa0 [ 2116.927874][T17272] do_wp_page+0xb96/0x1fb0 [ 2116.932366][T17272] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2116.937676][T17272] handle_mm_fault+0x64e/0x21d0 [ 2116.942534][T17272] exc_page_fault+0x45f/0x640 [ 2116.947241][T17272] asm_exc_page_fault+0x26/0x30 [ 2116.952121][T17272] RIP: 0033:0x7f0cbc47e610 [ 2116.956530][T17272] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2116.976140][T17272] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2116.982194][T17272] RAX: 000000002479a5ec RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2116.990144][T17272] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0bfef0 [ 2116.998142][T17272] RBP: 000000002479a5ec R08: 00000000000005ec R09: 000000002479a5f0 [ 2117.006099][T17272] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2117.014047][T17272] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff83a31065 [ 2117.022147][T17272] ? __sock_create+0xc5/0x4e0 [ 2117.026885][T17272] [ 2117.030066][T17272] memory: usage 307192kB, limit 307200kB, failcnt 9499 [ 2117.036908][T17272] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2117.043758][T17272] Memory cgroup stats for /syz3: [ 2117.044223][T17272] anon 114688 [ 2117.044223][T17272] file 114688 [ 2117.044223][T17272] kernel 314331136 [ 2117.044223][T17272] kernel_stack 32768 [ 2117.044223][T17272] pagetables 65536 [ 2117.044223][T17272] sec_pagetables 0 [ 2117.044223][T17272] percpu 11058880 [ 2117.044223][T17272] sock 0 [ 2117.044223][T17272] vmalloc 0 [ 2117.044223][T17272] shmem 114688 [ 2117.044223][T17272] file_mapped 114688 [ 2117.044223][T17272] file_dirty 0 [ 2117.044223][T17272] file_writeback 0 [ 2117.044223][T17272] swapcached 0 [ 2117.044223][T17272] inactive_anon 86016 [ 2117.044223][T17272] active_anon 86016 [ 2117.044223][T17272] inactive_file 0 [ 2117.044223][T17272] active_file 0 [ 2117.044223][T17272] unevictable 0 [ 2117.044223][T17272] slab_reclaimable 31560 [ 2117.044223][T17272] slab_unreclaimable 303086752 [ 2117.044223][T17272] slab 303118312 [ 2117.044223][T17272] workingset_refault_anon 0 [ 2117.044223][T17272] workingset_refault_file 4 [ 2117.044223][T17272] workingset_activate_anon 0 [ 2117.044223][T17272] workingset_activate_file 0 [ 2117.044223][T17272] workingset_restore_anon 0 [ 2117.044223][T17272] workingset_restore_file 0 [ 2117.044223][T17272] workingset_nodereclaim 0 [ 2117.044223][T17272] pgscan 311 [ 2117.044223][T17272] pgsteal 22 [ 2117.044223][T17272] pgscan_kswapd 0 [ 2117.044223][T17272] pgscan_direct 311 [ 2117.044223][T17272] pgscan_khugepaged 0 [ 2117.044223][T17272] pgsteal_kswapd 0 [ 2117.044223][T17272] pgsteal_direct 22 [ 2117.044223][T17272] pgsteal_khugepaged 0 [ 2117.044223][T17272] pgfault 900763 [ 2117.044223][T17272] pgmajfault 9 [ 2117.044223][T17272] pgrefill 326 [ 2117.044223][T17272] pgactivate 2621 [ 2117.044223][T17272] pgdeactivate 408 [ 2117.044223][T17272] pglazyfree 0 [ 2117.044223][T17272] pglazyfreed 0 02:12:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x6000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:16 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0x4}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:16 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2117.207754][T17272] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17272,uid=0 [ 2117.223221][T17272] Memory cgroup out of memory: Killed process 17272 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2117.296325][T17282] ================================================================== [ 2117.304519][T17282] BUG: KCSAN: data-race in __refill_stock / drain_all_stock [ 2117.311819][T17282] [ 2117.314144][T17282] read-write to 0xffff888237c2a2f0 of 4 bytes by task 3127 on cpu 0: [ 2117.322196][T17282] __refill_stock+0x7c/0xb0 [ 2117.326686][T17282] try_charge_memcg+0x9eb/0xd20 [ 2117.336468][T17282] obj_cgroup_charge_pages+0xab/0x130 [ 2117.341829][T17282] obj_cgroup_charge+0xe9/0x140 [ 2117.346675][T17282] slab_pre_alloc_hook+0x112/0x180 [ 2117.351783][T17282] kmem_cache_alloc_node+0x5d/0x2e0 [ 2117.356978][T17282] dup_task_struct+0x60/0x450 [ 2117.361639][T17282] copy_process+0x396/0x2100 [ 2117.366226][T17282] kernel_clone+0x169/0x560 [ 2117.370712][T17282] __x64_sys_clone+0xdf/0x110 [ 2117.375378][T17282] do_syscall_64+0x41/0xc0 [ 2117.379787][T17282] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2117.385668][T17282] [ 2117.387976][T17282] read to 0xffff888237c2a2f0 of 4 bytes by task 17282 on cpu 1: [ 2117.395591][T17282] drain_all_stock+0xd3/0x2a0 [ 2117.400256][T17282] try_charge_memcg+0x6c2/0xd20 [ 2117.405107][T17282] obj_cgroup_charge_pages+0xab/0x130 [ 2117.410465][T17282] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2117.415992][T17282] __alloc_pages+0x1bb/0x340 [ 2117.420564][T17282] alloc_pages+0x3e1/0x4e0 [ 2117.424963][T17282] pte_alloc_one+0x2d/0xc0 [ 2117.429362][T17282] __pte_alloc+0x33/0x1f0 [ 2117.433674][T17282] handle_mm_fault+0x1ce0/0x21d0 [ 2117.438599][T17282] exc_page_fault+0x45f/0x640 02:12:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xb200, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x5, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:16 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 02:12:16 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0x5}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:16 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:16 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2117.443262][T17282] asm_exc_page_fault+0x26/0x30 [ 2117.448097][T17282] [ 2117.450403][T17282] value changed: 0x00000001 -> 0x0000003b [ 2117.456102][T17282] [ 2117.458431][T17282] Reported by Kernel Concurrency Sanitizer on: [ 2117.464571][T17282] CPU: 1 PID: 17282 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2117.473226][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2117.483260][T17282] ================================================================== [ 2117.550524][T17282] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2117.560733][T17282] CPU: 1 PID: 17282 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2117.569410][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2117.579512][T17282] Call Trace: [ 2117.582783][T17282] [ 2117.585723][T17282] dump_stack_lvl+0xda/0x130 [ 2117.590317][T17282] dump_stack+0x15/0x20 [ 2117.594562][T17282] dump_header+0x95/0x3c0 02:12:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 2117.598892][T17282] oom_kill_process+0xe3/0x3e0 [ 2117.603661][T17282] out_of_memory+0x9f0/0xc30 [ 2117.608253][T17282] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2117.614373][T17282] mem_cgroup_out_of_memory+0x139/0x190 [ 2117.619988][T17282] try_charge_memcg+0x759/0xd20 [ 2117.624925][T17282] charge_memcg+0x51/0x200 [ 2117.629390][T17282] __mem_cgroup_charge+0x29/0xa0 [ 2117.634330][T17282] handle_mm_fault+0xcea/0x21d0 [ 2117.639179][T17282] exc_page_fault+0x45f/0x640 [ 2117.643963][T17282] asm_exc_page_fault+0x26/0x30 [ 2117.648804][T17282] RIP: 0033:0x7f0cbc470de9 [ 2117.653206][T17282] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2117.672802][T17282] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2117.678861][T17282] RAX: 0000000020001140 RBX: 0000000000000000 RCX: 0000000000000000 [ 2117.686812][T17282] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2117.694773][T17282] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2117.702737][T17282] R10: 00007f0cbc045910 R11: 0000000000000246 R12: 0000000000204e8c [ 2117.710704][T17282] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2117.718713][T17282] [ 2117.721800][T17282] memory: usage 307200kB, limit 307200kB, failcnt 9611 [ 2117.728660][T17282] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2117.735505][T17282] Memory cgroup stats for /syz3: [ 2117.735885][T17282] anon 143360 [ 2117.735885][T17282] file 114688 [ 2117.735885][T17282] kernel 314314752 [ 2117.735885][T17282] kernel_stack 32768 [ 2117.735885][T17282] pagetables 73728 [ 2117.735885][T17282] sec_pagetables 0 [ 2117.735885][T17282] percpu 11058880 [ 2117.735885][T17282] sock 0 [ 2117.735885][T17282] vmalloc 0 [ 2117.735885][T17282] shmem 114688 [ 2117.735885][T17282] file_mapped 114688 [ 2117.735885][T17282] file_dirty 0 [ 2117.735885][T17282] file_writeback 0 [ 2117.735885][T17282] swapcached 0 [ 2117.735885][T17282] inactive_anon 172032 [ 2117.735885][T17282] active_anon 86016 [ 2117.735885][T17282] inactive_file 0 [ 2117.735885][T17282] active_file 0 [ 2117.735885][T17282] unevictable 0 [ 2117.735885][T17282] slab_reclaimable 13480 [ 2117.735885][T17282] slab_unreclaimable 303085232 [ 2117.735885][T17282] slab 303098712 [ 2117.735885][T17282] workingset_refault_anon 0 [ 2117.735885][T17282] workingset_refault_file 4 [ 2117.735885][T17282] workingset_activate_anon 0 [ 2117.735885][T17282] workingset_activate_file 0 [ 2117.735885][T17282] workingset_restore_anon 0 [ 2117.735885][T17282] workingset_restore_file 0 [ 2117.735885][T17282] workingset_nodereclaim 0 [ 2117.735885][T17282] pgscan 311 [ 2117.735885][T17282] pgsteal 22 [ 2117.735885][T17282] pgscan_kswapd 0 [ 2117.735885][T17282] pgscan_direct 311 [ 2117.735885][T17282] pgscan_khugepaged 0 [ 2117.735885][T17282] pgsteal_kswapd 0 [ 2117.735885][T17282] pgsteal_direct 22 [ 2117.735885][T17282] pgsteal_khugepaged 0 [ 2117.735885][T17282] pgfault 900822 [ 2117.735885][T17282] pgmajfault 9 [ 2117.735885][T17282] pgrefill 326 [ 2117.735885][T17282] pgactivate 2621 [ 2117.735885][T17282] pgdeactivate 408 [ 2117.735885][T17282] pglazyfree 0 [ 2117.735885][T17282] pglazyfreed 0 02:12:17 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2117.899351][T17282] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17282,uid=0 [ 2117.914682][T17282] Memory cgroup out of memory: Killed process 17282 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 02:12:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xc, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2117.960090][T17303] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2117.970346][T17303] CPU: 1 PID: 17303 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2117.979019][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2117.989129][T17303] Call Trace: [ 2117.992401][T17303] [ 2117.995336][T17303] dump_stack_lvl+0xda/0x130 [ 2117.999939][T17303] dump_stack+0x15/0x20 [ 2118.004111][T17303] dump_header+0x95/0x3c0 [ 2118.008451][T17303] oom_kill_process+0xe3/0x3e0 [ 2118.013233][T17303] out_of_memory+0x9f0/0xc30 [ 2118.017901][T17303] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2118.024119][T17303] mem_cgroup_out_of_memory+0x139/0x190 [ 2118.029696][T17303] try_charge_memcg+0x759/0xd20 [ 2118.034582][T17303] charge_memcg+0x51/0x200 [ 2118.039051][T17303] __mem_cgroup_charge+0x29/0xa0 [ 2118.043978][T17303] do_wp_page+0xb96/0x1fb0 [ 2118.048383][T17303] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2118.053702][T17303] handle_mm_fault+0x64e/0x21d0 [ 2118.058613][T17303] exc_page_fault+0x45f/0x640 [ 2118.063380][T17303] asm_exc_page_fault+0x26/0x30 [ 2118.068253][T17303] RIP: 0033:0x7f0cbc47e610 [ 2118.072713][T17303] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2118.092392][T17303] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2118.098438][T17303] RAX: 000000002d408a59 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 02:12:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xb201, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) [ 2118.106389][T17303] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e179b5 [ 2118.114389][T17303] RBP: 000000002d408a59 R08: 0000000000000a59 R09: 000000002d408a5d [ 2118.122380][T17303] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2118.130336][T17303] R13: 0000000000000001 R14: 0000000000000008 R15: ffffffff81928445 [ 2118.138357][T17303] ? security_transition_sid+0x25/0x80 [ 2118.143890][T17303] [ 2118.146938][T17303] memory: usage 307196kB, limit 307200kB, failcnt 9680 [ 2118.153821][T17303] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 02:12:17 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003050f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2118.160751][T17303] Memory cgroup stats for /syz3: [ 2118.161029][T17303] anon 126976 [ 2118.161029][T17303] file 114688 [ 2118.161029][T17303] kernel 314322944 [ 2118.161029][T17303] kernel_stack 32768 [ 2118.161029][T17303] pagetables 65536 [ 2118.161029][T17303] sec_pagetables 0 [ 2118.161029][T17303] percpu 11058880 [ 2118.161029][T17303] sock 0 [ 2118.161029][T17303] vmalloc 0 [ 2118.161029][T17303] shmem 114688 [ 2118.161029][T17303] file_mapped 114688 [ 2118.161029][T17303] file_dirty 0 [ 2118.161029][T17303] file_writeback 0 02:12:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x64, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) [ 2118.161029][T17303] swapcached 0 [ 2118.161029][T17303] inactive_anon 139264 [ 2118.161029][T17303] active_anon 86016 [ 2118.161029][T17303] inactive_file 0 [ 2118.161029][T17303] active_file 0 [ 2118.161029][T17303] unevictable 0 [ 2118.161029][T17303] slab_reclaimable 31136 [ 2118.161029][T17303] slab_unreclaimable 303087544 [ 2118.161029][T17303] slab 303118680 [ 2118.161029][T17303] workingset_refault_anon 0 [ 2118.161029][T17303] workingset_refault_file 4 [ 2118.161029][T17303] workingset_activate_anon 0 [ 2118.161029][T17303] workingset_activate_file 0 02:12:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x2, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) [ 2118.161029][T17303] workingset_restore_anon 0 [ 2118.161029][T17303] workingset_restore_file 0 [ 2118.161029][T17303] workingset_nodereclaim 0 [ 2118.161029][T17303] pgscan 311 [ 2118.161029][T17303] pgsteal 22 [ 2118.161029][T17303] pgscan_kswapd 0 [ 2118.161029][T17303] pgscan_direct 311 [ 2118.161029][T17303] pgscan_khugepaged 0 [ 2118.161029][T17303] pgsteal_kswapd 0 [ 2118.161029][T17303] pgsteal_direct 22 [ 2118.161029][T17303] pgsteal_khugepaged 0 [ 2118.161029][T17303] pgfault 900879 [ 2118.161029][T17303] pgmajfault 9 [ 2118.161029][T17303] pgrefill 326 [ 2118.161029][T17303] pgactivate 2621 [ 2118.161029][T17303] pgdeactivate 408 [ 2118.161029][T17303] pglazyfree 0 [ 2118.161029][T17303] pglazyfreed 0 [ 2118.324639][T17303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17303,uid=0 [ 2118.339968][T17303] Memory cgroup out of memory: Killed process 17303 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2118.363721][T17319] __nla_validate_parse: 13 callbacks suppressed [ 2118.363734][T17319] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:12:17 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x3, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:17 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003051000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:17 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xa000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xb602, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:17 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xa030000}, 0x0) 02:12:17 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x5, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xc000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003051100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2118.513010][T17323] Memory cgroup out of memory: Killed process 17323 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2118.530707][T17328] validate_nla: 3 callbacks suppressed [ 2118.530719][T17328] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2118.544328][T17328] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2118.554452][T17330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:12:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xf000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2118.584807][T17335] Memory cgroup out of memory: Killed process 17335 (syz-executor.3) total-vm:46352kB, anon-rss:504kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2118.641128][T17341] oom_kill_process: 2 callbacks suppressed [ 2118.641141][T17341] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2118.657146][T17341] CPU: 1 PID: 17341 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2118.665839][T17341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2118.675904][T17341] Call Trace: [ 2118.679181][T17341] [ 2118.682114][T17341] dump_stack_lvl+0xda/0x130 [ 2118.686751][T17341] dump_stack+0x15/0x20 02:12:18 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 02:12:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x6, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2118.690916][T17341] dump_header+0x95/0x3c0 [ 2118.695249][T17341] oom_kill_process+0xe3/0x3e0 [ 2118.700083][T17341] out_of_memory+0x9f0/0xc30 [ 2118.704703][T17341] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2118.710813][T17341] mem_cgroup_out_of_memory+0x139/0x190 [ 2118.716369][T17341] try_charge_memcg+0x759/0xd20 [ 2118.721227][T17341] charge_memcg+0x51/0x200 [ 2118.725651][T17341] __mem_cgroup_charge+0x29/0xa0 [ 2118.730631][T17341] do_wp_page+0xb96/0x1fb0 [ 2118.735057][T17341] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2118.740345][T17341] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2118.745710][T17341] handle_mm_fault+0x64e/0x21d0 [ 2118.750655][T17341] exc_page_fault+0x45f/0x640 [ 2118.755423][T17341] asm_exc_page_fault+0x26/0x30 [ 2118.760283][T17341] RIP: 0033:0x7f0cbc47e610 [ 2118.764736][T17341] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2118.784348][T17341] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2118.790392][T17341] RAX: 0000000091c3ec0c RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2118.798422][T17341] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c0740 [ 2118.806380][T17341] RBP: 0000000091c3ec0c R08: 0000000000000c0c R09: 0000000091c3ec10 [ 2118.814345][T17341] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2118.822364][T17341] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff83a3167b [ 2118.830345][T17341] ? __sys_socket+0x2b/0x220 [ 2118.835007][T17341] 02:12:18 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0x10}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:18 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 02:12:18 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xbc03, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003051200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2118.838141][T17341] memory: usage 307184kB, limit 307200kB, failcnt 9894 [ 2118.845001][T17341] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2118.851863][T17341] Memory cgroup stats for /syz3: [ 2118.852316][T17341] anon 110592 [ 2118.852316][T17341] file 114688 [ 2118.852316][T17341] kernel 314322944 [ 2118.852316][T17341] kernel_stack 32768 [ 2118.852316][T17341] pagetables 65536 [ 2118.852316][T17341] sec_pagetables 0 [ 2118.852316][T17341] percpu 11059008 [ 2118.852316][T17341] sock 0 [ 2118.852316][T17341] vmalloc 0 [ 2118.852316][T17341] shmem 114688 [ 2118.852316][T17341] file_mapped 114688 [ 2118.852316][T17341] file_dirty 0 [ 2118.852316][T17341] file_writeback 0 [ 2118.852316][T17341] swapcached 0 [ 2118.852316][T17341] inactive_anon 135168 [ 2118.852316][T17341] active_anon 86016 [ 2118.852316][T17341] inactive_file 0 [ 2118.852316][T17341] active_file 0 [ 2118.852316][T17341] unevictable 0 [ 2118.852316][T17341] slab_reclaimable 11728 [ 2118.852316][T17341] slab_unreclaimable 303092720 [ 2118.852316][T17341] slab 303104448 [ 2118.852316][T17341] workingset_refault_anon 0 [ 2118.852316][T17341] workingset_refault_file 4 [ 2118.852316][T17341] workingset_activate_anon 0 [ 2118.852316][T17341] workingset_activate_file 0 [ 2118.852316][T17341] workingset_restore_anon 0 [ 2118.852316][T17341] workingset_restore_file 0 [ 2118.852316][T17341] workingset_nodereclaim 0 [ 2118.852316][T17341] pgscan 311 [ 2118.852316][T17341] pgsteal 22 [ 2118.852316][T17341] pgscan_kswapd 0 [ 2118.852316][T17341] pgscan_direct 311 [ 2118.852316][T17341] pgscan_khugepaged 0 [ 2118.852316][T17341] pgsteal_kswapd 0 [ 2118.852316][T17341] pgsteal_direct 22 [ 2118.852316][T17341] pgsteal_khugepaged 0 [ 2118.852316][T17341] pgfault 901043 [ 2118.852316][T17341] pgmajfault 9 [ 2118.852316][T17341] pgrefill 326 [ 2118.852316][T17341] pgactivate 2621 [ 2118.852316][T17341] pgdeactivate 408 [ 2118.852316][T17341] pglazyfree 0 [ 2118.852316][T17341] pglazyfreed 0 [ 2118.897009][T17353] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2119.015884][T17341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 2119.024068][T17353] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. 02:12:18 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x7, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:18 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0x15}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:18 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003052500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2119.030912][T17341] ,cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17341,uid=0 [ 2119.050909][T17341] Memory cgroup out of memory: Killed process 17341 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2119.079133][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2119.125759][T17362] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2119.136043][T17362] CPU: 1 PID: 17362 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2119.144713][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2119.154794][T17362] Call Trace: [ 2119.158132][T17362] [ 2119.161082][T17362] dump_stack_lvl+0xda/0x130 [ 2119.165667][T17362] dump_stack+0x15/0x20 [ 2119.169910][T17362] dump_header+0x95/0x3c0 [ 2119.174297][T17362] oom_kill_process+0xe3/0x3e0 [ 2119.179054][T17362] out_of_memory+0x9f0/0xc30 [ 2119.183629][T17362] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2119.189689][T17362] mem_cgroup_out_of_memory+0x139/0x190 [ 2119.195306][T17362] try_charge_memcg+0x759/0xd20 [ 2119.200166][T17362] charge_memcg+0x51/0x200 [ 2119.204582][T17362] __mem_cgroup_charge+0x29/0xa0 [ 2119.209589][T17362] do_wp_page+0xb96/0x1fb0 [ 2119.214056][T17362] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2119.219323][T17362] handle_mm_fault+0x64e/0x21d0 [ 2119.224210][T17362] exc_page_fault+0x45f/0x640 [ 2119.228928][T17362] asm_exc_page_fault+0x26/0x30 [ 2119.233769][T17362] RIP: 0033:0x7f0cbc47e610 [ 2119.238162][T17362] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2119.257762][T17362] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2119.263882][T17362] RAX: 0000000091c3ec0c RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2119.271843][T17362] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c0740 [ 2119.279807][T17362] RBP: 0000000091c3ec0c R08: 0000000000000c0c R09: 0000000091c3ec10 [ 2119.287760][T17362] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2119.295729][T17362] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff83a3167b [ 2119.303683][T17362] ? __sys_socket+0x2b/0x220 [ 2119.308284][T17362] [ 2119.311367][T17362] memory: usage 307200kB, limit 307200kB, failcnt 9970 [ 2119.318207][T17362] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2119.325081][T17362] Memory cgroup stats for /syz3: [ 2119.325400][T17362] anon 110592 [ 2119.325400][T17362] file 114688 [ 2119.325400][T17362] kernel 314347520 [ 2119.325400][T17362] kernel_stack 32768 [ 2119.325400][T17362] pagetables 65536 [ 2119.325400][T17362] sec_pagetables 0 [ 2119.325400][T17362] percpu 11059008 [ 2119.325400][T17362] sock 0 [ 2119.325400][T17362] vmalloc 0 [ 2119.325400][T17362] shmem 114688 [ 2119.325400][T17362] file_mapped 114688 [ 2119.325400][T17362] file_dirty 0 [ 2119.325400][T17362] file_writeback 0 [ 2119.325400][T17362] swapcached 0 [ 2119.325400][T17362] inactive_anon 122880 [ 2119.325400][T17362] active_anon 86016 [ 2119.325400][T17362] inactive_file 0 [ 2119.325400][T17362] active_file 0 [ 2119.325400][T17362] unevictable 0 [ 2119.325400][T17362] slab_reclaimable 30784 [ 2119.325400][T17362] slab_unreclaimable 303099704 [ 2119.325400][T17362] slab 303130488 [ 2119.325400][T17362] workingset_refault_anon 0 [ 2119.325400][T17362] workingset_refault_file 4 [ 2119.325400][T17362] workingset_activate_anon 0 [ 2119.325400][T17362] workingset_activate_file 0 [ 2119.325400][T17362] workingset_restore_anon 0 [ 2119.325400][T17362] workingset_restore_file 0 [ 2119.325400][T17362] workingset_nodereclaim 0 [ 2119.325400][T17362] pgscan 311 [ 2119.325400][T17362] pgsteal 22 [ 2119.325400][T17362] pgscan_kswapd 0 [ 2119.325400][T17362] pgscan_direct 311 [ 2119.325400][T17362] pgscan_khugepaged 0 [ 2119.325400][T17362] pgsteal_kswapd 0 [ 2119.325400][T17362] pgsteal_direct 22 [ 2119.325400][T17362] pgsteal_khugepaged 0 [ 2119.325400][T17362] pgfault 901090 [ 2119.325400][T17362] pgmajfault 9 [ 2119.325400][T17362] pgrefill 326 02:12:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x34dc4cb9, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2119.325400][T17362] pgactivate 2621 [ 2119.325400][T17362] pgdeactivate 408 [ 2119.325400][T17362] pglazyfree 0 [ 2119.325400][T17362] pglazyfreed 0 [ 2119.488935][T17362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17362,uid=0 [ 2119.504317][T17362] Memory cgroup out of memory: Killed process 17362 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:19 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xd000000}, 0x0) 02:12:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x8, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2119.573143][T17364] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2119.583387][T17364] CPU: 1 PID: 17364 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2119.592068][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2119.602118][T17364] Call Trace: [ 2119.605445][T17364] [ 2119.608418][T17364] dump_stack_lvl+0xda/0x130 [ 2119.613011][T17364] dump_stack+0x15/0x20 [ 2119.617232][T17364] dump_header+0x95/0x3c0 [ 2119.621604][T17364] oom_kill_process+0xe3/0x3e0 [ 2119.626375][T17364] out_of_memory+0x9f0/0xc30 [ 2119.630992][T17364] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2119.637151][T17364] mem_cgroup_out_of_memory+0x139/0x190 [ 2119.642681][T17364] try_charge_memcg+0x759/0xd20 [ 2119.647561][T17364] charge_memcg+0x51/0x200 [ 2119.652035][T17364] __mem_cgroup_charge+0x29/0xa0 [ 2119.657017][T17364] do_wp_page+0xb96/0x1fb0 [ 2119.661483][T17364] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2119.666763][T17364] handle_mm_fault+0x64e/0x21d0 [ 2119.671599][T17364] exc_page_fault+0x45f/0x640 [ 2119.676311][T17364] asm_exc_page_fault+0x26/0x30 [ 2119.681201][T17364] RIP: 0033:0x7f0cbc47e610 [ 2119.685604][T17364] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2119.705221][T17364] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2119.711274][T17364] RAX: 0000000042881cb3 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2119.719227][T17364] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e2fbb4 [ 2119.727182][T17364] RBP: 0000000042881cb3 R08: 0000000000001cb3 R09: 0000000042881cb7 [ 2119.735202][T17364] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2119.743218][T17364] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff81930a0c [ 2119.751173][T17364] ? security_is_socket_class+0x2dc/0x530 [ 2119.756933][T17364] [ 2119.759986][T17364] memory: usage 307200kB, limit 307200kB, failcnt 10083 02:12:19 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="70000000100003056000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0x28}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2119.764560][T17361] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2119.766928][T17364] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2119.781859][T17364] Memory cgroup stats for /syz3: [ 2119.782132][T17364] anon 135168 [ 2119.782132][T17364] file 114688 [ 2119.782132][T17364] kernel 314322944 [ 2119.782132][T17364] kernel_stack 32768 [ 2119.782132][T17364] pagetables 65536 [ 2119.782132][T17364] sec_pagetables 0 [ 2119.782132][T17364] percpu 11059008 [ 2119.782132][T17364] sock 0 [ 2119.782132][T17364] vmalloc 0 [ 2119.782132][T17364] shmem 114688 [ 2119.782132][T17364] file_mapped 114688 [ 2119.782132][T17364] file_dirty 0 [ 2119.782132][T17364] file_writeback 0 [ 2119.782132][T17364] swapcached 0 [ 2119.782132][T17364] inactive_anon 126976 [ 2119.782132][T17364] active_anon 86016 [ 2119.782132][T17364] inactive_file 0 [ 2119.782132][T17364] active_file 0 [ 2119.782132][T17364] unevictable 0 [ 2119.782132][T17364] slab_reclaimable 10552 [ 2119.782132][T17364] slab_unreclaimable 303097720 [ 2119.782132][T17364] slab 303108272 [ 2119.782132][T17364] workingset_refault_anon 0 [ 2119.782132][T17364] workingset_refault_file 4 [ 2119.782132][T17364] workingset_activate_anon 0 [ 2119.782132][T17364] workingset_activate_file 0 [ 2119.782132][T17364] workingset_restore_anon 0 [ 2119.782132][T17364] workingset_restore_file 0 [ 2119.782132][T17364] workingset_nodereclaim 0 [ 2119.782132][T17364] pgscan 311 [ 2119.782132][T17364] pgsteal 22 [ 2119.782132][T17364] pgscan_kswapd 0 [ 2119.782132][T17364] pgscan_direct 311 [ 2119.782132][T17364] pgscan_khugepaged 0 [ 2119.782132][T17364] pgsteal_kswapd 0 [ 2119.782132][T17364] pgsteal_direct 22 [ 2119.782132][T17364] pgsteal_khugepaged 0 [ 2119.782132][T17364] pgfault 901146 [ 2119.782132][T17364] pgmajfault 9 [ 2119.782132][T17364] pgrefill 326 [ 2119.782132][T17364] pgactivate 2621 [ 2119.782132][T17364] pgdeactivate 408 [ 2119.782132][T17364] pglazyfree 0 [ 2119.782132][T17364] pglazyfreed 0 [ 2119.945820][T17364] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17364,uid=0 02:12:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xc602, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:19 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000305000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:19 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x60000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2119.961082][T17364] Memory cgroup out of memory: Killed process 17364 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2120.022991][T17376] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2120.033265][T17376] CPU: 0 PID: 17376 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2120.042009][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2120.052062][T17376] Call Trace: [ 2120.055335][T17376] [ 2120.058262][T17376] dump_stack_lvl+0xda/0x130 [ 2120.062889][T17376] dump_stack+0x15/0x20 [ 2120.067075][T17376] dump_header+0x95/0x3c0 [ 2120.069376][T17373] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2120.071400][T17376] oom_kill_process+0xe3/0x3e0 [ 2120.071426][T17376] out_of_memory+0x9f0/0xc30 [ 2120.071449][T17376] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2120.079511][T17373] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2120.084237][T17376] mem_cgroup_out_of_memory+0x139/0x190 [ 2120.084264][T17376] try_charge_memcg+0x759/0xd20 [ 2120.088923][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2120.094905][T17376] charge_memcg+0x51/0x200 [ 2120.128330][T17376] __mem_cgroup_charge+0x29/0xa0 [ 2120.133391][T17376] do_wp_page+0xb96/0x1fb0 [ 2120.137897][T17376] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2120.143193][T17376] handle_mm_fault+0x64e/0x21d0 [ 2120.148092][T17376] exc_page_fault+0x45f/0x640 [ 2120.152765][T17376] asm_exc_page_fault+0x26/0x30 [ 2120.157634][T17376] RIP: 0033:0x7f0cbc47e610 02:12:19 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0x46}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:19 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 02:12:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x9, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2120.162047][T17376] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2120.181669][T17376] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2120.187814][T17376] RAX: 0000000091c3ec0c RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2120.195821][T17376] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c0740 [ 2120.203791][T17376] RBP: 0000000091c3ec0c R08: 0000000000000c0c R09: 0000000091c3ec10 [ 2120.211769][T17376] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2120.219785][T17376] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff83a3167b [ 2120.227837][T17376] ? __sys_socket+0x2b/0x220 [ 2120.232443][T17376] [ 2120.235500][T17376] memory: usage 307184kB, limit 307200kB, failcnt 10155 [ 2120.242441][T17376] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2120.249277][T17376] Memory cgroup stats for /syz3: [ 2120.249544][T17376] anon 110592 [ 2120.249544][T17376] file 114688 [ 2120.249544][T17376] kernel 314331136 [ 2120.249544][T17376] kernel_stack 32768 [ 2120.249544][T17376] pagetables 65536 [ 2120.249544][T17376] sec_pagetables 0 [ 2120.249544][T17376] percpu 11059008 [ 2120.249544][T17376] sock 0 [ 2120.249544][T17376] vmalloc 0 [ 2120.249544][T17376] shmem 114688 [ 2120.249544][T17376] file_mapped 114688 [ 2120.249544][T17376] file_dirty 0 [ 2120.249544][T17376] file_writeback 0 [ 2120.249544][T17376] swapcached 0 [ 2120.249544][T17376] inactive_anon 102400 [ 2120.249544][T17376] active_anon 86016 [ 2120.249544][T17376] inactive_file 0 [ 2120.249544][T17376] active_file 0 [ 2120.249544][T17376] unevictable 0 [ 2120.249544][T17376] slab_reclaimable 16056 [ 2120.249544][T17376] slab_unreclaimable 303097984 [ 2120.249544][T17376] slab 303114040 [ 2120.249544][T17376] workingset_refault_anon 0 [ 2120.249544][T17376] workingset_refault_file 4 [ 2120.249544][T17376] workingset_activate_anon 0 [ 2120.249544][T17376] workingset_activate_file 0 [ 2120.249544][T17376] workingset_restore_anon 0 [ 2120.249544][T17376] workingset_restore_file 0 [ 2120.249544][T17376] workingset_nodereclaim 0 [ 2120.249544][T17376] pgscan 311 [ 2120.249544][T17376] pgsteal 22 [ 2120.249544][T17376] pgscan_kswapd 0 [ 2120.249544][T17376] pgscan_direct 311 [ 2120.249544][T17376] pgscan_khugepaged 0 [ 2120.249544][T17376] pgsteal_kswapd 0 [ 2120.249544][T17376] pgsteal_direct 22 [ 2120.249544][T17376] pgsteal_khugepaged 0 [ 2120.249544][T17376] pgfault 901193 [ 2120.249544][T17376] pgmajfault 9 [ 2120.249544][T17376] pgrefill 326 [ 2120.249544][T17376] pgactivate 2621 [ 2120.249544][T17376] pgdeactivate 408 [ 2120.249544][T17376] pglazyfree 0 [ 2120.249544][T17376] pglazyfreed 0 02:12:19 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x65580000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:19 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000305000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2120.413054][T17376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17376,uid=0 [ 2120.428341][T17376] Memory cgroup out of memory: Killed process 17376 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2120.472414][T17384] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2120.480707][T17384] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2120.496250][T17387] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2120.506522][T17387] CPU: 0 PID: 17387 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 02:12:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0xa, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 2120.515300][T17387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2120.525445][T17387] Call Trace: [ 2120.528713][T17387] [ 2120.531639][T17387] dump_stack_lvl+0xda/0x130 [ 2120.536280][T17387] dump_stack+0x15/0x20 [ 2120.540444][T17387] dump_header+0x95/0x3c0 [ 2120.544811][T17387] oom_kill_process+0xe3/0x3e0 [ 2120.549601][T17387] out_of_memory+0x9f0/0xc30 [ 2120.554264][T17387] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2120.560399][T17387] mem_cgroup_out_of_memory+0x139/0x190 [ 2120.565978][T17387] try_charge_memcg+0x759/0xd20 02:12:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xd802, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:20 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x2}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2120.570850][T17387] charge_memcg+0x51/0x200 [ 2120.575305][T17387] __mem_cgroup_charge+0x29/0xa0 [ 2120.580251][T17387] do_wp_page+0xb96/0x1fb0 [ 2120.584673][T17387] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2120.589965][T17387] handle_mm_fault+0x64e/0x21d0 [ 2120.594830][T17387] exc_page_fault+0x45f/0x640 [ 2120.599551][T17387] asm_exc_page_fault+0x26/0x30 [ 2120.604482][T17387] RIP: 0033:0x7f0cbc47e610 [ 2120.608931][T17387] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2120.628592][T17387] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2120.634641][T17387] RAX: 0000000091c3ec0c RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2120.642594][T17387] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c0740 [ 2120.650573][T17387] RBP: 0000000091c3ec0c R08: 0000000000000c0c R09: 0000000091c3ec10 [ 2120.658539][T17387] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 02:12:20 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000305000600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2120.666494][T17387] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff83a3167b [ 2120.674449][T17387] ? __sys_socket+0x2b/0x220 [ 2120.679129][T17387] [ 2120.682249][T17387] memory: usage 307176kB, limit 307200kB, failcnt 10218 [ 2120.689208][T17387] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2120.696068][T17387] Memory cgroup stats for /syz3: [ 2120.696469][T17387] anon 110592 [ 2120.696469][T17387] file 114688 [ 2120.696469][T17387] kernel 314318848 [ 2120.696469][T17387] kernel_stack 32768 [ 2120.696469][T17387] pagetables 65536 [ 2120.696469][T17387] sec_pagetables 0 [ 2120.696469][T17387] percpu 11058944 [ 2120.696469][T17387] sock 0 [ 2120.696469][T17387] vmalloc 0 [ 2120.696469][T17387] shmem 114688 [ 2120.696469][T17387] file_mapped 114688 [ 2120.696469][T17387] file_dirty 0 [ 2120.696469][T17387] file_writeback 0 [ 2120.696469][T17387] swapcached 0 [ 2120.696469][T17387] inactive_anon 102400 [ 2120.696469][T17387] active_anon 86016 [ 2120.696469][T17387] inactive_file 0 [ 2120.696469][T17387] active_file 0 [ 2120.696469][T17387] unevictable 0 [ 2120.696469][T17387] slab_reclaimable 16832 [ 2120.696469][T17387] slab_unreclaimable 303086232 [ 2120.696469][T17387] slab 303103064 [ 2120.696469][T17387] workingset_refault_anon 0 [ 2120.696469][T17387] workingset_refault_file 4 [ 2120.696469][T17387] workingset_activate_anon 0 [ 2120.696469][T17387] workingset_activate_file 0 [ 2120.696469][T17387] workingset_restore_anon 0 [ 2120.696469][T17387] workingset_restore_file 0 [ 2120.696469][T17387] workingset_nodereclaim 0 [ 2120.696469][T17387] pgscan 311 [ 2120.696469][T17387] pgsteal 22 [ 2120.696469][T17387] pgscan_kswapd 0 [ 2120.696469][T17387] pgscan_direct 311 [ 2120.696469][T17387] pgscan_khugepaged 0 [ 2120.696469][T17387] pgsteal_kswapd 0 [ 2120.696469][T17387] pgsteal_direct 22 [ 2120.696469][T17387] pgsteal_khugepaged 0 [ 2120.696469][T17387] pgfault 901237 [ 2120.696469][T17387] pgmajfault 9 [ 2120.696469][T17387] pgrefill 326 [ 2120.696469][T17387] pgactivate 2621 [ 2120.696469][T17387] pgdeactivate 408 [ 2120.696469][T17387] pglazyfree 0 [ 2120.696469][T17387] pglazyfreed 0 [ 2120.732510][T17397] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:12:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 2120.861795][T17387] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3 [ 2120.869928][T17397] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2120.891765][T17387] ,task=syz-executor.3,pid=17387,uid=0 [ 2120.897403][T17387] Memory cgroup out of memory: Killed process 17387 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2120.913443][T17398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 02:12:20 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x3}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:20 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0xb, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x81000000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2120.973915][T17408] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2120.984252][T17408] CPU: 1 PID: 17408 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2120.992934][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2121.002997][T17408] Call Trace: [ 2121.006260][T17408] [ 2121.009177][T17408] dump_stack_lvl+0xda/0x130 [ 2121.013850][T17408] dump_stack+0x15/0x20 [ 2121.017997][T17408] dump_header+0x95/0x3c0 [ 2121.022351][T17408] oom_kill_process+0xe3/0x3e0 [ 2121.027197][T17408] out_of_memory+0x9f0/0xc30 [ 2121.031830][T17408] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2121.037931][T17408] mem_cgroup_out_of_memory+0x139/0x190 [ 2121.043650][T17408] try_charge_memcg+0x759/0xd20 [ 2121.048548][T17408] charge_memcg+0x51/0x200 [ 2121.052959][T17408] __mem_cgroup_charge+0x29/0xa0 [ 2121.057969][T17408] do_wp_page+0xb96/0x1fb0 [ 2121.062467][T17408] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2121.067808][T17408] handle_mm_fault+0x64e/0x21d0 [ 2121.072724][T17408] exc_page_fault+0x45f/0x640 [ 2121.077400][T17408] asm_exc_page_fault+0x26/0x30 [ 2121.082394][T17408] RIP: 0033:0x7f0cbc47e610 [ 2121.086922][T17408] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2121.106717][T17408] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2121.112778][T17408] RAX: 00000000bc690117 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2121.120758][T17408] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c033d [ 2121.128885][T17408] RBP: 00000000bc690117 R08: 0000000000000117 R09: 00000000bc69011b [ 2121.136955][T17408] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2121.144985][T17408] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff818e690f [ 2121.152962][T17408] ? security_socket_create+0x1f/0x80 [ 2121.158408][T17408] [ 2121.161536][T17408] memory: usage 307196kB, limit 307200kB, failcnt 10291 [ 2121.168645][T17408] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2121.175500][T17408] Memory cgroup stats for /syz3: [ 2121.175650][T17408] anon 118784 [ 2121.175650][T17408] file 114688 [ 2121.175650][T17408] kernel 314335232 [ 2121.175650][T17408] kernel_stack 32768 [ 2121.175650][T17408] pagetables 65536 [ 2121.175650][T17408] sec_pagetables 0 [ 2121.175650][T17408] percpu 11058944 [ 2121.175650][T17408] sock 0 [ 2121.175650][T17408] vmalloc 0 [ 2121.175650][T17408] shmem 114688 [ 2121.175650][T17408] file_mapped 114688 [ 2121.175650][T17408] file_dirty 0 [ 2121.175650][T17408] file_writeback 0 [ 2121.175650][T17408] swapcached 0 [ 2121.175650][T17408] inactive_anon 135168 [ 2121.175650][T17408] active_anon 86016 [ 2121.175650][T17408] inactive_file 0 [ 2121.175650][T17408] active_file 0 [ 2121.175650][T17408] unevictable 0 [ 2121.175650][T17408] slab_reclaimable 29408 [ 2121.175650][T17408] slab_unreclaimable 303092976 [ 2121.175650][T17408] slab 303122384 [ 2121.175650][T17408] workingset_refault_anon 0 [ 2121.175650][T17408] workingset_refault_file 4 [ 2121.175650][T17408] workingset_activate_anon 0 [ 2121.175650][T17408] workingset_activate_file 0 [ 2121.175650][T17408] workingset_restore_anon 0 [ 2121.175650][T17408] workingset_restore_file 0 [ 2121.175650][T17408] workingset_nodereclaim 0 [ 2121.175650][T17408] pgscan 311 [ 2121.175650][T17408] pgsteal 22 [ 2121.175650][T17408] pgscan_kswapd 0 [ 2121.175650][T17408] pgscan_direct 311 [ 2121.175650][T17408] pgscan_khugepaged 0 [ 2121.175650][T17408] pgsteal_kswapd 0 [ 2121.175650][T17408] pgsteal_direct 22 [ 2121.175650][T17408] pgsteal_khugepaged 0 [ 2121.175650][T17408] pgfault 901288 [ 2121.175650][T17408] pgmajfault 9 02:12:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x81ffffff, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2121.175650][T17408] pgrefill 326 [ 2121.175650][T17408] pgactivate 2621 [ 2121.175650][T17408] pgdeactivate 408 [ 2121.175650][T17408] pglazyfree 0 [ 2121.175650][T17408] pglazyfreed 0 [ 2121.339453][T17408] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17408,uid=0 [ 2121.354727][T17408] Memory cgroup out of memory: Killed process 17408 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xde00, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) [ 2121.404582][T17410] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2121.414810][T17410] CPU: 1 PID: 17410 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2121.423536][T17410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2121.433589][T17410] Call Trace: [ 2121.436866][T17410] [ 2121.439798][T17410] dump_stack_lvl+0xda/0x130 [ 2121.444388][T17410] dump_stack+0x15/0x20 [ 2121.448579][T17410] dump_header+0x95/0x3c0 [ 2121.453026][T17410] oom_kill_process+0xe3/0x3e0 [ 2121.457949][T17410] out_of_memory+0x9f0/0xc30 [ 2121.462544][T17410] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2121.468594][T17410] mem_cgroup_out_of_memory+0x139/0x190 [ 2121.474194][T17410] try_charge_memcg+0x759/0xd20 [ 2121.479071][T17410] charge_memcg+0x51/0x200 [ 2121.483503][T17410] __mem_cgroup_charge+0x29/0xa0 [ 2121.488477][T17410] do_wp_page+0xb96/0x1fb0 [ 2121.493014][T17410] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2121.498358][T17410] handle_mm_fault+0x64e/0x21d0 [ 2121.503269][T17410] exc_page_fault+0x45f/0x640 [ 2121.507976][T17410] asm_exc_page_fault+0x26/0x30 [ 2121.512881][T17410] RIP: 0033:0x7f0cbc47e610 [ 2121.517295][T17410] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2121.536962][T17410] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2121.543020][T17410] RAX: 00000000c301b5fc RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2121.550990][T17410] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e062e9 [ 2121.558988][T17410] RBP: 00000000c301b5fc R08: 00000000000015fc R09: 00000000c301b600 [ 2121.566982][T17410] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2121.574996][T17410] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff818fe770 [ 2121.582960][T17410] ? selinux_socket_create+0x30/0x180 [ 2121.588327][T17410] [ 2121.591432][T17410] memory: usage 307188kB, limit 307200kB, failcnt 10372 02:12:21 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000305000700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) [ 2121.594436][T17405] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2121.598404][T17410] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2121.598418][T17410] Memory cgroup stats for /syz3: [ 2121.613666][T17410] anon 122880 [ 2121.613666][T17410] file 114688 [ 2121.613666][T17410] kernel 314322944 [ 2121.613666][T17410] kernel_stack 32768 [ 2121.613666][T17410] pagetables 65536 [ 2121.613666][T17410] sec_pagetables 0 [ 2121.613666][T17410] percpu 11058944 [ 2121.613666][T17410] sock 0 [ 2121.613666][T17410] vmalloc 0 [ 2121.613666][T17410] shmem 114688 [ 2121.613666][T17410] file_mapped 114688 02:12:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x5}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:21 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0xc, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2121.613666][T17410] file_dirty 0 [ 2121.613666][T17410] file_writeback 0 [ 2121.613666][T17410] swapcached 0 [ 2121.613666][T17410] inactive_anon 151552 [ 2121.613666][T17410] active_anon 86016 [ 2121.613666][T17410] inactive_file 0 [ 2121.613666][T17410] active_file 0 [ 2121.613666][T17410] unevictable 0 [ 2121.613666][T17410] slab_reclaimable 17232 [ 2121.613666][T17410] slab_unreclaimable 303091520 [ 2121.613666][T17410] slab 303108752 [ 2121.613666][T17410] workingset_refault_anon 0 [ 2121.613666][T17410] workingset_refault_file 4 [ 2121.613666][T17410] workingset_activate_anon 0 [ 2121.613666][T17410] workingset_activate_file 0 [ 2121.613666][T17410] workingset_restore_anon 0 [ 2121.613666][T17410] workingset_restore_file 0 [ 2121.613666][T17410] workingset_nodereclaim 0 [ 2121.613666][T17410] pgscan 311 [ 2121.613666][T17410] pgsteal 22 [ 2121.613666][T17410] pgscan_kswapd 0 [ 2121.613666][T17410] pgscan_direct 311 [ 2121.613666][T17410] pgscan_khugepaged 0 [ 2121.613666][T17410] pgsteal_kswapd 0 [ 2121.613666][T17410] pgsteal_direct 22 [ 2121.613666][T17410] pgsteal_khugepaged 0 [ 2121.613666][T17410] pgfault 901338 [ 2121.613666][T17410] pgmajfault 9 [ 2121.613666][T17410] pgrefill 326 [ 2121.613666][T17410] pgactivate 2621 [ 2121.613666][T17410] pgdeactivate 408 [ 2121.613666][T17410] pglazyfree 0 [ 2121.613666][T17410] pglazyfreed 0 [ 2121.676813][T17419] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2121.777250][T17410] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17410,uid=0 02:12:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x88470000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2121.777384][T17410] Memory cgroup out of memory: Killed process 17410 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2121.817876][T17423] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2121.828235][T17423] CPU: 1 PID: 17423 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2121.836917][T17423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2121.846997][T17423] Call Trace: [ 2121.850257][T17423] [ 2121.853253][T17423] dump_stack_lvl+0xda/0x130 [ 2121.857915][T17423] dump_stack+0x15/0x20 [ 2121.862113][T17423] dump_header+0x95/0x3c0 [ 2121.866474][T17423] oom_kill_process+0xe3/0x3e0 [ 2121.871220][T17423] out_of_memory+0x9f0/0xc30 [ 2121.875796][T17423] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2121.881885][T17423] mem_cgroup_out_of_memory+0x139/0x190 [ 2121.887445][T17423] try_charge_memcg+0x759/0xd20 [ 2121.892410][T17423] charge_memcg+0x51/0x200 [ 2121.896818][T17423] __mem_cgroup_charge+0x29/0xa0 [ 2121.901822][T17423] do_wp_page+0xb96/0x1fb0 [ 2121.906319][T17423] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2121.911589][T17423] handle_mm_fault+0x64e/0x21d0 [ 2121.916430][T17423] exc_page_fault+0x45f/0x640 [ 2121.921118][T17423] asm_exc_page_fault+0x26/0x30 [ 2121.926022][T17423] RIP: 0033:0x7f0cbc47e610 [ 2121.930427][T17423] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2121.950040][T17423] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2121.956100][T17423] RAX: 00000000bc690117 RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2121.964091][T17423] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 000000000a0c033d [ 2121.972132][T17423] RBP: 00000000bc690117 R08: 0000000000000117 R09: 00000000bc69011b [ 2121.980090][T17423] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2121.988058][T17423] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff818e690f [ 2121.996036][T17423] ? security_socket_create+0x1f/0x80 [ 2122.001453][T17423] [ 2122.004492][T17423] memory: usage 307200kB, limit 307200kB, failcnt 10436 [ 2122.011441][T17423] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2122.018304][T17423] Memory cgroup stats for /syz3: [ 2122.018620][T17423] anon 118784 [ 2122.018620][T17423] file 114688 [ 2122.018620][T17423] kernel 314339328 [ 2122.018620][T17423] kernel_stack 32768 [ 2122.018620][T17423] pagetables 65536 [ 2122.018620][T17423] sec_pagetables 0 [ 2122.018620][T17423] percpu 11058944 [ 2122.018620][T17423] sock 0 [ 2122.018620][T17423] vmalloc 0 [ 2122.018620][T17423] shmem 114688 [ 2122.018620][T17423] file_mapped 114688 [ 2122.018620][T17423] file_dirty 0 [ 2122.018620][T17423] file_writeback 0 [ 2122.018620][T17423] swapcached 0 [ 2122.018620][T17423] inactive_anon 135168 [ 2122.018620][T17423] active_anon 86016 [ 2122.018620][T17423] inactive_file 0 [ 2122.018620][T17423] active_file 0 [ 2122.018620][T17423] unevictable 0 [ 2122.018620][T17423] slab_reclaimable 28808 [ 2122.018620][T17423] slab_unreclaimable 303097480 [ 2122.018620][T17423] slab 303126288 [ 2122.018620][T17423] workingset_refault_anon 0 [ 2122.018620][T17423] workingset_refault_file 4 [ 2122.018620][T17423] workingset_activate_anon 0 [ 2122.018620][T17423] workingset_activate_file 0 [ 2122.018620][T17423] workingset_restore_anon 0 [ 2122.018620][T17423] workingset_restore_file 0 [ 2122.018620][T17423] workingset_nodereclaim 0 [ 2122.018620][T17423] pgscan 311 [ 2122.018620][T17423] pgsteal 22 [ 2122.018620][T17423] pgscan_kswapd 0 [ 2122.018620][T17423] pgscan_direct 311 [ 2122.018620][T17423] pgscan_khugepaged 0 [ 2122.018620][T17423] pgsteal_kswapd 0 [ 2122.018620][T17423] pgsteal_direct 22 [ 2122.018620][T17423] pgsteal_khugepaged 0 [ 2122.018620][T17423] pgfault 901386 [ 2122.018620][T17423] pgmajfault 9 [ 2122.018620][T17423] pgrefill 326 [ 2122.018620][T17423] pgactivate 2621 [ 2122.018620][T17423] pgdeactivate 408 [ 2122.018620][T17423] pglazyfree 0 [ 2122.018620][T17423] pglazyfreed 0 [ 2122.182193][T17423] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17423,uid=0 02:12:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x88480000, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2122.197486][T17423] Memory cgroup out of memory: Killed process 17423 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2122.250474][T17427] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2122.260740][T17427] CPU: 1 PID: 17427 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2122.269481][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2122.279584][T17427] Call Trace: [ 2122.282854][T17427] [ 2122.285777][T17427] dump_stack_lvl+0xda/0x130 [ 2122.290510][T17427] dump_stack+0x15/0x20 [ 2122.294659][T17427] dump_header+0x95/0x3c0 [ 2122.299034][T17427] oom_kill_process+0xe3/0x3e0 [ 2122.303833][T17427] out_of_memory+0x9f0/0xc30 [ 2122.308465][T17427] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 2122.314251][T17427] mem_cgroup_out_of_memory+0x139/0x190 [ 2122.319843][T17427] try_charge_memcg+0x759/0xd20 [ 2122.324756][T17427] charge_memcg+0x51/0x200 [ 2122.329264][T17427] __mem_cgroup_charge+0x29/0xa0 [ 2122.334251][T17427] do_wp_page+0xb96/0x1fb0 [ 2122.338676][T17427] ? cgroup_rstat_updated+0x8c/0x1c0 [ 2122.344024][T17427] handle_mm_fault+0x64e/0x21d0 [ 2122.348876][T17427] exc_page_fault+0x45f/0x640 [ 2122.353550][T17427] asm_exc_page_fault+0x26/0x30 [ 2122.358389][T17427] RIP: 0033:0x7f0cbc47e610 [ 2122.362847][T17427] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2122.382455][T17427] RSP: 002b:00007fff8ab2beb0 EFLAGS: 00010246 [ 2122.388506][T17427] RAX: 00000000c301b5fc RBX: 00007f0cbc5f1018 RCX: 0000001b2f920000 [ 2122.396479][T17427] RDX: 0000000000000000 RSI: 0000001b2f920018 RDI: 0000000008e062e9 [ 2122.404444][T17427] RBP: 00000000c301b5fc R08: 00000000000015fc R09: 00000000c301b600 [ 2122.412516][T17427] R10: 00007fff8ab2c070 R11: 0000000000000246 R12: 00007f0cbc5e5000 [ 2122.420473][T17427] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff818fe770 [ 2122.428435][T17427] ? selinux_socket_create+0x30/0x180 [ 2122.433790][T17427] [ 2122.437028][T17427] memory: usage 307200kB, limit 307200kB, failcnt 10497 [ 2122.443970][T17427] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2122.450818][T17427] Memory cgroup stats for /syz3: [ 2122.451199][T17427] anon 122880 [ 2122.451199][T17427] file 114688 [ 2122.451199][T17427] kernel 314318848 [ 2122.451199][T17427] kernel_stack 32768 [ 2122.451199][T17427] pagetables 65536 [ 2122.451199][T17427] sec_pagetables 0 [ 2122.451199][T17427] percpu 11058944 [ 2122.451199][T17427] sock 0 [ 2122.451199][T17427] vmalloc 0 [ 2122.451199][T17427] shmem 114688 [ 2122.451199][T17427] file_mapped 114688 [ 2122.451199][T17427] file_dirty 0 [ 2122.451199][T17427] file_writeback 0 [ 2122.451199][T17427] swapcached 0 [ 2122.451199][T17427] inactive_anon 139264 [ 2122.451199][T17427] active_anon 86016 [ 2122.451199][T17427] inactive_file 0 [ 2122.451199][T17427] active_file 0 [ 2122.451199][T17427] unevictable 0 [ 2122.451199][T17427] slab_reclaimable 19560 [ 2122.451199][T17427] slab_unreclaimable 303093240 [ 2122.451199][T17427] slab 303112800 [ 2122.451199][T17427] workingset_refault_anon 0 [ 2122.451199][T17427] workingset_refault_file 4 [ 2122.451199][T17427] workingset_activate_anon 0 [ 2122.451199][T17427] workingset_activate_file 0 [ 2122.451199][T17427] workingset_restore_anon 0 [ 2122.451199][T17427] workingset_restore_file 0 [ 2122.451199][T17427] workingset_nodereclaim 0 [ 2122.451199][T17427] pgscan 311 [ 2122.451199][T17427] pgsteal 22 [ 2122.451199][T17427] pgscan_kswapd 0 [ 2122.451199][T17427] pgscan_direct 311 [ 2122.451199][T17427] pgscan_khugepaged 0 [ 2122.451199][T17427] pgsteal_kswapd 0 [ 2122.451199][T17427] pgsteal_direct 22 [ 2122.451199][T17427] pgsteal_khugepaged 0 [ 2122.451199][T17427] pgfault 901439 [ 2122.451199][T17427] pgmajfault 9 [ 2122.451199][T17427] pgrefill 326 02:12:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2122.451199][T17427] pgactivate 2621 [ 2122.451199][T17427] pgdeactivate 408 [ 2122.451199][T17427] pglazyfree 0 [ 2122.451199][T17427] pglazyfreed 0 [ 2122.614670][T17427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17427,uid=0 [ 2122.630006][T17427] Memory cgroup out of memory: Killed process 17427 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xe603, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:22 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x12000000}, 0x0) [ 2122.712049][T17426] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 2122.719798][T17429] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2122.732278][T17429] CPU: 1 PID: 17429 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 2122.741007][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2122.751077][T17429] Call Trace: [ 2122.754357][T17429] [ 2122.757377][T17429] dump_stack_lvl+0xda/0x130 [ 2122.761981][T17429] dump_stack+0x15/0x20 [ 2122.766251][T17429] dump_header+0x95/0x3c0 [ 2122.770584][T17429] oom_kill_process+0xe3/0x3e0 [ 2122.775439][T17429] out_of_memory+0x9f0/0xc30 [ 2122.780468][T17429] ? try_to_free_mem_cgroup_pages+0x220/0x480 [ 2122.786544][T17429] mem_cgroup_out_of_memory+0x139/0x190 [ 2122.792166][T17429] try_charge_memcg+0x759/0xd20 [ 2122.797052][T17429] obj_cgroup_charge_pages+0xab/0x130 [ 2122.802434][T17429] __memcg_kmem_charge_page+0x1d5/0x2c0 [ 2122.808058][T17429] __alloc_pages+0x1bb/0x340 02:12:22 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x10}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0xd, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2122.812647][T17429] alloc_pages+0x3e1/0x4e0 [ 2122.817064][T17429] pte_alloc_one+0x2d/0xc0 [ 2122.821479][T17429] __pte_alloc+0x33/0x1f0 [ 2122.827795][T17429] handle_mm_fault+0x1ce0/0x21d0 [ 2122.832757][T17429] exc_page_fault+0x45f/0x640 [ 2122.837480][T17429] asm_exc_page_fault+0x26/0x30 [ 2122.842363][T17429] RIP: 0033:0x7f0cbc470de9 [ 2122.846753][T17429] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2122.866423][T17429] RSP: 002b:00007fff8ab2bf50 EFLAGS: 00010246 [ 2122.872473][T17429] RAX: 0000000020000a00 RBX: 0000000000000000 RCX: 0000000000000000 [ 2122.880436][T17429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555612b2e8 [ 2122.888433][T17429] RBP: 00007fff8ab2c048 R08: 0000000000000000 R09: 0000000000000000 [ 2122.896429][T17429] R10: 00007f0cbc045068 R11: 0000000000000246 R12: 00000000002062ad [ 2122.904380][T17429] R13: 00007fff8ab2c070 R14: 00007f0cbc5f0f80 R15: 0000000000000032 [ 2122.912336][T17429] [ 2122.915381][T17429] memory: usage 307200kB, limit 307200kB, failcnt 10593 [ 2122.922330][T17429] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2122.929173][T17429] Memory cgroup stats for /syz3: [ 2122.929511][T17429] anon 139264 [ 2122.929511][T17429] file 114688 [ 2122.929511][T17429] kernel 314318848 [ 2122.929511][T17429] kernel_stack 32768 [ 2122.929511][T17429] pagetables 69632 [ 2122.929511][T17429] sec_pagetables 0 [ 2122.929511][T17429] percpu 11058944 [ 2122.929511][T17429] sock 0 [ 2122.929511][T17429] vmalloc 0 [ 2122.929511][T17429] shmem 114688 [ 2122.929511][T17429] file_mapped 114688 [ 2122.929511][T17429] file_dirty 0 [ 2122.929511][T17429] file_writeback 0 [ 2122.929511][T17429] swapcached 0 [ 2122.929511][T17429] inactive_anon 163840 [ 2122.929511][T17429] active_anon 86016 [ 2122.929511][T17429] inactive_file 0 [ 2122.929511][T17429] active_file 0 [ 2122.929511][T17429] unevictable 0 [ 2122.929511][T17429] slab_reclaimable 10552 [ 2122.929511][T17429] slab_unreclaimable 303090992 [ 2122.929511][T17429] slab 303101544 [ 2122.929511][T17429] workingset_refault_anon 0 [ 2122.929511][T17429] workingset_refault_file 4 [ 2122.929511][T17429] workingset_activate_anon 0 [ 2122.929511][T17429] workingset_activate_file 0 [ 2122.929511][T17429] workingset_restore_anon 0 [ 2122.929511][T17429] workingset_restore_file 0 [ 2122.929511][T17429] workingset_nodereclaim 0 [ 2122.929511][T17429] pgscan 311 [ 2122.929511][T17429] pgsteal 22 [ 2122.929511][T17429] pgscan_kswapd 0 [ 2122.929511][T17429] pgscan_direct 311 [ 2122.929511][T17429] pgscan_khugepaged 0 [ 2122.929511][T17429] pgsteal_kswapd 0 [ 2122.929511][T17429] pgsteal_direct 22 [ 2122.929511][T17429] pgsteal_khugepaged 0 [ 2122.929511][T17429] pgfault 901496 [ 2122.929511][T17429] pgmajfault 9 [ 2122.929511][T17429] pgrefill 326 [ 2122.929511][T17429] pgactivate 2621 [ 2122.929511][T17429] pgdeactivate 408 [ 2122.929511][T17429] pglazyfree 0 [ 2122.929511][T17429] pglazyfreed 0 [ 2123.093057][T17429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17429,uid=0 02:12:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xb94cdc34, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2123.108304][T17429] Memory cgroup out of memory: Killed process 17429 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 02:12:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xeaffffff, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xea02, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000305000a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:22 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x25}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:22 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x22010000}, 0x0) 02:12:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0xe, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [ 2123.155779][T17442] Memory cgroup out of memory: Killed process 17442 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2123.173228][T17440] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 02:12:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2123.268936][T17454] Memory cgroup out of memory: Killed process 17454 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:22 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x25000000}, 0x0) 02:12:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000305000b00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:22 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x300}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xfeffffff, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2123.315564][T17457] Memory cgroup out of memory: Killed process 17457 (syz-executor.3) total-vm:46352kB, anon-rss:452kB, file-rss:8940kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x10, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xea03, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 02:12:22 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x19, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 02:12:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) [ 2123.377306][T17463] __nla_validate_parse: 8 callbacks suppressed [ 2123.377320][T17463] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2123.405200][T17462] Memory cgroup out of memory: Killed process 17462 (syz-executor.3) total-vm:46352kB, anon-rss:376kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 02:12:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010000305000c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800c0001006d6163766c616e003800028008000100100000001c0005800a000400aaaaaaaaaa0200000a000400aaaaaaaaaabb0000080003000300e600080003000100000008000500", @ANYRES32], 0x70}}, 0x0) 02:12:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x503, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 02:12:22 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2f000000}, 0x0) 02:12:22 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev}, {0x2, 0x11, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) [